This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft File: m2JkjpE6NkDwMbY6a9krDijhOfs.mft (raw, json) Hash identifier: i3uOq6urFpaVXjk6ctyEktzhuPorKycE9GtCZbSMnc8= Subject key identifier: 54:78:F2:4C:D7:10:BE:87:38:CA:78:EC:95:5F:C7:FF:7F:5B:65:ED Authority key identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB Certificate issuer: /CN=9b62648e913a3640f031b63a6bd92b0e28e139fb Certificate serial: 019B4EF1F2FE1BCD5588DFE2C2B24F00490F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft Manifest number: 032A Signing time: Wed 24 Dec 2025 06:00:37 +0000 Manifest this update: Wed 24 Dec 2025 06:00:37 +0000 Manifest next update: Thu 25 Dec 2025 06:00:37 +0000 Files and hashes: 1: GFs318vhhs43UeJYStMCcJcloVE.roa (hash: W8/O6hKTgxLPwLzEgTm/PKRsS6eSZm8+16PIQciHYr8=) 2: m2JkjpE6NkDwMbY6a9krDijhOfs.crl (hash: 5gY9O7Vt/hfy+QxwX5DmdecGTAF5dGxGXqT5F+uM6EM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f1:f2:fe:1b:cd:55:88:df:e2:c2:b2:4f:00:49:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b62648e913a3640f031b63a6bd92b0e28e139fb Validity Not Before: Dec 24 06:00:37 2025 GMT Not After : Dec 25 06:00:37 2025 GMT Subject: CN=5478f24cd710be8738ca78ec955fc7ff7f5b65ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:dc:a5:0d:71:45:36:4b:07:9a:cd:0c:8b: bc:87:a6:13:8b:26:aa:19:90:5e:53:93:78:93:88: cc:10:b7:4e:2f:92:80:e5:37:1d:d7:88:ba:37:b1: 80:de:74:33:1f:87:1e:ac:c8:7c:ba:89:72:60:14: 09:42:26:9f:e9:ae:e5:1e:cd:51:4e:f8:25:34:8c: f6:0f:05:20:ff:a9:8d:18:f3:f3:47:86:e7:9b:72: 41:57:91:34:d5:86:89:74:43:8c:71:43:cd:de:dd: 74:05:78:39:73:10:47:f3:48:33:4b:a6:80:35:bb: fd:89:d2:74:65:50:d3:d6:7a:3d:fc:80:bd:33:53: e9:a2:99:12:b4:04:f1:79:69:47:62:ac:54:a1:23: 59:21:21:69:c1:e9:99:87:41:92:21:64:f0:e3:04: 0d:7b:7c:cf:ca:2f:20:d8:02:3d:67:9e:71:a3:7d: 0e:94:2c:cb:04:da:f7:6b:52:00:d2:08:69:a8:5f: 4d:ac:0f:f9:3d:86:3c:58:21:4f:d6:45:8f:d8:52: 66:0b:f0:2f:f6:1c:5f:ff:24:d3:7d:f1:d4:66:fe: 52:89:a9:e6:d0:92:e4:0f:35:94:5c:a4:35:c6:c2: d4:af:12:65:6a:fa:b1:7b:4c:94:ac:dc:e4:5d:a7: 64:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:78:F2:4C:D7:10:BE:87:38:CA:78:EC:95:5F:C7:FF:7F:5B:65:ED X509v3 Authority Key Identifier: keyid:9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:89:68:1f:68:57:81:a5:ad:e6:6e:16:c3:ca:b2:a1:34:b9: 17:e3:48:4a:48:93:0b:0c:6e:19:86:94:0e:12:02:bf:39:07: 94:54:b5:b5:c5:25:5c:b6:5d:1b:18:3d:d8:2a:d4:ea:96:f3: 8a:65:c0:cf:58:62:f1:0f:e8:91:b2:cc:55:80:02:39:23:36: 6f:28:d8:b8:e1:0f:03:93:68:e1:84:e1:2b:1f:dc:c2:9e:13: c2:b2:79:e3:2d:d8:01:9a:63:3c:bc:69:21:d0:fb:a9:01:19: 58:b9:95:ee:a5:15:80:3e:f1:7c:83:3e:da:37:0d:ae:b1:ce: 90:c3:07:2a:a6:f7:9b:83:2c:14:a4:0e:79:a7:a1:13:a0:f0: 08:f4:24:fa:46:37:ef:2d:e1:d2:7e:13:64:18:44:87:cb:a8: 0e:93:6e:19:0f:e5:13:98:8c:35:71:e1:13:28:31:98:b1:40: 25:37:67:db:60:22:f8:05:0a:57:9e:3c:41:4f:f2:2a:47:74: 1b:d9:54:10:35:8d:63:93:47:86:88:11:17:56:a5:00:39:eb: 16:0e:5e:bd:56:60:13:63:79:05:80:9b:77:03:98:de:20:01: 99:de:e3:5f:68:84:f0:2a:19:ed:f9:96:59:a0:b8:2b:2f:a4: 76:2b:0a:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8fL+G81ViN/iwrJPAEkPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNjI2NDhlOTEzYTM2NDBmMDMxYjYzYTZiZDkyYjBlMjhl MTM5ZmIwHhcNMjUxMjI0MDYwMDM3WhcNMjUxMjI1MDYwMDM3WjAzMTEwLwYDVQQD Eyg1NDc4ZjI0Y2Q3MTBiZTg3MzhjYTc4ZWM5NTVmYzdmZjdmNWI2NWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLfcpQ1xRTZLB5rNDIu8h6YTiyaq GZBeU5N4k4jMELdOL5KA5Tcd14i6N7GA3nQzH4cerMh8uolyYBQJQiaf6a7lHs1R TvglNIz2DwUg/6mNGPPzR4bnm3JBV5E01YaJdEOMcUPN3t10BXg5cxBH80gzS6aA Nbv9idJ0ZVDT1no9/IC9M1PpopkStATxeWlHYqxUoSNZISFpwemZh0GSIWTw4wQN e3zPyi8g2AI9Z55xo30OlCzLBNr3a1IA0ghpqF9NrA/5PYY8WCFP1kWP2FJmC/Av 9hxf/yTTffHUZv5Sianm0JLkDzWUXKQ1xsLUrxJlavqxe0yUrNzkXadk8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFR48kzXEL6HOMp47JVfx/9/W2XtMB8GA1UdIwQY MBaAFJtiZI6ROjZA8DG2OmvZKw4o4Tn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ODY1ZDctOWZlYS00N2Y2LWEzZmMt OThiZDE1NjAyOWMwLzEvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ODY1ZDctOWZlYS00N2Y2LWEzZmMtOThiZDE1NjAyOWMw LzEvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4loH2hX gaWt5m4Ww8qyoTS5F+NISkiTCwxuGYaUDhICvzkHlFS1tcUlXLZdGxg92CrU6pbz imXAz1hi8Q/okbLMVYACOSM2byjYuOEPA5No4YThKx/cwp4TwrJ54y3YAZpjPLxp IdD7qQEZWLmV7qUVgD7xfIM+2jcNrrHOkMMHKqb3m4MsFKQOeaehE6DwCPQk+kY3 7y3h0n4TZBhEh8uoDpNuGQ/lE5iMNXHhEygxmLFAJTdn22Ai+AUKV548QU/yKkd0 G9lUEDWNY5NHhogRF1alADnrFg5evVZgE2N5BYCbdwOY3iABmd7jX2iE8CoZ7fmW WaC4Ky+kdisKtA== -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:31 2025 by rpki-client