This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft File: 2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json) Hash identifier: gYuhS3OYyuBJlvUHFZ7GsPnGy3wqORVboTNOVouk+ro= Subject key identifier: 2F:DA:55:A0:6F:C6:BF:16:95:B9:FA:FA:D3:E1:5C:55:05:4F:BA:E5 Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3 Certificate issuer: /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3 Certificate serial: 019B4F60456E250909EB9719379A2830892E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 08:01:07 +0000 Manifest this update: Wed 24 Dec 2025 08:01:07 +0000 Manifest next update: Thu 25 Dec 2025 08:01:07 +0000 Files and hashes: 1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: +x9VSQs67liebFn4TFkyi92ctDUNAY27NXj0tKX38xg=) 2: 5ZXhnjW9kmttlUXf2RDTyr9aXfs.roa (hash: vPUm/BYZ8ccBTBvwoMgmMnzKo9RChAfgHExaHYb8jn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:45:6e:25:09:09:eb:97:19:37:9a:28:30:89:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3 Validity Not Before: Dec 24 08:01:07 2025 GMT Not After : Dec 25 08:01:07 2025 GMT Subject: CN=2fda55a06fc6bf1695b9fafad3e15c55054fbae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f2:21:47:58:9d:ee:47:87:b8:c2:8f:01:63: 54:4f:f3:91:19:95:1d:3f:42:a3:ba:8c:69:28:18: a9:f1:ce:33:c5:4b:de:b9:44:92:90:86:8c:9e:61: db:1e:3d:30:95:56:4c:76:7b:32:ac:62:10:3a:19: ea:89:41:ba:ba:85:12:4b:d9:24:8f:ee:f0:bb:5e: 38:77:8c:1b:37:41:4c:d7:1f:0e:f1:3b:ff:fe:ed: 01:4d:f2:85:20:5d:54:26:84:df:81:e9:83:53:d8: 17:5a:97:c4:3f:19:37:41:c1:1d:67:96:62:48:66: 8b:65:0b:6e:42:70:67:a5:f8:08:b5:2d:1b:bb:c4: b8:e5:59:97:a9:30:82:43:ea:6c:d8:7e:5e:0e:8e: e6:13:91:c6:22:16:53:40:e6:d8:64:3d:f3:f9:07: 74:23:74:cc:de:14:e1:e9:2c:93:76:57:d6:05:08: 8f:c1:01:4f:68:72:c8:3c:a9:28:03:97:3f:f6:4e: 02:70:4d:9a:56:51:b3:a0:0c:25:75:90:05:06:85: 0a:aa:ac:a2:bc:23:c8:07:41:52:27:08:9e:fc:af: 3c:04:61:40:07:9c:be:4e:be:37:da:1c:04:b9:cd: 10:16:6a:23:13:00:ef:16:6e:1b:d0:62:e3:de:f3: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DA:55:A0:6F:C6:BF:16:95:B9:FA:FA:D3:E1:5C:55:05:4F:BA:E5 X509v3 Authority Key Identifier: keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ff:09:b6:8c:d0:95:9e:6b:da:f4:33:ea:0f:41:a6:a6:c3: 9b:ae:20:65:67:06:f4:29:ba:c0:a3:fd:bf:07:e7:fd:cb:e6: a0:6d:c2:f1:75:42:14:f9:b9:26:ac:bb:4d:d3:0e:d4:f1:f5: ab:43:fd:48:3f:50:e9:6a:f9:1d:19:da:11:26:69:c2:1a:74: 81:7e:83:6a:e8:5a:30:b3:33:15:99:76:32:bd:8f:15:f6:7b: 3b:cd:14:07:22:a5:ce:f0:ff:dd:2f:53:8b:7f:11:70:41:c4: e9:d8:48:74:79:63:15:bc:04:cd:2a:9b:4c:63:9f:8e:c1:8d: 0a:11:94:29:02:cf:88:b9:db:df:e1:19:f5:ff:a7:d4:b8:a1: de:41:ea:a1:41:58:90:e7:02:9e:73:29:27:a8:93:3a:a6:93: 2b:41:7a:f2:43:fb:d1:e8:68:04:17:1c:40:0d:f8:dd:0e:bc: 24:7e:a1:a6:d4:e5:c6:ab:31:ce:8a:de:e7:4d:56:fc:70:48: 8e:fc:07:b5:ea:5a:27:bd:51:58:e9:52:e4:d4:a1:53:e0:3c: 39:2d:20:ef:1a:33:4f:be:80:6f:1a:17:bf:a3:5a:ea:c1:2c: f7:9a:07:e1:9b:01:f8:1a:e3:39:7e:6c:6d:86:2d:cc:b3:60: 54:ea:22:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYEVuJQkJ65cZN5ooMIkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZDdhMGIwMDEwMmEyODQxNmUzMDkzYjU3NjVhMGIyNzc1 NWNjZjMwHhcNMjUxMjI0MDgwMTA3WhcNMjUxMjI1MDgwMTA3WjAzMTEwLwYDVQQD EygyZmRhNTVhMDZmYzZiZjE2OTViOWZhZmFkM2UxNWM1NTA1NGZiYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfIhR1id7keHuMKPAWNUT/ORGZUd P0KjuoxpKBip8c4zxUveuUSSkIaMnmHbHj0wlVZMdnsyrGIQOhnqiUG6uoUSS9kk j+7wu144d4wbN0FM1x8O8Tv//u0BTfKFIF1UJoTfgemDU9gXWpfEPxk3QcEdZ5Zi SGaLZQtuQnBnpfgItS0bu8S45VmXqTCCQ+ps2H5eDo7mE5HGIhZTQObYZD3z+Qd0 I3TM3hTh6SyTdlfWBQiPwQFPaHLIPKkoA5c/9k4CcE2aVlGzoAwldZAFBoUKqqyi vCPIB0FSJwie/K88BGFAB5y+Tr432hwEuc0QFmojEwDvFm4b0GLj3vMTOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/aVaBvxr8Wlbn6+tPhXFUFT7rlMB8GA1UdIwQY MBaAFNrXoLABAqKEFuMJO1dloLJ3VczzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnRlZ3NBRUNvb1FXNHdrN1YyV2dzbmRWelBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMmNiMTYtOWMxNi00MGIxLWFjOGMt OTU5ZGMyMWU5MjkzLzEvMnRlZ3NBRUNvb1FXNHdrN1YyV2dzbmRWelBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMmNiMTYtOWMxNi00MGIxLWFjOGMtOTU5ZGMyMWU5Mjkz LzEvMnRlZ3NBRUNvb1FXNHdrN1YyV2dzbmRWelBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhP8JtozQ lZ5r2vQz6g9BpqbDm64gZWcG9Cm6wKP9vwfn/cvmoG3C8XVCFPm5Jqy7TdMO1PH1 q0P9SD9Q6Wr5HRnaESZpwhp0gX6DauhaMLMzFZl2Mr2PFfZ7O80UByKlzvD/3S9T i38RcEHE6dhIdHljFbwEzSqbTGOfjsGNChGUKQLPiLnb3+EZ9f+n1Lih3kHqoUFY kOcCnnMpJ6iTOqaTK0F68kP70ehoBBccQA343Q68JH6hptTlxqsxzore501W/HBI jvwHtepaJ71RWOlS5NShU+A8OS0g7xozT76AbxoXv6Na6sEs95oH4ZsB+BrjOX5s bYYtzLNgVOoiPg== -----END CERTIFICATE-----Generated at Wed Dec 24 09:19:05 2025 by rpki-client