This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json) Hash identifier: 73HmnXuVr+8kRf5egd56xRVOanYUp3Er1fwThg7gsyc= Subject key identifier: DD:88:53:4A:57:86:E0:45:2F:0E:95:D4:CE:85:83:49:68:35:3C:B2 Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2 Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2 Certificate serial: 019B3A218ED9AFB3E04A1F715CAE05F9E6EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft Manifest number: 04C5 Signing time: Sat 20 Dec 2025 05:00:36 +0000 Manifest this update: Sat 20 Dec 2025 05:00:36 +0000 Manifest next update: Sun 21 Dec 2025 05:00:36 +0000 Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: v3WRMlPlZXChl0tLtGZ8nC8oBFTmriq2rqCt3EjqLzk=) 2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=) 3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:8e:d9:af:b3:e0:4a:1f:71:5c:ae:05:f9:e6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2 Validity Not Before: Dec 20 05:00:36 2025 GMT Not After : Dec 21 05:00:36 2025 GMT Subject: CN=dd88534a5786e0452f0e95d4ce85834968353cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5f:7e:e7:1a:7b:30:ad:82:df:9c:63:24:84: 47:a3:c2:8f:30:69:43:a6:8d:30:f5:d7:9c:d6:57: db:66:fb:98:fc:3d:57:c8:a3:20:a2:25:5c:ac:b6: 9b:39:f5:38:6c:d0:33:48:6e:be:3c:b4:49:93:4f: 12:54:9d:fb:3e:2c:0f:54:97:86:37:13:de:07:32: 09:65:fe:ae:24:6e:69:31:30:2e:0f:03:f2:78:0d: 40:05:03:d9:9a:5b:26:49:1a:5b:f8:b1:66:7e:5c: 1f:90:58:ff:4d:6c:a9:b5:ab:9e:91:fb:1c:e4:38: 5a:74:16:b2:85:99:0f:80:18:cc:44:9a:b4:df:46: 49:44:04:73:11:7d:c3:80:a0:c4:9f:4f:b1:ca:e5: 53:3d:95:b9:8b:25:59:a7:1c:65:33:24:a4:52:9a: 24:bb:03:ea:ce:2e:e2:53:64:ac:41:84:73:be:9e: 40:e6:d3:44:32:54:02:66:9e:8b:62:5d:0f:fd:8d: 34:ae:86:dc:a3:e3:4a:fa:b4:dc:e0:26:1b:df:39: 1e:a1:6e:5e:f4:d2:e6:ea:33:23:60:b2:c4:5f:02: b4:f7:63:59:2f:c8:f9:4a:e3:0a:9b:6d:c7:76:75: 74:43:13:e5:08:33:e2:7c:43:13:96:88:a9:03:1b: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:88:53:4A:57:86:E0:45:2F:0E:95:D4:CE:85:83:49:68:35:3C:B2 X509v3 Authority Key Identifier: keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9f:82:49:82:67:96:35:80:98:ab:da:33:8d:6a:47:e2:66: 30:13:eb:f5:64:8a:18:86:be:19:a1:51:1b:5c:19:17:f9:52: dc:2b:24:21:73:7f:ae:26:a7:07:3a:96:9b:19:8f:84:3a:bb: bc:bc:1d:db:d3:8b:f7:dc:1c:68:f6:91:94:89:36:c4:ca:61: 9e:13:e3:d8:e6:81:92:a8:0e:70:67:2e:88:6a:04:81:70:a5: 5a:f1:b4:84:55:1a:cc:5f:53:de:6c:80:c9:9d:82:aa:c0:ab: 7c:80:7c:ab:3f:bc:f3:4e:97:fc:df:3b:49:ca:55:dc:4e:e3: c5:6e:9d:e8:f8:7c:64:67:bf:28:f6:1b:34:84:4c:a5:b2:3a: f6:1b:1b:18:c3:66:56:2e:b5:7e:2e:7e:8d:6b:5c:01:44:ca: 81:89:ac:70:a7:f9:c4:4b:38:e1:6b:e1:5b:07:ec:1a:b0:ff: ca:c2:78:ae:a0:be:80:8d:35:27:16:e5:61:3e:14:b7:31:5e: c7:56:82:c0:2b:22:29:f7:21:5f:c9:73:82:41:32:ad:21:c8: 58:c9:58:7a:6c:58:59:f0:41:c1:ed:34:f3:82:7f:01:9f:b8: f3:3f:44:18:77:fd:ae:4c:91:d6:63:18:81:fc:17:d6:2b:65: d1:a2:18:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IY7Zr7PgSh9xXK4F+ebrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTBkNGVlMDdmYzIxYzExMWQ2MzUyODRkYTdmYjE5ZmQ3 MDZjZTIwHhcNMjUxMjIwMDUwMDM2WhcNMjUxMjIxMDUwMDM2WjAzMTEwLwYDVQQD EyhkZDg4NTM0YTU3ODZlMDQ1MmYwZTk1ZDRjZTg1ODM0OTY4MzUzY2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk19+5xp7MK2C35xjJIRHo8KPMGlD po0w9dec1lfbZvuY/D1XyKMgoiVcrLabOfU4bNAzSG6+PLRJk08SVJ37PiwPVJeG NxPeBzIJZf6uJG5pMTAuDwPyeA1ABQPZmlsmSRpb+LFmflwfkFj/TWyptauekfsc 5DhadBayhZkPgBjMRJq030ZJRARzEX3DgKDEn0+xyuVTPZW5iyVZpxxlMySkUpok uwPqzi7iU2SsQYRzvp5A5tNEMlQCZp6LYl0P/Y00robco+NK+rTc4CYb3zkeoW5e 9NLm6jMjYLLEXwK092NZL8j5SuMKm23HdnV0QxPlCDPifEMTloipAxtBvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2IU0pXhuBFLw6V1M6Fg0loNTyyMB8GA1UdIwQY MBaAFNiQ1O4H/CHBEdY1KE2n+xn9cGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzIt MDZhODEwYWY4ZDM0LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzItMDZhODEwYWY4ZDM0 LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZ+CSYJn ljWAmKvaM41qR+JmMBPr9WSKGIa+GaFRG1wZF/lS3CskIXN/rianBzqWmxmPhDq7 vLwd29OL99wcaPaRlIk2xMphnhPj2OaBkqgOcGcuiGoEgXClWvG0hFUazF9T3myA yZ2CqsCrfIB8qz+8806X/N87ScpV3E7jxW6d6Ph8ZGe/KPYbNIRMpbI69hsbGMNm Vi61fi5+jWtcAUTKgYmscKf5xEs44WvhWwfsGrD/ysJ4rqC+gI01JxblYT4UtzFe x1aCwCsiKfchX8lzgkEyrSHIWMlYemxYWfBBwe0084J/AZ+48z9EGHf9rkyR1mMY gfwX1itl0aIYFA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:28:21 2025 by rpki-client