This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json) Hash identifier: O/StgDqKV+tkyK74L6f5RFW9ktN8aFgVIuHHMdKieAo= Subject key identifier: 40:6B:5C:BA:2B:38:DE:07:06:46:41:05:BA:AB:1E:DE:BD:13:76:1C Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22 Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222 Certificate serial: 019B6DA186D4EBD4604DD3F661AF00F7D8A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft Manifest number: 0D7A Signing time: Tue 30 Dec 2025 05:01:00 +0000 Manifest this update: Tue 30 Dec 2025 05:01:00 +0000 Manifest next update: Wed 31 Dec 2025 05:01:00 +0000 Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: Elol2HdIZmQdPIkFmKsW3Ulu1tP/qvgkUe1xgRTqctk=) 2: 8A_vFBgMpFWglBEQF7o4I6LIqZI.roa (hash: RJK8dbnaebBPle7iamBGAEVJsY9JkiFkWcMwD2OIcfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:86:d4:eb:d4:60:4d:d3:f6:61:af:00:f7:d8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222 Validity Not Before: Dec 30 05:01:00 2025 GMT Not After : Dec 31 05:01:00 2025 GMT Subject: CN=406b5cba2b38de0706464105baab1edebd13761c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:74:df:15:a3:c1:1b:2e:0c:3f:cb:7c:b0: 66:70:d8:7e:aa:ec:ca:9a:40:9a:04:77:b6:54:87: 34:6a:19:09:67:9c:b6:e7:10:86:6a:f9:2d:45:dc: f9:f2:7e:8c:dd:37:62:ef:20:65:ad:94:f4:07:c7: 29:35:69:8d:a6:7c:56:55:6f:a5:b5:16:78:66:d5: 71:38:9b:82:b6:76:bc:d4:f3:93:cd:7d:3c:d9:c5: ef:20:f2:f5:e3:a9:0e:96:4d:5b:ba:a0:10:6f:cc: ca:ed:d2:07:45:26:22:c0:72:77:d6:e5:09:8c:2a: 31:52:84:1e:10:dd:af:b3:02:2d:11:1a:5f:20:ea: 2d:be:64:15:34:87:a0:9e:27:7e:60:82:e9:14:47: 50:ef:b0:72:ac:1b:aa:ee:87:af:37:ed:16:d3:5b: d9:11:bf:3e:cf:26:3e:06:b0:c8:1e:bb:3a:c9:b5: 3f:c5:a1:99:21:50:34:c8:1b:bc:3b:a8:a5:38:97: 4c:5c:5a:43:e8:79:b8:0d:d5:76:6c:e3:c6:09:b6: 73:d6:96:54:57:60:60:cd:d9:33:f4:10:d8:e9:c0: 1a:5f:2b:29:2c:23:20:a5:91:e0:bb:ba:25:f0:2d: e8:2b:07:36:51:0e:83:3e:95:8e:e1:a9:71:c8:49: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6B:5C:BA:2B:38:DE:07:06:46:41:05:BA:AB:1E:DE:BD:13:76:1C X509v3 Authority Key Identifier: keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a3:77:4f:83:c5:cb:53:00:48:ae:07:8b:2f:5d:66:e4:74: 9d:e9:bd:0d:a4:0d:21:cc:93:5b:aa:4e:34:69:e3:1d:e3:63: fa:7a:5e:03:02:2f:a4:37:53:78:1c:99:4b:3c:ef:b6:08:fa: 25:31:c8:79:6f:a7:f3:7e:13:33:b3:1a:ed:d6:f2:0c:c7:14: 1d:e6:84:17:b0:8b:06:af:3c:50:7b:94:cb:7b:cc:d5:ea:55: 77:e8:b2:23:33:cd:99:6c:8e:14:c9:7f:66:2b:2d:e0:2e:f2: 56:01:5d:66:33:79:d9:86:00:20:a8:90:39:cd:5f:eb:cb:dc: ae:17:fc:05:e4:76:81:1c:c3:d9:8f:eb:8e:42:56:e7:1a:d5: 3b:10:c8:26:c5:56:64:23:77:fa:19:04:ff:b7:04:af:2b:45: 0e:6f:7d:c1:74:fe:00:e7:d4:53:3a:0b:bd:d0:81:ff:7b:7c: a4:e5:32:b8:0b:88:18:a5:0b:27:c6:52:d7:c5:6c:51:89:21: 92:c2:25:62:c8:f8:c3:bd:85:a2:78:49:79:11:0b:91:bc:39: fd:b9:08:4c:7b:94:29:c5:cb:3d:15:d2:4d:71:a5:1c:a2:ce: 95:59:ff:d4:be:40:f1:65:ec:c3:d7:71:92:d2:c4:32:34:9f: 56:00:f1:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoYbU69RgTdP2Ya8A99ihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhM2QzZTk0OTJiMTFjNDY2OTE1NWI3YzhlZTRmMTQ3NTRi ODUyMjIwHhcNMjUxMjMwMDUwMTAwWhcNMjUxMjMxMDUwMTAwWjAzMTEwLwYDVQQD Eyg0MDZiNWNiYTJiMzhkZTA3MDY0NjQxMDViYWFiMWVkZWJkMTM3NjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7F03xWjwRsuDD/LfLBmcNh+quzK mkCaBHe2VIc0ahkJZ5y25xCGavktRdz58n6M3Tdi7yBlrZT0B8cpNWmNpnxWVW+l tRZ4ZtVxOJuCtna81POTzX082cXvIPL146kOlk1buqAQb8zK7dIHRSYiwHJ31uUJ jCoxUoQeEN2vswItERpfIOotvmQVNIegnid+YILpFEdQ77ByrBuq7oevN+0W01vZ Eb8+zyY+BrDIHrs6ybU/xaGZIVA0yBu8O6ilOJdMXFpD6Hm4DdV2bOPGCbZz1pZU V2Bgzdkz9BDY6cAaXyspLCMgpZHgu7ol8C3oKwc2UQ6DPpWO4alxyEljrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBrXLorON4HBkZBBbqrHt69E3YcMB8GA1UdIwQY MBaAFNo9PpSSsRxGaRVbfI7k8UdUuFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUt MDQxNDQ4OGFlMDgyLzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUtMDQxNDQ4OGFlMDgy LzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqN3T4PF y1MASK4Hiy9dZuR0nem9DaQNIcyTW6pONGnjHeNj+npeAwIvpDdTeByZSzzvtgj6 JTHIeW+n834TM7Ma7dbyDMcUHeaEF7CLBq88UHuUy3vM1epVd+iyIzPNmWyOFMl/ Zist4C7yVgFdZjN52YYAIKiQOc1f68vcrhf8BeR2gRzD2Y/rjkJW5xrVOxDIJsVW ZCN3+hkE/7cErytFDm99wXT+AOfUUzoLvdCB/3t8pOUyuAuIGKULJ8ZS18VsUYkh ksIlYsj4w72FonhJeRELkbw5/bkITHuUKcXLPRXSTXGlHKLOlVn/1L5A8WXsw9dx ktLEMjSfVgDx4g== -----END CERTIFICATE-----Generated at Tue Dec 30 07:07:09 2025 by rpki-client