This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json) Hash identifier: YPN/wLhwf5mFmPe7UQ0jAfzsjEnS7oQca2eqRYLAf80= Subject key identifier: 8A:16:4D:8D:68:F7:22:6B:A0:F1:64:C9:20:34:07:5E:B0:D1:FB:68 Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f Certificate serial: 019B3CEC5A87A6413B8D58A1F725815BB144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft Manifest number: 148F Signing time: Sat 20 Dec 2025 18:01:21 +0000 Manifest this update: Sat 20 Dec 2025 18:01:21 +0000 Manifest next update: Sun 21 Dec 2025 18:01:21 +0000 Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: m84RxOK4podiFuJKXWCy1m+TW3sC6hfje4Patrhd+GI=) 2: y-rAx3x5ggb3kBBIMyQl2KhriYw.roa (hash: j/sr0gEHuELryIqb8wmwmOpvCJwyct02mKuP2NU5Abs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:5a:87:a6:41:3b:8d:58:a1:f7:25:81:5b:b1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f Validity Not Before: Dec 20 18:01:21 2025 GMT Not After : Dec 21 18:01:21 2025 GMT Subject: CN=8a164d8d68f7226ba0f164c92034075eb0d1fb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:04:eb:44:08:1d:36:3a:88:a8:44:9d:0e: 89:fb:d6:15:17:72:45:84:d5:2f:cc:b0:f8:3d:d7: fc:4d:e6:57:61:1f:df:2b:66:cb:cb:1d:11:08:2f: c3:ce:8b:11:4d:0a:cc:60:f2:9e:21:46:b2:f2:77: 20:b0:ca:b6:76:b9:ae:bb:48:ce:ea:bf:de:16:3c: 3e:a0:c4:e4:e7:ed:8f:b2:9c:91:1a:4c:b3:c4:a6: 03:3d:aa:cf:94:f0:d3:4a:fa:b0:87:7b:74:8a:a7: 9e:78:46:f3:23:57:83:c0:a7:81:36:f8:b5:20:5b: 0e:fb:ae:52:e5:1e:f8:9e:8c:e9:29:54:99:9d:e3: 63:96:b3:b2:c7:4b:42:c7:16:25:e4:bd:2a:f9:cb: 85:c6:5f:7d:f7:c3:eb:2f:79:0c:5c:36:91:4d:c2: e3:76:08:25:dd:2b:2f:db:9b:a6:7c:a8:58:b6:b3: cd:18:31:c3:ef:cd:1b:d4:c0:98:fb:30:d7:ab:a8: 5d:38:e5:c5:51:de:89:78:1d:d6:a3:74:53:19:f6: 0d:45:51:52:a6:ff:5c:a2:83:a8:83:4e:83:d5:b6: 39:bd:ba:25:a2:72:d6:75:1f:3b:14:29:ba:61:88: db:f1:04:7a:07:ce:42:87:30:53:8e:7d:01:d8:c5: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:16:4D:8D:68:F7:22:6B:A0:F1:64:C9:20:34:07:5E:B0:D1:FB:68 X509v3 Authority Key Identifier: keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:63:51:3d:2d:1b:6c:4d:f0:46:f9:de:0a:1c:df:ba:6d:b2: 48:ca:4d:3f:cb:20:9c:10:e5:c8:bd:22:b8:ce:78:e5:21:47: e6:38:5d:d2:d1:84:90:1b:30:d5:7a:0c:0e:79:cb:b6:50:0f: 9f:01:ba:28:6c:1c:20:c0:75:6e:c1:fa:ad:17:b5:db:a3:fc: 64:22:1b:f3:13:07:c9:99:26:83:d7:74:9c:0f:a2:a7:7c:f5: 54:71:aa:44:15:26:fa:b0:5c:87:83:44:98:06:e2:6b:b5:2b: 50:5c:9b:be:75:dd:2f:ef:97:e4:10:57:80:0a:40:20:24:76: c7:73:e9:59:83:f3:62:c3:80:c1:08:fe:d9:c3:0b:ef:b4:5b: 71:c0:82:dc:d7:44:bb:94:ff:33:b2:ba:b4:28:b1:ee:4b:e5: 24:fd:3b:77:4b:fb:9a:d9:91:72:5f:a1:73:74:e8:6e:a1:72: 36:2a:ab:76:03:83:78:1d:7b:af:4d:da:be:09:82:ba:36:80: 27:d0:80:b3:30:a6:73:9c:3d:7d:b5:8a:20:b6:42:a3:03:38: e1:9d:74:5f:d1:b4:2d:03:ea:5f:b1:9b:08:81:c3:d7:06:74: db:64:a6:0f:59:11:95:18:66:e9:9f:ef:bd:58:b8:52:a5:68: 5c:ff:b5:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87FqHpkE7jVih9yWBW7FEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMzQyMTZiM2JkOTIxYjZjNjYxODdhOGM4NmE0YTRiYjBl ZTUyM2YwHhcNMjUxMjIwMTgwMTIxWhcNMjUxMjIxMTgwMTIxWjAzMTEwLwYDVQQD Eyg4YTE2NGQ4ZDY4ZjcyMjZiYTBmMTY0YzkyMDM0MDc1ZWIwZDFmYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32cE60QIHTY6iKhEnQ6J+9YVF3JF hNUvzLD4Pdf8TeZXYR/fK2bLyx0RCC/DzosRTQrMYPKeIUay8ncgsMq2drmuu0jO 6r/eFjw+oMTk5+2PspyRGkyzxKYDParPlPDTSvqwh3t0iqeeeEbzI1eDwKeBNvi1 IFsO+65S5R74nozpKVSZneNjlrOyx0tCxxYl5L0q+cuFxl9998PrL3kMXDaRTcLj dggl3Ssv25umfKhYtrPNGDHD780b1MCY+zDXq6hdOOXFUd6JeB3Wo3RTGfYNRVFS pv9cooOog06D1bY5vbolonLWdR87FCm6YYjb8QR6B85ChzBTjn0B2MWAEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoWTY1o9yJroPFkySA0B16w0ftoMB8GA1UdIwQY MBaAFNo0IWs72SG2xmGHqMhqSkuw7lI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjct MGJmNTkwNWIzNWVmLzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjctMGJmNTkwNWIzNWVm LzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2NRPS0b bE3wRvneChzfum2ySMpNP8sgnBDlyL0iuM545SFH5jhd0tGEkBsw1XoMDnnLtlAP nwG6KGwcIMB1bsH6rRe126P8ZCIb8xMHyZkmg9d0nA+ip3z1VHGqRBUm+rBch4NE mAbia7UrUFybvnXdL++X5BBXgApAICR2x3PpWYPzYsOAwQj+2cML77RbccCC3NdE u5T/M7K6tCix7kvlJP07d0v7mtmRcl+hc3TobqFyNiqrdgODeB17r03avgmCujaA J9CAszCmc5w9fbWKILZCowM44Z10X9G0LQPqX7GbCIHD1wZ022SmD1kRlRhm6Z/v vVi4UqVoXP+1NA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:28:19 2025 by rpki-client