This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json) Hash identifier: XYpXgFIY24fGhwqROfa2TpJ6x1KTZV4QM7Iz9nMIB+A= Subject key identifier: 6A:E1:AB:00:D3:82:49:CF:B5:8C:05:B6:45:F9:C8:2A:ED:76:96:93 Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c Certificate serial: 019B3BA2BFCE1FF2E86C70868F1FCD3E3566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 12:01:20 +0000 Manifest this update: Sat 20 Dec 2025 12:01:20 +0000 Manifest next update: Sun 21 Dec 2025 12:01:20 +0000 Files and hashes: 1: 24_mmtOlkG05yQ7mb26MLLzNTPk.roa (hash: NN9FJFjMrEoXgY4DCGNqxgbjsbFf0mQojMZSGAkFQFg=) 2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: 5OSW26rgKwPkI4diWtTKIV6dtwUvZQ1IgdvYx+RnOJY=) 3: bhkCmw6Utz1WDIi1a3ZQnDXW25w.roa (hash: vuvSrc/xAi8bu4mOjDMbPo9yb6kp8ev2fK1dkeS76Yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:bf:ce:1f:f2:e8:6c:70:86:8f:1f:cd:3e:35:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c Validity Not Before: Dec 20 12:01:20 2025 GMT Not After : Dec 21 12:01:20 2025 GMT Subject: CN=6ae1ab00d38249cfb58c05b645f9c82aed769693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:82:b0:24:ae:26:3d:19:be:65:cc:b0:40: d8:b2:63:f1:25:e7:71:3e:9f:0a:f5:30:74:6c:9a: 63:7c:73:50:3b:58:92:fa:bb:e3:19:43:93:ba:74: 8c:75:a9:3d:01:1d:e5:72:6d:89:69:a1:5e:f4:86: b1:cd:79:35:05:7c:8d:8e:bf:58:90:7f:db:c0:a4: 4f:28:86:b2:33:59:1e:5b:8d:2d:e1:cd:8e:41:55: 8c:17:0d:62:c2:06:2e:dc:2e:0b:d4:6c:f7:3b:27: e7:72:ad:75:0b:3b:5d:40:08:00:2b:96:35:5f:03: a8:58:9e:91:ca:cf:f3:ed:17:9e:42:de:4a:37:9a: 52:74:8f:16:dd:b7:39:cf:0f:53:5c:90:8e:85:af: 76:76:dc:d3:38:ef:5a:11:1d:11:41:aa:de:11:07: 23:67:a6:bf:e6:cb:6b:00:c2:c2:22:53:3e:c8:3c: b9:47:60:d1:7a:4a:ec:cc:8a:fa:dd:52:40:30:28: f0:05:b7:54:9b:e6:82:3b:a6:6c:85:d6:0d:e2:95: ca:78:bb:41:e2:a8:93:7d:e6:63:a0:1c:86:8b:d7: 00:54:45:51:71:e1:8e:01:dd:6c:29:6a:15:ce:7c: d1:22:75:ce:e4:d2:23:92:4a:7f:79:0c:33:f9:c9: 10:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E1:AB:00:D3:82:49:CF:B5:8C:05:B6:45:F9:C8:2A:ED:76:96:93 X509v3 Authority Key Identifier: keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f4:6d:19:21:5d:ea:05:45:58:de:a1:46:99:7f:0b:07:4b: e7:c6:16:ff:57:32:9a:e9:90:6c:c4:2d:cd:63:a6:92:69:49: fe:7f:40:8d:63:a7:56:c8:70:26:be:6b:a4:ec:b8:7b:74:92: 74:55:84:ea:b3:91:14:96:3b:d6:e0:04:36:80:81:0b:4f:c9: e7:1d:80:ab:ae:1e:83:36:0e:d4:25:9c:55:45:d9:5b:d0:b4: 24:bf:fc:42:e7:39:12:a2:01:a4:d0:90:dc:35:28:a9:b8:0f: 5c:5c:84:9d:bd:4a:06:43:63:f7:78:84:bb:15:88:dd:01:e4: b4:b4:4d:3b:ab:8c:b1:4c:2b:cd:d2:94:49:16:aa:bb:d2:b8: 83:6b:a2:e5:2c:8f:c1:04:24:d5:75:f8:7b:ea:a0:2f:77:8e: 46:f2:cd:01:f4:1e:18:a6:01:43:78:96:b1:70:b1:8f:1b:75: 80:3f:99:50:16:3e:c5:42:05:b9:e9:30:97:57:02:41:fa:d5: 7a:77:b5:34:17:13:e2:ef:b1:89:92:ce:6d:2f:18:60:b9:99: 0e:7f:c8:18:2b:c0:19:eb:6f:15:53:b5:6f:b9:3b:80:fc:b9: 7e:93:bb:e5:0f:a3:18:5b:90:ad:aa:d2:c5:f2:3a:14:66:1f: a8:08:e0:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7or/OH/LobHCGjx/NPjVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOWM2NzI5ZTFlODk4OTk4NGRkODAyZDFhOTBlODljZTJm ZTM3M2MwHhcNMjUxMjIwMTIwMTIwWhcNMjUxMjIxMTIwMTIwWjAzMTEwLwYDVQQD Eyg2YWUxYWIwMGQzODI0OWNmYjU4YzA1YjY0NWY5YzgyYWVkNzY5NjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbiCsCSuJj0ZvmXMsEDYsmPxJedx Pp8K9TB0bJpjfHNQO1iS+rvjGUOTunSMdak9AR3lcm2JaaFe9IaxzXk1BXyNjr9Y kH/bwKRPKIayM1keW40t4c2OQVWMFw1iwgYu3C4L1Gz3Oyfncq11CztdQAgAK5Y1 XwOoWJ6Rys/z7ReeQt5KN5pSdI8W3bc5zw9TXJCOha92dtzTOO9aER0RQareEQcj Z6a/5strAMLCIlM+yDy5R2DRekrszIr63VJAMCjwBbdUm+aCO6ZshdYN4pXKeLtB 4qiTfeZjoByGi9cAVEVRceGOAd1sKWoVznzRInXO5NIjkkp/eQwz+ckQgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrhqwDTgknPtYwFtkX5yCrtdpaTMB8GA1UdIwQY MBaAFNqcZynh6JiZhN2ALRqQ6Jzi/jc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83NTVjNTUtYzRmNS00Y2I3LTg3MWQt NjljNjhlMmVmMjdkLzEvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC83NTVjNTUtYzRmNS00Y2I3LTg3MWQtNjljNjhlMmVmMjdk LzEvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPRtGSFd 6gVFWN6hRpl/CwdL58YW/1cymumQbMQtzWOmkmlJ/n9AjWOnVshwJr5rpOy4e3SS dFWE6rORFJY71uAENoCBC0/J5x2Aq64egzYO1CWcVUXZW9C0JL/8Quc5EqIBpNCQ 3DUoqbgPXFyEnb1KBkNj93iEuxWI3QHktLRNO6uMsUwrzdKUSRaqu9K4g2ui5SyP wQQk1XX4e+qgL3eORvLNAfQeGKYBQ3iWsXCxjxt1gD+ZUBY+xUIFuekwl1cCQfrV ene1NBcT4u+xiZLObS8YYLmZDn/IGCvAGetvFVO1b7k7gPy5fpO75Q+jGFuQrarS xfI6FGYfqAjgUw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:59:53 2025 by rpki-client