This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json) Hash identifier: cMgH35Rqht513A6jN11jgRUwDh3D3fCjgQ2V4FizuiI= Subject key identifier: 09:9A:9E:22:80:40:6B:F3:44:F5:3C:C3:F2:4C:D7:3E:9A:18:55:5C Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32 Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732 Certificate serial: 019B3CB4F7004A85367F52EF5AC1432978BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 17:00:51 +0000 Manifest this update: Sat 20 Dec 2025 17:00:51 +0000 Manifest next update: Sun 21 Dec 2025 17:00:51 +0000 Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=) 2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: U5W5e84jJlM22CKAcMJUn2+PQNTUkTZfktkYsYAtRUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f7:00:4a:85:36:7f:52:ef:5a:c1:43:29:78:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732 Validity Not Before: Dec 20 17:00:51 2025 GMT Not After : Dec 21 17:00:51 2025 GMT Subject: CN=099a9e2280406bf344f53cc3f24cd73e9a18555c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:e9:90:91:7d:be:26:d9:95:37:ba:0e:fd: b5:2b:1d:4e:82:38:12:67:80:02:c2:aa:4c:2e:d0: 74:b9:a3:8d:0f:72:9a:a1:12:06:4b:cd:fb:38:88: c8:87:73:47:ff:7d:1c:75:79:b9:15:46:79:3e:63: 15:bc:76:59:f3:d9:ee:bc:d0:a5:84:57:d5:21:47: 52:7a:c8:21:a4:4c:5b:3f:54:ef:d1:1c:30:da:9a: 13:74:5c:24:06:0e:10:47:60:68:94:0c:4b:2d:a0: 2f:6c:b6:78:af:f0:79:31:23:85:fb:2b:e9:81:17: 4f:af:36:23:54:fe:1c:3a:66:25:38:58:27:18:41: 4f:4e:53:1c:cd:e3:2c:19:2d:92:ba:88:80:10:b3: 0c:f4:55:c8:1f:7d:bd:b5:38:d7:03:c8:1c:85:36: f7:bc:81:84:04:8f:b0:03:57:c3:48:5a:8c:ea:e0: cf:d0:fb:d0:bd:7d:98:3a:29:1f:ef:62:71:4f:81: 85:c4:eb:b4:73:48:26:a5:00:6c:60:03:22:66:3f: b9:1c:53:f4:98:5a:d0:77:d1:6a:77:af:b1:6f:26: 53:2a:90:77:6c:ad:dc:d0:4f:5c:f4:35:3a:e5:f6: fa:fb:ab:1b:58:08:a3:6c:90:da:51:6e:1b:26:cf: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9A:9E:22:80:40:6B:F3:44:F5:3C:C3:F2:4C:D7:3E:9A:18:55:5C X509v3 Authority Key Identifier: keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:60:66:26:df:7e:41:8b:d3:a9:ae:24:3e:7d:cd:b4:b6:f4: 85:97:20:28:16:a2:2f:a6:ef:5e:37:a6:fc:01:33:cc:1c:24: bd:ea:57:e2:f1:14:4d:77:d4:a3:87:fb:9d:93:72:30:a0:73: 77:81:0b:ce:53:55:06:34:b4:16:87:7d:59:c5:14:93:e1:0a: 5e:e6:2e:0d:31:bc:d6:62:2d:9e:4e:73:0c:a9:b1:f1:ca:35: 40:a4:2f:eb:6c:1c:38:6a:df:ac:03:a1:fe:df:c9:ed:e1:ee: 7a:8b:1d:81:49:23:78:86:6b:7d:f1:56:da:4c:67:03:d1:4e: 0f:e2:99:32:cc:11:50:db:8c:fc:cd:61:84:c2:7b:29:04:6c: 86:a1:9d:7f:b4:dd:85:7f:f8:cc:b9:27:0c:c6:bb:30:d9:c6: d1:4d:06:20:c0:ac:0d:be:5f:7a:f8:62:a8:13:83:2c:ba:fd: 7e:32:25:86:ee:71:88:69:4b:36:3c:ae:1c:9e:75:51:28:56: c5:77:0e:84:3c:ef:ad:c0:bb:b9:34:3d:d5:c9:23:29:5e:fb: 49:4d:41:3d:dd:04:1e:d8:52:c7:3f:c1:7d:2c:19:34:b1:df: 46:3d:e2:fb:f4:06:88:f2:1e:5f:b6:4d:a5:ab:f5:b0:36:c6: 75:e4:22:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPcASoU2f1LvWsFDKXi+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNjQ5NzlhYWVkNGU3ODhlNDUxMGVkZjhiNjk2YmQ5NmNh Yzc3MzIwHhcNMjUxMjIwMTcwMDUxWhcNMjUxMjIxMTcwMDUxWjAzMTEwLwYDVQQD EygwOTlhOWUyMjgwNDA2YmYzNDRmNTNjYzNmMjRjZDczZTlhMTg1NTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod3pkJF9vibZlTe6Dv21Kx1OgjgS Z4ACwqpMLtB0uaOND3KaoRIGS837OIjIh3NH/30cdXm5FUZ5PmMVvHZZ89nuvNCl hFfVIUdSesghpExbP1Tv0Rww2poTdFwkBg4QR2BolAxLLaAvbLZ4r/B5MSOF+yvp gRdPrzYjVP4cOmYlOFgnGEFPTlMczeMsGS2SuoiAELMM9FXIH329tTjXA8gchTb3 vIGEBI+wA1fDSFqM6uDP0PvQvX2YOikf72JxT4GFxOu0c0gmpQBsYAMiZj+5HFP0 mFrQd9Fqd6+xbyZTKpB3bK3c0E9c9DU65fb6+6sbWAijbJDaUW4bJs9cPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmaniKAQGvzRPU8w/JM1z6aGFVcMB8GA1UdIwQY MBaAFL9kl5qu1OeI5FEO34tpa9lsrHcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84Zjc4OTItN2Y3ZC00OWRiLWE5MTIt MTMzZjg1OTk0YjFiLzEvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84Zjc4OTItN2Y3ZC00OWRiLWE5MTItMTMzZjg1OTk0YjFi LzEvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWBmJt9+ QYvTqa4kPn3NtLb0hZcgKBaiL6bvXjem/AEzzBwkvepX4vEUTXfUo4f7nZNyMKBz d4ELzlNVBjS0Fod9WcUUk+EKXuYuDTG81mItnk5zDKmx8co1QKQv62wcOGrfrAOh /t/J7eHueosdgUkjeIZrffFW2kxnA9FOD+KZMswRUNuM/M1hhMJ7KQRshqGdf7Td hX/4zLknDMa7MNnG0U0GIMCsDb5fevhiqBODLLr9fjIlhu5xiGlLNjyuHJ51UShW xXcOhDzvrcC7uTQ91ckjKV77SU1BPd0EHthSxz/BfSwZNLHfRj3i+/QGiPIeX7ZN pav1sDbGdeQi4Q== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:48 2025 by rpki-client