This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json) Hash identifier: xfSIUFopfqRiX6TlAiyl8srmpSrSIYFydEZJ7i3cbIA= Subject key identifier: 8D:8E:09:8F:8A:30:6D:73:07:03:3E:CD:5D:F9:AF:10:D8:FA:7B:B6 Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25 Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825 Certificate serial: 019B3EDA316549FB1CCFDA39FB0841C4B2E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 03:00:45 +0000 Manifest this update: Sun 21 Dec 2025 03:00:45 +0000 Manifest next update: Mon 22 Dec 2025 03:00:45 +0000 Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: Xd525Q3F5II+wfU7cP/iPRd+3de5LPd8XLODUrS0bRw=) 2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=) 3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:31:65:49:fb:1c:cf:da:39:fb:08:41:c4:b2:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daac15b782bc32747b538dec2a222416cd684825 Validity Not Before: Dec 21 03:00:45 2025 GMT Not After : Dec 22 03:00:45 2025 GMT Subject: CN=8d8e098f8a306d7307033ecd5df9af10d8fa7bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:09:0c:9d:b5:a0:1e:14:63:c0:6e:0e:95:9a: f8:bb:4a:ce:f8:33:2e:ba:f9:5f:21:da:ee:93:6d: 81:c6:41:e6:de:7d:47:cf:22:a2:0d:1b:22:37:1b: a2:aa:65:00:89:fe:43:78:b1:89:d0:b6:d2:88:af: b5:d3:f1:07:2b:3e:b6:ae:4c:6c:9b:c7:d6:76:44: 4a:1e:ce:a9:60:4b:fc:df:43:2b:47:fd:19:80:c3: af:77:01:c7:7c:9f:be:f5:79:84:d9:b7:22:ab:46: 81:d2:44:da:d0:0d:fd:95:08:91:02:30:c7:d8:81: 07:4b:11:7f:6b:0a:50:94:46:ed:1d:de:d5:e9:6b: 23:96:58:cd:29:32:13:04:78:b7:5f:15:f3:98:57: c0:ff:98:58:37:6c:53:80:b0:a7:0d:84:65:0e:39: 39:f9:00:4d:da:d3:c5:46:09:81:00:30:0c:a5:b3: 31:d6:0f:7a:e5:6e:1b:cc:15:b8:ef:0f:6e:d8:8c: 10:ad:fc:c6:cf:0e:04:25:89:ff:dc:3f:c8:2c:26: 1c:8a:ce:16:4a:fa:0f:81:14:a8:1f:d3:4d:5d:6d: b8:10:15:f5:2b:52:d9:45:bc:23:f7:11:e8:f8:96: ce:25:14:52:0b:a1:fd:6f:1d:85:e4:42:82:40:46: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8E:09:8F:8A:30:6D:73:07:03:3E:CD:5D:F9:AF:10:D8:FA:7B:B6 X509v3 Authority Key Identifier: keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ca:c6:5f:33:6e:70:4f:0e:c5:26:4c:e9:73:1c:bc:dc:8c: a1:c7:6a:09:3f:03:b0:23:e0:67:7d:23:31:bb:c1:d4:19:78: 96:08:ee:40:1e:e0:4c:46:39:ab:a1:b2:ab:3b:ed:34:a2:67: 8b:de:1d:19:fa:60:ca:70:06:54:cf:a3:4d:42:91:00:dc:c0: a5:db:bc:9e:c9:32:47:5c:8f:06:e5:b8:fe:47:c4:1a:46:46: ac:3b:7a:f1:ef:40:f7:d7:8f:14:dc:df:cf:3a:93:5f:56:17: 79:d5:7f:eb:71:0a:33:d1:09:cf:da:3a:46:0c:c7:b3:8c:5c: 44:03:18:a4:34:a6:91:66:03:c4:37:5c:8a:9d:68:32:55:b6: 88:60:65:92:ea:30:5b:aa:93:b4:e1:1e:95:5a:fa:f2:65:d9: 1c:db:d6:08:56:bc:e7:4d:47:24:f4:8e:a9:97:cc:4d:a8:70: 33:0f:64:1f:8c:5c:a0:08:6b:cf:38:2c:2d:8b:1a:09:dc:94: 22:8f:5f:c9:65:03:89:45:e5:90:89:cb:1e:31:fb:49:76:97: e1:e4:16:9e:e5:de:fd:78:ba:cc:53:a9:30:72:03:df:a7:63: 7e:e9:e6:6b:f8:d3:6f:81:5d:60:b3:91:09:45:c5:14:fc:d5: e2:b3:bb:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2jFlSfscz9o5+whBxLLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWMxNWI3ODJiYzMyNzQ3YjUzOGRlYzJhMjIyNDE2Y2Q2 ODQ4MjUwHhcNMjUxMjIxMDMwMDQ1WhcNMjUxMjIyMDMwMDQ1WjAzMTEwLwYDVQQD Eyg4ZDhlMDk4ZjhhMzA2ZDczMDcwMzNlY2Q1ZGY5YWYxMGQ4ZmE3YmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AkMnbWgHhRjwG4OlZr4u0rO+DMu uvlfIdruk22BxkHm3n1HzyKiDRsiNxuiqmUAif5DeLGJ0LbSiK+10/EHKz62rkxs m8fWdkRKHs6pYEv830MrR/0ZgMOvdwHHfJ++9XmE2bciq0aB0kTa0A39lQiRAjDH 2IEHSxF/awpQlEbtHd7V6WsjlljNKTITBHi3XxXzmFfA/5hYN2xTgLCnDYRlDjk5 +QBN2tPFRgmBADAMpbMx1g965W4bzBW47w9u2IwQrfzGzw4EJYn/3D/ILCYcis4W SvoPgRSoH9NNXW24EBX1K1LZRbwj9xHo+JbOJRRSC6H9bx2F5EKCQEYhQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2OCY+KMG1zBwM+zV35rxDY+nu2MB8GA1UdIwQY MBaAFNqsFbeCvDJ0e1ON7CoiJBbNaEglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYt MTgyNDMyYTk2ZGJkLzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYtMTgyNDMyYTk2ZGJk LzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8rGXzNu cE8OxSZM6XMcvNyMocdqCT8DsCPgZ30jMbvB1Bl4lgjuQB7gTEY5q6GyqzvtNKJn i94dGfpgynAGVM+jTUKRANzApdu8nskyR1yPBuW4/kfEGkZGrDt68e9A99ePFNzf zzqTX1YXedV/63EKM9EJz9o6RgzHs4xcRAMYpDSmkWYDxDdcip1oMlW2iGBlkuow W6qTtOEelVr68mXZHNvWCFa8501HJPSOqZfMTahwMw9kH4xcoAhrzzgsLYsaCdyU Io9fyWUDiUXlkInLHjH7SXaX4eQWnuXe/Xi6zFOpMHID36djfunma/jTb4FdYLOR CUXFFPzV4rO7aw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:08 2025 by rpki-client