This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json) Hash identifier: lsZozAPRBYodPcxxmcZtkrjQ/fzf1JFxTEjZ95DZ4u4= Subject key identifier: 08:99:8F:74:F3:11:C4:D5:B8:38:AB:C9:F8:D2:4D:76:A6:E7:75:58 Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff Certificate serial: 019B41A47B1864108BF7B39F06D48D7500DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 16:00:56 +0000 Manifest this update: Sun 21 Dec 2025 16:00:56 +0000 Manifest next update: Mon 22 Dec 2025 16:00:56 +0000 Files and hashes: 1: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: 9IrZfXhNyZ+Bg/tSpFt0ojivTByFkcI07jgR+7JRMm0=) 2: I3BClUbx_tYnuY_rgQtQWY87dYI.roa (hash: hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:7b:18:64:10:8b:f7:b3:9f:06:d4:8d:75:00:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff Validity Not Before: Dec 21 16:00:56 2025 GMT Not After : Dec 22 16:00:56 2025 GMT Subject: CN=08998f74f311c4d5b838abc9f8d24d76a6e77558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f3:c2:b8:85:9a:0f:b8:63:e6:a3:e6:2a:be: e5:7b:c5:f4:fe:15:61:5d:5d:47:e0:05:0b:b8:a0: 34:53:22:ea:3c:d7:f7:79:f4:59:5d:38:53:a9:a8: a7:f8:9c:b6:2d:1b:b9:4c:e8:6e:86:72:58:3f:e2: 74:90:09:75:4c:c4:ab:fd:d8:aa:37:9d:86:10:fa: 26:3e:37:8c:c8:2a:ed:71:21:db:16:0a:25:32:92: b1:10:14:7b:43:e3:0e:b3:1b:9b:4a:23:2b:03:b2: 15:70:03:4f:a3:39:75:35:c9:af:59:c0:ca:35:e2: bb:6d:98:fc:e5:c0:ee:7b:92:73:40:0a:11:95:94: c9:95:6c:42:cf:73:c8:5f:97:b3:16:ea:a9:da:f4: e0:57:96:bd:e2:11:9b:b1:db:68:cd:00:0d:b0:b1: f8:9c:8e:cc:ae:27:51:7d:7d:ee:a2:53:9e:c0:44: 21:7f:50:80:04:eb:fb:cc:1b:e3:8f:75:1c:91:ce: 47:a1:f5:75:04:6d:2e:9f:c6:12:78:e4:25:2f:0d: 0e:43:87:1b:4c:fb:e8:65:df:0a:a7:57:b3:f3:ce: 39:b6:12:a2:27:38:01:bd:d2:72:bf:99:79:69:b0: 33:87:ad:70:7c:ea:6e:1a:6a:3a:2c:12:17:17:53: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:99:8F:74:F3:11:C4:D5:B8:38:AB:C9:F8:D2:4D:76:A6:E7:75:58 X509v3 Authority Key Identifier: keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0c:a3:df:8f:0c:00:2d:52:42:d0:22:57:96:61:6a:17:75: b9:5e:8d:75:51:dd:ea:d0:02:10:ed:9e:56:c0:e1:08:5b:cb: b1:ce:00:e5:66:b7:99:1f:d8:cc:23:b3:5c:bf:5f:12:b0:2e: 5f:44:d1:b7:57:c7:0b:93:98:8a:c8:01:35:b3:5b:ad:33:9c: ab:0e:33:51:6c:a9:f1:39:f8:29:ae:d1:b8:7d:14:d6:30:24: 55:d7:82:04:5f:97:47:4c:fd:26:ee:f8:5c:62:de:a3:d4:43: 58:27:e1:70:02:ab:bb:38:03:16:55:c5:40:9a:84:9d:18:40: c0:4c:7a:1e:36:fe:c3:b4:58:9e:1d:1a:9e:cf:ae:fe:eb:6d: 87:93:88:4e:2e:15:b0:c7:f9:52:9d:93:ea:c9:dd:aa:a7:0b: de:a3:55:77:ad:ae:e1:84:ec:05:fd:13:c3:52:d7:a9:3c:72: e3:87:4f:56:15:3f:50:3f:74:02:63:a5:d1:55:c9:5e:f8:b3: cd:62:1c:a9:e7:28:8b:03:9c:be:ef:60:8b:db:03:24:38:a2: d7:d5:01:6a:50:be:8b:d7:ee:4c:a6:e9:ae:bf:d5:95:ef:c1: ea:1e:9a:5b:ab:b4:3c:3f:60:66:07:bb:fb:6c:ff:f6:00:97: c8:08:d1:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpHsYZBCL97OfBtSNdQDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OWI2YTEwOTdiMWYyNTFmOTVjNTZkYTRlNGFhMzExYjk0 NzBiZmYwHhcNMjUxMjIxMTYwMDU2WhcNMjUxMjIyMTYwMDU2WjAzMTEwLwYDVQQD EygwODk5OGY3NGYzMTFjNGQ1YjgzOGFiYzlmOGQyNGQ3NmE2ZTc3NTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfPCuIWaD7hj5qPmKr7le8X0/hVh XV1H4AULuKA0UyLqPNf3efRZXThTqain+Jy2LRu5TOhuhnJYP+J0kAl1TMSr/diq N52GEPomPjeMyCrtcSHbFgolMpKxEBR7Q+MOsxubSiMrA7IVcANPozl1NcmvWcDK NeK7bZj85cDue5JzQAoRlZTJlWxCz3PIX5ezFuqp2vTgV5a94hGbsdtozQANsLH4 nI7MridRfX3uolOewEQhf1CABOv7zBvjj3Uckc5HofV1BG0un8YSeOQlLw0OQ4cb TPvoZd8Kp1ez8845thKiJzgBvdJyv5l5abAzh61wfOpuGmo6LBIXF1MekwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiZj3TzEcTVuDiryfjSTXam53VYMB8GA1UdIwQY MBaAFNibahCXsfJR+VxW2k5KoxG5Rwv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODIt ZDZkMzQyMmJhZWM4LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODItZDZkMzQyMmJhZWM4 LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgyj348M AC1SQtAiV5Zhahd1uV6NdVHd6tACEO2eVsDhCFvLsc4A5Wa3mR/YzCOzXL9fErAu X0TRt1fHC5OYisgBNbNbrTOcqw4zUWyp8Tn4Ka7RuH0U1jAkVdeCBF+XR0z9Ju74 XGLeo9RDWCfhcAKruzgDFlXFQJqEnRhAwEx6Hjb+w7RYnh0ans+u/utth5OITi4V sMf5Up2T6sndqqcL3qNVd62u4YTsBf0Tw1LXqTxy44dPVhU/UD90AmOl0VXJXviz zWIcqecoiwOcvu9gi9sDJDii19UBalC+i9fuTKbprr/Vle/B6h6aW6u0PD9gZge7 +2z/9gCXyAjRFw== -----END CERTIFICATE-----Generated at Mon Dec 22 01:24:49 2025 by rpki-client