This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json) Hash identifier: dkIVWuFZOSiFMS+CPtQb8vUMde5Jl2HEDxr8TXaKG9U= Subject key identifier: 90:16:29:54:FC:48:FF:8D:DC:B0:0D:B3:0F:74:60:1D:12:63:D8:9B Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93 Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93 Certificate serial: 019B4A39B2F82243E12702F0CF7C8B896400 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 08:00:53 +0000 Manifest this update: Tue 23 Dec 2025 08:00:53 +0000 Manifest next update: Wed 24 Dec 2025 08:00:53 +0000 Files and hashes: 1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=) 2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: 9fgy/FL5xBAciuKpK7zeDVM2hRafk6A6tsBy36mp5NQ=) 3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=) 4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=) 5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:b2:f8:22:43:e1:27:02:f0:cf:7c:8b:89:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93 Validity Not Before: Dec 23 08:00:53 2025 GMT Not After : Dec 24 08:00:53 2025 GMT Subject: CN=90162954fc48ff8ddcb00db30f74601d1263d89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:16:df:a5:07:7a:70:10:56:1b:3f:25:c2: 14:79:af:10:b3:20:c5:43:af:4c:92:2c:e5:a7:5f: 6b:32:1b:af:f6:fe:27:4d:a1:1d:7f:0a:ad:e3:a5: 0f:2d:11:ce:69:ad:d4:f4:35:cf:9b:4e:69:a5:54: 20:9c:e1:10:fb:a1:d4:72:3a:34:9c:90:09:e6:92: 0d:13:ea:6d:6a:da:74:6c:3a:05:28:92:8a:59:d6: 7a:55:b6:5b:cb:c2:7a:5f:f2:b7:b3:53:20:15:c4: 98:86:50:66:87:39:db:82:f3:64:1f:18:6f:6c:f7: 76:83:86:b7:ac:63:53:75:f7:35:fe:93:4d:6d:6f: 12:1b:6d:9f:c1:8f:2c:80:9e:ce:f6:76:31:42:30: cc:f5:0e:87:27:01:b1:65:e6:90:35:36:95:c9:92: 05:04:57:db:1f:bf:dd:c3:88:28:09:a4:3e:7d:b8: 9b:03:d4:2d:5f:75:c4:96:05:e5:ae:7e:e0:07:2e: 3f:a0:db:10:02:5c:9b:4d:7e:2a:90:7b:0f:be:f7: df:ca:30:c1:49:20:65:11:cf:17:0d:00:99:ce:f7: 72:65:75:52:b1:bb:e3:51:76:58:51:e9:11:a9:1d: e8:ec:96:40:b4:9e:b5:04:33:f8:ce:0f:94:8d:18: 9c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:16:29:54:FC:48:FF:8D:DC:B0:0D:B3:0F:74:60:1D:12:63:D8:9B X509v3 Authority Key Identifier: keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:92:fd:4b:df:a4:f1:f6:e5:a4:f4:a6:df:12:1e:fe:7b:83: e6:28:17:ce:7d:0f:47:17:25:79:5c:3f:53:a1:9b:d6:da:be: 53:73:7c:11:c5:31:88:9c:22:de:10:9c:a8:b6:1e:55:78:61: 5f:ea:6f:1e:57:ee:5a:8b:f1:2e:6f:e5:e9:1b:e1:ee:b0:61: a5:d6:b1:78:7f:55:b5:07:68:27:11:9b:87:b6:75:7a:81:81: 24:65:0b:f4:4d:48:74:88:cd:5b:c5:4a:70:f7:99:6c:bd:a6: da:60:b0:f5:45:24:31:4c:10:25:e4:5d:cb:26:94:03:bf:5e: 44:31:58:7c:e0:45:13:6c:41:e5:d5:94:ef:18:e8:44:aa:b5: d3:8c:41:ae:1b:8f:ed:b4:60:8e:81:58:bd:0f:09:8c:d9:a6: 54:61:69:bd:c9:2b:de:5c:0a:ee:b5:5a:a9:7a:a7:74:42:69: fb:29:d2:be:18:b6:cb:0a:e5:7d:3f:e7:b9:78:4c:d5:a6:ee: dd:02:33:0d:2d:f6:b0:69:04:d4:01:e8:8d:57:29:08:90:d3: ff:4c:f9:c6:db:cb:bd:de:9a:0f:5c:82:26:92:04:b4:4a:1f: 22:3a:06:31:b6:1b:d2:7d:d1:63:37:06:91:8d:eb:91:3e:b7: 03:93:fc:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKObL4IkPhJwLwz3yLiWQAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOTgwYTQ1ZmU0ODczNjZlMzg2YjYwNjRjMmM2NTI1MTlm OWZjOTMwHhcNMjUxMjIzMDgwMDUzWhcNMjUxMjI0MDgwMDUzWjAzMTEwLwYDVQQD Eyg5MDE2Mjk1NGZjNDhmZjhkZGNiMDBkYjMwZjc0NjAxZDEyNjNkODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonsW36UHenAQVhs/JcIUea8QsyDF Q69Mkizlp19rMhuv9v4nTaEdfwqt46UPLRHOaa3U9DXPm05ppVQgnOEQ+6HUcjo0 nJAJ5pINE+ptatp0bDoFKJKKWdZ6VbZby8J6X/K3s1MgFcSYhlBmhznbgvNkHxhv bPd2g4a3rGNTdfc1/pNNbW8SG22fwY8sgJ7O9nYxQjDM9Q6HJwGxZeaQNTaVyZIF BFfbH7/dw4goCaQ+fbibA9QtX3XElgXlrn7gBy4/oNsQAlybTX4qkHsPvvffyjDB SSBlEc8XDQCZzvdyZXVSsbvjUXZYUekRqR3o7JZAtJ61BDP4zg+UjRic9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAWKVT8SP+N3LANsw90YB0SY9ibMB8GA1UdIwQY MBaAFNqYCkX+SHNm44a2BkwsZSUZ+fyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMt M2YxMmFmZjI3NGRhLzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMtM2YxMmFmZjI3NGRh LzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJL9S9+k 8fblpPSm3xIe/nuD5igXzn0PRxcleVw/U6Gb1tq+U3N8EcUxiJwi3hCcqLYeVXhh X+pvHlfuWovxLm/l6Rvh7rBhpdaxeH9VtQdoJxGbh7Z1eoGBJGUL9E1IdIjNW8VK cPeZbL2m2mCw9UUkMUwQJeRdyyaUA79eRDFYfOBFE2xB5dWU7xjoRKq104xBrhuP 7bRgjoFYvQ8JjNmmVGFpvckr3lwK7rVaqXqndEJp+ynSvhi2ywrlfT/nuXhM1abu 3QIzDS32sGkE1AHojVcpCJDT/0z5xtvLvd6aD1yCJpIEtEofIjoGMbYb0n3RYzcG kY3rkT63A5P89g== -----END CERTIFICATE-----Generated at Tue Dec 23 09:12:00 2025 by rpki-client