This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json) Hash identifier: DBc2OqzwGnKYJs+CuxE2wMUt5SKYC+tKzjDy/xsjEjo= Subject key identifier: AC:D0:86:71:44:98:76:F2:D7:FB:87:EB:FC:6A:F0:CC:B8:F0:50:D1 Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Certificate serial: 019B3D90CCD82D8B1FE6F79B77E85104E2FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft Manifest number: 179B Signing time: Sat 20 Dec 2025 21:00:58 +0000 Manifest this update: Sat 20 Dec 2025 21:00:58 +0000 Manifest next update: Sun 21 Dec 2025 21:00:58 +0000 Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=) 2: 1-TG0tV05zw2HKHoaqhOevQ98FzQ.roa (hash: /7MNkNnhqW72HOp0UmjMqbjYSzKMbtvhE/I2ngN+NxU=) 3: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: dhEP7K0Y22ZBmduv/zQKaF8niIonN1b9qbVBPuSIV2Y=) 4: Fs1g4auQEFQ0Cuft55E3Rw3PXmA.roa (hash: Vuu2L1svazusVabBvTPZMe7UwJ3tP3gM0aYKwJjbCcw=) 5: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=) 6: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=) 7: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=) 8: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=) 9: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:cc:d8:2d:8b:1f:e6:f7:9b:77:e8:51:04:e2:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Validity Not Before: Dec 20 21:00:58 2025 GMT Not After : Dec 21 21:00:58 2025 GMT Subject: CN=acd08671449876f2d7fb87ebfc6af0ccb8f050d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:4e:c1:31:72:99:75:f7:04:9e:61:0a:ca: 71:4d:2f:a1:59:a5:80:80:25:e8:54:af:c5:65:9b: fc:d5:fa:2a:ee:52:81:ca:ad:d1:b0:ae:6d:fd:4f: 29:e6:7c:fc:95:ee:55:08:9a:9d:55:f2:f8:db:bc: 9c:51:92:40:9e:a5:72:62:54:bf:24:0f:e7:9b:27: a2:97:3a:67:ee:ff:f8:49:c7:4f:8d:c8:b8:d4:94: 0b:62:d0:7f:13:c7:dc:79:91:50:4d:13:2d:9c:3c: 91:68:0f:b1:e7:66:96:26:5d:2e:25:04:97:16:f9: a8:db:b8:42:da:39:b1:a5:e3:98:97:83:01:28:b0: 88:85:e8:11:53:02:5f:8f:12:07:9a:35:7e:f1:14: a5:30:48:ad:73:82:cb:b7:08:79:bc:e7:c0:c9:b3: 19:c3:7b:a2:a1:2c:93:2d:e9:c0:af:68:35:23:87: 97:64:b9:1b:09:be:1e:c5:37:2c:ea:1b:4f:a8:94: 93:c8:d3:c6:ce:e6:8e:18:89:d0:ee:47:f0:38:09: 9a:43:59:57:b5:b5:19:c1:f7:2a:c8:07:8e:5b:3e: 11:48:10:65:80:fd:b7:cf:2c:ee:58:ef:2c:be:c1: ff:29:14:b2:1e:06:52:b4:a9:75:70:7a:15:32:7a: fc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D0:86:71:44:98:76:F2:D7:FB:87:EB:FC:6A:F0:CC:B8:F0:50:D1 X509v3 Authority Key Identifier: keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:70:d8:cc:a3:a3:2e:98:a1:c7:2d:5c:78:c1:6b:7f:c5:45: ba:84:b2:39:dd:d5:9f:02:2e:9a:8e:9b:53:a8:0f:ed:f3:70: eb:38:e4:9b:0b:34:f0:e7:5a:3f:3c:46:27:1d:48:3a:df:a9: 94:6f:b3:d0:23:3b:04:7e:0a:2c:33:68:c6:9f:f1:26:f7:2b: 82:db:d8:fc:a6:ad:4e:6a:32:8b:8c:97:42:c6:69:aa:bb:9b: 0f:96:ba:0e:0a:36:4e:af:3b:ef:18:6f:1b:d6:63:02:f2:92: fd:27:de:22:24:7a:7c:5e:92:dd:ea:11:3f:e5:d3:14:9e:1c: ec:02:d8:83:60:86:c8:39:18:b9:d1:21:9c:c4:37:da:7c:b2: b5:45:78:7c:b7:b1:e1:e9:33:65:39:12:9d:15:45:91:8d:1d: 87:de:20:b6:ce:36:40:a0:db:93:d8:cf:73:24:8a:e4:83:4a: 5b:f7:58:8b:e2:23:22:74:04:63:97:84:54:f5:15:d5:e1:ae: f0:d0:69:5e:b6:bd:ca:66:b2:f4:e1:dd:c6:1a:98:49:79:1a: f2:02:59:b2:b8:7a:b4:f5:4b:4f:0a:70:47:e0:a4:46:b5:33: 8d:32:f6:ac:c6:64:0f:ba:59:30:25:91:e1:f2:f6:f4:33:a8: 06:9a:d0:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMzYLYsf5vebd+hRBOL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk YmQ3MjUwHhcNMjUxMjIwMjEwMDU4WhcNMjUxMjIxMjEwMDU4WjAzMTEwLwYDVQQD EyhhY2QwODY3MTQ0OTg3NmYyZDdmYjg3ZWJmYzZhZjBjY2I4ZjA1MGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQdOwTFymXX3BJ5hCspxTS+hWaWA gCXoVK/FZZv81foq7lKByq3RsK5t/U8p5nz8le5VCJqdVfL427ycUZJAnqVyYlS/ JA/nmyeilzpn7v/4ScdPjci41JQLYtB/E8fceZFQTRMtnDyRaA+x52aWJl0uJQSX Fvmo27hC2jmxpeOYl4MBKLCIhegRUwJfjxIHmjV+8RSlMEitc4LLtwh5vOfAybMZ w3uioSyTLenAr2g1I4eXZLkbCb4exTcs6htPqJSTyNPGzuaOGInQ7kfwOAmaQ1lX tbUZwfcqyAeOWz4RSBBlgP23zyzuWO8svsH/KRSyHgZStKl1cHoVMnr8kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzQhnFEmHby1/uH6/xq8My48FDRMB8GA1UdIwQY MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et NmJhMGEwY2UwMWVkLzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHDYzKOj Lpihxy1ceMFrf8VFuoSyOd3VnwIumo6bU6gP7fNw6zjkmws08OdaPzxGJx1IOt+p lG+z0CM7BH4KLDNoxp/xJvcrgtvY/KatTmoyi4yXQsZpqrubD5a6Dgo2Tq877xhv G9ZjAvKS/SfeIiR6fF6S3eoRP+XTFJ4c7ALYg2CGyDkYudEhnMQ32nyytUV4fLex 4ekzZTkSnRVFkY0dh94gts42QKDbk9jPcySK5INKW/dYi+IjInQEY5eEVPUV1eGu 8NBpXra9ymay9OHdxhqYSXka8gJZsrh6tPVLTwpwR+CkRrUzjTL2rMZkD7pZMCWR 4fL29DOoBprQOA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:26:23 2025 by rpki-client