This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json) Hash identifier: obRMWqqdLCGHE+cqdVXG36tBChxPWTrGCcP/BPMNp80= Subject key identifier: 35:3A:91:87:E3:26:3A:03:F2:EA:7E:B9:D7:63:7C:5B:DF:DE:81:62 Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61 Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461 Certificate serial: 019B44DCDD0DBEB21C626DBB3D35EA115842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 07:01:23 +0000 Manifest this update: Mon 22 Dec 2025 07:01:23 +0000 Manifest next update: Tue 23 Dec 2025 07:01:23 +0000 Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: 0gEthEj6RWL35u1ZQ+fJJNHUVdphjV8ZOV8NmVNnqEM=) 2: WsuMLx8hOYo9zbhOH79qMxC9w1o.roa (hash: cB8DG/oK3A/ZTuFz/7P7kYL4Kctl8w+rRh6Gw20a3lg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:dd:0d:be:b2:1c:62:6d:bb:3d:35:ea:11:58:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461 Validity Not Before: Dec 22 07:01:23 2025 GMT Not After : Dec 23 07:01:23 2025 GMT Subject: CN=353a9187e3263a03f2ea7eb9d7637c5bdfde8162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:1b:82:93:7e:87:03:73:ee:a7:6d:0d:73: 87:c2:fd:c4:fe:c0:49:30:64:5c:2d:da:f4:d6:0b: 12:d9:60:e9:af:31:68:f1:99:f7:8c:56:d3:b9:ea: 9f:88:10:fd:6e:17:24:8f:cb:4f:8e:65:ba:8a:cf: 92:05:d4:71:27:ae:6a:e9:2b:c5:9a:2a:ae:c4:e9: 41:79:73:a2:41:d4:9d:e1:53:b8:b5:26:88:ce:36: 49:a9:60:4c:03:c4:5a:d5:f3:56:dd:50:eb:ac:b8: ae:eb:76:89:3b:8d:e0:2f:be:e4:64:7a:b0:0b:fe: 85:13:5f:1f:83:30:45:12:fe:81:2f:8f:61:75:e2: 4f:f7:62:4a:38:41:95:f0:1d:26:77:82:7c:d9:d0: 59:7f:12:ba:87:fd:42:9e:57:21:d0:1a:0e:93:00: ae:4a:ea:db:83:c4:f6:a2:5f:b6:5b:40:ef:df:ce: e9:da:db:91:67:9e:57:f3:66:c0:d0:89:ca:1e:bb: f4:17:25:b0:77:94:55:67:3c:dd:e6:08:b4:0f:03: f1:ad:f2:bc:68:32:c1:2b:c2:46:60:29:48:9e:d9: 1a:2b:a4:ba:56:df:19:01:05:59:ef:57:d7:c1:fb: 97:e3:3a:99:05:1c:13:99:60:30:85:ee:2f:3a:a1: 9f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3A:91:87:E3:26:3A:03:F2:EA:7E:B9:D7:63:7C:5B:DF:DE:81:62 X509v3 Authority Key Identifier: keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:38:04:2f:94:d3:9d:63:da:9c:46:04:77:37:68:f4:8d:05: 8c:7d:a7:f5:77:ee:af:e6:9f:75:b9:07:30:1d:14:44:5f:f5: 94:e4:a0:24:97:40:9a:ec:9a:7f:dc:e4:dc:85:33:9f:f0:3f: d2:18:81:16:d9:69:24:8a:13:31:a3:17:17:62:2d:92:8f:a2: 8a:0e:b1:7a:a1:7f:3f:71:de:9b:48:41:bb:41:e3:41:c2:60: 21:ef:93:07:7d:20:3b:ab:ba:ed:f7:d5:61:77:4e:70:b5:8a: 9d:f3:19:fa:14:d1:e8:52:d8:f6:63:21:2c:00:ca:26:90:52: db:52:f5:51:ca:2a:eb:4a:df:be:8a:d3:0f:4a:3f:5f:5e:12: 61:ef:03:10:4b:03:1a:93:23:12:39:56:e4:1b:5e:16:89:85: fd:5b:96:1d:f5:67:f6:40:32:bd:27:f3:b3:97:c3:d2:2d:4d: d0:e2:da:8f:27:46:f9:20:f3:b0:48:7a:cb:91:f8:75:3d:ba: 3d:98:6f:da:d3:d8:82:f0:e9:b9:62:99:64:0b:7b:ce:90:8f: b5:86:28:dd:b9:f2:d5:c5:3f:8e:aa:be:3f:95:e9:de:8c:39: 51:3a:4c:04:db:b0:af:65:92:40:f9:e3:b8:5a:d1:5e:93:8e: 5d:b1:b8:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3N0NvrIcYm27PTXqEVhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNjA5OWU3ZmYzYTE3MWJjZTNiNmZlOTllYmI0ZDI0Y2I4 NWU0NjEwHhcNMjUxMjIyMDcwMTIzWhcNMjUxMjIzMDcwMTIzWjAzMTEwLwYDVQQD EygzNTNhOTE4N2UzMjYzYTAzZjJlYTdlYjlkNzYzN2M1YmRmZGU4MTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nAbgpN+hwNz7qdtDXOHwv3E/sBJ MGRcLdr01gsS2WDprzFo8Zn3jFbTueqfiBD9bhckj8tPjmW6is+SBdRxJ65q6SvF miquxOlBeXOiQdSd4VO4tSaIzjZJqWBMA8Ra1fNW3VDrrLiu63aJO43gL77kZHqw C/6FE18fgzBFEv6BL49hdeJP92JKOEGV8B0md4J82dBZfxK6h/1Cnlch0BoOkwCu Surbg8T2ol+2W0Dv387p2tuRZ55X82bA0InKHrv0FyWwd5RVZzzd5gi0DwPxrfK8 aDLBK8JGYClIntkaK6S6Vt8ZAQVZ71fXwfuX4zqZBRwTmWAwhe4vOqGf5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDU6kYfjJjoD8up+uddjfFvf3oFiMB8GA1UdIwQY MBaAFNpgmef/Ohcbzjtv6Z67TSTLheRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUt NDU5ODY4OWQ1NTFlLzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUtNDU5ODY4OWQ1NTFl LzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjgEL5TT nWPanEYEdzdo9I0FjH2n9Xfur+afdbkHMB0URF/1lOSgJJdAmuyaf9zk3IUzn/A/ 0hiBFtlpJIoTMaMXF2Itko+iig6xeqF/P3Hem0hBu0HjQcJgIe+TB30gO6u67ffV YXdOcLWKnfMZ+hTR6FLY9mMhLADKJpBS21L1Ucoq60rfvorTD0o/X14SYe8DEEsD GpMjEjlW5BteFomF/VuWHfVn9kAyvSfzs5fD0i1N0OLajydG+SDzsEh6y5H4dT26 PZhv2tPYgvDpuWKZZAt7zpCPtYYo3bny1cU/jqq+P5Xp3ow5UTpMBNuwr2WSQPnj uFrRXpOOXbG48w== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:50 2025 by rpki-client