This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json) Hash identifier: fUoZWVmHfMdy1wCJA3NbrnyYKhmZzHweBSU/CTQVQXo= Subject key identifier: E4:FE:E3:ED:CC:39:24:7F:54:27:3D:A2:D2:F9:C8:ED:B6:7F:02:34 Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa Certificate serial: 019B4249F6B03DCD3970D865A76C26F08E6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft Manifest number: 06E2 Signing time: Sun 21 Dec 2025 19:01:41 +0000 Manifest this update: Sun 21 Dec 2025 19:01:41 +0000 Manifest next update: Mon 22 Dec 2025 19:01:41 +0000 Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: Vm/5sMpE2y9kyEn2lmbq+BQRF9DG5+nRukEAf6lVHTA=) 2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:f6:b0:3d:cd:39:70:d8:65:a7:6c:26:f0:8e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa Validity Not Before: Dec 21 19:01:41 2025 GMT Not After : Dec 22 19:01:41 2025 GMT Subject: CN=e4fee3edcc39247f54273da2d2f9c8edb67f0234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:f9:4e:01:1a:53:bf:f7:e9:90:1c:f8:9b: 49:9c:ea:89:43:49:cf:1c:ec:63:8c:0d:90:81:41: 01:4b:dd:8c:b5:f8:59:24:a1:bf:e6:60:eb:d0:b3: d9:97:6a:e0:f6:3b:92:ea:38:ec:27:10:83:94:97: 67:5a:d7:22:67:f9:a5:2b:3c:a8:1f:95:50:d6:c4: c9:13:a1:c1:3e:6a:b4:eb:d0:aa:ac:07:77:7b:9b: be:f1:bc:e0:ef:ec:05:22:b2:c2:00:8f:b2:38:49: 0e:2f:90:f5:6b:0a:9b:7d:99:c6:cb:0f:e7:5f:09: 73:21:e8:50:cb:a1:24:c1:25:d6:ef:6b:11:65:6b: 10:d3:cd:17:de:89:e2:b1:35:ce:3e:6b:19:cf:85: de:a7:cf:0b:09:9f:b2:7a:f7:a6:11:7b:ee:72:fa: df:5c:0c:ca:63:c7:1d:95:dd:fd:eb:44:29:32:69: 25:1e:dd:67:f7:40:73:1e:04:de:3e:f7:d1:70:55: 6b:7f:02:f3:2c:3c:59:3f:af:9c:bc:a7:54:62:bb: 25:c4:21:15:56:21:67:da:38:5b:7b:86:e1:ec:2c: 01:c1:3e:85:02:be:dc:49:89:d3:f5:b5:ae:60:b9: 27:71:b2:41:45:b7:cb:69:ca:53:c6:a7:22:5d:5d: 58:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FE:E3:ED:CC:39:24:7F:54:27:3D:A2:D2:F9:C8:ED:B6:7F:02:34 X509v3 Authority Key Identifier: keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:87:66:02:71:4e:d0:4d:d9:f2:92:2c:b2:d1:6d:d2:93:22: 47:9d:8b:9b:d9:ae:8b:06:f5:6a:64:ba:54:b5:30:8b:bc:10: c8:ce:34:e9:e6:94:e1:ee:8e:74:98:b3:b6:b0:4c:03:c9:07: 6e:74:0b:75:57:3f:3b:76:b8:c1:69:16:96:0a:7c:40:40:43: 60:f1:58:b1:f8:50:86:4c:47:81:3f:3b:57:44:a5:e7:00:41: b9:c9:39:b3:e3:a9:0a:a2:20:2b:92:4b:84:8d:8b:50:4b:e7: 5b:4d:9b:70:fd:25:2f:0e:31:77:5a:a7:3a:c8:1e:91:c3:47: 03:35:72:0a:b8:25:2f:c9:fd:f0:88:cc:5c:34:ce:8e:d0:47: a5:56:ad:de:0c:4c:17:78:9f:04:ab:52:69:a8:27:c4:1e:02: 44:1a:2d:a0:eb:58:23:0b:84:72:6d:0e:ba:7f:f9:1b:b2:16: 1a:3f:d3:98:6b:82:51:e7:3d:2b:64:31:fa:7e:14:2c:af:5c: 14:cd:ce:41:b3:b4:8b:28:ad:0d:4d:dd:29:e7:9e:bd:bf:63: cf:7c:2e:d2:83:4f:2d:d5:cc:a9:17:32:18:e0:53:27:04:f9: 80:60:83:89:11:75:23:ec:93:49:64:93:6d:07:92:c6:f2:b8: 80:c7:32:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSfawPc05cNhlp2wm8I5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5 MWY4ZmEwHhcNMjUxMjIxMTkwMTQxWhcNMjUxMjIyMTkwMTQxWjAzMTEwLwYDVQQD EyhlNGZlZTNlZGNjMzkyNDdmNTQyNzNkYTJkMmY5YzhlZGI2N2YwMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx35TgEaU7/36ZAc+JtJnOqJQ0nP HOxjjA2QgUEBS92MtfhZJKG/5mDr0LPZl2rg9juS6jjsJxCDlJdnWtciZ/mlKzyo H5VQ1sTJE6HBPmq069CqrAd3e5u+8bzg7+wFIrLCAI+yOEkOL5D1awqbfZnGyw/n XwlzIehQy6EkwSXW72sRZWsQ080X3onisTXOPmsZz4Xep88LCZ+yevemEXvucvrf XAzKY8cdld3960QpMmklHt1n90BzHgTePvfRcFVrfwLzLDxZP6+cvKdUYrslxCEV ViFn2jhbe4bh7CwBwT6FAr7cSYnT9bWuYLkncbJBRbfLacpTxqciXV1YQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOT+4+3MOSR/VCc9otL5yO22fwI0MB8GA1UdIwQY MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt YWYzYWYwODJmOTQzLzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIdmAnFO 0E3Z8pIsstFt0pMiR52Lm9muiwb1amS6VLUwi7wQyM406eaU4e6OdJiztrBMA8kH bnQLdVc/O3a4wWkWlgp8QEBDYPFYsfhQhkxHgT87V0Sl5wBBuck5s+OpCqIgK5JL hI2LUEvnW02bcP0lLw4xd1qnOsgekcNHAzVyCrglL8n98IjMXDTOjtBHpVat3gxM F3ifBKtSaagnxB4CRBotoOtYIwuEcm0Oun/5G7IWGj/TmGuCUec9K2Qx+n4ULK9c FM3OQbO0iyitDU3dKeeevb9jz3wu0oNPLdXMqRcyGOBTJwT5gGCDiRF1I+yTSWST bQeSxvK4gMcyRA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:31:25 2025 by rpki-client