This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json) Hash identifier: tVLao2tAMDnomrOlVzXfl2gIB8sSV28y8LM0c8exk48= Subject key identifier: 65:F7:86:D1:BA:6D:30:BC:68:9B:AE:56:E6:CD:67:A6:07:A0:44:9D Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d Certificate serial: 019B3CEC80FA083F61931459E7FC62ED03DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft Manifest number: 0225 Signing time: Sat 20 Dec 2025 18:01:31 +0000 Manifest this update: Sat 20 Dec 2025 18:01:31 +0000 Manifest next update: Sun 21 Dec 2025 18:01:31 +0000 Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: AeZibiF0EhTw1nz4TZPSvqYU2w2KyjHBhoWrSq0dA+U=) 2: FMCKcx7fWhXzjjbFaZ4QhxcZQKM.roa (hash: nneSSqbYCIwxXhIaxp0I37Ib18k8PhoGuSY/nOGzlpw=) 3: jWqrAUGc-QQna_az58FqrLx3KMM.roa (hash: IjB0FwqbEBc83dg3pquxXYEVYNlp7HB3DKdagqWmNT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:80:fa:08:3f:61:93:14:59:e7:fc:62:ed:03:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d Validity Not Before: Dec 20 18:01:31 2025 GMT Not After : Dec 21 18:01:31 2025 GMT Subject: CN=65f786d1ba6d30bc689bae56e6cd67a607a0449d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:7e:08:74:0e:74:31:4e:c3:33:a1:41:fb: 01:94:1d:ce:0b:4a:43:47:18:5c:01:64:e5:b5:a2: 47:47:6b:6c:48:a5:ce:4c:31:8a:e5:f1:9e:48:5a: 60:f0:0a:cf:2c:ee:bc:7f:73:4e:64:8f:84:24:71: d8:ba:93:d7:ab:be:fd:17:9b:1e:80:29:2c:f4:64: 90:cc:62:d4:87:7c:ae:cc:8c:b2:c2:83:59:07:93: 0b:9a:28:86:8a:e5:5a:9c:30:3a:0b:ee:79:5d:80: 95:38:83:77:4d:0c:44:93:86:7f:bc:7d:68:7e:28: 9b:bd:dd:8c:21:52:ef:ae:57:aa:af:98:70:28:aa: 65:24:0a:2d:72:81:0e:82:ae:bf:bc:df:a2:51:1b: 94:bd:98:3e:91:4d:41:4c:b9:23:44:cc:60:22:09: de:18:63:a6:f0:a6:9e:cf:db:c6:7a:f2:46:8c:10: 14:42:37:f4:96:83:1c:98:93:3c:3e:7d:b7:08:ab: 3f:30:c3:91:71:26:a7:83:1d:1c:67:31:67:d5:30: 0c:46:e7:4b:45:57:7c:18:43:76:eb:5c:2b:9f:7f: 28:86:87:5b:68:86:6b:21:1a:d9:b2:b8:33:96:a1: 0a:be:6a:b6:1b:10:d3:86:8e:5a:b2:d0:6c:1f:e1: 2f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F7:86:D1:BA:6D:30:BC:68:9B:AE:56:E6:CD:67:A6:07:A0:44:9D X509v3 Authority Key Identifier: keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:3d:48:f0:30:2b:6a:1c:73:37:6a:06:1f:ab:f4:1d:68:6d: 4b:1e:0b:5a:b4:19:14:5a:da:1d:81:5f:a0:fd:d3:64:b6:38: 06:47:2d:95:31:29:cf:f9:83:67:9a:17:c6:e7:2a:50:85:89: 0c:85:ab:14:09:ee:e3:b7:58:1c:25:75:53:1e:6b:ef:7a:64: 3f:64:f6:02:a5:02:f8:9b:b5:a2:42:b0:d9:bd:68:7b:a0:79: 35:32:37:10:e3:4c:e0:00:32:29:43:6b:e2:ab:5c:07:c6:57: 8a:f6:f1:42:4e:20:7d:95:4a:7d:6a:c8:e7:b3:5d:32:9e:eb: 64:e3:cf:4d:d3:c1:8d:6b:07:ad:76:09:d3:5a:28:dd:1e:4a: d1:07:3d:52:7d:b8:6e:90:a9:29:82:b9:06:be:a8:22:c5:25: 83:88:05:37:e3:9e:59:17:78:86:e7:be:13:4a:02:79:d0:0a: 61:88:99:83:d9:20:21:93:7d:c6:50:cd:c5:ff:54:17:2d:5f: d1:04:b7:d4:b3:d1:ae:6e:6f:c5:57:66:83:41:de:ad:31:fb: 3c:c4:ae:f8:6b:51:7b:b6:e9:9e:90:cc:72:c4:cf:d7:7c:56: 02:37:d8:fd:b5:ce:ff:31:d4:c5:6c:a2:41:9d:fb:cb:30:25: 0c:6a:cb:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87ID6CD9hkxRZ5/xi7QPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGE5ZTcxYWQ1ZDU2NDIzM2E5NDRkMWY0Nzk4NTE4ZDE4 MzFmN2QwHhcNMjUxMjIwMTgwMTMxWhcNMjUxMjIxMTgwMTMxWjAzMTEwLwYDVQQD Eyg2NWY3ODZkMWJhNmQzMGJjNjg5YmFlNTZlNmNkNjdhNjA3YTA0NDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya1+CHQOdDFOwzOhQfsBlB3OC0pD RxhcAWTltaJHR2tsSKXOTDGK5fGeSFpg8ArPLO68f3NOZI+EJHHYupPXq779F5se gCks9GSQzGLUh3yuzIyywoNZB5MLmiiGiuVanDA6C+55XYCVOIN3TQxEk4Z/vH1o fiibvd2MIVLvrleqr5hwKKplJAotcoEOgq6/vN+iURuUvZg+kU1BTLkjRMxgIgne GGOm8Kaez9vGevJGjBAUQjf0loMcmJM8Pn23CKs/MMORcSangx0cZzFn1TAMRudL RVd8GEN261wrn38ohodbaIZrIRrZsrgzlqEKvmq2GxDTho5astBsH+EvhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGX3htG6bTC8aJuuVubNZ6YHoESdMB8GA1UdIwQY MBaAFNoKnnGtXVZCM6lE0fR5hRjRgx99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWIt YTM3YjNmMzIxNzAzLzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWItYTM3YjNmMzIxNzAz LzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQj1I8DAr ahxzN2oGH6v0HWhtSx4LWrQZFFraHYFfoP3TZLY4BkctlTEpz/mDZ5oXxucqUIWJ DIWrFAnu47dYHCV1Ux5r73pkP2T2AqUC+Ju1okKw2b1oe6B5NTI3EONM4AAyKUNr 4qtcB8ZXivbxQk4gfZVKfWrI57NdMp7rZOPPTdPBjWsHrXYJ01oo3R5K0Qc9Un24 bpCpKYK5Br6oIsUlg4gFN+OeWRd4hue+E0oCedAKYYiZg9kgIZN9xlDNxf9UFy1f 0QS31LPRrm5vxVdmg0HerTH7PMSu+GtRe7bpnpDMcsTP13xWAjfY/bXO/zHUxWyi QZ37yzAlDGrLNQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:26:48 2025 by rpki-client