This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json) Hash identifier: x81cYFNhhWGhE8qwheaeM5xnponuiXjOaPjTgsrabzI= Subject key identifier: 27:60:C1:41:6B:2F:3B:E9:6E:08:CD:E3:69:0F:9A:BF:A5:FD:83:46 Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b Certificate serial: 019B3CB4EC4D1FDC06567B20E8336F7CE8D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 17:00:48 +0000 Manifest this update: Sat 20 Dec 2025 17:00:48 +0000 Manifest next update: Sun 21 Dec 2025 17:00:48 +0000 Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: c8PMvZl0S+bqWKD6mrpxwrxCNZI6YzxJNjnWardbKOU=) 2: tC1yV2tBIFtyur1CynjIgKWGcBM.roa (hash: 1+DYEAvIp/jbF3nPZX2n/Pi9ZPPyvPQVRKTGpXSrouQ=) 3: yHaEkoOTCPurcY3b0F-9VL88Kwc.roa (hash: Y+GSgGL/KpLcJxeK38gow6fyI44wgNDdjmQduqWLn3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:ec:4d:1f:dc:06:56:7b:20:e8:33:6f:7c:e8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b Validity Not Before: Dec 20 17:00:48 2025 GMT Not After : Dec 21 17:00:48 2025 GMT Subject: CN=2760c1416b2f3be96e08cde3690f9abfa5fd8346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:4b:c0:b2:d7:80:c2:6b:b1:9b:ef:06:a2: 4a:86:d5:ec:d2:63:e7:32:b8:d6:66:51:90:ef:35: b2:a7:69:54:eb:f0:49:d3:41:4f:90:6e:b6:df:b0: 73:1b:33:06:44:bf:9e:5d:ed:7e:40:24:1d:d0:ae: 22:4c:2f:9a:dc:44:b9:2d:0c:3a:15:a4:d4:91:f1: a2:cd:21:ce:7d:28:e6:2c:01:37:85:d0:16:03:6b: 0f:d9:e0:ef:0e:7d:f8:86:2f:9a:da:3d:d7:4c:bc: bd:94:07:81:c6:05:d6:09:b4:a1:4f:e9:fe:c3:c0: 08:11:6a:dd:14:df:f1:b0:b2:4e:c2:f4:24:bd:7e: 12:cf:60:b6:0f:0e:4f:65:4a:ad:d0:0c:b0:04:25: bc:f9:3c:16:c1:14:b6:44:b5:d0:58:16:31:5f:ea: df:40:20:64:d4:6c:32:97:b4:56:24:cd:fa:e6:c2: dc:75:1f:fe:4a:94:f1:48:b1:67:db:47:97:de:bc: a3:e5:a6:b8:fe:35:6a:e0:98:ee:ab:ef:78:76:98: 9e:d2:23:f3:96:96:c9:e9:f3:5d:10:79:45:87:b1: 56:70:db:51:e8:12:a7:1d:c0:a2:88:ee:31:a8:7e: 4b:4f:4d:88:e9:10:af:9b:95:77:be:03:0f:91:de: 2d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:60:C1:41:6B:2F:3B:E9:6E:08:CD:E3:69:0F:9A:BF:A5:FD:83:46 X509v3 Authority Key Identifier: keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d0:d8:97:7f:29:4b:ef:f2:bc:4b:57:c9:51:74:30:b1:48: e8:dc:5d:eb:82:75:08:21:15:71:6c:6f:ee:0c:2a:04:0d:cf: 24:4d:b8:ff:92:5d:aa:2b:eb:16:c8:b5:e1:3f:28:92:ba:91: f0:59:ed:3a:cc:a1:7f:56:3f:73:19:19:02:36:ff:a7:e2:cb: 42:ba:4c:f8:a8:7d:9a:56:40:0f:76:9e:ed:d7:3a:5c:10:23: b0:65:da:76:84:0b:aa:8a:de:ef:43:72:20:36:3a:44:56:2f: 81:a9:71:25:d8:b3:31:17:3c:16:9f:b8:c8:e4:27:42:d8:3a: f0:07:11:b5:01:a8:68:98:a1:bd:4d:d0:11:95:71:02:5b:be: cb:ab:40:f5:41:af:2f:71:31:d5:dd:93:0d:cb:48:4d:07:1f: 57:fb:57:b4:e9:77:f3:1e:aa:23:41:74:0d:f1:c4:0b:7c:20: 7f:cf:da:67:d3:67:0f:bf:e0:9f:3b:1b:0a:69:66:e2:7e:bc: d4:0d:f7:25:5d:5b:9d:5c:7f:f8:48:82:cd:b2:83:75:de:63: cc:94:95:c4:e4:48:71:6e:2c:de:17:2e:08:ee:1d:6b:b0:5c: 76:c0:d9:9e:49:1c:a2:47:71:c2:02:63:f7:6f:ce:ee:72:37: d4:89:e6:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tOxNH9wGVnsg6DNvfOjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzc5ZDI4NTViODk3NDE4MjA4ZDQ3YmE2ZTUxNDYwMDE1 YjVkN2IwHhcNMjUxMjIwMTcwMDQ4WhcNMjUxMjIxMTcwMDQ4WjAzMTEwLwYDVQQD EygyNzYwYzE0MTZiMmYzYmU5NmUwOGNkZTM2OTBmOWFiZmE1ZmQ4MzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0ZLwLLXgMJrsZvvBqJKhtXs0mPn MrjWZlGQ7zWyp2lU6/BJ00FPkG6237BzGzMGRL+eXe1+QCQd0K4iTC+a3ES5LQw6 FaTUkfGizSHOfSjmLAE3hdAWA2sP2eDvDn34hi+a2j3XTLy9lAeBxgXWCbShT+n+ w8AIEWrdFN/xsLJOwvQkvX4Sz2C2Dw5PZUqt0AywBCW8+TwWwRS2RLXQWBYxX+rf QCBk1Gwyl7RWJM365sLcdR/+SpTxSLFn20eX3ryj5aa4/jVq4Jjuq+94dpie0iPz lpbJ6fNdEHlFh7FWcNtR6BKnHcCiiO4xqH5LT02I6RCvm5V3vgMPkd4tUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdgwUFrLzvpbgjN42kPmr+l/YNGMB8GA1UdIwQY MBaAFNrHnShVuJdBggjUe6blFGABW117MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDct NDQ1ZDQ1ODhjMzEyLzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDctNDQ1ZDQ1ODhjMzEy LzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9DYl38p S+/yvEtXyVF0MLFI6Nxd64J1CCEVcWxv7gwqBA3PJE24/5JdqivrFsi14T8okrqR 8FntOsyhf1Y/cxkZAjb/p+LLQrpM+Kh9mlZAD3ae7dc6XBAjsGXadoQLqore70Ny IDY6RFYvgalxJdizMRc8Fp+4yOQnQtg68AcRtQGoaJihvU3QEZVxAlu+y6tA9UGv L3Ex1d2TDctITQcfV/tXtOl38x6qI0F0DfHEC3wgf8/aZ9NnD7/gnzsbCmlm4n68 1A33JV1bnVx/+EiCzbKDdd5jzJSVxORIcW4s3hcuCO4da7BcdsDZnkkcokdxwgJj 92/O7nI31Inm5Q== -----END CERTIFICATE-----Generated at Sat Dec 20 19:02:34 2025 by rpki-client