This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: RJUEeqSheh6SzHd6J5Pxm4sntSG+T0QaSAXUzgGukOM= Subject key identifier: FE:CC:3D:70:C4:5E:70:A5:C1:B2:9D:57:51:3D:CD:33:78:87:CA:07 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019B3DFEF044250D0A1121EA95933092F20D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1797 Signing time: Sat 20 Dec 2025 23:01:16 +0000 Manifest this update: Sat 20 Dec 2025 23:01:16 +0000 Manifest next update: Sun 21 Dec 2025 23:01:16 +0000 Files and hashes: 1: 0nspkNZBD4AF3c6BuZHawbNEn4s.roa (hash: uIJdsMvT5D3zL8bAjl80cE2Pwz5BnxnpyFyZ11QSq50=) 2: 54-UEvGfxV4WPcy4WxLxIFxxE-U.roa (hash: ojna0RnGjI7OjDPWs+roB1Amf6WKyl5pMZi5IPEPWP8=) 3: 5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa (hash: 6mVr252OaOJiHsmGk/+j0aXnhIUGcpjMKQ+02iLXgcA=) 4: HIpztZT__B_f9n2gN6auamR5pIU.roa (hash: rJY52okWB1TeezbKU/iuTbv7tjIWb1W5p6bbeWIcdzo=) 5: LuyH1oX8EXWypVZ7iAaDpvRYVVc.roa (hash: PwqXxZGK4PUOy9TXRGdRnGJ0Q9f2SZmolPNVfAk0WgM=) 6: NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa (hash: tuiwHFcQQ4SB/tCeR0sJ8nBN9XREzDRoO1cXDj6kEqo=) 7: UjPxDMGW7lYqCuTCh7JHOA6hizY.roa (hash: ANkRdXMj6bkHEGkvb/XWLCpMoxX6nYg0dbetuBTbz8U=) 8: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: +lu6ZY3Ud5wILXk64b4XIhpAfTruXcDxCuAmjL49bJU=) 9: cYY9JWownI4dxUC113BsmeB-bPg.asa (hash: mzYcpAgDjivMiDigXGlTibFV5zqA/T/HUHr0MSI0Bk4=) 10: iaTyWoYRTwRbH-8Asj0TijaPuO4.asa (hash: Z8zpBbBj2fntekitrlPrQF77k8Fhh9yLKV2dUy8NxuU=) 11: jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa (hash: /x0Hcf4qFuhf8+J5QzDuB3C52+I2nDMc1dbR/JkR1Cw=) 12: lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa (hash: fjbHrRsPWcRvcVzpQntP9+B1NmK4Bi2Amk0MUakU4gE=) 13: meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa (hash: TMc5toGudrJJLzHO6dJLOGc8MvIeTEaZ3Nzvom9Ftsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:f0:44:25:0d:0a:11:21:ea:95:93:30:92:f2:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Dec 20 23:01:16 2025 GMT Not After : Dec 21 23:01:16 2025 GMT Subject: CN=fecc3d70c45e70a5c1b29d57513dcd337887ca07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:21:8b:70:f6:b3:04:8a:71:98:9e:fd:d8: d5:d7:60:76:12:42:64:6b:e9:02:97:02:73:63:f9: 8a:6b:bc:ff:f8:9c:20:8d:c0:2a:d4:73:e1:f5:0e: e7:9a:03:4a:04:b9:2a:94:87:47:55:80:03:5a:bf: 85:3f:f1:ec:a2:a6:d6:2b:51:64:33:18:be:55:27: f5:cb:1c:f2:6d:24:9d:e7:47:ae:8f:c1:1b:d1:2f: b5:06:d4:0c:76:5f:e8:96:75:64:ce:98:b1:9a:96: 5a:e3:b4:e1:02:9d:dc:88:7e:30:17:39:e6:2c:31: b4:df:2a:e0:2d:8c:33:34:81:c0:49:86:22:5f:4e: 06:29:d8:80:34:a6:4b:4c:5f:23:b7:d1:79:a3:f4: ae:92:75:43:61:19:89:b3:e3:27:99:68:28:ce:e0: 73:1f:95:ca:b1:91:ef:10:83:7b:df:e7:b1:64:29: 48:c4:db:8c:57:3a:b1:e9:e5:02:2d:4d:73:02:dd: 98:3a:a5:f7:7f:55:73:9d:e8:b9:25:19:50:2f:20: 3a:bd:17:bd:b8:aa:0e:09:37:e9:11:bb:c8:83:ac: 41:e2:45:b1:dc:6d:c9:13:44:83:12:52:a0:4a:0d: 87:e1:97:6b:88:ee:23:08:0a:30:d3:3b:8f:60:86: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CC:3D:70:C4:5E:70:A5:C1:B2:9D:57:51:3D:CD:33:78:87:CA:07 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a0:45:58:99:d2:e5:ba:b7:a0:74:4a:33:3b:5a:12:c8:2e: 3e:a8:a8:5d:21:df:cf:8a:01:46:40:2a:4e:f8:68:3b:ba:21: 65:73:ba:9a:3f:49:e1:e3:b5:d0:a2:d9:a5:9b:bb:bb:3a:85: 5c:86:45:d2:cc:76:70:a1:f0:99:5e:26:90:1b:7b:b7:3c:f1: f4:84:fe:6c:df:f7:56:78:f2:16:77:41:f8:5d:c6:22:59:23: 8c:59:28:ce:4f:b2:df:fd:ef:52:54:3b:2f:06:9c:61:55:dd: 0b:dc:b0:08:37:aa:8f:6a:67:e4:11:31:1b:b1:07:84:5a:56: 2a:7a:4e:31:03:c8:7d:05:6d:67:fe:f0:01:66:fe:ee:f8:f6: 5d:6c:a2:b8:19:06:6c:14:5b:00:0a:7a:f4:09:ca:9b:40:53: ca:bc:fd:25:37:fe:59:2a:38:64:c5:b9:b2:f1:11:76:5f:b6: 78:62:2b:44:66:67:ec:08:13:3f:83:1e:a8:84:c5:f7:c2:e8: 52:ba:fd:77:ab:30:19:76:25:fa:01:a0:0e:08:dd:c2:dd:7b: a9:ed:4e:70:af:db:86:ed:3d:e8:35:2a:98:56:e2:97:ab:dc: 63:8c:3f:24:4a:b4:bf:3a:29:9c:22:27:b1:98:85:e9:cb:e6: cf:33:5b:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/vBEJQ0KESHqlZMwkvINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjUxMjIwMjMwMTE2WhcNMjUxMjIxMjMwMTE2WjAzMTEwLwYDVQQD EyhmZWNjM2Q3MGM0NWU3MGE1YzFiMjlkNTc1MTNkY2QzMzc4ODdjYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVMhi3D2swSKcZie/djV12B2EkJk a+kClwJzY/mKa7z/+JwgjcAq1HPh9Q7nmgNKBLkqlIdHVYADWr+FP/HsoqbWK1Fk Mxi+VSf1yxzybSSd50euj8Eb0S+1BtQMdl/olnVkzpixmpZa47ThAp3ciH4wFznm LDG03yrgLYwzNIHASYYiX04GKdiANKZLTF8jt9F5o/SuknVDYRmJs+MnmWgozuBz H5XKsZHvEIN73+exZClIxNuMVzqx6eUCLU1zAt2YOqX3f1Vznei5JRlQLyA6vRe9 uKoOCTfpEbvIg6xB4kWx3G3JE0SDElKgSg2H4ZdriO4jCAow0zuPYIZmUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7MPXDEXnClwbKdV1E9zTN4h8oHMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqBFWJnS 5bq3oHRKMztaEsguPqioXSHfz4oBRkAqTvhoO7ohZXO6mj9J4eO10KLZpZu7uzqF XIZF0sx2cKHwmV4mkBt7tzzx9IT+bN/3VnjyFndB+F3GIlkjjFkozk+y3/3vUlQ7 LwacYVXdC9ywCDeqj2pn5BExG7EHhFpWKnpOMQPIfQVtZ/7wAWb+7vj2XWyiuBkG bBRbAAp69AnKm0BTyrz9JTf+WSo4ZMW5svERdl+2eGIrRGZn7AgTP4MeqITF98Lo Urr9d6swGXYl+gGgDgjdwt17qe1OcK/bhu096DUqmFbil6vcY4w/JEq0vzopnCIn sZiF6cvmzzNb2Q== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:29 2025 by rpki-client