This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json) Hash identifier: sUxOfE1Np3oafoZYIiFfikZTZoBoMAa1mncG8ACF3hI= Subject key identifier: 55:81:2F:84:E5:BE:47:C0:DC:26:37:60:71:43:B8:0A:50:62:D8:11 Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c Certificate serial: 019B4D0435F3A7806F2804965EBA964DADCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 21:01:20 +0000 Manifest this update: Tue 23 Dec 2025 21:01:20 +0000 Manifest next update: Wed 24 Dec 2025 21:01:20 +0000 Files and hashes: 1: 24_mmtOlkG05yQ7mb26MLLzNTPk.roa (hash: NN9FJFjMrEoXgY4DCGNqxgbjsbFf0mQojMZSGAkFQFg=) 2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: Mle9hulaOWofU8atLOXZiWodR3V/y9kSg43MeHbBEzk=) 3: bhkCmw6Utz1WDIi1a3ZQnDXW25w.roa (hash: vuvSrc/xAi8bu4mOjDMbPo9yb6kp8ev2fK1dkeS76Yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:04:35:f3:a7:80:6f:28:04:96:5e:ba:96:4d:ad:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c Validity Not Before: Dec 23 21:01:20 2025 GMT Not After : Dec 24 21:01:20 2025 GMT Subject: CN=55812f84e5be47c0dc2637607143b80a5062d811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:ef:31:5e:07:1a:da:e4:8e:55:1a:5f:5f: 53:0a:b5:f8:fe:3a:ad:fa:8f:08:d0:6a:f0:70:f0: 28:3a:05:8a:33:15:60:61:d5:d1:ad:3c:61:e8:9f: 93:14:9b:17:16:4d:01:3c:83:d2:9b:72:88:75:31: 0c:fb:77:ab:ee:42:97:71:2b:8c:b6:fd:7d:b2:30: c4:59:76:ef:e2:3b:d5:6a:b0:a7:46:21:7c:ba:9e: c8:53:38:4d:f6:e2:6f:9e:de:f5:de:d3:cb:9d:dd: f9:e6:92:73:7c:2c:a9:ff:1b:98:25:0a:ff:3c:65: 91:c5:df:42:2d:39:73:fc:2b:13:1c:b8:2a:46:9f: 41:14:ae:17:a8:c7:c5:26:97:2c:de:b5:b7:50:80: ef:bf:32:49:09:26:22:c0:b6:8f:47:9a:25:90:e8: ea:31:96:b9:cb:02:8a:95:bf:98:ba:04:85:55:7d: f9:a2:25:b2:5b:e8:d2:85:5b:5f:dc:04:fc:4f:b0: e9:08:9c:11:90:47:a0:a9:4a:d0:1c:fa:ad:c4:f5: ff:0b:6e:ec:fe:8b:86:02:f9:e6:0c:22:25:57:d8: cd:1f:c1:e6:8f:22:97:ab:6e:d2:9d:88:0a:c9:b7: b4:cc:fc:a3:d1:4f:4b:fb:3b:54:d7:d7:41:9b:10: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:81:2F:84:E5:BE:47:C0:DC:26:37:60:71:43:B8:0A:50:62:D8:11 X509v3 Authority Key Identifier: keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:80:8b:25:23:81:eb:4a:39:4f:f5:c6:4d:93:3e:ba:8b:4b: 38:3f:af:60:fc:3e:64:23:bd:16:4c:92:7e:20:7c:cb:4e:15: 38:89:a8:c6:25:35:74:ba:e8:53:11:bf:20:6a:97:e2:cb:80: cb:12:84:dd:fb:04:53:83:b7:10:7f:12:4a:b0:cd:76:f4:b8: a7:24:bf:bb:bd:ca:ee:18:15:bc:1c:91:e5:11:ca:f8:91:0e: cf:ce:b0:e8:ec:47:d0:11:97:7a:4f:8e:16:2f:8c:27:cc:7e: 28:4b:f4:96:7a:f3:30:ac:06:2e:00:6a:a7:ee:92:86:4d:69: 59:20:00:0a:bc:b1:f5:e4:e9:3a:35:4a:cd:e1:f6:18:01:58: 6e:36:83:fa:dc:00:db:44:d8:01:2c:34:b0:9f:92:e6:ef:ff: 9a:05:5e:e6:9d:6d:52:74:5f:59:70:e5:47:65:ba:ad:fe:75: bf:90:0f:ad:49:71:92:bf:8e:19:c1:32:3f:6c:c9:22:17:a1: a5:4e:51:73:7d:c8:e6:9d:a9:eb:6b:14:a8:41:a2:78:06:f3: 7c:65:ae:b4:0f:ba:f5:3c:7e:59:f4:42:26:1c:7c:bb:4d:2e: d6:62:52:6c:09:83:f9:65:aa:3c:97:77:da:1d:42:8e:84:4a: 0a:fb:bc:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNBDXzp4BvKASWXrqWTa3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOWM2NzI5ZTFlODk4OTk4NGRkODAyZDFhOTBlODljZTJm ZTM3M2MwHhcNMjUxMjIzMjEwMTIwWhcNMjUxMjI0MjEwMTIwWjAzMTEwLwYDVQQD Eyg1NTgxMmY4NGU1YmU0N2MwZGMyNjM3NjA3MTQzYjgwYTUwNjJkODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYLvMV4HGtrkjlUaX19TCrX4/jqt +o8I0GrwcPAoOgWKMxVgYdXRrTxh6J+TFJsXFk0BPIPSm3KIdTEM+3er7kKXcSuM tv19sjDEWXbv4jvVarCnRiF8up7IUzhN9uJvnt713tPLnd355pJzfCyp/xuYJQr/ PGWRxd9CLTlz/CsTHLgqRp9BFK4XqMfFJpcs3rW3UIDvvzJJCSYiwLaPR5olkOjq MZa5ywKKlb+YugSFVX35oiWyW+jShVtf3AT8T7DpCJwRkEegqUrQHPqtxPX/C27s /ouGAvnmDCIlV9jNH8HmjyKXq27SnYgKybe0zPyj0U9L+ztU19dBmxCugwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWBL4TlvkfA3CY3YHFDuApQYtgRMB8GA1UdIwQY MBaAFNqcZynh6JiZhN2ALRqQ6Jzi/jc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83NTVjNTUtYzRmNS00Y2I3LTg3MWQt NjljNjhlMmVmMjdkLzEvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC83NTVjNTUtYzRmNS00Y2I3LTg3MWQtNjljNjhlMmVmMjdk LzEvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4CLJSOB 60o5T/XGTZM+uotLOD+vYPw+ZCO9FkySfiB8y04VOImoxiU1dLroUxG/IGqX4suA yxKE3fsEU4O3EH8SSrDNdvS4pyS/u73K7hgVvByR5RHK+JEOz86w6OxH0BGXek+O Fi+MJ8x+KEv0lnrzMKwGLgBqp+6Shk1pWSAACryx9eTpOjVKzeH2GAFYbjaD+twA 20TYASw0sJ+S5u//mgVe5p1tUnRfWXDlR2W6rf51v5APrUlxkr+OGcEyP2zJIheh pU5Rc33I5p2p62sUqEGieAbzfGWutA+69Tx+WfRCJhx8u00u1mJSbAmD+WWqPJd3 2h1CjoRKCvu8Gg== -----END CERTIFICATE-----Generated at Wed Dec 24 02:56:42 2025 by rpki-client