This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json) Hash identifier: me9jKTi//2/fuuTBPUrBNXfdcDOup04Rfj2bGcEralg= Subject key identifier: 53:6E:FC:0C:10:E3:17:5F:DB:CB:D1:A4:27:E4:BA:6C:A6:20:19:D8 Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66 Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466 Certificate serial: 019B3A21AD406B692E5E0163FAAE037AD429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 05:00:44 +0000 Manifest this update: Sat 20 Dec 2025 05:00:44 +0000 Manifest next update: Sun 21 Dec 2025 05:00:44 +0000 Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: /295kncrEub9yx+Mu3NfIx/CxIfLeYlfcMx7lSHHya0=) 2: zOidZa_WBKrrVFNvnxbTNUXsqyA.roa (hash: c6CaCJCPxyhkXhFJHJ0Gvk/jlU50dgYSjedGTRGmMqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:ad:40:6b:69:2e:5e:01:63:fa:ae:03:7a:d4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466 Validity Not Before: Dec 20 05:00:44 2025 GMT Not After : Dec 21 05:00:44 2025 GMT Subject: CN=536efc0c10e3175fdbcbd1a427e4ba6ca62019d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4e:b9:a2:71:56:74:11:89:66:83:a8:f3:f8: b0:2a:f6:79:59:81:3f:ee:2c:b4:dc:c0:ab:99:6c: 35:02:f5:f9:4f:fe:86:6c:7d:13:ed:04:31:84:66: 5b:af:54:67:69:b9:4e:11:ad:22:64:ce:02:d7:78: e6:0c:73:c9:a8:81:65:fe:dc:e7:18:15:2f:e8:fa: 30:0c:76:b9:1e:5f:6a:95:56:52:0e:ca:1f:af:21: 3b:37:00:76:24:57:fd:4c:d9:82:76:7f:b5:5a:5c: 78:87:fc:ac:15:5e:ef:df:1f:46:e1:b6:cc:62:e6: 90:8f:e2:79:bb:57:a0:51:ca:7c:3e:d8:4e:31:8c: 43:a6:84:0c:06:7f:6c:b3:bf:7b:18:f2:c6:54:2f: 76:37:e8:15:f0:25:d6:35:be:f6:60:e4:d6:52:2d: f2:8c:84:72:cb:a7:9b:e4:af:f4:8c:5e:cb:f7:cb: b0:d5:3f:63:67:b0:a8:7b:bf:17:4b:23:53:ee:0c: 2d:ff:9b:5e:84:0c:cf:1c:94:2d:d9:a5:3f:96:ee: 15:16:2c:6b:b3:76:62:43:cc:e2:68:ce:95:b2:f8: 44:c0:16:74:45:2b:e7:4b:dd:3b:c3:38:c5:32:7f: 41:7f:20:d6:6f:5e:00:11:16:98:03:b2:8f:c0:b2: 06:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6E:FC:0C:10:E3:17:5F:DB:CB:D1:A4:27:E4:BA:6C:A6:20:19:D8 X509v3 Authority Key Identifier: keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:ad:11:9a:32:0d:c6:37:06:e8:48:d2:62:3f:1f:1a:bb:03: c7:fc:9b:90:2a:27:b3:31:1a:16:23:64:cf:97:fb:92:a0:c0: 03:99:15:fa:a9:c0:1b:3a:b5:d1:a9:a2:a1:02:35:1c:42:87: 0a:1a:d5:3f:74:13:09:4b:d0:30:38:fc:2b:bb:f4:e4:14:7b: b8:8a:bc:92:24:ad:62:b7:65:f5:c5:f7:45:ac:d3:7b:ef:09: b3:d9:a0:d0:6c:a4:13:ae:ef:89:86:48:7f:a0:56:a1:46:76: e2:b5:3e:06:58:79:26:33:3e:e5:b3:bb:31:e3:49:1e:c5:03: 57:10:9c:44:ba:f8:f2:81:da:88:30:2a:6f:de:b3:a6:eb:8b: 4b:63:66:4b:e3:d9:e2:7c:75:01:be:24:0e:5e:e1:28:77:19: fb:3b:8f:02:eb:80:4d:7d:64:7b:7a:02:5f:75:2f:d9:9c:18: 8a:d8:fd:cb:cf:86:0f:99:72:37:45:e2:19:b5:02:0c:ab:1e: 28:36:8d:d5:9d:3a:94:5b:f0:15:06:61:13:18:9c:06:b3:cd: 07:e6:22:1a:5e:6b:fd:36:8d:ba:1b:94:4e:c2:1f:8b:6b:40: 06:62:7e:b0:b7:4c:e3:69:51:6e:9c:fb:5f:6d:f1:d4:d1:b7: e2:43:b7:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ia1Aa2kuXgFj+q4DetQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDA0N2RhYzhlZWY4OTQ0ZDc4YzFiN2EyNjg2OGMwM2Uy Y2U0NjYwHhcNMjUxMjIwMDUwMDQ0WhcNMjUxMjIxMDUwMDQ0WjAzMTEwLwYDVQQD Eyg1MzZlZmMwYzEwZTMxNzVmZGJjYmQxYTQyN2U0YmE2Y2E2MjAxOWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U65onFWdBGJZoOo8/iwKvZ5WYE/ 7iy03MCrmWw1AvX5T/6GbH0T7QQxhGZbr1RnablOEa0iZM4C13jmDHPJqIFl/tzn GBUv6PowDHa5Hl9qlVZSDsofryE7NwB2JFf9TNmCdn+1Wlx4h/ysFV7v3x9G4bbM YuaQj+J5u1egUcp8PthOMYxDpoQMBn9ss797GPLGVC92N+gV8CXWNb72YOTWUi3y jIRyy6eb5K/0jF7L98uw1T9jZ7Coe78XSyNT7gwt/5tehAzPHJQt2aU/lu4VFixr s3ZiQ8ziaM6VsvhEwBZ0RSvnS907wzjFMn9BfyDWb14AERaYA7KPwLIGcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNu/AwQ4xdf28vRpCfkumymIBnYMB8GA1UdIwQY MBaAFNoAR9rI7viUTXjBt6JoaMA+LORmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEt YWM5YzhhNTBmMjRlLzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEtYWM5YzhhNTBmMjRl LzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6K0RmjIN xjcG6EjSYj8fGrsDx/ybkConszEaFiNkz5f7kqDAA5kV+qnAGzq10amioQI1HEKH ChrVP3QTCUvQMDj8K7v05BR7uIq8kiStYrdl9cX3RazTe+8Js9mg0GykE67viYZI f6BWoUZ24rU+Blh5JjM+5bO7MeNJHsUDVxCcRLr48oHaiDAqb96zpuuLS2NmS+PZ 4nx1Ab4kDl7hKHcZ+zuPAuuATX1ke3oCX3Uv2ZwYitj9y8+GD5lyN0XiGbUCDKse KDaN1Z06lFvwFQZhExicBrPNB+YiGl5r/TaNuhuUTsIfi2tABmJ+sLdM42lRbpz7 X23x1NG34kO3IQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:07:17 2025 by rpki-client