This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft File: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json) Hash identifier: ZO78Tv/ifCvLWhrw8onkbR7cHQ9BrpQOnwmdLRyu9nw= Subject key identifier: A5:7A:A4:46:83:7D:2B:A5:0F:A2:19:50:D3:BB:9F:40:76:EE:41:E1 Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Certificate serial: 019B397CFFC59C7E4472D7682BD80E3A8F67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft Manifest number: 1674 Signing time: Sat 20 Dec 2025 02:00:51 +0000 Manifest this update: Sat 20 Dec 2025 02:00:51 +0000 Manifest next update: Sun 21 Dec 2025 02:00:51 +0000 Files and hashes: 1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: 7zCQogVzu4HQDhSo7C40ykO5RROJsDbgtPaJUs3e2w8=) 2: B5m6j_K3O894W_R_t6V6YidAg_M.roa (hash: bXrv4zwrH5nVqybqsixx97jvkGY3LFCIFwVY3pH6Bk8=) 3: KqKhKARLMvPV_bRfQE5O-Q0jitE.roa (hash: g5DaBAVimvDHhHZlO6bebh2BYJNntLdIOufL8sw6/TA=) 4: PSzX4ETQs2L8cNC3MHgmvmQQifU.roa (hash: UakKPUPcxegOjzkx7/qLz6OeHL3ixKpktOgsps0SIHU=) 5: gpM2Niv38-bAPpYWDWu_AiD_7fU.roa (hash: U97/Bujuoe+UqbMI2I87geGUh9XKKMGTDgPKSh0HsUc=) 6: v_tCnLJbfmXfnX8r8TkiKrJdo6U.roa (hash: 2qeSRWLeCZqoEkwlBGulwS0BehW+dyHuoHpo1B95cR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:ff:c5:9c:7e:44:72:d7:68:2b:d8:0e:3a:8f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Validity Not Before: Dec 20 02:00:51 2025 GMT Not After : Dec 21 02:00:51 2025 GMT Subject: CN=a57aa446837d2ba50fa21950d3bb9f4076ee41e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:bd:98:e4:eb:0c:a8:b5:63:4d:af:fe:62: 67:6b:44:e8:72:88:3b:2a:ac:9a:e6:00:8d:1c:72: a3:70:9a:d6:d3:84:46:d5:65:83:63:38:68:08:69: 09:67:27:57:62:6a:de:5b:71:1b:8b:57:bb:f6:6d: cf:bf:8d:f7:a4:7d:dd:3b:3b:66:3d:c0:2f:75:dc: 1c:8c:f6:8d:da:c6:0b:08:cc:6d:72:2e:49:3c:17: b1:0c:7b:12:bf:02:69:cf:bf:03:65:49:be:9b:1f: 5b:de:41:5c:b7:9d:a2:13:38:7a:b4:da:82:3f:37: b7:b0:ac:1a:3a:c1:f8:8f:dd:64:4d:e3:2a:fa:de: 09:13:47:93:75:a3:a5:f8:69:b3:ad:f4:4c:95:de: 2f:52:3e:fc:47:8e:f3:02:ee:a9:cb:46:0b:52:2d: 23:71:99:26:48:7b:0b:ed:d9:d9:75:c7:48:52:3d: 02:6a:b3:d5:3c:0b:a0:d5:2c:c4:cf:4d:64:2d:0b: 9d:c9:52:96:65:68:97:82:06:0a:0a:08:a8:4b:8a: 8f:79:de:dd:36:60:6d:7f:c1:b4:c8:b5:ad:3a:69: 5a:11:51:25:8c:34:f5:46:e4:65:0a:1e:be:d6:3a: 7e:ac:f1:a2:5b:fd:cc:c5:c2:9c:ed:f3:39:e5:be: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7A:A4:46:83:7D:2B:A5:0F:A2:19:50:D3:BB:9F:40:76:EE:41:E1 X509v3 Authority Key Identifier: keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:67:0f:70:81:22:9a:77:43:97:15:3a:05:ca:7c:dc:f7:94: 11:a4:67:1a:51:82:4a:7c:2d:b6:4e:7c:a1:39:76:ac:10:ac: 57:bc:4a:a4:11:ff:a9:47:8b:4f:5b:1a:1e:ec:50:f4:26:c2: 70:85:86:dd:5b:d5:17:cf:51:0d:96:29:0e:cb:ab:1d:0f:5d: c4:47:4c:a5:45:ce:1f:e0:98:39:9a:f2:d3:69:24:0b:ae:8a: 2a:f4:4a:6f:24:7d:7a:65:0e:9d:32:16:0f:a9:9d:76:57:cf: 60:a5:b3:bb:db:db:e1:de:d8:fe:1a:13:9d:75:49:d2:4b:d9: bb:c0:14:12:99:93:d1:9c:b6:c7:0a:77:5d:c1:59:d3:13:08: ba:27:09:35:7c:c4:73:d3:c2:44:33:2b:51:8e:f3:e6:6b:6d: 7b:3f:bc:ac:8a:b0:ed:39:35:27:15:88:48:49:4d:39:e7:16: 91:97:f4:40:85:5b:e8:bb:aa:0a:c6:ca:07:ba:92:e5:86:af: d5:eb:0a:5a:ef:a3:95:1c:96:16:67:56:85:d0:dc:a2:0d:62: dc:22:6c:aa:81:2d:b4:1f:0d:81:9f:4a:b7:47:e1:92:6f:3f: b9:fa:c0:a5:7b:44:68:d7:26:44:0f:33:01:69:8e:d5:d1:94: aa:8d:89:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fP/FnH5EctdoK9gOOo9nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzcyYWFjMWI2MmI4N2Q2YjAxZDU3YTFhMDBhNmE3MmI4 YTdkYTYwHhcNMjUxMjIwMDIwMDUxWhcNMjUxMjIxMDIwMDUxWjAzMTEwLwYDVQQD EyhhNTdhYTQ0NjgzN2QyYmE1MGZhMjE5NTBkM2JiOWY0MDc2ZWU0MWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11i9mOTrDKi1Y02v/mJna0Tocog7 Kqya5gCNHHKjcJrW04RG1WWDYzhoCGkJZydXYmreW3Ebi1e79m3Pv433pH3dOztm PcAvddwcjPaN2sYLCMxtci5JPBexDHsSvwJpz78DZUm+mx9b3kFct52iEzh6tNqC Pze3sKwaOsH4j91kTeMq+t4JE0eTdaOl+GmzrfRMld4vUj78R47zAu6py0YLUi0j cZkmSHsL7dnZdcdIUj0CarPVPAug1SzEz01kLQudyVKWZWiXggYKCgioS4qPed7d NmBtf8G0yLWtOmlaEVEljDT1RuRlCh6+1jp+rPGiW/3MxcKc7fM55b6rCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKV6pEaDfSulD6IZUNO7n0B27kHhMB8GA1UdIwQY MBaAFNh3KqwbYrh9awHVehoApqcrin2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUt MzMzYmVlY2ZmNmY0LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUtMzMzYmVlY2ZmNmY0 LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmcPcIEi mndDlxU6Bcp83PeUEaRnGlGCSnwttk58oTl2rBCsV7xKpBH/qUeLT1saHuxQ9CbC cIWG3VvVF89RDZYpDsurHQ9dxEdMpUXOH+CYOZry02kkC66KKvRKbyR9emUOnTIW D6mddlfPYKWzu9vb4d7Y/hoTnXVJ0kvZu8AUEpmT0Zy2xwp3XcFZ0xMIuicJNXzE c9PCRDMrUY7z5mttez+8rIqw7Tk1JxWISElNOecWkZf0QIVb6LuqCsbKB7qS5Yav 1esKWu+jlRyWFmdWhdDcog1i3CJsqoEttB8NgZ9Kt0fhkm8/ufrApXtEaNcmRA8z AWmO1dGUqo2JEA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:42:08 2025 by rpki-client