This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json) Hash identifier: 7RA75u56KOFofVejUqBSLR2kUehRy+eQ3VpvuoC79GE= Subject key identifier: 56:5A:64:69:86:6B:3A:36:94:07:5E:09:3E:F4:BF:9C:46:87:36:AB Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70 Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370 Certificate serial: 019B3DC8081745474391DB726D5D2AF7E52D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft Manifest number: 04A8 Signing time: Sat 20 Dec 2025 22:01:17 +0000 Manifest this update: Sat 20 Dec 2025 22:01:17 +0000 Manifest next update: Sun 21 Dec 2025 22:01:17 +0000 Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: c8dNNNYOiT+fW5fWxW1eJmcaIak3ahR6yv4zFMcUPnw=) 2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:08:17:45:47:43:91:db:72:6d:5d:2a:f7:e5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370 Validity Not Before: Dec 20 22:01:17 2025 GMT Not After : Dec 21 22:01:17 2025 GMT Subject: CN=565a6469866b3a3694075e093ef4bf9c468736ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:13:1c:d1:a9:e6:8f:28:60:36:80:a2:7b:1b: f9:11:d9:74:49:59:27:1d:cf:c5:61:b8:97:ec:9c: 0d:28:4f:8f:b3:ab:e2:ec:62:55:73:f9:81:bf:37: da:7f:c9:f7:2a:18:d9:47:4b:02:a6:3a:1c:91:b5: 8d:80:e1:c7:1c:a2:54:2d:0a:38:68:37:a2:87:89: 3b:78:fe:16:91:14:30:61:4c:c3:c4:c3:80:09:17: 52:f9:f8:c5:21:c4:1f:6c:83:5c:e1:04:1c:03:f2: e4:16:50:7f:8a:02:63:90:bb:78:1b:71:d0:45:0c: ee:3d:10:d3:22:31:c0:c5:dc:7d:36:66:ac:49:7c: d3:51:92:d2:be:64:5d:fa:f6:47:76:d2:ce:65:7c: 47:34:18:8d:3a:07:1e:8a:f8:10:66:f4:ce:1b:1c: 82:18:f1:3b:87:59:58:9d:94:58:d7:2c:88:5e:2e: c1:a1:ca:10:90:36:5a:e3:eb:34:0c:76:8a:ce:8c: 8d:82:d0:4f:66:91:aa:e9:08:11:41:f8:32:49:f2: 99:47:79:83:19:75:e0:18:ac:a9:1a:c8:f7:f8:06: 36:be:53:01:57:e7:ed:db:64:fd:b8:94:84:29:15: d8:3e:9c:b0:9d:27:70:31:e5:0e:40:6a:e7:55:2c: 04:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5A:64:69:86:6B:3A:36:94:07:5E:09:3E:F4:BF:9C:46:87:36:AB X509v3 Authority Key Identifier: keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:27:d6:48:81:c2:a1:b7:cd:53:04:07:88:4b:1b:d3:47:79: db:78:35:0a:6b:37:fd:3e:68:d1:cd:de:67:9b:48:dd:a1:c3: ae:6f:e1:a2:af:db:b0:57:0c:36:55:87:43:6b:19:1f:b2:96: be:6f:30:34:44:0b:57:92:67:e0:2a:48:15:79:2f:09:a8:bc: db:e4:5d:f0:1a:a6:d9:33:fc:82:78:6d:40:11:ea:c3:4b:87: 6f:6e:3a:79:d0:05:ff:26:76:90:f1:2f:3a:26:8c:c4:bd:2b: 8e:6f:42:cd:9b:09:a3:2e:8c:e9:43:8f:56:15:20:ef:66:c0: ae:75:6c:35:11:f4:53:e0:63:fe:7c:8b:e5:48:6a:90:98:c0: c9:a2:22:a8:85:c2:ef:35:c1:5a:cb:3e:54:1e:37:86:c6:8a: 16:dc:ba:15:86:84:d3:b5:fc:30:db:6f:71:a5:8e:15:af:5b: c4:fb:bd:29:4b:6a:be:8f:d7:b8:28:db:8a:cc:d7:17:e5:b8: d3:8a:71:39:83:fb:0f:fe:60:9b:28:93:80:c5:0a:b7:30:26: e6:7c:75:8c:f6:92:16:a1:91:22:d4:2b:78:fd:39:01:e1:82: db:b2:d3:5c:1c:92:59:58:86:92:fa:ef:84:b7:ff:b9:07:c6: 77:39:80:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yAgXRUdDkdtybV0q9+UtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYTEyZWQ2M2E0ODRjMDNkNGMzYzI3MWNiMmVmZjA1NTNl MTIzNzAwHhcNMjUxMjIwMjIwMTE3WhcNMjUxMjIxMjIwMTE3WjAzMTEwLwYDVQQD Eyg1NjVhNjQ2OTg2NmIzYTM2OTQwNzVlMDkzZWY0YmY5YzQ2ODczNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxMc0anmjyhgNoCiexv5Edl0SVkn Hc/FYbiX7JwNKE+Ps6vi7GJVc/mBvzfaf8n3KhjZR0sCpjockbWNgOHHHKJULQo4 aDeih4k7eP4WkRQwYUzDxMOACRdS+fjFIcQfbINc4QQcA/LkFlB/igJjkLt4G3HQ RQzuPRDTIjHAxdx9NmasSXzTUZLSvmRd+vZHdtLOZXxHNBiNOgceivgQZvTOGxyC GPE7h1lYnZRY1yyIXi7BocoQkDZa4+s0DHaKzoyNgtBPZpGq6QgRQfgySfKZR3mD GXXgGKypGsj3+AY2vlMBV+ft22T9uJSEKRXYPpywnSdwMeUOQGrnVSwEMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZaZGmGazo2lAdeCT70v5xGhzarMB8GA1UdIwQY MBaAFNqhLtY6SEwD1MPCccsu/wVT4SNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYTM3NGYtZDY5NC00NWUyLTk0ZTIt OTFhMDAzNGE5ODllLzEvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9kYTM3NGYtZDY5NC00NWUyLTk0ZTItOTFhMDAzNGE5ODll LzEvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdifWSIHC obfNUwQHiEsb00d523g1Cms3/T5o0c3eZ5tI3aHDrm/hoq/bsFcMNlWHQ2sZH7KW vm8wNEQLV5Jn4CpIFXkvCai82+Rd8Bqm2TP8gnhtQBHqw0uHb246edAF/yZ2kPEv OiaMxL0rjm9CzZsJoy6M6UOPVhUg72bArnVsNRH0U+Bj/nyL5UhqkJjAyaIiqIXC 7zXBWss+VB43hsaKFty6FYaE07X8MNtvcaWOFa9bxPu9KUtqvo/XuCjbiszXF+W4 04pxOYP7D/5gmyiTgMUKtzAm5nx1jPaSFqGRItQreP05AeGC27LTXBySWViGkvrv hLf/uQfGdzmAYA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:25:41 2025 by rpki-client