This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json) Hash identifier: mTzAIMXTV+o8sKik9qMSGhuoDWbH/UpRfb6cNYLXamU= Subject key identifier: 8F:01:8A:66:3C:1C:AB:B2:91:8A:6E:55:A0:40:E5:6B:C2:0F:C6:09 Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68 Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68 Certificate serial: 019B416DABA5E3E580C559CFA41AC5F681D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 15:01:04 +0000 Manifest this update: Sun 21 Dec 2025 15:01:04 +0000 Manifest next update: Mon 22 Dec 2025 15:01:04 +0000 Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: tb9XnugoUR5/+OxwVUs2WAGpuhga6MlqqNQVxKkACo8=) 2: wIuWmKQqKRafTdpQCAjgZGdOwSg.roa (hash: FSZWMB16h9Z2ZEIxjWe18pWkdzeyGtdch3JRTJHt/gU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:ab:a5:e3:e5:80:c5:59:cf:a4:1a:c5:f6:81:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68 Validity Not Before: Dec 21 15:01:04 2025 GMT Not After : Dec 22 15:01:04 2025 GMT Subject: CN=8f018a663c1cabb2918a6e55a040e56bc20fc609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:52:d8:66:2a:66:69:3b:a5:4b:66:da:f7: 47:82:10:bf:88:64:9f:a7:55:de:7d:b0:83:77:f1: d2:78:7e:f9:c3:d4:47:be:14:ca:2f:96:0b:51:3b: ce:89:d1:17:0e:e9:45:4f:45:47:eb:bd:21:6b:d4: ba:dc:97:13:44:a8:0c:27:b5:80:12:6f:8f:1a:07: da:2a:f0:5c:56:6f:1e:a5:41:8c:2e:12:2b:4c:bc: cb:62:ce:3b:da:be:2b:09:c1:2e:a5:50:4d:a3:8c: e4:a3:c0:85:ed:8a:c3:52:f0:75:cb:4c:19:57:93: 5e:a8:33:ad:af:c9:5c:d1:d9:fb:6f:3a:cf:d0:3d: d7:2f:53:de:72:9f:92:4e:74:48:a9:be:f1:62:81: 5a:6c:14:b2:57:7b:35:dd:ee:2b:f8:fa:a8:ca:e5: 99:fd:07:a7:0b:06:fe:5d:a2:00:03:c0:d9:a2:bc: 80:56:4e:9f:d7:b6:54:10:b3:57:11:ab:f5:80:9e: b8:88:ca:ea:5f:ea:f7:69:a6:d1:13:44:6b:96:2f: 39:95:65:ba:43:fc:c9:96:81:1c:8b:f8:41:53:de: 1b:64:3a:20:20:d0:11:91:36:a7:e8:95:6b:26:36: 6c:4f:27:69:90:c5:9b:77:61:8d:d0:65:31:36:a5: 6c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:01:8A:66:3C:1C:AB:B2:91:8A:6E:55:A0:40:E5:6B:C2:0F:C6:09 X509v3 Authority Key Identifier: keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:6c:11:9e:8b:bf:1b:17:d7:30:04:ad:c5:65:a1:8a:aa:71: 86:76:36:a0:e9:d2:1b:32:c7:27:19:88:73:c0:54:29:1f:df: 97:f9:28:38:b0:48:29:25:b7:86:e8:65:af:24:92:ae:f7:f2: bc:f4:07:67:85:bf:5f:a7:de:fb:50:4a:b1:6e:52:82:90:3a: 3e:0c:27:f0:87:66:02:ee:e8:ea:fd:dc:6f:49:35:be:06:3b: ca:12:4b:6d:72:7b:3b:c2:8c:e4:c0:3a:12:90:97:5d:8e:0b: 91:ab:31:55:2e:9d:7e:14:dd:38:3f:35:d5:4d:ca:a1:0c:f5: 10:30:98:c9:3c:3a:7b:5c:69:e3:fd:b8:ac:b1:fe:53:e5:a2: be:b5:a8:a1:dc:42:58:df:4c:ce:41:23:ff:47:9a:1f:9a:f4: a7:90:e2:05:8f:c6:94:01:12:ab:c8:d7:a4:65:bd:61:18:da: ec:eb:82:ea:7b:b4:74:7a:bb:9c:28:00:b1:3b:00:f7:33:97: 51:1e:f2:2e:2e:ba:00:3a:6b:59:71:da:2f:2c:e3:57:43:a0: 5c:8f:02:05:b3:00:93:a9:7b:34:54:76:34:d2:23:23:15:a1: b9:83:5f:05:81:66:3b:43:94:f9:46:77:2b:cc:cc:b1:91:79: 23:c7:99:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbaul4+WAxVnPpBrF9oHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MDczZDA2YjU4NjUyZjg0OWZhOGJjZjNjZWM2Yjk1MDkw OWJkNjgwHhcNMjUxMjIxMTUwMTA0WhcNMjUxMjIyMTUwMTA0WjAzMTEwLwYDVQQD Eyg4ZjAxOGE2NjNjMWNhYmIyOTE4YTZlNTVhMDQwZTU2YmMyMGZjNjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ1S2GYqZmk7pUtm2vdHghC/iGSf p1XefbCDd/HSeH75w9RHvhTKL5YLUTvOidEXDulFT0VH670ha9S63JcTRKgMJ7WA Em+PGgfaKvBcVm8epUGMLhIrTLzLYs472r4rCcEupVBNo4zko8CF7YrDUvB1y0wZ V5NeqDOtr8lc0dn7bzrP0D3XL1Pecp+STnRIqb7xYoFabBSyV3s13e4r+PqoyuWZ /QenCwb+XaIAA8DZoryAVk6f17ZUELNXEav1gJ64iMrqX+r3aabRE0Rrli85lWW6 Q/zJloEci/hBU94bZDogINARkTan6JVrJjZsTydpkMWbd2GN0GUxNqVshQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8BimY8HKuykYpuVaBA5WvCD8YJMB8GA1UdIwQY MBaAFNgHPQa1hlL4SfqLzzzsa5UJCb1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MjE5MjAtOTM5Yi00MTJiLWEzYzUt MjMyOWQ3OWM0YWUzLzEvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83MjE5MjAtOTM5Yi00MTJiLWEzYzUtMjMyOWQ3OWM0YWUz LzEvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy2wRnou/ GxfXMAStxWWhiqpxhnY2oOnSGzLHJxmIc8BUKR/fl/koOLBIKSW3huhlrySSrvfy vPQHZ4W/X6fe+1BKsW5SgpA6Pgwn8IdmAu7o6v3cb0k1vgY7yhJLbXJ7O8KM5MA6 EpCXXY4LkasxVS6dfhTdOD811U3KoQz1EDCYyTw6e1xp4/24rLH+U+WivrWoodxC WN9MzkEj/0eaH5r0p5DiBY/GlAESq8jXpGW9YRja7OuC6nu0dHq7nCgAsTsA9zOX UR7yLi66ADprWXHaLyzjV0OgXI8CBbMAk6l7NFR2NNIjIxWhuYNfBYFmO0OU+UZ3 K8zMsZF5I8eZIA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:11:57 2025 by rpki-client