This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json) Hash identifier: BFun4x90euXdCSnY7o5GZVTt3/uvq3rq5TAZJKzXmuU= Subject key identifier: D1:FC:3A:7D:F7:3C:57:0D:DF:42:91:19:0E:FB:14:7B:7D:DD:DD:54 Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24 Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24 Certificate serial: 019B68E95CB40DE31C58F970A2ABF2289ACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft Manifest number: 0F9C Signing time: Mon 29 Dec 2025 07:01:22 +0000 Manifest this update: Mon 29 Dec 2025 07:01:22 +0000 Manifest next update: Tue 30 Dec 2025 07:01:22 +0000 Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: C7QJb6/41QFFtlD/WcrOHcXl7GZl/sMsgX2QUOTBkwg=) 2: L4roRdlkRFF_L_7wYpfaNa1dLaA.roa (hash: KuAnzPBgxp55/NCR6oySR+pQEyeN2HDAB6NF7tBzr6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:5c:b4:0d:e3:1c:58:f9:70:a2:ab:f2:28:9a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24 Validity Not Before: Dec 29 07:01:22 2025 GMT Not After : Dec 30 07:01:22 2025 GMT Subject: CN=d1fc3a7df73c570ddf4291190efb147b7ddddd54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:49:cb:a6:3b:30:ef:d6:a1:20:e8:28:b3: f7:99:21:df:00:4c:99:3e:13:b9:e4:44:e3:f6:fd: 0f:7e:c9:fa:b6:5c:1c:38:7f:28:ac:f9:73:6f:80: a4:00:9f:3e:fa:83:bf:ba:eb:60:c2:5b:10:34:5c: fc:05:5b:6a:be:51:67:c6:32:db:4f:da:6c:ba:aa: 7d:d6:ee:d3:a5:cf:1e:72:5b:12:bc:63:5a:03:c0: a5:8d:53:7e:5f:4e:c2:3a:7c:19:2c:a8:d8:0c:31: 4f:d1:6d:53:cd:74:c6:cf:fc:18:f4:17:f6:33:b4: 81:86:1a:27:5c:f4:ee:81:39:bf:87:a1:42:2c:d4: 4f:5e:ad:ac:11:d9:37:d2:03:58:78:76:15:7a:2c: a8:be:bb:38:6a:77:c7:46:ec:2f:77:c4:f0:ec:3b: 3b:50:39:9e:8b:d3:9f:38:92:92:45:97:79:43:9d: 1d:ee:da:ff:1e:fc:96:fb:1b:c3:14:14:e3:2d:fa: 6c:14:03:c4:b4:e5:93:9e:a4:31:46:f1:2c:28:c1: a5:9e:62:2e:77:71:65:fc:2f:e7:4f:61:3c:ed:4e: 3f:69:b4:23:a4:03:64:61:3c:eb:b7:d8:54:ad:7e: c5:88:bb:7f:fc:ec:97:72:ee:c8:aa:0e:bf:bd:c2: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FC:3A:7D:F7:3C:57:0D:DF:42:91:19:0E:FB:14:7B:7D:DD:DD:54 X509v3 Authority Key Identifier: keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:84:91:d4:0d:2d:f4:b9:3e:d2:8c:14:8f:7f:83:95:07:fa: 08:bb:90:f0:2c:57:dd:ff:ab:20:ab:91:5f:29:1f:13:e5:4f: 36:71:13:27:4e:fd:74:a7:2d:80:38:02:b7:77:05:57:5c:f8: 2f:19:c6:6e:ed:39:ec:1e:f2:a1:41:b7:05:a9:af:23:2b:5a: 1d:ab:67:01:61:6b:32:df:64:b7:a0:4c:d7:3e:ea:7a:1b:34: 7d:41:c3:d7:c0:b4:2a:15:98:d0:65:4a:07:ff:13:0e:75:6a: 2f:4a:e0:29:34:9e:8d:48:f6:fa:64:62:f1:b1:97:56:1a:0b: 48:48:7c:e3:8f:57:2d:4a:b3:19:91:67:66:e9:4f:73:0f:48: c1:5e:cb:33:ee:f9:ab:a1:07:95:7a:f5:72:8b:95:a1:78:cd: f2:6b:d9:68:b2:ed:c9:d7:18:4e:16:23:fa:46:a5:ec:43:d0: f5:f4:fb:d6:5c:ed:31:36:0e:aa:82:92:b1:e0:85:44:a2:89: 3b:93:8b:e3:cc:90:e0:9b:d4:d3:72:7a:67:00:c4:4d:9e:38: 5f:04:54:a3:cc:dd:c4:f1:65:0f:a9:47:a2:2f:d7:5d:d9:10: 1d:1f:86:7f:99:c7:98:35:3d:af:f0:4a:69:f8:03:60:5c:49: 56:c7:25:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6Vy0DeMcWPlwoqvyKJrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MDE1NWM1MWZmMjM5NGRhNzg0YTM4NGFhNzE3Yzc2ZTMw MzJjMjQwHhcNMjUxMjI5MDcwMTIyWhcNMjUxMjMwMDcwMTIyWjAzMTEwLwYDVQQD EyhkMWZjM2E3ZGY3M2M1NzBkZGY0MjkxMTkwZWZiMTQ3YjdkZGRkZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkxJy6Y7MO/WoSDoKLP3mSHfAEyZ PhO55ETj9v0Pfsn6tlwcOH8orPlzb4CkAJ8++oO/uutgwlsQNFz8BVtqvlFnxjLb T9psuqp91u7Tpc8eclsSvGNaA8CljVN+X07COnwZLKjYDDFP0W1TzXTGz/wY9Bf2 M7SBhhonXPTugTm/h6FCLNRPXq2sEdk30gNYeHYVeiyovrs4anfHRuwvd8Tw7Ds7 UDmei9OfOJKSRZd5Q50d7tr/HvyW+xvDFBTjLfpsFAPEtOWTnqQxRvEsKMGlnmIu d3Fl/C/nT2E87U4/abQjpANkYTzrt9hUrX7FiLt//OyXcu7Iqg6/vcLdhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH8On33PFcN30KRGQ77FHt93d1UMB8GA1UdIwQY MBaAFNkBVcUf8jlNp4SjhKpxfHbjAywkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYt NDIyYmI0Mzc1M2JlLzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYtNDIyYmI0Mzc1M2Jl LzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYSR1A0t 9Lk+0owUj3+DlQf6CLuQ8CxX3f+rIKuRXykfE+VPNnETJ079dKctgDgCt3cFV1z4 LxnGbu057B7yoUG3BamvIytaHatnAWFrMt9kt6BM1z7qehs0fUHD18C0KhWY0GVK B/8TDnVqL0rgKTSejUj2+mRi8bGXVhoLSEh8449XLUqzGZFnZulPcw9IwV7LM+75 q6EHlXr1couVoXjN8mvZaLLtydcYThYj+kal7EPQ9fT71lztMTYOqoKSseCFRKKJ O5OL48yQ4JvU03J6ZwDETZ44XwRUo8zdxPFlD6lHoi/XXdkQHR+Gf5nHmDU9r/BK afgDYFxJVscl8Q== -----END CERTIFICATE-----Generated at Mon Dec 29 08:49:16 2025 by rpki-client