This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: AyrXuxCRxeTSKp3VZwpu1cSK7dI5uRNc+5iZ9+mEHUI= Subject key identifier: D9:EE:5B:D2:1D:A6:B1:32:2F:1A:BF:CB:A0:FD:64:94:C3:53:4D:A5 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019B24760E0EB1B8583CD3A725C761233875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 1188 Signing time: Tue 16 Dec 2025 00:01:15 +0000 Manifest this update: Tue 16 Dec 2025 00:01:15 +0000 Manifest next update: Wed 17 Dec 2025 00:01:15 +0000 Files and hashes: 1: 1sKE36lDWeWUjMSloo6n26lQvxE.roa (hash: 0YFmLsRRla2daPn9GavHfi/iWCjcjVBR51fAM/YzUPA=) 2: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: qT9s2Rhu9CUfA/7D+Mw9fX8YEgkGgJsTFHGx+aiYzAo=) 3: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (hash: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=) 4: 8GeGNNzjzZvJIEAAhJi9tW2bbrA.roa (hash: Eto9TySCaxnkkdyIGeX6PMXh8s89OGTNecNbv02FHmY=) 5: BinZKeyg5gKkO8gwYJ0Ze8CeRxs.roa (hash: y9nENbUlBNsJYj+Cw11EQBzVD35m8OwMSWBUyRfdWao=) 6: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (hash: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=) 7: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (hash: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=) 8: ZH0QvaHOPvJPYEbUbSGF-chYfuI.roa (hash: GNpLUKAR49JusHGuTxHkn0FssgkY3qDBV+p8eW6v2dA=) 9: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (hash: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=) 10: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (hash: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=) 11: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (hash: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=) 12: mP8Qz54E01SquciLEGB10XN2R-M.roa (hash: TdXFl7ZveLTgT4OrOlqkJ84pFNT0T+LUDZ5933YP0mE=) 13: suXcRzS6-_4AE_w0ZJlYPW8wMRM.roa (hash: +PBYO+10etR0ZMMQ1FwMVF/GjPtirIZFSfWGb9cD2rU=) 14: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (hash: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=) 15: yVFu2BG-2jPO42o54RBasvcduFQ.roa (hash: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:0e:0e:b1:b8:58:3c:d3:a7:25:c7:61:23:38:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Dec 16 00:01:15 2025 GMT Not After : Dec 17 00:01:15 2025 GMT Subject: CN=d9ee5bd21da6b1322f1abfcba0fd6494c3534da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:78:a0:37:45:90:81:8f:92:ba:48:b6:5f: 46:6f:76:59:54:bc:24:43:5f:73:8c:e8:72:97:d8: 6d:2d:52:cd:a2:07:7a:c2:7e:c9:0d:69:d5:15:c9: 3d:91:31:92:8d:a2:3f:a9:41:b5:36:68:39:e0:a5: 49:fc:80:2c:9b:96:d2:4c:b7:4e:6d:73:ac:58:22: cc:22:41:18:3f:ca:45:d8:57:3f:7c:a5:20:c5:d9: 47:7e:6e:7f:ca:33:5d:f5:6a:fa:04:18:d2:49:c8: 04:c2:cd:cd:a5:2c:ee:73:54:40:7b:55:6d:3d:da: 35:d1:10:1d:d0:a8:c4:b5:44:d3:32:f5:b1:d4:9d: 06:cd:62:a7:ba:e5:3b:5a:b4:0f:5d:9a:bb:d5:75: 04:ff:cd:fd:b8:d2:2f:25:ee:7f:ff:22:9f:ef:8d: 45:b6:18:5b:22:2f:21:db:cd:91:6b:5c:1d:76:5a: 03:f5:78:87:d1:c3:7f:34:3a:f4:34:75:9e:c8:e2: 7a:ad:7c:d4:e4:ce:48:50:65:e4:c0:e6:cf:62:cf: 0d:ec:d0:65:bb:e1:b6:e3:33:fc:33:08:7b:21:56: 3e:8b:a5:38:41:2c:76:11:13:8e:1d:5d:c1:7f:92: f7:5f:38:85:0b:00:a7:83:fd:96:a8:c8:71:63:40: 9c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EE:5B:D2:1D:A6:B1:32:2F:1A:BF:CB:A0:FD:64:94:C3:53:4D:A5 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:1a:88:66:3d:75:f8:4c:c6:2d:c9:cf:8e:13:5f:51:30:af: f4:55:f3:26:04:af:49:b5:0a:60:d9:c6:fc:25:83:71:c8:f9: fe:c8:3a:58:5b:fa:60:0f:4f:0c:c2:2d:57:37:16:fe:c7:af: 32:cf:0c:0d:72:df:6c:da:a4:c6:6c:23:9d:7a:c5:b8:c4:19: b1:38:17:ba:f2:81:db:da:8e:a8:04:f1:bf:a1:a6:a2:8c:0a: 1a:3d:79:18:3a:a9:f8:19:3c:52:8b:52:ca:1e:69:5c:fb:a4: 72:98:1c:a8:80:08:e4:af:6d:33:38:2b:3b:0e:6a:e2:e5:6c: 0e:bc:d1:35:0b:38:fb:79:e9:61:69:19:5a:0a:05:85:5b:db: d0:0d:ba:24:59:8a:8f:01:0c:f4:d5:4b:58:89:ff:61:d0:f2: c7:6b:8a:0e:ff:7e:b1:ff:ad:39:4b:57:1b:84:79:d3:5c:a7: 63:5e:56:db:5c:8b:6f:e4:c8:bf:84:d1:f7:11:50:a7:ac:80: 8b:92:68:ae:d5:44:1b:b6:d3:5e:5b:c3:b6:cb:02:5e:80:fa: 64:11:7c:6d:d9:8c:e8:a9:cc:87:01:ea:29:41:06:75:58:82: d0:4d:5d:04:6b:26:0f:db:97:95:93:23:c2:d9:0b:4f:32:9c: bc:68:57:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdg4OsbhYPNOnJcdhIzh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjUxMjE2MDAwMTE1WhcNMjUxMjE3MDAwMTE1WjAzMTEwLwYDVQQD EyhkOWVlNWJkMjFkYTZiMTMyMmYxYWJmY2JhMGZkNjQ5NGMzNTM0ZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLp4oDdFkIGPkrpItl9Gb3ZZVLwk Q19zjOhyl9htLVLNogd6wn7JDWnVFck9kTGSjaI/qUG1Nmg54KVJ/IAsm5bSTLdO bXOsWCLMIkEYP8pF2Fc/fKUgxdlHfm5/yjNd9Wr6BBjSScgEws3NpSzuc1RAe1Vt Pdo10RAd0KjEtUTTMvWx1J0GzWKnuuU7WrQPXZq71XUE/839uNIvJe5//yKf741F thhbIi8h282Ra1wddloD9XiH0cN/NDr0NHWeyOJ6rXzU5M5IUGXkwObPYs8N7NBl u+G24zP8Mwh7IVY+i6U4QSx2EROOHV3Bf5L3XziFCwCng/2WqMhxY0Cc7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnuW9IdprEyLxq/y6D9ZJTDU02lMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghqIZj11 +EzGLcnPjhNfUTCv9FXzJgSvSbUKYNnG/CWDccj5/sg6WFv6YA9PDMItVzcW/sev Ms8MDXLfbNqkxmwjnXrFuMQZsTgXuvKB29qOqATxv6GmoowKGj15GDqp+Bk8UotS yh5pXPukcpgcqIAI5K9tMzgrOw5q4uVsDrzRNQs4+3npYWkZWgoFhVvb0A26JFmK jwEM9NVLWIn/YdDyx2uKDv9+sf+tOUtXG4R501ynY15W21yLb+TIv4TR9xFQp6yA i5JortVEG7bTXlvDtssCXoD6ZBF8bdmM6KnMhwHqKUEGdViC0E1dBGsmD9uXlZMj wtkLTzKcvGhXmA== -----END CERTIFICATE-----Generated at Tue Dec 16 09:39:55 2025 by rpki-client