This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json) Hash identifier: +fvKHP6rgzx5ee+cHyoxIEs6R/A5meL82ESyf4Mmduk= Subject key identifier: F8:0B:C9:7E:E3:EC:7E:B4:C2:71:8C:BA:38:A8:2F:A6:B6:3D:5C:A1 Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87 Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087 Certificate serial: 019B3DC798EE9A9A0A9013653555A3612CCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 22:00:49 +0000 Manifest this update: Sat 20 Dec 2025 22:00:49 +0000 Manifest next update: Sun 21 Dec 2025 22:00:49 +0000 Files and hashes: 1: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: 6LnPFCXeGOIiyl9iG8ovCZS7bRMOc3gLMs8pnffSru8=) 2: ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa (hash: 0x7RKzsX7jR4DuJ9t+glZtV4k9Tiu2posJrN6U758NM=) 3: cJTD3IKsBKeCbDG4KiZEHnYFPTM.roa (hash: ufqwqkZa7S2iEhZdfjJxNYCun4AbNJ4X2aLuA4Ji7yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:98:ee:9a:9a:0a:90:13:65:35:55:a3:61:2c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087 Validity Not Before: Dec 20 22:00:49 2025 GMT Not After : Dec 21 22:00:49 2025 GMT Subject: CN=f80bc97ee3ec7eb4c2718cba38a82fa6b63d5ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:b5:cb:2f:36:40:19:4f:06:63:ad:6d:cc: ea:63:1e:89:ba:fb:79:2d:0f:94:ef:e1:93:9d:af: 8b:58:14:16:15:30:33:4b:8b:39:b5:e9:36:c1:a9: 35:14:71:9d:49:88:f2:a8:31:15:36:a6:5a:3d:d8: 65:f2:b7:24:a2:2f:af:6a:73:0f:0d:ad:96:ea:2d: 38:f0:66:36:ca:f7:f8:68:e8:01:b0:0e:0c:e2:19: 4e:6c:c8:cd:dd:71:9f:76:f8:56:15:84:b1:a8:66: 23:95:eb:00:f6:97:46:ab:b4:d1:93:24:3a:37:c2: db:49:31:b5:eb:38:bd:d6:6d:b0:18:79:1f:c9:cd: 1a:2c:5c:8d:5e:dd:fa:91:8c:e4:b8:0a:f3:60:85: 4b:f9:55:c7:20:49:45:f4:57:11:96:d4:bd:4d:d1: 86:f4:c8:e6:0d:21:9f:6f:d8:ab:ba:fa:9c:48:b9: a1:1b:c5:45:74:51:ba:1b:3a:48:e6:f4:c6:9a:08: 35:8d:69:86:5b:0a:ed:bd:4e:28:b3:b4:ed:45:3b: ae:50:3a:36:99:22:35:fb:a3:59:1a:89:43:6a:9f: 0a:d6:29:2a:90:85:ca:18:57:29:ce:a2:46:47:d9: 0a:ea:7a:86:ee:26:21:99:b2:79:b9:93:70:b4:94: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0B:C9:7E:E3:EC:7E:B4:C2:71:8C:BA:38:A8:2F:A6:B6:3D:5C:A1 X509v3 Authority Key Identifier: keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:53:c2:7c:41:22:94:5a:79:72:1a:39:fe:39:93:44:46:e8: 7f:e9:a1:db:32:f8:6d:e1:52:d3:f9:05:32:e4:fe:a1:f1:41: f9:aa:8f:db:17:8b:dc:c2:71:28:ac:b5:43:48:91:83:cc:2a: 16:71:6a:16:8d:2c:6e:76:20:f6:09:e3:e4:8d:90:e3:cb:ba: 50:b8:b3:67:c0:df:c8:98:f9:79:01:b2:de:f4:ee:45:91:2a: 1a:f7:d0:f6:ff:0e:fd:fa:3e:da:5c:78:78:f6:bb:9b:8d:2d: ea:35:9c:42:c3:d4:5b:3a:9a:4c:af:c9:28:8f:c8:e4:e6:51: f3:a7:d3:42:34:f6:57:5a:41:48:4f:fa:64:24:89:e0:5b:93: 62:9c:e6:d1:40:7c:4f:57:2d:92:be:16:46:0d:fd:16:4b:95: 5e:bf:13:59:9c:f7:37:5c:08:74:c4:bd:c5:b4:9e:f3:38:7b: 79:54:60:e9:99:ce:e5:9e:c6:16:e4:51:85:36:fc:0a:0a:35: 09:16:2b:03:5d:9a:39:6d:a3:ef:d9:54:29:94:a3:2b:53:4c: d3:2a:78:4c:97:92:cf:4e:f5:f4:dd:b3:fd:38:f3:4f:f8:97: cf:db:0b:24:55:c9:f4:a9:88:2f:13:ba:ef:68:81:0d:dd:00: fc:28:ba:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x5jumpoKkBNlNVWjYSzLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDI0YjljNjNkYjVjMWExY2Y0YzU1ODFkYmU1YjM4MWNi OTUwODcwHhcNMjUxMjIwMjIwMDQ5WhcNMjUxMjIxMjIwMDQ5WjAzMTEwLwYDVQQD EyhmODBiYzk3ZWUzZWM3ZWI0YzI3MThjYmEzOGE4MmZhNmI2M2Q1Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpe1yy82QBlPBmOtbczqYx6Juvt5 LQ+U7+GTna+LWBQWFTAzS4s5tek2wak1FHGdSYjyqDEVNqZaPdhl8rckoi+vanMP Da2W6i048GY2yvf4aOgBsA4M4hlObMjN3XGfdvhWFYSxqGYjlesA9pdGq7TRkyQ6 N8LbSTG16zi91m2wGHkfyc0aLFyNXt36kYzkuArzYIVL+VXHIElF9FcRltS9TdGG 9MjmDSGfb9iruvqcSLmhG8VFdFG6GzpI5vTGmgg1jWmGWwrtvU4os7TtRTuuUDo2 mSI1+6NZGolDap8K1ikqkIXKGFcpzqJGR9kK6nqG7iYhmbJ5uZNwtJSRwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgLyX7j7H60wnGMujioL6a2PVyhMB8GA1UdIwQY MBaAFNoCS5xj21waHPTFWB2+WzgcuVCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYt NzEyYjFhNzk2OGU2LzEvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYtNzEyYjFhNzk2OGU2 LzEvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1PCfEEi lFp5cho5/jmTREbof+mh2zL4beFS0/kFMuT+ofFB+aqP2xeL3MJxKKy1Q0iRg8wq FnFqFo0sbnYg9gnj5I2Q48u6ULizZ8DfyJj5eQGy3vTuRZEqGvfQ9v8O/fo+2lx4 ePa7m40t6jWcQsPUWzqaTK/JKI/I5OZR86fTQjT2V1pBSE/6ZCSJ4FuTYpzm0UB8 T1ctkr4WRg39FkuVXr8TWZz3N1wIdMS9xbSe8zh7eVRg6ZnO5Z7GFuRRhTb8Cgo1 CRYrA12aOW2j79lUKZSjK1NM0yp4TJeSz0719N2z/TjzT/iXz9sLJFXJ9KmILxO6 72iBDd0A/Ci6/A== -----END CERTIFICATE-----Generated at Sun Dec 21 03:00:32 2025 by rpki-client