This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json) Hash identifier: +CMIWZmvJCzc4a1bcv5lSseEeyp/wJsbXLMsx+dUyx0= Subject key identifier: 0C:82:B7:8A:6F:0F:DA:E3:44:C8:B0:D7:B1:74:8B:0F:55:05:DB:1D Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c Certificate serial: 019B61664E31DFC1CFE91E2C89917EFB5B80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft Manifest number: 04EC Signing time: Sat 27 Dec 2025 20:00:53 +0000 Manifest this update: Sat 27 Dec 2025 20:00:53 +0000 Manifest next update: Sun 28 Dec 2025 20:00:53 +0000 Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: 1ec2dY3in1XCSygL1gMJQ1utylNm4/J2uUWLTWPRnF4=) 2: RFpSEEfmfhQM7TNBHUvPYNYCE48.roa (hash: iHrN3ygMDkDOsg7Lw4ctlZrjgMs+0h97Al7X6knMEEI=) 3: UkLoRo0mP_K3Dh8gkYYP1OxkE_I.roa (hash: Q3D4Rh06gP+xE8oXAtIwLH3P2XhdWnZQyb1Lpy85O7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:66:4e:31:df:c1:cf:e9:1e:2c:89:91:7e:fb:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c Validity Not Before: Dec 27 20:00:53 2025 GMT Not After : Dec 28 20:00:53 2025 GMT Subject: CN=0c82b78a6f0fdae344c8b0d7b1748b0f5505db1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b1:30:11:35:8d:d4:a9:48:1e:90:6d:a1:39: 29:c7:39:f2:14:2e:3e:fa:14:5c:61:2d:a6:e5:63: b9:9d:d6:09:a1:d3:27:5e:55:da:3d:8b:90:1c:17: 72:9a:ba:83:11:6d:02:94:2a:11:67:a4:37:82:93: bb:29:e1:7b:28:1e:a6:26:dd:1e:5b:99:0d:04:a4: f7:6e:65:7e:8a:f0:77:51:f8:6e:c0:83:6b:18:fa: 01:f8:9a:d4:b8:27:3a:c0:b6:cd:d2:de:2b:0e:32: f3:ce:1b:73:6d:96:43:bb:c7:e2:79:dd:1f:74:ea: eb:1e:19:9a:7e:9c:1e:c5:a4:45:28:22:12:24:3d: ac:45:7c:c5:76:eb:d2:15:49:d0:d5:6d:94:b4:37: 02:14:7e:b1:72:d6:a9:ea:72:e9:cb:fa:46:5e:7a: b2:be:94:41:1f:79:1f:b7:98:f2:15:96:3e:b1:ba: a3:d5:88:06:80:16:eb:1a:b8:0c:30:59:85:42:ab: fd:47:ad:b0:42:7c:4d:a2:c4:f5:54:50:21:5a:b9: b8:17:b4:b5:a5:15:bb:21:f0:43:66:74:e6:f8:f3: cc:d7:a1:63:6d:b2:52:47:c9:a3:f1:ab:f3:5e:90: 2c:6d:ae:93:99:0f:3a:93:77:92:73:18:74:14:5f: fb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:82:B7:8A:6F:0F:DA:E3:44:C8:B0:D7:B1:74:8B:0F:55:05:DB:1D X509v3 Authority Key Identifier: keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1a:a8:ff:2e:77:01:7c:b7:a1:d1:65:a7:02:47:7a:01:e4: ad:80:cf:de:c0:c3:81:a3:5c:a8:31:73:6e:c5:6a:59:39:b3: 8b:7b:3d:9e:e7:63:d8:c1:f7:c3:aa:1b:b9:1f:84:bb:fe:79: 8d:db:36:64:b3:82:55:39:86:4b:c4:e6:e8:8b:40:66:89:a7: 24:95:11:5b:dc:c9:30:98:5e:0c:a5:f5:e8:f5:db:0a:ee:df: 12:98:a9:46:96:ad:f4:4d:de:c8:81:ea:14:71:ac:ea:7f:5f: b6:00:b4:f2:79:eb:4d:7f:b8:8c:5f:92:9f:5d:96:c3:36:9f: 21:8f:7f:87:b1:ea:08:98:6b:0a:2f:1c:80:ac:92:4e:2b:49: 5d:24:3d:72:df:73:a7:51:0b:5b:d1:85:ad:b3:7a:f9:1a:0e: 6d:40:d4:2c:54:89:0b:3a:6f:bd:2b:ce:36:2b:ab:cd:81:45: 3e:90:79:b8:15:17:f1:ac:2f:db:25:16:f9:70:f9:79:b8:57: eb:58:5b:a1:d8:3d:fb:44:5c:b3:2f:c9:e9:8c:3c:bb:14:b1: 99:80:55:08:e8:23:18:c2:11:f3:a4:53:83:f4:dc:64:73:3d: 04:1b:0d:a8:bc:55:d9:5d:66:8c:84:2e:a4:2b:2e:e0:38:44: c4:6c:2e:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthZk4x38HP6R4siZF++1uAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ODJhMTk3MzQwZDM1ODRlNmFjMTdjMWZiMmE5OTAwYWU0 ZjYwM2MwHhcNMjUxMjI3MjAwMDUzWhcNMjUxMjI4MjAwMDUzWjAzMTEwLwYDVQQD EygwYzgyYjc4YTZmMGZkYWUzNDRjOGIwZDdiMTc0OGIwZjU1MDVkYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrEwETWN1KlIHpBtoTkpxznyFC4+ +hRcYS2m5WO5ndYJodMnXlXaPYuQHBdymrqDEW0ClCoRZ6Q3gpO7KeF7KB6mJt0e W5kNBKT3bmV+ivB3UfhuwINrGPoB+JrUuCc6wLbN0t4rDjLzzhtzbZZDu8fied0f dOrrHhmafpwexaRFKCISJD2sRXzFduvSFUnQ1W2UtDcCFH6xctap6nLpy/pGXnqy vpRBH3kft5jyFZY+sbqj1YgGgBbrGrgMMFmFQqv9R62wQnxNosT1VFAhWrm4F7S1 pRW7IfBDZnTm+PPM16FjbbJSR8mj8avzXpAsba6TmQ86k3eScxh0FF/7PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyCt4pvD9rjRMiw17F0iw9VBdsdMB8GA1UdIwQY MBaAFNiCoZc0DTWE5qwXwfsqmQCuT2A8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NDFjNDMtMDI2OS00Mjg5LThmYTUt YjA1YWU1Y2EyZDVlLzEvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84NDFjNDMtMDI2OS00Mjg5LThmYTUtYjA1YWU1Y2EyZDVl LzEvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBqo/y53 AXy3odFlpwJHegHkrYDP3sDDgaNcqDFzbsVqWTmzi3s9nudj2MH3w6obuR+Eu/55 jds2ZLOCVTmGS8Tm6ItAZomnJJURW9zJMJheDKX16PXbCu7fEpipRpat9E3eyIHq FHGs6n9ftgC08nnrTX+4jF+Sn12WwzafIY9/h7HqCJhrCi8cgKySTitJXSQ9ct9z p1ELW9GFrbN6+RoObUDULFSJCzpvvSvONiurzYFFPpB5uBUX8awv2yUW+XD5ebhX 61hbodg9+0Rcsy/J6Yw8uxSxmYBVCOgjGMIR86RTg/TcZHM9BBsNqLxV2V1mjIQu pCsu4DhExGwu+w== -----END CERTIFICATE-----Generated at Sun Dec 28 06:25:53 2025 by rpki-client