This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft File: x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json) Hash identifier: ZjIn1InAZZExrHxDM+8Te4N4bkRSzacQmmaylCZYFhA= Subject key identifier: 05:A9:51:03:A9:FF:E5:98:90:68:64:0C:A5:66:36:C9:6D:4B:AA:6E Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA Certificate issuer: /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa Certificate serial: 019B5598B85DFEACA94C0B0646AEFA8B82D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 13:00:30 +0000 Manifest this update: Thu 25 Dec 2025 13:00:30 +0000 Manifest next update: Fri 26 Dec 2025 13:00:30 +0000 Files and hashes: 1: 58adO5UB1FKlEoStUB0aT9zK1OU.roa (hash: VcDtIG0g4QLm3R4L3wJoUxzRN4qEZkuyhBUiyX4ea8Q=) 2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: pOn2BbfDKKj1pGMbtOWE1ghCKH1QYIkhlMy6jDdacY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:98:b8:5d:fe:ac:a9:4c:0b:06:46:ae:fa:8b:82:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa Validity Not Before: Dec 25 13:00:30 2025 GMT Not After : Dec 26 13:00:30 2025 GMT Subject: CN=05a95103a9ffe5989068640ca56636c96d4baa6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:20:af:d7:98:ef:6c:d2:0e:0e:51:51:01:9d: 9d:84:01:cb:5b:a7:ee:99:5c:1e:0a:bd:4a:18:e3: bc:a7:89:8e:6c:de:ad:11:5c:93:e9:08:3c:87:a9: ee:31:45:ee:6f:91:bc:90:70:95:ba:62:58:64:31: c8:2d:0d:e3:ce:f0:2f:9d:33:37:59:9d:9e:0b:11: 92:f8:04:30:8c:08:91:73:bc:b5:d5:b2:92:53:43: b8:85:bf:f4:9b:ef:6f:69:fb:15:01:df:ae:98:9f: 9c:bc:0b:49:32:24:74:9c:7b:aa:6c:bd:c4:80:78: 73:ab:84:25:2b:74:27:3e:19:8a:b7:e0:6c:96:e7: 6a:de:85:74:3b:0d:5e:64:90:57:fe:f4:88:99:ee: 03:f7:4a:88:e3:81:d5:06:7f:56:30:48:5a:40:d9: e2:9d:55:1d:45:74:b3:2f:14:81:d3:be:b5:45:32: ad:4d:0e:67:89:b3:8b:15:74:f6:15:a3:37:4a:1a: d5:31:ca:1c:74:50:93:a3:78:b6:25:c3:8f:4b:b5: bd:9e:53:0f:83:2e:24:84:e8:f8:2f:63:45:e2:fe: 80:fd:c0:f8:bd:f2:d0:aa:f9:66:74:99:59:6c:9f: d2:95:ab:fd:de:3b:f5:c0:fc:6e:f3:99:71:0a:3d: 7f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A9:51:03:A9:FF:E5:98:90:68:64:0C:A5:66:36:C9:6D:4B:AA:6E X509v3 Authority Key Identifier: keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9c:ba:95:06:d2:d4:92:d9:7f:75:39:1e:a4:ad:50:1e:14: 70:1a:19:d8:e9:4d:ad:66:b6:5f:5a:66:c7:6c:b4:ea:a3:05: cb:5a:ca:fe:96:8c:f0:79:d2:5b:e7:98:8a:80:3a:3e:b1:3d: 4e:e1:c9:a4:82:df:74:9a:c9:bc:d0:fa:b4:c7:15:f8:71:63: f0:f5:aa:0d:9f:43:69:e7:5f:b3:3a:4e:0e:fe:99:f1:9c:02: 05:8b:3e:d0:55:e6:ee:21:7a:f7:92:5a:d4:29:1e:ac:79:61: 19:47:6a:d8:ed:d6:bd:dd:f3:3e:62:fb:57:41:6e:bf:6c:d5: ff:0f:d1:96:8d:82:26:36:a6:5e:f1:55:54:db:aa:7a:4e:fa: a2:17:98:b5:12:b0:22:3c:dc:15:b7:ee:8d:38:fc:02:67:1e: f9:4c:41:8a:6f:88:c9:e9:50:c1:fa:4b:4c:d4:f3:e0:84:68: 78:4e:e2:b1:41:13:e8:10:ca:d8:f1:6e:1a:1d:f3:91:c4:7b: 10:58:92:d6:39:04:09:e9:03:ec:fb:a2:98:67:f4:ef:94:eb: ea:ef:fd:29:d2:77:e3:ae:58:82:99:bd:d2:c7:85:37:42:e7: 6f:62:3d:0b:73:4c:47:ba:dd:c8:a2:a2:22:18:de:a5:4c:15: 53:af:b0:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmLhd/qypTAsGRq76i4LVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmJmNmI3ODFiY2Y4YzI4MDA4YThlOGZkZGU2MGU3YWUz MTIyYWEwHhcNMjUxMjI1MTMwMDMwWhcNMjUxMjI2MTMwMDMwWjAzMTEwLwYDVQQD EygwNWE5NTEwM2E5ZmZlNTk4OTA2ODY0MGNhNTY2MzZjOTZkNGJhYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SCv15jvbNIODlFRAZ2dhAHLW6fu mVweCr1KGOO8p4mObN6tEVyT6Qg8h6nuMUXub5G8kHCVumJYZDHILQ3jzvAvnTM3 WZ2eCxGS+AQwjAiRc7y11bKSU0O4hb/0m+9vafsVAd+umJ+cvAtJMiR0nHuqbL3E gHhzq4QlK3QnPhmKt+Bsludq3oV0Ow1eZJBX/vSIme4D90qI44HVBn9WMEhaQNni nVUdRXSzLxSB0761RTKtTQ5nibOLFXT2FaM3ShrVMcocdFCTo3i2JcOPS7W9nlMP gy4khOj4L2NF4v6A/cD4vfLQqvlmdJlZbJ/Slav93jv1wPxu85lxCj1/HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWpUQOp/+WYkGhkDKVmNsltS6puMB8GA1UdIwQY MBaAFMdr9reBvPjCgAio6P3eYOeuMSKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEt YWJmNDg0MGVhNjA3LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEtYWJmNDg0MGVhNjA3 LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZy6lQbS 1JLZf3U5HqStUB4UcBoZ2OlNrWa2X1pmx2y06qMFy1rK/paM8HnSW+eYioA6PrE9 TuHJpILfdJrJvND6tMcV+HFj8PWqDZ9DaedfszpODv6Z8ZwCBYs+0FXm7iF695Ja 1CkerHlhGUdq2O3Wvd3zPmL7V0Fuv2zV/w/Rlo2CJjamXvFVVNuqek76oheYtRKw IjzcFbfujTj8Amce+UxBim+IyelQwfpLTNTz4IRoeE7isUET6BDK2PFuGh3zkcR7 EFiS1jkECekD7PuimGf075Tr6u/9KdJ3465Ygpm90seFN0Lnb2I9C3NMR7rdyKKi IhjepUwVU6+wpg== -----END CERTIFICATE-----Generated at Thu Dec 25 15:59:56 2025 by rpki-client