This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json) Hash identifier: VZ/QpFYRgrTJFO7oLCs8PE27uvB7dBuuUJhNaaimX8A= Subject key identifier: BE:D9:A4:0F:9A:18:D0:70:4B:0F:3F:FC:CC:88:43:42:73:97:1A:26 Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0 Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0 Certificate serial: 019B53AAB61150312A501566E240B00673E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft Manifest number: 0669 Signing time: Thu 25 Dec 2025 04:00:55 +0000 Manifest this update: Thu 25 Dec 2025 04:00:55 +0000 Manifest next update: Fri 26 Dec 2025 04:00:55 +0000 Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: CbET9Oicixu3Q8lc1UpofhKgiQntRHdwTD7DO3/L1L4=) 2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:b6:11:50:31:2a:50:15:66:e2:40:b0:06:73:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0 Validity Not Before: Dec 25 04:00:55 2025 GMT Not After : Dec 26 04:00:55 2025 GMT Subject: CN=bed9a40f9a18d0704b0f3ffccc88434273971a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:d2:43:1d:21:a3:ba:4f:74:2c:ad:7b:2b: 79:79:13:60:15:c0:21:50:6a:0c:7c:2e:19:8c:7f: 40:fc:8b:d9:57:0e:b4:14:cb:3f:24:c6:14:bd:6c: 3a:2f:5a:93:f2:7d:9f:d5:c8:bc:e4:c7:d7:81:9a: c1:14:e2:34:43:93:7b:9b:90:4c:53:b7:1a:0e:e4: aa:3e:0a:65:a4:b4:d6:3b:76:62:6c:d1:78:5f:4c: a1:83:cb:ea:9f:1c:61:20:87:13:0f:9c:40:2c:33: 64:09:28:0a:58:9e:2f:7b:ca:d2:7a:2e:c1:5e:39: 21:b6:6e:ac:68:c4:6a:2a:6c:e1:ca:5c:7d:06:e7: 46:87:23:70:a2:d9:78:69:35:0b:7e:31:c6:fd:ef: 56:18:2b:27:61:5a:0d:ac:f4:4b:17:57:78:d8:b0: cd:7e:5f:07:60:d1:1e:3f:77:82:48:19:24:2a:42: 03:e5:16:10:d7:b0:8a:7d:4d:ae:57:a8:d4:3d:b8: 81:10:66:83:93:de:04:58:fe:41:80:24:74:18:4e: 7d:47:b9:14:68:24:3a:ed:18:96:07:a0:6c:36:36: 66:e2:17:47:88:35:90:bc:91:9f:f3:0f:e2:94:19: 1e:d7:b7:fd:c8:18:e6:8b:17:de:26:09:ed:fb:00: 30:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D9:A4:0F:9A:18:D0:70:4B:0F:3F:FC:CC:88:43:42:73:97:1A:26 X509v3 Authority Key Identifier: keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e7:52:c1:e6:93:70:30:75:83:f6:ce:41:23:f1:21:54:c9: 24:e5:a8:e9:59:83:65:55:50:60:6d:ab:2c:f0:f5:fb:e1:50: 00:cc:c0:ec:5a:14:18:38:5e:37:20:aa:24:dc:26:ee:3d:0b: de:f6:30:bd:61:46:86:69:8f:29:ed:dc:bb:fc:8f:16:52:04: b2:1e:d4:c5:da:40:1c:49:ee:45:a4:19:3a:8a:8b:88:3f:89: 1d:7e:34:77:9d:f0:a1:3f:9f:80:79:e0:db:de:96:3b:55:c3: b5:73:b9:26:ea:0b:b0:f9:6e:b2:8d:95:7c:ff:1a:82:34:f0: e9:ae:9c:8a:c5:e0:b4:09:c3:1e:5b:b7:57:da:e7:c8:c6:8a: c8:46:51:05:17:23:44:0e:ee:91:97:a6:9c:be:02:c6:de:f1: ab:70:4e:36:1b:60:49:af:6a:f7:f6:a7:56:2f:68:b2:ec:b3: 14:c8:fb:ff:0c:cc:05:0e:21:79:f9:05:f0:48:70:16:1a:05: 7a:e6:24:99:29:a4:25:c3:25:a2:22:51:e5:7a:a1:db:90:3e: f6:21:2e:4f:8a:c3:8d:6d:ad:81:ea:af:2c:32:8d:70:0c:b2: 06:c5:0d:1a:c3:ba:a3:b0:94:11:46:83:f4:83:9e:8f:e1:c8: cb:2b:ff:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqrYRUDEqUBVm4kCwBnPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYTUyM2Q1Yjg5M2M5MjVlYzNhODI2MDFmOTI3NDU4MmNl ZmM2ZjAwHhcNMjUxMjI1MDQwMDU1WhcNMjUxMjI2MDQwMDU1WjAzMTEwLwYDVQQD EyhiZWQ5YTQwZjlhMThkMDcwNGIwZjNmZmNjYzg4NDM0MjczOTcxYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut7SQx0ho7pPdCyteyt5eRNgFcAh UGoMfC4ZjH9A/IvZVw60FMs/JMYUvWw6L1qT8n2f1ci85MfXgZrBFOI0Q5N7m5BM U7caDuSqPgplpLTWO3ZibNF4X0yhg8vqnxxhIIcTD5xALDNkCSgKWJ4ve8rSei7B Xjkhtm6saMRqKmzhylx9BudGhyNwotl4aTULfjHG/e9WGCsnYVoNrPRLF1d42LDN fl8HYNEeP3eCSBkkKkID5RYQ17CKfU2uV6jUPbiBEGaDk94EWP5BgCR0GE59R7kU aCQ67RiWB6BsNjZm4hdHiDWQvJGf8w/ilBke17f9yBjmixfeJgnt+wAwIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7ZpA+aGNBwSw8//MyIQ0JzlxomMB8GA1UdIwQY MBaAFNqlI9W4k8kl7DqCYB+SdFgs78bwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGIt YTQ1MDI5NWE0OTBkLzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGItYTQ1MDI5NWE0OTBk LzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAludSweaT cDB1g/bOQSPxIVTJJOWo6VmDZVVQYG2rLPD1++FQAMzA7FoUGDheNyCqJNwm7j0L 3vYwvWFGhmmPKe3cu/yPFlIEsh7UxdpAHEnuRaQZOoqLiD+JHX40d53woT+fgHng 296WO1XDtXO5JuoLsPluso2VfP8agjTw6a6cisXgtAnDHlu3V9rnyMaKyEZRBRcj RA7ukZemnL4Cxt7xq3BONhtgSa9q9/anVi9osuyzFMj7/wzMBQ4hefkF8EhwFhoF euYkmSmkJcMloiJR5Xqh25A+9iEuT4rDjW2tgeqvLDKNcAyyBsUNGsO6o7CUEUaD 9IOej+HIyyv/7w== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:34 2025 by rpki-client