This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft File: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json) Hash identifier: ctQCDARQ6NKaMgI+IbWT1egR/0tKHPFCwFYVRWu0fBI= Subject key identifier: 2B:DB:96:F1:63:21:9D:44:15:49:BC:C1:CD:69:1D:CA:BC:DB:50:60 Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed Certificate serial: 019B48153893A7F6A291CF3E3E5A17E58221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft Manifest number: 1794 Signing time: Mon 22 Dec 2025 22:01:48 +0000 Manifest this update: Mon 22 Dec 2025 22:01:48 +0000 Manifest next update: Tue 23 Dec 2025 22:01:48 +0000 Files and hashes: 1: 0ftKGAqo6skKR7cqi9qtdL_HV70.roa (hash: TjEgBHjrqw3YVxgjrIc7R6ndwP73iZoqAQbMc4u67Jw=) 2: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: OA+D+kZHPXlFAnHIL88fQzErnXoUGI9j+VetvAYLuOQ=) 3: 555OtsBoO5k75PqRH4BO_DA3D2k.roa (hash: JoD/O0cUloB5B7+5WbDwTZ/ljwNvngOLp/z0qSnIMTQ=) 4: 6hWOpEB79Jwd3tjKR90wreFxatA.roa (hash: Q/14jrNN3dPge3RXtvSabOT2/zXSC7oSEv0xGz0lOr8=) 5: Fn45TpW1nllwbpJD6OV7oWwSzA8.roa (hash: xg/TTDjWMXGzawL9NfcMIpoU54tFEBQogD7gmrohTKc=) 6: MkgmNw57sqsTbXVssEVVHrIwxnE.roa (hash: Z5vjMyipD469Qc1QSOUIWfFBwT2/MlLQmdGSNOJrb+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:38:93:a7:f6:a2:91:cf:3e:3e:5a:17:e5:82:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed Validity Not Before: Dec 22 22:01:48 2025 GMT Not After : Dec 23 22:01:48 2025 GMT Subject: CN=2bdb96f163219d441549bcc1cd691dcabcdb5060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:5c:aa:0c:72:44:d8:82:93:63:7a:98:73: 2a:e4:fd:6f:bc:37:76:3c:5c:aa:9b:06:68:c3:49: 94:41:fb:95:79:09:6e:62:94:0b:28:cb:b7:c6:0a: 16:77:00:bd:85:2f:a2:60:35:62:52:70:10:e9:7b: 35:32:75:fe:f1:ec:3e:f0:6c:d5:6f:63:12:97:bd: 29:be:cf:22:9e:95:a9:af:23:2b:4b:9e:24:87:af: 76:c9:95:92:c8:9f:c3:33:59:1b:f2:e7:74:80:4e: 26:ee:d9:40:30:2f:18:32:82:be:ad:d3:0c:a1:05: 95:3e:93:9c:b6:d6:5c:8c:db:7e:7b:9e:18:78:8f: 81:b5:04:be:8c:4d:b6:82:00:6a:a5:a7:a1:6b:03: ee:6f:d4:4e:f3:bb:08:ff:28:58:6e:34:d7:f3:d9: f1:a2:ab:a7:82:7a:26:b5:bc:7d:94:04:63:e0:b1: 39:a7:10:c3:bf:9f:3b:aa:cb:b6:78:17:7d:9e:9a: 59:60:8a:ae:c4:dd:a1:e0:05:cb:72:6c:62:58:f4: 87:b6:73:7c:4f:8a:36:ac:25:5e:30:b6:b6:1c:2a: 8b:ef:1c:a5:b0:7a:ee:ee:76:50:96:cc:83:41:1b: 9c:ed:34:f5:a0:b5:2c:c2:89:22:41:57:c5:91:53: 9f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DB:96:F1:63:21:9D:44:15:49:BC:C1:CD:69:1D:CA:BC:DB:50:60 X509v3 Authority Key Identifier: keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:26:c2:20:67:6d:ba:34:c8:4d:26:e3:87:5a:79:0c:07:cc: 4d:28:69:68:d3:fc:84:68:42:d4:df:e2:c2:5a:4c:92:55:13: a8:97:2e:c8:22:dd:15:cc:19:d8:8d:21:b2:42:44:4a:a0:62: c5:a3:5c:d6:48:37:76:f1:0a:64:98:21:9c:b2:df:c3:e3:fa: d2:ed:7b:7a:c8:fc:fc:5a:f1:76:ff:a3:7c:67:a4:ec:d8:04: 09:68:6f:90:81:03:c6:8e:0a:5b:cd:61:71:83:4d:32:97:78: 36:e7:b6:14:e5:ee:23:46:8c:e6:11:b4:14:cf:1c:84:ba:24: 7d:f0:8d:7a:ff:b0:1d:45:84:89:a0:8b:3d:3d:96:04:3c:4e: 75:d5:79:dd:c4:31:b0:a3:b3:c4:43:42:07:94:40:9e:92:e0: 11:22:cb:b4:d3:71:b9:af:67:94:e0:aa:16:9a:0d:96:04:9d: 67:47:a0:78:eb:01:3d:d7:97:bd:0a:aa:6b:bc:02:38:6e:0a: c8:03:4a:ab:3f:77:66:fa:d8:b1:e7:b8:0f:76:9d:65:d8:4c: 4d:6c:a0:9c:e2:71:be:f8:e4:19:f1:91:e5:1e:a4:ad:ff:44: a5:12:49:a8:e9:f7:4e:c1:01:3d:d4:a1:9b:c5:28:8e:0d:72: 67:ae:ff:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFTiTp/aikc8+PloX5YIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZjlmYTdiOTQ0ZjdlN2M2MGQ3M2VmMTBiNzc2ZmMyNzk5 NWE0ZWQwHhcNMjUxMjIyMjIwMTQ4WhcNMjUxMjIzMjIwMTQ4WjAzMTEwLwYDVQQD EygyYmRiOTZmMTYzMjE5ZDQ0MTU0OWJjYzFjZDY5MWRjYWJjZGI1MDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTJcqgxyRNiCk2N6mHMq5P1vvDd2 PFyqmwZow0mUQfuVeQluYpQLKMu3xgoWdwC9hS+iYDViUnAQ6Xs1MnX+8ew+8GzV b2MSl70pvs8inpWpryMrS54kh692yZWSyJ/DM1kb8ud0gE4m7tlAMC8YMoK+rdMM oQWVPpOcttZcjNt+e54YeI+BtQS+jE22ggBqpaehawPub9RO87sI/yhYbjTX89nx oqungnomtbx9lARj4LE5pxDDv587qsu2eBd9nppZYIquxN2h4AXLcmxiWPSHtnN8 T4o2rCVeMLa2HCqL7xylsHru7nZQlsyDQRuc7TT1oLUswokiQVfFkVOfCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvblvFjIZ1EFUm8wc1pHcq821BgMB8GA1UdIwQY MBaAFNn5+nuUT358YNc+8Qt3b8J5laTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUt MDhiZjIyZjY0MDk3LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUtMDhiZjIyZjY0MDk3 LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABibCIGdt ujTITSbjh1p5DAfMTShpaNP8hGhC1N/iwlpMklUTqJcuyCLdFcwZ2I0hskJESqBi xaNc1kg3dvEKZJghnLLfw+P60u17esj8/Frxdv+jfGek7NgECWhvkIEDxo4KW81h cYNNMpd4Nue2FOXuI0aM5hG0FM8chLokffCNev+wHUWEiaCLPT2WBDxOddV53cQx sKOzxENCB5RAnpLgESLLtNNxua9nlOCqFpoNlgSdZ0egeOsBPdeXvQqqa7wCOG4K yANKqz93ZvrYsee4D3adZdhMTWygnOJxvvjkGfGR5R6krf9EpRJJqOn3TsEBPdSh m8Uojg1yZ67/GQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:20:34 2025 by rpki-client