This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json) Hash identifier: EB2Yc8DcDteOiwDLqAHBoEH14Oe54suEgd3T9mxCDq0= Subject key identifier: FB:38:31:81:43:FB:FB:79:08:32:02:48:29:ED:A7:CA:42:04:DA:95 Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40 Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140 Certificate serial: 019B3F47E115AA7E546FC6BC8CA2A187E000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft Manifest number: 0D68 Signing time: Sun 21 Dec 2025 05:00:33 +0000 Manifest this update: Sun 21 Dec 2025 05:00:33 +0000 Manifest next update: Mon 22 Dec 2025 05:00:33 +0000 Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: Sre5un/hrlrAcYJZy4VjcYkmu8ZkJLIGoj79L1g7xX0=) 2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:e1:15:aa:7e:54:6f:c6:bc:8c:a2:a1:87:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140 Validity Not Before: Dec 21 05:00:33 2025 GMT Not After : Dec 22 05:00:33 2025 GMT Subject: CN=fb38318143fbfb790832024829eda7ca4204da95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:61:58:70:ba:b4:8c:5c:76:5e:fb:ea:34: 56:bb:e0:b5:fc:5b:99:3b:8d:dd:fe:4e:b8:69:9e: 2b:9a:fd:64:c2:bb:0f:62:08:d7:c2:4c:13:c6:85: d9:fe:62:11:e1:be:a4:3b:fe:90:4c:4a:4f:70:da: 87:97:2d:f2:1e:e9:88:1f:de:cd:a2:9e:4a:21:60: 7c:5b:f8:0c:f6:4e:ed:12:11:95:8e:75:c1:0e:7c: 0c:d5:ff:91:8d:93:ef:6c:0b:87:c4:e5:d5:85:31: 84:a8:64:b4:74:89:97:94:dd:6b:12:f4:f2:29:63: 05:1b:06:c4:ec:ec:9b:7d:0c:da:57:c5:a3:d5:4b: 84:af:78:95:d9:68:be:8e:f6:32:f2:ad:a9:f9:a7: 09:ee:99:1f:9c:4d:19:5f:07:83:0e:6b:7f:cd:06: c5:b9:59:1d:77:8f:fb:46:87:89:94:77:30:d3:74: e8:78:41:a4:05:39:54:56:35:2e:ea:66:c8:6f:ca: 77:90:a8:6f:c6:a7:f7:c0:9e:77:51:05:2c:4a:f6: b5:dd:0d:dc:4f:be:22:8e:b9:c7:06:05:6e:87:cf: 7e:45:ad:8a:ed:3f:e4:af:3e:b8:f9:30:d3:86:09: d4:13:c6:70:c2:6a:9a:1a:0b:da:5d:34:cc:2f:5e: 23:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:38:31:81:43:FB:FB:79:08:32:02:48:29:ED:A7:CA:42:04:DA:95 X509v3 Authority Key Identifier: keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:91:b4:d1:bf:5a:33:b3:61:75:75:8c:8e:c0:19:d5:ce:36: db:5b:88:1c:2d:91:08:46:b8:3a:e1:12:47:43:d1:d5:09:ef: 11:50:ba:6e:13:0b:a1:d6:88:8a:6d:0c:4a:d9:ce:a0:ca:be: d9:ba:52:86:37:e5:90:7a:4a:ab:0b:f2:f5:d3:ce:87:99:87: 8d:82:7a:26:6e:44:6c:04:9f:fa:19:37:5b:8d:82:ed:22:09: 6e:3c:26:b3:af:9a:fd:f2:3f:1a:c8:a5:72:21:48:a4:b6:98: 90:a4:aa:cb:e9:68:5d:95:4f:66:04:50:00:54:1e:24:1f:3a: bb:08:72:6b:41:14:11:fb:e8:cf:89:32:0f:8c:0e:b3:05:2f: 36:da:d1:fc:e6:42:8b:5b:77:32:02:57:c3:89:36:d3:c5:a0: 55:13:97:33:86:b9:02:6a:c3:7a:2e:3a:8e:f3:07:cb:ec:ea: 7d:ed:00:f9:62:b1:a0:69:8a:b8:10:fc:59:45:60:d9:09:8a: 4e:7c:bd:07:6e:c7:08:fb:a0:a5:78:17:3f:2c:0b:e3:43:97: 4a:31:f6:b5:11:a1:85:07:6d:0e:4f:57:5e:27:0d:28:8f:28: 9b:70:e0:73:32:0c:f9:b6:49:22:dd:59:ee:f2:6c:1f:c1:aa: 91:6d:4a:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R+EVqn5Ub8a8jKKhh+AAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzAwOTM2ZmI1MDBhNzQ1NjQ0MGFiYThiM2I4YWQ1M2M5 ZjAxNDAwHhcNMjUxMjIxMDUwMDMzWhcNMjUxMjIyMDUwMDMzWjAzMTEwLwYDVQQD EyhmYjM4MzE4MTQzZmJmYjc5MDgzMjAyNDgyOWVkYTdjYTQyMDRkYTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywBhWHC6tIxcdl776jRWu+C1/FuZ O43d/k64aZ4rmv1kwrsPYgjXwkwTxoXZ/mIR4b6kO/6QTEpPcNqHly3yHumIH97N op5KIWB8W/gM9k7tEhGVjnXBDnwM1f+RjZPvbAuHxOXVhTGEqGS0dImXlN1rEvTy KWMFGwbE7OybfQzaV8Wj1UuEr3iV2Wi+jvYy8q2p+acJ7pkfnE0ZXweDDmt/zQbF uVkdd4/7RoeJlHcw03ToeEGkBTlUVjUu6mbIb8p3kKhvxqf3wJ53UQUsSva13Q3c T74ijrnHBgVuh89+Ra2K7T/krz64+TDThgnUE8ZwwmqaGgvaXTTML14jFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPs4MYFD+/t5CDICSCntp8pCBNqVMB8GA1UdIwQY MBaAFNgwCTb7UAp0VkQKuos7itU8nwFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzkt YWRkY2Q4NTUyMDI2LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzktYWRkY2Q4NTUyMDI2 LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpG00b9a M7NhdXWMjsAZ1c4221uIHC2RCEa4OuESR0PR1QnvEVC6bhMLodaIim0MStnOoMq+ 2bpShjflkHpKqwvy9dPOh5mHjYJ6Jm5EbASf+hk3W42C7SIJbjwms6+a/fI/Gsil ciFIpLaYkKSqy+loXZVPZgRQAFQeJB86uwhya0EUEfvoz4kyD4wOswUvNtrR/OZC i1t3MgJXw4k208WgVROXM4a5AmrDei46jvMHy+zqfe0A+WKxoGmKuBD8WUVg2QmK Tny9B27HCPugpXgXPywL40OXSjH2tRGhhQdtDk9XXicNKI8om3DgczIM+bZJIt1Z 7vJsH8GqkW1KUQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:35:57 2025 by rpki-client