This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft File: 2sKEXGHawupQysuD_QkxGjDjqQ4.mft (raw, json) Hash identifier: Qo4u9jIn+nMB1QfEQE29sBtxkQ7b0Z1rgQtn1bRy/Z8= Subject key identifier: 30:E0:EC:19:92:22:E1:5B:B6:12:D7:F0:5B:82:FA:E3:8B:E0:DE:54 Authority key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E Certificate issuer: /CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e Certificate serial: 019B33E8B1F93BEA5D249F69429D1C8FF772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft Manifest number: 01FE Signing time: Fri 19 Dec 2025 00:00:46 +0000 Manifest this update: Fri 19 Dec 2025 00:00:46 +0000 Manifest next update: Sat 20 Dec 2025 00:00:46 +0000 Files and hashes: 1: 2sKEXGHawupQysuD_QkxGjDjqQ4.crl (hash: o6QO6gYX4DwYqS18MjDXeEXiNtq97fOvsnHtaHeTLws=) 2: KIJNA59uDb5jeuperkH1ytHHaXY.roa (hash: FNj6mHvJhlFniaYHRv1Jg0zqnMbw0aJyG3OHR4imABM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:b1:f9:3b:ea:5d:24:9f:69:42:9d:1c:8f:f7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e Validity Not Before: Dec 19 00:00:46 2025 GMT Not After : Dec 20 00:00:46 2025 GMT Subject: CN=30e0ec199222e15bb612d7f05b82fae38be0de54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:91:87:66:01:74:71:90:4e:ed:72:4e:36:04: 3a:1b:1c:c4:ff:02:96:bc:15:db:70:df:e3:4f:ec: 86:c3:9f:4e:30:33:1a:31:ae:81:0e:b9:c8:56:c7: eb:a0:d7:bb:df:f2:5a:4d:60:bf:df:28:e2:17:10: 47:96:7e:f3:0c:e8:d5:66:76:9f:3d:2f:19:1a:c3: d8:06:51:aa:23:e5:1d:f1:36:20:29:2a:95:b3:a8: 97:76:79:6e:47:24:88:ee:4b:db:e8:60:81:bc:d1: c0:a7:72:66:25:a3:17:fd:10:14:f6:8b:29:62:f5: db:4c:94:e9:94:35:ab:7c:ed:de:4b:f0:fb:99:92: 73:a1:93:8d:fc:42:4b:6e:e9:b8:5a:95:40:e8:2b: a4:39:4b:ec:9e:2d:13:90:c2:ea:1b:b5:9f:94:0b: 2a:8d:c3:e1:67:5e:c6:91:45:b1:06:d9:6f:d0:6c: d6:95:a8:4f:d2:26:a3:67:6c:87:4d:67:4f:14:e0: 18:9c:30:f5:d0:46:cc:af:5f:8c:84:48:25:dc:8a: d5:c7:fa:ae:c8:29:3d:11:2f:35:8f:a8:33:35:84: 86:6a:5f:16:73:5f:9c:4d:c6:f8:31:d4:a8:6b:98: 69:4a:47:4b:89:a8:73:27:94:58:4c:2b:bb:74:30: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E0:EC:19:92:22:E1:5B:B6:12:D7:F0:5B:82:FA:E3:8B:E0:DE:54 X509v3 Authority Key Identifier: keyid:DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:61:30:c5:21:8a:18:8d:ac:fc:06:5d:b3:bb:e0:8f:f9:23: 0c:4f:e9:c8:de:93:87:4d:32:34:c1:08:2d:3a:4d:c8:38:26: a1:34:0e:1b:7d:a8:60:c5:5f:31:3d:26:d9:8e:65:63:11:b3: 9b:7f:83:08:c0:10:c2:d7:b9:4a:8e:41:d1:45:46:c4:38:c0: fb:31:f2:21:88:ae:50:8c:64:9a:d0:e2:b0:90:2f:ed:13:2b: 9f:83:b6:14:9a:a2:77:24:c8:91:07:cd:b1:9f:04:23:72:64: 80:f4:9d:3b:93:60:b2:1c:17:6c:03:f9:76:7f:89:f5:8d:0a: fd:9e:4d:9c:9a:cb:cd:02:68:47:5c:83:da:2f:57:78:f1:75: 3e:2a:23:4d:5d:77:4b:9c:86:1c:e1:c7:d8:6b:db:c6:b8:8b: 3f:be:8c:66:20:84:a3:7b:91:c2:13:98:8c:94:2a:2c:74:10: 9c:67:11:2a:0a:eb:de:55:70:4e:95:31:fa:07:e9:58:89:36: 1f:23:c7:fd:4c:79:a9:1f:17:16:3c:fc:b4:f5:50:af:a1:c9: fa:bf:7d:ce:84:ab:67:a9:8f:f4:32:84:ee:0f:d7:af:c8:09: 75:ee:71:a2:b2:08:c0:e6:28:68:44:3f:c2:cd:f5:6e:7a:7e: b5:ad:fb:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6LH5O+pdJJ9pQp0cj/dyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzI4NDVjNjFkYWMyZWE1MGNhY2I4M2ZkMDkzMTFhMzBl M2E5MGUwHhcNMjUxMjE5MDAwMDQ2WhcNMjUxMjIwMDAwMDQ2WjAzMTEwLwYDVQQD EygzMGUwZWMxOTkyMjJlMTViYjYxMmQ3ZjA1YjgyZmFlMzhiZTBkZTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpGHZgF0cZBO7XJONgQ6GxzE/wKW vBXbcN/jT+yGw59OMDMaMa6BDrnIVsfroNe73/JaTWC/3yjiFxBHln7zDOjVZnaf PS8ZGsPYBlGqI+Ud8TYgKSqVs6iXdnluRySI7kvb6GCBvNHAp3JmJaMX/RAU9osp YvXbTJTplDWrfO3eS/D7mZJzoZON/EJLbum4WpVA6CukOUvsni0TkMLqG7WflAsq jcPhZ17GkUWxBtlv0GzWlahP0iajZ2yHTWdPFOAYnDD10EbMr1+MhEgl3IrVx/qu yCk9ES81j6gzNYSGal8Wc1+cTcb4MdSoa5hpSkdLiahzJ5RYTCu7dDDa+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDg7BmSIuFbthLX8FuC+uOL4N5UMB8GA1UdIwQY MBaAFNrChFxh2sLqUMrLg/0JMRow46kOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kNWQ4NDYtOWFjOC00MWY1LTg2MDQt ZWFlNjAwYTUyYzAxLzEvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kNWQ4NDYtOWFjOC00MWY1LTg2MDQtZWFlNjAwYTUyYzAx LzEvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGEwxSGK GI2s/AZds7vgj/kjDE/pyN6Th00yNMEILTpNyDgmoTQOG32oYMVfMT0m2Y5lYxGz m3+DCMAQwte5So5B0UVGxDjA+zHyIYiuUIxkmtDisJAv7RMrn4O2FJqidyTIkQfN sZ8EI3JkgPSdO5NgshwXbAP5dn+J9Y0K/Z5NnJrLzQJoR1yD2i9XePF1PiojTV13 S5yGHOHH2GvbxriLP76MZiCEo3uRwhOYjJQqLHQQnGcRKgrr3lVwTpUx+gfpWIk2 HyPH/Ux5qR8XFjz8tPVQr6HJ+r99zoSrZ6mP9DKE7g/Xr8gJde5xorIIwOYoaEQ/ ws31bnp+ta379g== -----END CERTIFICATE-----Generated at Fri Dec 19 05:22:07 2025 by rpki-client