This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier: 5lfHjoRTA9CbTnSJP0cb54kftH3uG6vkNmthmwzVn2o=
Subject key identifier: 4D:43:E0:E2:49:93:09:0C:90:CF:C0:82:22:2F:9E:4A:93:B9:EC:BF
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial: 019B41A474CF3B61A985FD0DA20D6AB11F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number: 178D
Signing time: Sun 21 Dec 2025 16:00:55 +0000
Manifest this update: Sun 21 Dec 2025 16:00:55 +0000
Manifest next update: Mon 22 Dec 2025 16:00:55 +0000
Files and hashes: 1: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: /pEX2S41mR5hsWlJUieP9ZFyTghF1fDlW41FBZ2E0Vk=)
2: Hp-aUMiKFduSFShKvppXI42_Uj8.roa (hash: lCB+C5NdYk9yj77o+dq8fC9obFb6kuE+kfqjMFwOwXM=)
3: fj4ybxpsDPTq3Dcp32ARk19V658.roa (hash: G3z4kx3nRpiPVloWlnA+5o5/TapLF4KViU9lT9zaU4s=)
4: pE4C0VroSmY26_TJM0K-lSQgc7M.roa (hash: vf7UXC4PR0yUJjr6xqwo9zqitXjZXFvwlnGZdHjjf6A=)
5: waFJY_9Xx4HVBca8mozwG38i49k.roa (hash: 2sqvgn5zOZZ4lehKra8TFzA3bKpHh9AvNDOTiV97aSw=)
6: wwsOTx-pck8zIz4rEJvLSRVOW78.roa (hash: MNbHqch8VEMBR8R4jhawYSxV/uo6TDEte38JPI3LQos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:41:a4:74:cf:3b:61:a9:85:fd:0d:a2:0d:6a:b1:1f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Validity
Not Before: Dec 21 16:00:55 2025 GMT
Not After : Dec 22 16:00:55 2025 GMT
Subject: CN=4d43e0e24993090c90cfc082222f9e4a93b9ecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:8a:5d:9c:2d:1b:1d:62:04:07:63:bd:5a:
d5:96:99:e4:e4:3d:ed:aa:11:77:2b:c2:9d:34:10:
85:2e:2a:2d:8c:b8:60:42:49:6e:d0:39:6b:f1:30:
1c:ae:2d:cc:59:d4:3c:3e:43:88:f1:2d:a5:f8:c3:
cd:ed:9a:80:73:ec:7c:ee:20:c3:10:18:67:44:3d:
96:5e:4e:46:01:08:d1:db:ce:04:f3:fb:3d:4c:18:
e7:85:79:cb:cc:99:b8:f4:49:5c:dc:d9:8d:e6:70:
f6:ce:2b:24:8c:e9:c6:86:65:58:4b:12:6e:63:e6:
f1:29:1b:9b:99:8f:61:77:83:5a:a6:9b:c1:c3:55:
dc:60:3a:f7:fb:73:72:3a:c7:56:c1:d3:03:19:2b:
75:d2:81:19:79:a9:c3:a2:e5:23:9d:69:7a:9f:e1:
45:71:53:de:7c:f1:c4:39:16:e6:86:5b:11:7b:51:
82:51:02:b6:bd:6c:33:b3:96:16:8e:ea:a7:48:0f:
5f:b2:3f:33:74:a6:59:be:99:c0:29:6a:b7:47:e4:
21:ca:2f:c5:89:07:24:5b:d9:eb:36:23:1e:4a:cb:
67:c3:66:3e:b6:a2:5e:9b:0b:7f:d2:63:7a:7f:e7:
41:9c:e7:35:16:f2:8d:7c:cb:e8:5d:04:8a:ca:75:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:E0:E2:49:93:09:0C:90:CF:C0:82:22:2F:9E:4A:93:B9:EC:BF
X509v3 Authority Key Identifier:
keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:15:33:47:a9:1c:0e:0d:f7:41:f3:39:b4:cd:87:d5:3e:d3:
1e:fb:98:3a:7e:08:af:28:64:cb:ea:09:4f:81:b3:5c:18:04:
59:b1:1f:38:6e:8b:97:4c:5a:71:75:98:31:c3:5a:c3:3b:23:
6a:cb:6c:64:34:e1:d7:00:11:eb:10:d6:3d:b1:06:5a:01:8f:
d2:c8:41:46:04:b9:a3:36:11:01:d6:62:92:35:7c:ef:86:f4:
2e:c7:84:61:74:3c:0d:b4:cd:b2:5f:0e:ab:4f:49:13:8b:65:
a5:f8:19:4e:fd:71:81:d6:72:ec:71:34:e4:1f:ec:19:30:fd:
35:89:b9:ac:84:7c:bd:fe:94:a9:85:c4:be:73:21:64:f1:3c:
25:b3:10:43:d7:7f:8a:65:2d:4f:0f:25:bc:6b:fc:17:a0:61:
41:42:3c:f2:48:62:ee:41:b4:9b:ee:5b:57:ac:cc:c3:e5:4c:
4f:ab:eb:4a:a5:2b:17:30:48:aa:99:6c:10:33:1f:b2:fe:bb:
63:0a:a7:4c:04:c2:0e:72:8f:2a:11:26:6d:e9:39:92:8f:f5:
3a:c2:2f:0f:75:65:dc:b1:92:72:12:d3:6b:5a:6a:b3:fa:40:
67:83:95:e0:d8:aa:52:5d:e9:ab:e0:da:d1:a9:1d:84:cc:31:
64:46:1f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 20:35:43 2025 by rpki-client