This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json) Hash identifier: 6hroG2XTBTy4EFay8Dr5tB5M0x7gbcRx+ewbfYs/nRo= Subject key identifier: 27:9F:21:04:15:CA:8F:9A:5F:45:E7:68:F3:C6:19:67:21:87:B9:76 Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7 Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7 Certificate serial: 019B44386057BF6A693C0D290AF6B3873E9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft Manifest number: 1268 Signing time: Mon 22 Dec 2025 04:01:43 +0000 Manifest this update: Mon 22 Dec 2025 04:01:43 +0000 Manifest next update: Tue 23 Dec 2025 04:01:43 +0000 Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: Pj4FWMrz/ZuWlafnYcAndTL/sIi+8hkVnCBermSOKRg=) 2: jaff7ENxhbDetLmkrM4Rn1poSLI.roa (hash: ui5KqDG5NX3RDDGGQyaqVgy4VTQxAtFMr0iFGN/ACUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:60:57:bf:6a:69:3c:0d:29:0a:f6:b3:87:3e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7 Validity Not Before: Dec 22 04:01:43 2025 GMT Not After : Dec 23 04:01:43 2025 GMT Subject: CN=279f210415ca8f9a5f45e768f3c619672187b976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:b1:f2:a5:f1:67:c8:50:ab:59:cd:6b:de: 9b:3f:de:20:fc:9c:87:04:20:5f:e3:62:06:b1:1e: 50:dc:70:2c:10:47:28:e4:1a:20:6f:99:06:59:d6: 2f:50:b2:e0:0f:83:a1:6f:62:4d:c0:a7:61:5f:b1: c2:ee:07:b8:cb:62:35:34:93:61:75:ae:37:77:16: 17:cb:72:b3:6e:60:c0:90:5e:83:6e:e0:b8:07:88: a0:27:ab:61:69:65:72:ee:06:79:c7:85:02:87:e4: b8:3c:f4:5b:2b:af:a2:8c:08:4d:72:ca:16:36:2c: d9:79:da:31:2a:ab:7b:9f:b1:92:b6:c5:39:d8:6f: 41:72:71:0a:d2:49:3d:9a:ba:22:9c:1e:ae:84:cf: ed:a3:a2:fd:61:21:04:80:8f:70:25:2f:36:94:f1: 84:fa:43:64:87:9e:25:ae:35:b8:a1:0f:0a:92:ca: dd:fb:06:1e:7f:b5:2d:7c:bc:60:d5:44:44:56:99: aa:93:b6:e5:29:6d:28:4d:b2:ef:83:9b:67:c3:98: f7:a2:4a:82:7e:16:32:96:2c:98:6e:94:e5:ea:bb: 8d:ca:3f:38:e0:17:d7:61:38:1f:03:39:5f:66:02: 4a:8e:bf:c8:27:41:9c:e5:6b:dd:88:bd:3e:50:cf: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9F:21:04:15:CA:8F:9A:5F:45:E7:68:F3:C6:19:67:21:87:B9:76 X509v3 Authority Key Identifier: keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:cb:31:65:c8:bd:8b:83:1e:40:f7:c2:88:0e:68:24:b2:bb: ba:85:85:a6:24:fc:9f:3b:30:bd:43:c5:fd:88:0f:c9:9b:09: b4:15:81:72:a0:7b:6d:df:fe:db:61:86:21:8f:72:3a:b4:d9: 8e:fa:00:1f:e1:8a:cf:4a:69:22:d4:e9:dc:62:9d:15:c3:58: c7:52:7b:24:2d:2c:8c:44:0e:52:97:be:ea:6b:2e:ea:26:5d: 22:37:aa:6a:04:73:36:c1:be:d7:7e:d8:26:52:12:9d:c0:45: a9:30:98:e9:14:18:a4:d8:b4:56:7c:a5:a6:34:0b:2a:b1:47: 78:97:f7:6d:05:45:a3:4a:6e:cd:b6:94:49:e8:d6:f2:b4:b3: 9d:cb:06:79:58:43:23:a4:31:1b:bb:ac:34:2f:c6:53:eb:f2: 22:04:c6:d3:e7:74:fc:19:84:3b:4c:3a:46:78:07:63:21:b2: 88:60:7a:d3:94:36:61:00:b8:fb:2c:53:c0:8f:0a:b5:e4:9f: 9c:6c:61:be:1f:39:c7:80:d4:6d:51:14:e1:fe:8c:59:cf:fe: d5:d6:a9:db:a9:a3:29:54:1c:a2:96:75:8d:b6:85:ab:7f:9d: 70:cb:7c:6b:57:dc:0d:33:9d:dd:92:89:f0:4f:74:ea:73:4b: 49:07:ce:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOGBXv2ppPA0pCvazhz6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjgwZWEwZjk5NjVmNjg4MDMyOWIxMmZlYzI3YTkzOTBm YzFjYjcwHhcNMjUxMjIyMDQwMTQzWhcNMjUxMjIzMDQwMTQzWjAzMTEwLwYDVQQD EygyNzlmMjEwNDE1Y2E4ZjlhNWY0NWU3NjhmM2M2MTk2NzIxODdiOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/ix8qXxZ8hQq1nNa96bP94g/JyH BCBf42IGsR5Q3HAsEEco5Bogb5kGWdYvULLgD4Ohb2JNwKdhX7HC7ge4y2I1NJNh da43dxYXy3KzbmDAkF6DbuC4B4igJ6thaWVy7gZ5x4UCh+S4PPRbK6+ijAhNcsoW NizZedoxKqt7n7GStsU52G9BcnEK0kk9mroinB6uhM/to6L9YSEEgI9wJS82lPGE +kNkh54lrjW4oQ8Kksrd+wYef7UtfLxg1UREVpmqk7blKW0oTbLvg5tnw5j3okqC fhYyliyYbpTl6ruNyj844BfXYTgfAzlfZgJKjr/IJ0Gc5WvdiL0+UM89FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCefIQQVyo+aX0XnaPPGGWchh7l2MB8GA1UdIwQY MBaAFNq4DqD5ll9ogDKbEv7CepOQ/By3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYt OWY2YWE0Y2YwNzk5LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYtOWY2YWE0Y2YwNzk5 LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8sxZci9 i4MeQPfCiA5oJLK7uoWFpiT8nzswvUPF/YgPyZsJtBWBcqB7bd/+22GGIY9yOrTZ jvoAH+GKz0ppItTp3GKdFcNYx1J7JC0sjEQOUpe+6msu6iZdIjeqagRzNsG+137Y JlISncBFqTCY6RQYpNi0VnylpjQLKrFHeJf3bQVFo0puzbaUSejW8rSzncsGeVhD I6QxG7usNC/GU+vyIgTG0+d0/BmEO0w6RngHYyGyiGB605Q2YQC4+yxTwI8KteSf nGxhvh85x4DUbVEU4f6MWc/+1dap26mjKVQcopZ1jbaFq3+dcMt8a1fcDTOd3ZKJ 8E906nNLSQfOLQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:53:56 2025 by rpki-client