This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json) Hash identifier: GG3bku6FdZLueR9BTrJ8LpOoj9iqoffz3/fqfBNmlrI= Subject key identifier: F6:58:95:25:C6:A1:44:5C:CD:B1:1C:9D:E4:7F:A5:94:D5:7F:3D:7F Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40 Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140 Certificate serial: 019B6DA1C323F420183701872EA6818C56DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft Manifest number: 0D80 Signing time: Tue 30 Dec 2025 05:01:16 +0000 Manifest this update: Tue 30 Dec 2025 05:01:16 +0000 Manifest next update: Wed 31 Dec 2025 05:01:16 +0000 Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: ThXQKPXCwoAPKvP4Z06dkAImPOnEGh0U9vbJq8w3XHs=) 2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 05:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:c3:23:f4:20:18:37:01:87:2e:a6:81:8c:56:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140 Validity Not Before: Dec 30 05:01:16 2025 GMT Not After : Dec 31 05:01:16 2025 GMT Subject: CN=f6589525c6a1445ccdb11c9de47fa594d57f3d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:aa:c1:bd:7d:a4:01:06:b9:68:ee:73:77: b7:a1:b5:bb:c2:ea:2c:b8:70:c8:92:75:46:ea:f4: a5:c2:85:94:10:a6:45:88:48:e2:17:bf:79:ee:d7: 76:e1:22:a7:38:28:b7:da:f0:74:a2:de:57:4a:85: 55:48:69:a8:80:cf:d1:67:11:76:d5:53:01:39:86: 87:df:30:20:d5:df:38:01:c5:46:94:de:86:ad:0b: c1:12:79:f8:45:a9:3d:69:78:f1:a3:a8:36:18:f2: d4:ab:60:00:ad:c0:2b:77:e8:6c:3b:ac:be:e3:f0: bf:cb:59:38:08:af:28:2a:1d:f3:74:74:42:10:13: 37:8e:4e:18:e3:09:e1:1c:fd:82:55:ef:89:7f:ba: 0f:ae:72:e6:67:c8:37:79:42:0f:74:01:2d:0b:9b: 72:64:3a:6b:1f:9b:cb:57:39:a5:45:2d:26:6d:c6: 67:aa:f3:3d:68:f6:b3:6a:d8:1d:7e:b9:8d:39:11: 13:4e:66:22:30:7e:6d:78:0a:30:37:31:6c:e9:ab: f9:cf:e9:24:ed:80:b8:f4:44:e1:01:18:f9:fe:0e: 3f:5f:c5:67:f7:a0:25:16:bb:5e:21:51:16:52:b3: 98:af:06:e4:5e:5e:69:f3:9d:f2:ad:a0:dd:4d:c0: f9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:58:95:25:C6:A1:44:5C:CD:B1:1C:9D:E4:7F:A5:94:D5:7F:3D:7F X509v3 Authority Key Identifier: keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7a:ce:6f:42:a7:75:02:14:88:17:fb:c1:e2:8c:cc:82:14: 0d:ea:e1:1a:f4:1f:0c:55:04:a5:42:b9:fe:07:84:ee:f2:ee: 2d:95:c5:03:a0:56:2c:76:44:d3:69:55:40:70:16:c5:dd:38: fb:b1:68:90:ba:22:c6:cd:3a:48:b9:a5:c5:92:e4:32:85:b8: 95:c1:32:e7:25:08:8b:ab:91:c2:a3:bb:c4:c9:98:5e:e4:29: cf:fb:fa:db:aa:14:3d:0f:df:6c:77:22:c1:5f:ee:e4:99:a6: 4e:3a:57:02:1b:a9:1b:46:fe:13:04:e0:42:9c:fa:7b:88:c8: fa:e2:73:c0:25:4d:f9:df:ff:df:49:b2:91:c0:fa:15:e0:e3: 2b:e4:37:ad:de:32:ba:0b:1f:ba:49:27:2f:7b:77:cf:78:ef: 6c:29:ea:56:a7:4c:2c:4f:c6:36:d6:05:1e:51:42:84:2a:00: ca:d3:20:e8:b0:d5:61:8e:e1:a8:d6:72:82:1c:4b:4a:1f:e6: 1a:17:d3:3c:9f:b6:bb:d8:fe:35:c8:45:dc:f1:3d:9c:26:ea: 38:7b:59:d7:44:34:4c:8b:07:05:82:08:d4:18:6d:27:0c:ce: 94:64:25:54:e4:70:b3:34:e6:85:5a:2e:ce:75:95:1b:c5:89: b0:bd:47:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttocMj9CAYNwGHLqaBjFbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzAwOTM2ZmI1MDBhNzQ1NjQ0MGFiYThiM2I4YWQ1M2M5 ZjAxNDAwHhcNMjUxMjMwMDUwMTE2WhcNMjUxMjMxMDUwMTE2WjAzMTEwLwYDVQQD EyhmNjU4OTUyNWM2YTE0NDVjY2RiMTFjOWRlNDdmYTU5NGQ1N2YzZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUyqwb19pAEGuWjuc3e3obW7wuos uHDIknVG6vSlwoWUEKZFiEjiF7957td24SKnOCi32vB0ot5XSoVVSGmogM/RZxF2 1VMBOYaH3zAg1d84AcVGlN6GrQvBEnn4Rak9aXjxo6g2GPLUq2AArcArd+hsO6y+ 4/C/y1k4CK8oKh3zdHRCEBM3jk4Y4wnhHP2CVe+Jf7oPrnLmZ8g3eUIPdAEtC5ty ZDprH5vLVzmlRS0mbcZnqvM9aPazatgdfrmNORETTmYiMH5teAowNzFs6av5z+kk 7YC49EThARj5/g4/X8Vn96AlFrteIVEWUrOYrwbkXl5p853yraDdTcD5IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZYlSXGoURczbEcneR/pZTVfz1/MB8GA1UdIwQY MBaAFNgwCTb7UAp0VkQKuos7itU8nwFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzkt YWRkY2Q4NTUyMDI2LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzktYWRkY2Q4NTUyMDI2 LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanrOb0Kn dQIUiBf7weKMzIIUDerhGvQfDFUEpUK5/geE7vLuLZXFA6BWLHZE02lVQHAWxd04 +7FokLoixs06SLmlxZLkMoW4lcEy5yUIi6uRwqO7xMmYXuQpz/v626oUPQ/fbHci wV/u5JmmTjpXAhupG0b+EwTgQpz6e4jI+uJzwCVN+d//30mykcD6FeDjK+Q3rd4y ugsfukknL3t3z3jvbCnqVqdMLE/GNtYFHlFChCoAytMg6LDVYY7hqNZyghxLSh/m GhfTPJ+2u9j+NchF3PE9nCbqOHtZ10Q0TIsHBYII1BhtJwzOlGQlVORwszTmhVou znWVG8WJsL1HxQ== -----END CERTIFICATE-----Generated at Tue Dec 30 14:57:44 2025 by rpki-client