This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json) Hash identifier: KyrhIpsxJhNXW7SqRx+dA5yU1OFtmQroCG3fO4Z/Vfc= Subject key identifier: 1C:4E:31:8B:99:1A:89:E4:6B:62:94:A0:8C:20:BE:3A:B7:AD:C9:9B Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93 Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93 Certificate serial: 019B76A446689F30D6D1EA72475DD3162E27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft Manifest number: 17A6 Signing time: Wed 31 Dec 2025 23:00:35 +0000 Manifest this update: Wed 31 Dec 2025 23:00:35 +0000 Manifest next update: Thu 01 Jan 2026 23:00:35 +0000 Files and hashes: 1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=) 2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: KB4AsSdGOKVXIgUPrynNGlw1xdg2n71uqhD0Hs6bvUU=) 3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=) 4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=) 5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:a4:46:68:9f:30:d6:d1:ea:72:47:5d:d3:16:2e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93 Validity Not Before: Dec 31 23:00:35 2025 GMT Not After : Jan 1 23:00:35 2026 GMT Subject: CN=1c4e318b991a89e46b6294a08c20be3ab7adc99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:0d:59:63:f5:07:46:62:87:37:f4:c7:e2: 2d:6c:f4:0b:c2:fa:82:d8:ca:4b:49:f4:fb:b8:1f: bd:6f:09:e2:67:78:83:0e:b1:3a:c4:9b:7b:bb:2b: 35:0f:71:b7:8e:14:4a:50:4f:ea:c6:9f:33:45:14: 8d:ff:40:0d:78:d3:a7:79:04:3b:b5:f1:db:3f:d9: 93:18:2b:5b:cf:88:13:3f:05:c9:bd:f4:b2:f1:5b: 06:5b:f6:01:00:76:d9:7e:c4:ee:7d:23:09:ae:db: 0f:ba:fa:c2:c1:84:96:d9:96:7d:48:07:35:d5:76: 0c:ea:66:c1:b7:16:dd:69:7a:75:04:c5:95:00:22: ee:0c:e9:06:66:dc:5f:5f:c7:20:d0:12:29:03:ae: 25:78:7b:58:2f:cf:12:88:bd:00:41:12:bc:4c:2f: 2a:32:b9:d5:5c:52:55:1c:c5:65:58:a5:19:2c:8c: e8:e6:d9:e9:77:8a:1b:bd:74:7b:3c:9f:4d:66:d4: 79:17:b6:db:e2:c9:27:9f:5f:48:02:16:db:04:75: 00:91:37:86:b4:86:16:f0:93:61:e1:e7:2e:42:a0: 86:55:e5:55:16:e9:97:f5:16:bc:35:c6:a9:48:1c: f3:19:5d:c6:b4:0c:d0:82:f3:91:c9:39:78:16:01: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4E:31:8B:99:1A:89:E4:6B:62:94:A0:8C:20:BE:3A:B7:AD:C9:9B X509v3 Authority Key Identifier: keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6b:43:8e:32:d3:e4:f6:13:bf:f2:26:ea:5e:fa:9b:83:8b: 7f:8b:86:51:83:5f:ec:db:b3:af:3d:29:f0:2c:5f:fb:24:a3: a9:ca:f1:a2:88:2c:58:c0:6e:a6:5f:dc:43:4f:ef:b8:c1:aa: af:14:85:1f:0e:c7:10:52:c9:64:9a:31:ad:a4:3a:8f:ba:a8: b2:10:c8:9c:c9:15:34:a3:12:19:62:5c:c4:10:ba:d5:ff:0e: 3b:e1:e8:9b:0b:2a:57:5f:99:8c:97:f3:f7:3c:1b:b5:50:cb: 62:eb:ab:13:ad:68:f8:2b:36:32:45:7c:f0:2d:30:63:ec:fb: b0:a9:82:f0:e5:11:b8:c6:a6:a5:b1:0f:9b:8c:ef:9a:e3:b7: fe:37:5e:34:5d:ec:7c:10:91:1e:dc:88:f5:6a:51:20:e8:7c: 46:11:0c:17:61:40:89:9b:a8:d2:f3:8f:b2:76:62:8a:8d:95: 6e:c3:c6:f6:f8:cc:f4:f5:77:e5:50:17:5f:d0:6c:59:6e:d1: 9d:fa:69:ef:3c:4d:f1:d5:b8:d5:c9:a7:b1:c6:0f:c3:52:02: da:af:6e:09:31:75:67:b6:8d:b1:31:e6:43:f4:b9:fe:37:b4: 07:55:c3:e5:5a:f7:c2:1e:6e:0a:40:e2:02:6f:7c:e9:c0:3f: 65:d1:6e:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2pEZonzDW0epyR13TFi4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOTgwYTQ1ZmU0ODczNjZlMzg2YjYwNjRjMmM2NTI1MTlm OWZjOTMwHhcNMjUxMjMxMjMwMDM1WhcNMjYwMTAxMjMwMDM1WjAzMTEwLwYDVQQD EygxYzRlMzE4Yjk5MWE4OWU0NmI2Mjk0YTA4YzIwYmUzYWI3YWRjOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvccNWWP1B0Zihzf0x+ItbPQLwvqC 2MpLSfT7uB+9bwniZ3iDDrE6xJt7uys1D3G3jhRKUE/qxp8zRRSN/0ANeNOneQQ7 tfHbP9mTGCtbz4gTPwXJvfSy8VsGW/YBAHbZfsTufSMJrtsPuvrCwYSW2ZZ9SAc1 1XYM6mbBtxbdaXp1BMWVACLuDOkGZtxfX8cg0BIpA64leHtYL88SiL0AQRK8TC8q MrnVXFJVHMVlWKUZLIzo5tnpd4obvXR7PJ9NZtR5F7bb4sknn19IAhbbBHUAkTeG tIYW8JNh4ecuQqCGVeVVFumX9Ra8NcapSBzzGV3GtAzQgvORyTl4FgHt/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxOMYuZGonka2KUoIwgvjq3rcmbMB8GA1UdIwQY MBaAFNqYCkX+SHNm44a2BkwsZSUZ+fyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMt M2YxMmFmZjI3NGRhLzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMtM2YxMmFmZjI3NGRh LzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGtDjjLT 5PYTv/Im6l76m4OLf4uGUYNf7Nuzrz0p8Cxf+ySjqcrxoogsWMBupl/cQ0/vuMGq rxSFHw7HEFLJZJoxraQ6j7qoshDInMkVNKMSGWJcxBC61f8OO+HomwsqV1+ZjJfz 9zwbtVDLYuurE61o+Cs2MkV88C0wY+z7sKmC8OURuMampbEPm4zvmuO3/jdeNF3s fBCRHtyI9WpRIOh8RhEMF2FAiZuo0vOPsnZiio2VbsPG9vjM9PV35VAXX9BsWW7R nfpp7zxN8dW41cmnscYPw1IC2q9uCTF1Z7aNsTHmQ/S5/je0B1XD5Vr3wh5uCkDi Am986cA/ZdFuBQ== -----END CERTIFICATE-----Generated at Thu Jan 1 03:50:33 2026 by rpki-client