This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json) Hash identifier: fQlB95/2A4fUgw1t1R0FPTnkDytbckoBxMpExMeWRaE= Subject key identifier: D6:F8:14:08:1A:64:CE:83:D1:39:80:EA:3F:F5:8D:A8:AC:78:52:96 Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8 Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8 Certificate serial: 019B4E4DB3BD58CC47AD660CE701D4D0B778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 03:01:13 +0000 Manifest this update: Wed 24 Dec 2025 03:01:13 +0000 Manifest next update: Thu 25 Dec 2025 03:01:13 +0000 Files and hashes: 1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=) 2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=) 3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: IuklTsj8cDU17SR/1ZGS1SyKDM/M+6jFOcAyotm9E9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:b3:bd:58:cc:47:ad:66:0c:e7:01:d4:d0:b7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8 Validity Not Before: Dec 24 03:01:13 2025 GMT Not After : Dec 25 03:01:13 2025 GMT Subject: CN=d6f814081a64ce83d13980ea3ff58da8ac785296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:4c:52:83:8a:ec:fb:ea:b7:57:b5:d3:bd: ef:a0:b4:e6:27:ce:3a:84:7d:c4:6b:ab:cc:1b:1b: a2:96:c9:d9:44:b1:5c:fb:90:7c:12:d7:bf:e2:f1: 51:88:64:45:1d:8e:9e:c0:05:70:a3:bb:76:5f:e6: be:cd:3b:6d:7b:83:9d:76:1f:48:97:47:66:c3:67: 6a:99:bd:78:0b:66:93:24:94:df:e2:7f:d4:8a:c1: b9:70:c0:2f:80:b7:80:b3:19:a4:35:95:78:bf:22: 68:96:97:87:c5:0a:f7:07:72:68:28:68:81:da:f0: 95:d0:4d:6e:5c:4b:c3:52:70:d2:8f:71:2b:e8:2d: fd:46:86:6c:7f:e5:c2:46:57:8c:bb:9c:d7:11:7c: 00:b8:db:ac:08:86:28:a8:0b:8f:07:ae:97:6d:54: e0:ed:be:aa:b1:bd:78:42:da:de:99:dc:0d:30:c5: 04:ba:09:f1:d8:aa:54:f3:e1:12:63:5d:c8:0d:df: 7f:cf:dd:50:51:02:67:b8:2e:38:8f:16:62:20:40: db:82:47:5a:dd:ef:10:64:60:63:1a:34:80:ac:51: f3:08:16:eb:70:a2:f3:9b:3d:69:30:82:b0:e3:b2: 66:50:3e:b9:0b:20:dd:fe:4e:df:91:49:a0:ea:1d: 0a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F8:14:08:1A:64:CE:83:D1:39:80:EA:3F:F5:8D:A8:AC:78:52:96 X509v3 Authority Key Identifier: keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:34:43:d8:bc:a3:6c:ad:94:ae:8d:66:b3:42:91:c3:f5:b7: c4:e6:60:45:2b:dc:a8:2e:a6:86:83:1e:47:06:7c:d4:42:bb: c5:84:c1:a3:28:e1:b3:d4:75:40:42:5f:1a:f8:80:12:9f:88: c6:f5:3f:09:ba:fc:e7:be:82:ee:74:72:21:12:ed:89:a9:6b: 0a:a5:71:43:a8:1e:27:a8:a8:ce:93:d8:24:a5:de:f6:6b:4b: 77:52:2e:29:75:9c:66:b8:39:af:35:25:31:18:45:a9:32:a3: 46:b4:c3:7e:d1:b4:d8:11:3b:2a:cb:5b:43:e3:66:7e:53:54: d6:4e:f8:f0:6e:6d:ac:f1:8d:7a:e4:58:77:96:fc:72:f5:6c: 4f:e0:00:f2:03:53:44:18:84:5f:f2:cc:17:60:2a:87:bf:e3: 7d:a7:86:57:cf:52:df:89:35:ae:4d:81:94:89:69:62:27:4b: b9:4a:c3:31:15:b1:f8:79:97:d9:47:d3:61:6e:2c:97:ce:30: 00:dd:6e:84:19:78:38:a4:9a:72:ef:d3:d0:ce:52:e1:4e:1b: 1d:87:b2:a5:d2:78:62:a0:32:0c:d3:33:ff:b4:39:32:74:db: 02:4a:b9:27:e0:2b:25:dc:4f:cd:43:5f:d7:fb:99:21:b6:af: 2d:6e:d6:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTbO9WMxHrWYM5wHU0Ld4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NjAxZDdjYzgyMGRjNzE5MTVlYTkzMDY3M2VmNDdmMjQx YTcxYzgwHhcNMjUxMjI0MDMwMTEzWhcNMjUxMjI1MDMwMTEzWjAzMTEwLwYDVQQD EyhkNmY4MTQwODFhNjRjZTgzZDEzOTgwZWEzZmY1OGRhOGFjNzg1Mjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVRMUoOK7Pvqt1e1073voLTmJ846 hH3Ea6vMGxuilsnZRLFc+5B8Ete/4vFRiGRFHY6ewAVwo7t2X+a+zTtte4Oddh9I l0dmw2dqmb14C2aTJJTf4n/UisG5cMAvgLeAsxmkNZV4vyJolpeHxQr3B3JoKGiB 2vCV0E1uXEvDUnDSj3Er6C39RoZsf+XCRleMu5zXEXwAuNusCIYoqAuPB66XbVTg 7b6qsb14QtremdwNMMUEugnx2KpU8+ESY13IDd9/z91QUQJnuC44jxZiIEDbgkda 3e8QZGBjGjSArFHzCBbrcKLzmz1pMIKw47JmUD65CyDd/k7fkUmg6h0KGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNb4FAgaZM6D0TmA6j/1jaiseFKWMB8GA1UdIwQY MBaAFLdgHXzIINxxkV6pMGc+9H8kGnHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEt NjcxZDY4MTg4Njg4LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEtNjcxZDY4MTg4Njg4 LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDRD2Lyj bK2Uro1ms0KRw/W3xOZgRSvcqC6mhoMeRwZ81EK7xYTBoyjhs9R1QEJfGviAEp+I xvU/Cbr8576C7nRyIRLtialrCqVxQ6geJ6iozpPYJKXe9mtLd1IuKXWcZrg5rzUl MRhFqTKjRrTDftG02BE7KstbQ+NmflNU1k748G5trPGNeuRYd5b8cvVsT+AA8gNT RBiEX/LMF2Aqh7/jfaeGV89S34k1rk2BlIlpYidLuUrDMRWx+HmX2UfTYW4sl84w AN1uhBl4OKSacu/T0M5S4U4bHYeypdJ4YqAyDNMz/7Q5MnTbAkq5J+ArJdxPzUNf 1/uZIbavLW7W/g== -----END CERTIFICATE-----Generated at Wed Dec 24 10:57:58 2025 by rpki-client