This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json) Hash identifier: rP+szdiU8y4KxD5OPN59//8mXUrsl/Rs7cVmUFrgsPQ= Subject key identifier: 23:9F:C6:52:24:36:44:5D:7C:55:06:E1:86:98:BD:49:18:AF:17:E6 Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9 Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9 Certificate serial: 019B35A0A0D960BA0C41BC88F82D17350EAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 08:01:17 +0000 Manifest this update: Fri 19 Dec 2025 08:01:17 +0000 Manifest next update: Sat 20 Dec 2025 08:01:17 +0000 Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: QgIIw2obcOMZIxsplqB8QkO7gXAIg99W4yN8t6CVIUA=) 2: p23wwYN_BcdLiJY0vIjxBTg9FfA.roa (hash: BpBe3bEGzQ2vJJNcd5ELYkyQlNL9ofFCJ83jKn6lQFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:a0:d9:60:ba:0c:41:bc:88:f8:2d:17:35:0e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9 Validity Not Before: Dec 19 08:01:17 2025 GMT Not After : Dec 20 08:01:17 2025 GMT Subject: CN=239fc6522436445d7c5506e18698bd4918af17e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:6c:cb:90:9f:6e:bf:5e:12:32:41:de:60: 3e:8b:94:ca:cb:98:a3:b7:97:86:36:7a:47:cf:20: 9e:b3:2d:e2:27:9d:33:7b:df:1f:b1:64:e3:ef:bb: 9f:15:70:17:c9:b2:cb:10:55:d7:ee:20:2a:10:bd: 31:7f:c6:4c:5c:03:f5:13:72:6d:d0:a3:12:65:f1: 53:66:4b:41:a4:d2:5a:33:32:ae:ed:4b:be:e5:36: 03:f3:2a:fd:bd:60:17:e0:a7:a0:05:11:9f:ba:dd: 94:b1:75:94:f6:67:48:a4:fd:85:67:23:e1:92:9b: e8:95:96:6e:87:71:fa:f4:48:01:f4:79:97:df:ed: 3c:20:66:0d:df:40:78:10:98:71:32:ac:d7:fd:d1: 60:b5:70:49:63:da:ca:9c:ef:4b:82:40:aa:4d:d9: 6e:a6:62:44:2c:63:7b:78:6a:6f:2a:b7:58:35:de: ab:d2:80:36:f6:e2:2f:a2:cd:71:ad:b0:f3:1c:10: 10:fc:7e:b0:c4:b4:e4:47:4a:71:7b:ff:cf:d5:dc: 32:b1:4c:d0:7c:ae:ea:ca:e4:6c:d3:bd:0f:1c:76: cc:84:95:f5:d2:18:07:67:4a:d9:a2:64:a6:c0:0c: 67:14:b8:6b:d0:f1:8d:9e:9a:95:7a:70:b2:85:26: 3a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9F:C6:52:24:36:44:5D:7C:55:06:E1:86:98:BD:49:18:AF:17:E6 X509v3 Authority Key Identifier: keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0e:4c:5f:1b:e8:3a:48:38:89:d1:20:89:73:5d:31:36:4b: f4:b5:68:e8:1e:e7:6f:77:fb:77:9f:91:b2:5c:9d:a1:5e:a2: f3:6e:0f:6a:4c:26:95:11:71:42:7e:58:51:50:14:c3:ca:7d: 19:b4:ab:36:60:d4:29:bd:1c:19:0c:5d:1b:4d:2d:1d:0b:33: 01:e7:07:3e:75:08:37:93:2b:ef:91:47:98:bf:c5:12:a1:1f: b5:d4:4c:eb:57:a4:5c:84:1b:b6:18:5b:d4:eb:81:81:8c:36: 16:35:2f:d8:58:4b:83:74:76:4e:c9:96:fb:21:b2:d1:73:7e: 6b:cb:bf:85:40:dd:77:34:2c:da:13:7c:c6:cd:ec:cf:cd:73: b8:80:97:ee:06:14:16:41:81:13:1a:70:90:6d:d3:d6:ab:52: 74:a2:e7:0b:1d:d2:c2:72:bc:db:2a:fd:5b:ca:63:6e:c4:a1: 39:9e:f0:ad:21:1d:88:c9:64:c2:a7:5a:03:81:1a:b3:f5:88: 22:e3:61:d2:88:8d:14:d4:9e:6a:52:dd:b9:da:1e:0e:5a:d1: ab:5b:55:6d:93:35:4a:fe:b3:5c:89:81:90:11:c4:f5:1f:fc: ae:e1:73:87:0e:bb:76:97:45:c2:6d:1e:85:53:71:7a:96:36: 86:fd:c7:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oKDZYLoMQbyI+C0XNQ6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjVkMDNmYzE4ZjJmNDJjZGE1MDM4NjlkZTE5NGZkOGNj MjFhYTkwHhcNMjUxMjE5MDgwMTE3WhcNMjUxMjIwMDgwMTE3WjAzMTEwLwYDVQQD EygyMzlmYzY1MjI0MzY0NDVkN2M1NTA2ZTE4Njk4YmQ0OTE4YWYxN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXpsy5Cfbr9eEjJB3mA+i5TKy5ij t5eGNnpHzyCesy3iJ50ze98fsWTj77ufFXAXybLLEFXX7iAqEL0xf8ZMXAP1E3Jt 0KMSZfFTZktBpNJaMzKu7Uu+5TYD8yr9vWAX4KegBRGfut2UsXWU9mdIpP2FZyPh kpvolZZuh3H69EgB9HmX3+08IGYN30B4EJhxMqzX/dFgtXBJY9rKnO9LgkCqTdlu pmJELGN7eGpvKrdYNd6r0oA29uIvos1xrbDzHBAQ/H6wxLTkR0pxe//P1dwysUzQ fK7qyuRs070PHHbMhJX10hgHZ0rZomSmwAxnFLhr0PGNnpqVenCyhSY6RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOfxlIkNkRdfFUG4YaYvUkYrxfmMB8GA1UdIwQY MBaAFNsl0D/Bjy9CzaUDhp3hlP2MwhqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlYUVA4R1BMMExOcFFPR25lR1VfWXpDR3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81YzIyYzYtN2RjMy00YzhjLTgyYWMt OTM2MTc1YWQyZWIwLzEvMnlYUVA4R1BMMExOcFFPR25lR1VfWXpDR3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81YzIyYzYtN2RjMy00YzhjLTgyYWMtOTM2MTc1YWQyZWIw LzEvMnlYUVA4R1BMMExOcFFPR25lR1VfWXpDR3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnA5MXxvo Okg4idEgiXNdMTZL9LVo6B7nb3f7d5+RslydoV6i824PakwmlRFxQn5YUVAUw8p9 GbSrNmDUKb0cGQxdG00tHQszAecHPnUIN5Mr75FHmL/FEqEftdRM61ekXIQbthhb 1OuBgYw2FjUv2FhLg3R2TsmW+yGy0XN+a8u/hUDddzQs2hN8xs3sz81zuICX7gYU FkGBExpwkG3T1qtSdKLnCx3SwnK82yr9W8pjbsShOZ7wrSEdiMlkwqdaA4Eas/WI IuNh0oiNFNSealLdudoeDlrRq1tVbZM1Sv6zXImBkBHE9R/8ruFzhw67dpdFwm0e hVNxepY2hv3Hyw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:22:21 2025 by rpki-client