This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json) Hash identifier: sAsIdrKZWs0PDFRsKN/hvGZ/Wa/FEhL5DpQ/8xGDQAo= Subject key identifier: F3:4E:07:B0:1B:33:45:BD:C8:2E:92:B6:76:ED:8F:C6:7C:BF:2B:73 Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87 Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087 Certificate serial: 019B4B4CB99470CD12E4CAFD3E62809A8A0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 13:01:17 +0000 Manifest this update: Tue 23 Dec 2025 13:01:17 +0000 Manifest next update: Wed 24 Dec 2025 13:01:17 +0000 Files and hashes: 1: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: 9makFRgOlLat6YVYrSHVBHNGoUxazQ9zaCYuIJWEpaE=) 2: ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa (hash: 0x7RKzsX7jR4DuJ9t+glZtV4k9Tiu2posJrN6U758NM=) 3: cJTD3IKsBKeCbDG4KiZEHnYFPTM.roa (hash: ufqwqkZa7S2iEhZdfjJxNYCun4AbNJ4X2aLuA4Ji7yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:b9:94:70:cd:12:e4:ca:fd:3e:62:80:9a:8a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087 Validity Not Before: Dec 23 13:01:17 2025 GMT Not After : Dec 24 13:01:17 2025 GMT Subject: CN=f34e07b01b3345bdc82e92b676ed8fc67cbf2b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:71:be:61:a8:14:4e:62:e7:8b:44:30:b7:52: d5:81:47:f4:b1:24:4a:48:a8:c8:c9:2c:bc:b7:1a: f9:16:df:4d:62:21:70:ce:e1:ce:c1:a0:4b:f7:de: c7:37:0b:69:b4:a4:95:dd:eb:fa:04:33:6d:5a:41: 05:c0:15:4c:1f:f1:59:8b:06:18:ce:d7:3c:1f:cf: e8:ba:1b:80:14:ad:ec:b8:2c:2a:50:b4:83:df:ac: 55:03:f0:5a:d7:f8:0c:64:7b:65:57:31:99:62:04: fa:b6:76:63:76:42:18:42:9b:ea:21:d4:37:07:bd: 72:3e:48:94:e1:aa:0f:57:90:11:0b:95:26:82:3b: e6:13:bf:ad:ad:2f:1f:56:3c:89:11:b0:b7:d3:43: bc:62:df:e0:ed:d3:9b:58:2f:7f:37:34:d9:76:1d: ad:b2:81:9e:f8:eb:8f:dd:3e:d1:0b:b5:08:d9:75: dd:7e:86:35:ae:fa:27:c4:b0:9c:ef:45:e0:d5:d7: 33:3d:95:85:1c:ac:6f:60:b7:7a:d9:af:ac:c9:73: 9b:07:35:e1:d5:d2:2f:f9:44:c7:06:b2:ea:4e:a2: 70:ac:58:c7:f8:34:b2:7a:55:e0:47:15:56:32:38: 4c:9a:bf:c6:d0:34:ca:f1:8d:93:08:fe:f4:22:fc: 37:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4E:07:B0:1B:33:45:BD:C8:2E:92:B6:76:ED:8F:C6:7C:BF:2B:73 X509v3 Authority Key Identifier: keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e1:80:cf:2f:d8:7a:9e:48:18:4b:f0:a5:bb:f6:9f:62:1d: 92:b6:51:60:c3:e0:44:c4:17:33:a3:7c:be:58:c6:a4:37:5d: 08:53:60:bd:97:04:34:e7:f8:6d:78:7f:4a:40:73:f9:35:22: d0:9c:bd:38:e9:3a:27:f0:a2:50:5e:f8:ac:94:91:e9:c4:8b: 1f:8b:94:8d:08:3e:58:9f:74:ba:2e:90:45:fc:46:8b:18:58: 98:be:56:4a:ce:9e:fe:33:4a:aa:3d:a2:d7:11:98:ae:6a:0c: e1:56:df:91:d1:77:88:a8:58:3b:df:5a:f1:77:f2:94:f4:60: fe:74:07:78:10:65:fc:e5:5c:78:c2:0c:8f:0a:8a:a7:9c:44: b7:12:f4:14:6a:0f:aa:91:37:13:45:e9:cc:4b:eb:56:b7:99: fa:a8:28:d8:1a:50:a3:5f:de:e5:fd:fb:aa:04:23:d4:51:36: 95:41:b6:42:7c:61:b2:c4:75:51:dc:d0:c7:d1:34:49:df:fd: 22:3a:81:7c:d3:03:04:d5:0c:a1:88:74:cf:ba:d1:da:ca:40: c0:dc:47:c5:c3:9f:f5:52:48:79:3c:a4:ea:65:2a:26:a4:ab: fd:68:85:ae:75:32:21:8d:ad:e2:9e:a9:76:6e:df:39:c7:28: 69:d8:e7:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTLmUcM0S5Mr9PmKAmooKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDI0YjljNjNkYjVjMWExY2Y0YzU1ODFkYmU1YjM4MWNi OTUwODcwHhcNMjUxMjIzMTMwMTE3WhcNMjUxMjI0MTMwMTE3WjAzMTEwLwYDVQQD EyhmMzRlMDdiMDFiMzM0NWJkYzgyZTkyYjY3NmVkOGZjNjdjYmYyYjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3G+YagUTmLni0Qwt1LVgUf0sSRK SKjIySy8txr5Ft9NYiFwzuHOwaBL997HNwtptKSV3ev6BDNtWkEFwBVMH/FZiwYY ztc8H8/ouhuAFK3suCwqULSD36xVA/Ba1/gMZHtlVzGZYgT6tnZjdkIYQpvqIdQ3 B71yPkiU4aoPV5ARC5UmgjvmE7+trS8fVjyJEbC300O8Yt/g7dObWC9/NzTZdh2t soGe+OuP3T7RC7UI2XXdfoY1rvonxLCc70Xg1dczPZWFHKxvYLd62a+syXObBzXh 1dIv+UTHBrLqTqJwrFjH+DSyelXgRxVWMjhMmr/G0DTK8Y2TCP70Ivw3ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNOB7AbM0W9yC6Stnbtj8Z8vytzMB8GA1UdIwQY MBaAFNoCS5xj21waHPTFWB2+WzgcuVCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYt NzEyYjFhNzk2OGU2LzEvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYtNzEyYjFhNzk2OGU2 LzEvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreGAzy/Y ep5IGEvwpbv2n2IdkrZRYMPgRMQXM6N8vljGpDddCFNgvZcENOf4bXh/SkBz+TUi 0Jy9OOk6J/CiUF74rJSR6cSLH4uUjQg+WJ90ui6QRfxGixhYmL5WSs6e/jNKqj2i 1xGYrmoM4VbfkdF3iKhYO99a8XfylPRg/nQHeBBl/OVceMIMjwqKp5xEtxL0FGoP qpE3E0XpzEvrVreZ+qgo2BpQo1/e5f37qgQj1FE2lUG2QnxhssR1UdzQx9E0Sd/9 IjqBfNMDBNUMoYh0z7rR2spAwNxHxcOf9VJIeTyk6mUqJqSr/WiFrnUyIY2t4p6p dm7fOccoadjnJQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:57:19 2025 by rpki-client