This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft File: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json) Hash identifier: FRS32UVXGEhRJ6DdvQ9N9Yj+ZMWlwboDXJADJmNBRWA= Subject key identifier: 7F:62:0C:49:BB:68:E8:53:7F:66:CD:E1:8A:57:41:47:F0:D2:03:ED Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96 Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096 Certificate serial: 019B3BA2BD102736D0007AD4FFDDD0BAA60C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft Manifest number: 0C8E Signing time: Sat 20 Dec 2025 12:01:19 +0000 Manifest this update: Sat 20 Dec 2025 12:01:19 +0000 Manifest next update: Sun 21 Dec 2025 12:01:19 +0000 Files and hashes: 1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: 4/ZuHNqxOYHlbSoGRThY0Kz/txuoWARcOi0Yrnp3BSo=) 2: IdU9T1FkI4A5QGWSCJhjbXvJUH8.roa (hash: oWd/kpimW/XKu4I8ZbE0KWw8XTvLyveRYZw0B6kosK4=) 3: dRyK6fyOLluuno6mdLfm9I8N5cU.roa (hash: hGLM1rnaqR4GcFlhsxhGDSd143ODBHpnIFqXniXaJBo=) 4: oQAGdFifd-TKFIBS06405IGsyvA.roa (hash: zpSW+ojYEzYzrGwuoKq30ePtiLpag8R8YWj5wxmdW5A=) 5: omEKk6HfpuKW0m6N-9CapGLlA_o.roa (hash: KyIBEH08U3tFJ8Ty4CJ5NL0S9/Sl8DxHoRzlmOSkNDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:bd:10:27:36:d0:00:7a:d4:ff:dd:d0:ba:a6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096 Validity Not Before: Dec 20 12:01:19 2025 GMT Not After : Dec 21 12:01:19 2025 GMT Subject: CN=7f620c49bb68e8537f66cde18a574147f0d203ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:6e:8b:48:1a:aa:ef:cb:b4:06:50:fc:1d: dd:34:d1:c4:f5:67:09:dd:a9:8f:0b:c2:3e:12:f5: f8:d6:da:e4:6f:2f:79:f6:0a:45:97:45:67:aa:ea: d5:5c:3c:de:85:f1:f3:69:8d:b1:71:0f:83:62:89: 36:9d:7f:19:92:3d:40:ca:52:35:bd:e0:b3:1d:c1: eb:bb:86:e0:e0:d5:4f:62:dc:2a:13:68:e3:e1:45: 32:8c:dc:89:bf:09:f1:64:43:57:00:f1:1e:6b:db: 93:7e:d1:7d:08:b5:9a:d8:a8:9d:9c:bd:f2:3d:25: 2f:93:b1:d8:86:63:db:bf:e5:31:89:96:c5:9f:bc: 08:42:e1:8c:b8:f1:1d:35:d7:ba:06:2c:e2:ce:35: 79:24:dc:db:1e:31:7e:91:c5:ce:0f:e3:dd:fb:ae: d6:19:2f:40:07:0a:28:9b:a6:3e:78:0f:d5:36:30: ad:29:ab:67:d4:df:c8:71:f5:8e:f8:c7:27:dc:31: 27:24:13:cd:cf:7a:d8:21:21:aa:07:97:35:45:b0: f5:e7:d8:f3:92:79:ef:15:93:f3:b7:c8:6c:89:f0: 90:cc:d8:52:85:84:b1:32:a1:27:f5:cd:98:54:68: 73:75:5c:f0:29:23:b0:7d:82:d8:c1:49:59:a7:ea: 59:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:62:0C:49:BB:68:E8:53:7F:66:CD:E1:8A:57:41:47:F0:D2:03:ED X509v3 Authority Key Identifier: keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c6:1b:7b:6b:c1:f8:c9:0b:b2:f1:0d:e0:2a:a9:4d:29:e8: a9:52:a9:0a:5f:d2:0b:21:9d:b6:ed:98:19:c3:e2:ff:4b:b6: 27:98:26:ca:9b:c8:49:d2:ed:a1:be:8d:91:d8:a1:da:34:cc: 1b:e0:1d:ec:c3:6a:74:36:99:f7:9c:5d:5c:1e:b6:f4:d3:d5: 07:49:37:68:99:d5:c2:fa:74:b9:75:2d:bf:54:8d:11:84:1f: ec:7c:e0:ec:f8:b6:f9:13:5d:60:ae:3b:a3:5d:7f:d1:8e:eb: fd:ca:78:14:41:d8:47:38:1d:d3:f4:de:60:f9:ff:79:6a:9b: f7:6e:7b:18:09:f7:e4:27:1f:a5:fb:5f:42:4d:e5:2e:72:88: 06:81:a2:59:9c:cb:67:0b:a5:c2:ac:4c:2a:ee:01:00:b8:f7: 62:f0:be:32:f6:07:b2:6a:ad:bb:89:71:f5:61:fa:b2:92:7a: 2a:df:3c:5d:d2:6e:17:d7:20:48:e9:f1:dd:06:cd:43:fd:56: 32:0f:4c:58:3e:78:79:7c:50:45:45:d8:60:58:cd:9a:d4:2b: 70:d1:be:c1:6f:55:c6:af:01:ca:78:59:01:20:8e:99:18:2e: 51:3c:02:7d:70:b3:f9:0b:6e:d4:d5:da:d0:1a:70:a9:ac:43: 9a:0a:09:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7or0QJzbQAHrU/93QuqYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDU4OWRjZTYzOTgxODcwYTE4NTA5MDZjOGMyZDFkOTY3 NDAwOTYwHhcNMjUxMjIwMTIwMTE5WhcNMjUxMjIxMTIwMTE5WjAzMTEwLwYDVQQD Eyg3ZjYyMGM0OWJiNjhlODUzN2Y2NmNkZTE4YTU3NDE0N2YwZDIwM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEZui0gaqu/LtAZQ/B3dNNHE9WcJ 3amPC8I+EvX41trkby959gpFl0VnqurVXDzehfHzaY2xcQ+DYok2nX8Zkj1AylI1 veCzHcHru4bg4NVPYtwqE2jj4UUyjNyJvwnxZENXAPEea9uTftF9CLWa2KidnL3y PSUvk7HYhmPbv+UxiZbFn7wIQuGMuPEdNde6BizizjV5JNzbHjF+kcXOD+Pd+67W GS9ABwoom6Y+eA/VNjCtKatn1N/IcfWO+Mcn3DEnJBPNz3rYISGqB5c1RbD159jz knnvFZPzt8hsifCQzNhShYSxMqEn9c2YVGhzdVzwKSOwfYLYwUlZp+pZgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9iDEm7aOhTf2bN4YpXQUfw0gPtMB8GA1UdIwQY MBaAFNoFidzmOYGHChhQkGyMLR2WdACWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYt MTRlM2MyMDE3OTY5LzEvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYtMTRlM2MyMDE3OTY5 LzEvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMYbe2vB +MkLsvEN4CqpTSnoqVKpCl/SCyGdtu2YGcPi/0u2J5gmypvISdLtob6Nkdih2jTM G+Ad7MNqdDaZ95xdXB629NPVB0k3aJnVwvp0uXUtv1SNEYQf7Hzg7Pi2+RNdYK47 o11/0Y7r/cp4FEHYRzgd0/TeYPn/eWqb9257GAn35CcfpftfQk3lLnKIBoGiWZzL ZwulwqxMKu4BALj3YvC+MvYHsmqtu4lx9WH6spJ6Kt88XdJuF9cgSOnx3QbNQ/1W Mg9MWD54eXxQRUXYYFjNmtQrcNG+wW9Vxq8BynhZASCOmRguUTwCfXCz+Qtu1NXa 0BpwqaxDmgoJSg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:06:57 2025 by rpki-client