This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json) Hash identifier: KZPc8LqbvSOGhwygLpBt8Lep+nbohjWZY8Bgt0TIV7k= Subject key identifier: 0D:10:AF:F0:40:13:C8:FE:33:8F:70:BA:1B:E2:9A:40:5E:93:B7:45 Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65 Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65 Certificate serial: 019B44DC69C714F42158720F40FA63E5AD4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft Manifest number: 018A Signing time: Mon 22 Dec 2025 07:00:54 +0000 Manifest this update: Mon 22 Dec 2025 07:00:54 +0000 Manifest next update: Tue 23 Dec 2025 07:00:54 +0000 Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: 3x9EyvWbKvJflTYM5gOzQENeivLwplGnxdk1EO3sYVo=) 2: Yl5dVHvt8TLEuXDW_2N88snHkxY.roa (hash: RVpoQeieFNCy2NDCVSw5A9nvcWMxgvqJyoDHS7AWVvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:69:c7:14:f4:21:58:72:0f:40:fa:63:e5:ad:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65 Validity Not Before: Dec 22 07:00:54 2025 GMT Not After : Dec 23 07:00:54 2025 GMT Subject: CN=0d10aff04013c8fe338f70ba1be29a405e93b745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:3f:4c:3b:20:c5:ee:c6:47:a1:07:e5:c6: ee:4e:d0:2b:20:8f:3f:23:86:16:b9:1b:06:c0:f5: 70:07:b1:4e:89:68:6b:0e:6e:c9:fc:07:01:e0:19: f1:a4:59:fb:c5:60:57:f1:6f:e5:25:88:8b:29:12: 89:38:21:4a:56:64:83:a0:ec:e8:88:57:00:d5:6b: e8:d9:75:f6:e2:d6:68:a9:00:44:0b:c6:58:44:af: 66:ec:b4:ec:cd:a7:ac:ac:64:1b:97:81:8f:2f:e6: f4:3d:e8:93:52:2c:e2:4d:b7:20:cc:65:38:b4:3e: b1:02:96:3a:cc:a2:18:f0:91:dd:00:04:c3:1a:d6: 41:29:af:1a:4b:46:2e:6e:fd:30:7e:38:8e:9a:1c: 16:03:b1:b6:95:c5:77:eb:e7:18:5b:5a:9f:f8:8e: f9:1c:eb:61:1c:b4:6b:53:47:51:8c:e4:0a:88:22: 46:69:c0:5f:9a:de:fa:da:d5:8b:b8:53:93:7d:72: 74:9a:62:6f:f5:0b:18:67:6a:14:74:c9:2c:4b:53: a1:27:99:c1:2d:3c:00:34:3a:83:f8:71:3c:8e:1a: 37:d4:e5:c3:0c:84:54:e2:dc:b2:ad:ed:3b:f0:a5: 9b:3b:0e:5f:e7:9f:60:0d:5f:39:d6:60:dc:ca:99: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:10:AF:F0:40:13:C8:FE:33:8F:70:BA:1B:E2:9A:40:5E:93:B7:45 X509v3 Authority Key Identifier: keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c7:68:ba:c4:c8:e3:ec:2f:8a:68:d1:aa:ad:03:5d:d0:04: 30:ff:4e:83:2b:96:43:65:1e:a5:23:01:f9:16:a3:06:ca:48: f9:9e:6a:0d:c5:d0:70:00:a0:e5:02:49:81:c2:15:5a:a9:a4: bb:f5:4e:8f:5c:3b:3f:79:f4:24:ec:5d:37:2d:d1:58:ce:85: c1:a8:54:d7:21:52:bf:ac:9a:99:a6:a2:11:60:60:4e:4d:b1: fd:06:04:22:20:3d:a6:c2:ab:a5:cd:4b:40:b0:76:c8:c3:3b: 89:55:23:1f:90:86:63:e8:3d:2e:25:e9:57:95:a0:02:36:65: ad:73:43:b6:7f:f1:05:16:7c:77:5b:0f:91:c9:f9:90:81:dd: 51:7e:af:bd:3c:46:18:fa:85:c3:2f:39:52:ca:9f:51:83:e4: a4:e4:a2:31:0a:54:38:9d:8a:4b:2d:1a:4a:e4:6d:d0:71:93: 3c:49:5f:49:83:58:b0:86:77:49:86:51:5f:83:ad:0f:04:9f: 5c:2f:e3:c9:7e:18:fd:58:2c:87:a5:04:0f:12:c8:9b:dc:b3: 34:17:16:2a:ed:6d:06:90:ed:cf:5b:27:e6:b6:c5:3f:ab:1c: f1:97:0b:7a:c5:56:2c:b4:fe:74:a9:8a:5a:b5:7c:ee:23:f2: f2:06:a5:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3GnHFPQhWHIPQPpj5a1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTc4NmEwNjllNDkzNGIyNjgxYmI4ZTliMzczODA3OWIy NGVmNjUwHhcNMjUxMjIyMDcwMDU0WhcNMjUxMjIzMDcwMDU0WjAzMTEwLwYDVQQD EygwZDEwYWZmMDQwMTNjOGZlMzM4ZjcwYmExYmUyOWE0MDVlOTNiNzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt10/TDsgxe7GR6EH5cbuTtArII8/ I4YWuRsGwPVwB7FOiWhrDm7J/AcB4BnxpFn7xWBX8W/lJYiLKRKJOCFKVmSDoOzo iFcA1Wvo2XX24tZoqQBEC8ZYRK9m7LTszaesrGQbl4GPL+b0PeiTUiziTbcgzGU4 tD6xApY6zKIY8JHdAATDGtZBKa8aS0Yubv0wfjiOmhwWA7G2lcV36+cYW1qf+I75 HOthHLRrU0dRjOQKiCJGacBfmt762tWLuFOTfXJ0mmJv9QsYZ2oUdMksS1OhJ5nB LTwANDqD+HE8jho31OXDDIRU4tyyre078KWbOw5f559gDV851mDcypn6iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0Qr/BAE8j+M49wuhvimkBek7dFMB8GA1UdIwQY MBaAFNkXhqBp5JNLJoG7jps3OAebJO9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUt NTJjYmE5N2Q5YjllLzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUtNTJjYmE5N2Q5Yjll LzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMdousTI 4+wvimjRqq0DXdAEMP9OgyuWQ2UepSMB+RajBspI+Z5qDcXQcACg5QJJgcIVWqmk u/VOj1w7P3n0JOxdNy3RWM6FwahU1yFSv6yamaaiEWBgTk2x/QYEIiA9psKrpc1L QLB2yMM7iVUjH5CGY+g9LiXpV5WgAjZlrXNDtn/xBRZ8d1sPkcn5kIHdUX6vvTxG GPqFwy85UsqfUYPkpOSiMQpUOJ2KSy0aSuRt0HGTPElfSYNYsIZ3SYZRX4OtDwSf XC/jyX4Y/Vgsh6UEDxLIm9yzNBcWKu1tBpDtz1sn5rbFP6sc8ZcLesVWLLT+dKmK WrV87iPy8gal3w== -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:30 2025 by rpki-client