This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json) Hash identifier: xUauBLUl3Ked5IDF7RnvpLJIyT4vj9F5G/011M5r/9o= Subject key identifier: 3E:60:87:35:F3:02:CB:6F:91:64:95:51:06:05:1E:50:4E:56:8E:BF Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7 Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7 Certificate serial: 019B3E6D34415096B658243277F2758D489E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft Manifest number: 1265 Signing time: Sun 21 Dec 2025 01:01:42 +0000 Manifest this update: Sun 21 Dec 2025 01:01:42 +0000 Manifest next update: Mon 22 Dec 2025 01:01:42 +0000 Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: eRt+A7KveXLZhUtuMQmDOZ9IPE9TGmFBrpVfDvdnRDU=) 2: jaff7ENxhbDetLmkrM4Rn1poSLI.roa (hash: ui5KqDG5NX3RDDGGQyaqVgy4VTQxAtFMr0iFGN/ACUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:34:41:50:96:b6:58:24:32:77:f2:75:8d:48:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7 Validity Not Before: Dec 21 01:01:42 2025 GMT Not After : Dec 22 01:01:42 2025 GMT Subject: CN=3e608735f302cb6f9164955106051e504e568ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:01:c9:12:43:56:5c:2e:da:b8:f0:fc:56: 73:b6:e4:2a:b0:e3:d9:f0:57:dd:16:c7:31:9e:8e: cf:ad:77:bb:75:0c:8f:66:4e:cb:9a:ac:05:b6:07: e4:dc:96:46:14:90:c6:4a:92:b3:1b:ae:c7:99:dc: c0:94:37:2a:15:bd:c6:76:1c:d0:72:de:17:83:4d: ff:1e:d8:eb:8d:ee:b4:47:c6:36:3e:ea:20:a1:a8: 30:35:89:51:80:a3:a3:09:a5:b3:9c:b5:fb:72:26: 47:e6:a5:61:0c:bc:f7:ee:f7:b5:7a:19:17:b7:c6: cb:01:bb:c0:0a:8e:9a:9e:73:fc:1f:28:0a:02:1a: 5f:0a:2f:32:1c:b0:b3:29:22:e4:0f:43:c3:9d:b8: 2d:66:ba:60:26:2c:a0:d9:fb:47:b0:e6:09:a3:c8: 61:ae:db:d0:8f:02:a9:4c:83:93:75:6c:86:72:63: 72:31:9d:62:58:06:ac:fa:b9:2c:f0:10:e6:3e:1a: cb:3d:f1:90:87:48:ed:9f:87:a1:94:ea:5f:7e:12: 7d:c3:64:70:fc:0e:5b:16:cf:3e:db:ba:68:a6:b1: 54:c0:c9:ca:ec:1e:0e:90:f6:ce:86:34:36:92:48: f2:c9:3f:97:09:a4:7e:04:f2:c6:92:b9:41:ad:36: 27:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:60:87:35:F3:02:CB:6F:91:64:95:51:06:05:1E:50:4E:56:8E:BF X509v3 Authority Key Identifier: keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:02:4c:67:37:ae:81:d5:2b:9a:ae:39:63:49:e9:ff:6d:d5: 92:84:2f:5e:62:4c:11:52:7d:b6:48:88:49:e0:71:3a:82:1f: ae:e3:21:fc:2c:6c:a9:64:20:ff:3f:b0:0a:81:40:11:33:9d: 27:a7:51:88:da:df:b0:3f:d5:13:c8:17:c8:d7:64:96:0f:bc: 3d:66:92:54:04:2e:9f:48:1c:b3:63:b9:05:f0:25:53:b3:79: f2:f3:b0:7b:00:34:3a:3d:f9:de:52:a6:3f:2a:ec:f8:7a:ca: 40:26:77:0d:66:22:39:7b:12:9e:8b:90:01:cc:ec:d2:03:45: 38:e6:8b:9c:44:63:61:bd:1d:3c:2b:13:3b:b3:10:2d:92:7a: ef:a5:53:77:0c:56:71:38:0c:a3:c4:c3:da:7a:40:fe:7b:f4: 8e:42:2c:c6:a8:98:ad:8a:8a:b6:9a:9c:de:96:d7:58:d6:c5: f7:24:fa:71:5f:51:89:cf:6a:d6:95:88:85:43:69:33:0b:99: 04:70:91:7a:f3:81:7b:84:03:21:cd:f3:fe:77:80:a1:9d:b2: 7b:7a:c1:94:f5:e0:e3:58:5b:d5:3d:4a:1d:07:80:03:d1:33: d0:a8:f1:b3:7d:26:ab:cd:8c:5d:03:64:30:0f:0f:4f:9d:65: 7a:7b:a8:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bTRBUJa2WCQyd/J1jUieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjgwZWEwZjk5NjVmNjg4MDMyOWIxMmZlYzI3YTkzOTBm YzFjYjcwHhcNMjUxMjIxMDEwMTQyWhcNMjUxMjIyMDEwMTQyWjAzMTEwLwYDVQQD EygzZTYwODczNWYzMDJjYjZmOTE2NDk1NTEwNjA1MWU1MDRlNTY4ZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM4ByRJDVlwu2rjw/FZztuQqsOPZ 8FfdFscxno7PrXe7dQyPZk7LmqwFtgfk3JZGFJDGSpKzG67HmdzAlDcqFb3GdhzQ ct4Xg03/Htjrje60R8Y2PuogoagwNYlRgKOjCaWznLX7ciZH5qVhDLz37ve1ehkX t8bLAbvACo6annP8HygKAhpfCi8yHLCzKSLkD0PDnbgtZrpgJiyg2ftHsOYJo8hh rtvQjwKpTIOTdWyGcmNyMZ1iWAas+rks8BDmPhrLPfGQh0jtn4ehlOpffhJ9w2Rw /A5bFs8+27poprFUwMnK7B4OkPbOhjQ2kkjyyT+XCaR+BPLGkrlBrTYn/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5ghzXzAstvkWSVUQYFHlBOVo6/MB8GA1UdIwQY MBaAFNq4DqD5ll9ogDKbEv7CepOQ/By3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYt OWY2YWE0Y2YwNzk5LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYtOWY2YWE0Y2YwNzk5 LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwJMZzeu gdUrmq45Y0np/23VkoQvXmJMEVJ9tkiISeBxOoIfruMh/CxsqWQg/z+wCoFAETOd J6dRiNrfsD/VE8gXyNdklg+8PWaSVAQun0gcs2O5BfAlU7N58vOwewA0Oj353lKm Pyrs+HrKQCZ3DWYiOXsSnouQAczs0gNFOOaLnERjYb0dPCsTO7MQLZJ676VTdwxW cTgMo8TD2npA/nv0jkIsxqiYrYqKtpqc3pbXWNbF9yT6cV9Ric9q1pWIhUNpMwuZ BHCRevOBe4QDIc3z/neAoZ2ye3rBlPXg41hb1T1KHQeAA9Ez0Kjxs30mq82MXQNk MA8PT51lenuoWw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:15:24 2025 by rpki-client