This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json) Hash identifier: aywrnzcDHjc8Ge7E/L78Yk0fN/VnKK3BfUHrLMC+SME= Subject key identifier: B4:65:86:6C:CD:40:64:F4:37:54:4B:D9:4B:3D:A7:CF:FC:5C:58:40 Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81 Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81 Certificate serial: 019B608A734C255708C5BFEAC11A3D5567CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 16:00:44 +0000 Manifest this update: Sat 27 Dec 2025 16:00:44 +0000 Manifest next update: Sun 28 Dec 2025 16:00:44 +0000 Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: 75lIZ4J5AkSMAuXoJV+gpSieR4yo7rcpFMHm3x2/DQI=) 2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:8a:73:4c:25:57:08:c5:bf:ea:c1:1a:3d:55:67:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81 Validity Not Before: Dec 27 16:00:44 2025 GMT Not After : Dec 28 16:00:44 2025 GMT Subject: CN=b465866ccd4064f437544bd94b3da7cffc5c5840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:e2:2a:e5:34:8b:23:22:2d:97:9e:ed:3f: ec:31:24:75:ec:83:79:5f:93:cc:e4:e1:d4:ab:da: 0c:d6:bd:93:69:90:04:43:67:38:74:c4:e7:99:16: fc:6e:41:33:cd:89:2f:3e:ef:f8:e0:24:17:be:e8: 28:2d:48:9c:13:90:68:ed:8b:77:4c:e5:31:39:96: 6c:4a:82:45:39:d7:e0:2f:3f:52:2d:03:6d:05:4a: e8:ed:44:33:d3:14:d9:3f:8b:a5:2b:09:86:07:90: 11:bc:5c:17:64:b6:f7:cd:7c:85:8d:7b:33:eb:3d: 7f:02:4f:2d:dc:e3:0b:ec:d2:d6:2f:b3:b2:d5:48: e5:be:93:b6:27:16:83:34:d4:ae:73:9d:b9:80:2e: 45:94:6a:80:a7:7f:6d:6a:69:29:80:2e:01:19:6a: 40:7f:28:fb:e1:33:a6:e5:3c:7b:28:c8:bd:f3:4f: 2a:91:dd:0b:3e:e7:e4:4c:95:e9:d2:fb:b2:aa:48: 17:b9:96:2b:77:ca:ff:1b:22:25:dc:e7:21:25:6f: 11:f3:2b:94:40:7f:9f:43:2d:f4:fb:ca:66:f9:15: 08:ef:a7:c9:38:7a:c3:2e:6d:a5:b8:5c:3e:52:30: 91:6f:7d:90:df:77:7d:aa:65:65:72:a0:a0:f7:1e: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:65:86:6C:CD:40:64:F4:37:54:4B:D9:4B:3D:A7:CF:FC:5C:58:40 X509v3 Authority Key Identifier: keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ef:c7:55:14:ad:82:88:2e:f3:6a:d0:8d:a9:44:dd:0b:8c: 34:32:32:16:9a:ca:cb:ac:5b:2d:e4:2e:b4:b5:5a:41:fd:9d: b5:e6:00:19:79:bb:b3:87:34:4d:4b:2f:72:f9:fc:c0:ac:80: fe:bc:73:31:b1:f8:81:6b:b0:6c:90:a7:c9:c1:62:d6:c5:0d: 6f:38:ea:c9:ac:b9:75:97:e7:9f:02:b2:1f:85:75:41:e4:af: 3f:63:c7:1b:f6:1f:a9:e3:7b:f5:f4:b7:90:15:55:60:cf:03: b8:07:68:50:67:1d:0e:74:f7:ea:a8:1f:48:de:a7:d3:50:1f: 13:84:30:34:be:98:cd:90:1e:20:3f:19:01:46:bd:5a:43:ea: e3:6e:bf:a5:e7:43:35:e7:74:f3:29:db:be:88:18:05:f5:45: 7c:50:89:67:49:e7:b3:8b:cf:d0:e4:7d:54:c4:e0:97:d3:c7: 28:af:45:1b:e1:f9:f7:67:5d:cf:dd:3f:e7:99:61:b7:49:25: c3:ae:30:52:b9:aa:2a:51:fe:fa:7c:09:50:9d:22:ec:61:af: 57:60:22:fe:4f:ae:c6:54:08:6a:ce:55:31:14:60:f4:ee:a9: 46:9b:ff:7d:e6:dc:f4:bb:67:4d:6d:66:82:fc:b5:6b:41:62: be:84:24:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtginNMJVcIxb/qwRo9VWfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMzIyMDI3MmE0NjlhZWQ2NWNjMmE3ZjZkOTdmY2E5OTFm N2VjODEwHhcNMjUxMjI3MTYwMDQ0WhcNMjUxMjI4MTYwMDQ0WjAzMTEwLwYDVQQD EyhiNDY1ODY2Y2NkNDA2NGY0Mzc1NDRiZDk0YjNkYTdjZmZjNWM1ODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp/iKuU0iyMiLZee7T/sMSR17IN5 X5PM5OHUq9oM1r2TaZAEQ2c4dMTnmRb8bkEzzYkvPu/44CQXvugoLUicE5Bo7Yt3 TOUxOZZsSoJFOdfgLz9SLQNtBUro7UQz0xTZP4ulKwmGB5ARvFwXZLb3zXyFjXsz 6z1/Ak8t3OML7NLWL7Oy1UjlvpO2JxaDNNSuc525gC5FlGqAp39tamkpgC4BGWpA fyj74TOm5Tx7KMi9808qkd0LPufkTJXp0vuyqkgXuZYrd8r/GyIl3OchJW8R8yuU QH+fQy30+8pm+RUI76fJOHrDLm2luFw+UjCRb32Q33d9qmVlcqCg9x5mlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRlhmzNQGT0N1RL2Us9p8/8XFhAMB8GA1UdIwQY MBaAFNoyICcqRprtZcwqf22X/KmR9+yBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2Mt MjQxZWVjZmY5YWIwLzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2MtMjQxZWVjZmY5YWIw LzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYu/HVRSt gogu82rQjalE3QuMNDIyFprKy6xbLeQutLVaQf2dteYAGXm7s4c0TUsvcvn8wKyA /rxzMbH4gWuwbJCnycFi1sUNbzjqyay5dZfnnwKyH4V1QeSvP2PHG/YfqeN79fS3 kBVVYM8DuAdoUGcdDnT36qgfSN6n01AfE4QwNL6YzZAeID8ZAUa9WkPq426/pedD Ned08ynbvogYBfVFfFCJZ0nns4vP0OR9VMTgl9PHKK9FG+H592ddz90/55lht0kl w64wUrmqKlH++nwJUJ0i7GGvV2Ai/k+uxlQIas5VMRRg9O6pRpv/febc9LtnTW1m gvy1a0FivoQk/Q== -----END CERTIFICATE-----Generated at Sat Dec 27 22:33:56 2025 by rpki-client