This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json) Hash identifier: jSLCifK0DDLv2nnHAUbbzwodTWQfP3fQlVezGk5c4vk= Subject key identifier: 34:B3:6E:55:1B:F3:18:73:CB:7E:D0:3C:BF:00:FE:16:B3:14:5A:16 Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Certificate serial: 019B37FC8CB99249F54BD574162D878258A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft Manifest number: 0EDB Signing time: Fri 19 Dec 2025 19:00:56 +0000 Manifest this update: Fri 19 Dec 2025 19:00:56 +0000 Manifest next update: Sat 20 Dec 2025 19:00:56 +0000 Files and hashes: 1: 1-IgxnHsFK8oFte8N10P7PK5e7cM.roa (hash: ePOdDmBwQlth5xBvng3CM+ctUv7VLk8att4hDe8d3XM=) 2: 2RMmrpcDTc2PvNu5TNTAOyHaouI.roa (hash: XLm+GnfjmWK96gEaM9T+jWpkcJJsItx27t0lDAfnu+M=) 3: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: 02HmbHmznoAeaMQpTYIkkoG09xPa3UhRk5htPbqbqmQ=) 4: Pk3Y8bmZ9v5bN1_6zxU4UYzAM4s.roa (hash: So1EWdtcEMDdLT99zqpyRyyrElAoZiXcpiXiUbqjYGI=) 5: T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa (hash: YO3FHvImLTgWUXMun1aA53LmlRiB4Zb65q5ChwHuYqU=) 6: Ywn8ul2r71oT-xjPbkKIJ5E1ZP4.roa (hash: o0itDHyiOKdFZunGmNw6h8Z1wOF08DEK5D3hH/0u17w=) 7: jyjyrq_AfUtR4N7vXi1KVwU7zy0.roa (hash: gGJ4wMLSXQ4nt3254hCEsSARPmaiHzOwXZG33svfRBY=) 8: qXJMsidJ81j9tR3h2UK1FDbmVxg.roa (hash: HLh56C+v712lFsjl7b6ehYsyReTygh+t6WH5+oMMUUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:8c:b9:92:49:f5:4b:d5:74:16:2d:87:82:58:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Validity Not Before: Dec 19 19:00:56 2025 GMT Not After : Dec 20 19:00:56 2025 GMT Subject: CN=34b36e551bf31873cb7ed03cbf00fe16b3145a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:cf:59:78:43:04:3f:dd:22:12:76:c4:79: c9:d2:b1:18:9d:01:5c:3f:f8:83:3d:2e:07:f6:ad: cf:8b:f1:cd:2c:a4:6b:6f:ea:c4:7f:c5:68:a0:b8: bd:b3:b4:05:85:4e:93:3e:f8:34:11:63:5f:52:68: 98:b3:c3:d9:ee:9b:00:93:47:bd:c7:a2:c5:84:3c: 34:58:ba:52:70:1e:09:e8:3e:a9:1f:2c:3a:b3:e8: 01:34:9b:bf:c1:4d:8a:ed:43:d9:c3:71:fd:f4:6e: 45:4c:85:f8:5c:20:8e:99:aa:2a:87:b2:9b:1a:d4: 35:13:78:6e:79:f2:c5:4a:c9:d9:7b:70:27:fc:46: f0:a6:a3:e9:65:e0:53:76:a3:a6:c2:08:0b:03:c4: bc:fd:49:15:95:c4:b7:24:ef:c7:9b:bb:f0:30:66: 8d:f1:ca:ca:60:af:37:7f:7e:23:47:50:bd:8a:1f: 5f:17:4d:92:e4:f5:f6:f8:f9:7e:cc:3a:a5:07:67: ad:a0:be:a3:37:f5:41:84:41:0b:13:f4:3b:bd:6a: c8:66:ba:a5:9e:90:2d:4a:33:ff:4b:41:8c:39:d0: 00:b4:6c:fb:ca:84:a0:01:91:a6:67:b6:46:5d:48: b3:46:f2:56:68:b1:da:34:c4:8e:85:8a:82:8d:3f: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B3:6E:55:1B:F3:18:73:CB:7E:D0:3C:BF:00:FE:16:B3:14:5A:16 X509v3 Authority Key Identifier: keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2a:48:ac:04:4c:a7:eb:60:ac:35:4b:30:76:b7:16:70:c9: af:2b:25:a5:dc:77:b1:25:4d:ab:20:85:64:d7:2e:d4:14:b4: 76:81:b7:c6:b0:3b:56:54:21:06:3e:8d:09:e0:16:e2:29:f6: 1a:2e:6f:df:26:0f:28:bb:12:04:9b:ce:44:25:c5:97:53:e8: ec:0c:98:09:0a:16:4e:be:79:f1:4d:2f:67:c0:4d:32:46:5e: 55:4e:b8:3d:cf:20:8f:a3:1e:2c:d1:dd:6b:43:28:ce:c4:03: b5:6e:d0:89:2d:1b:1a:60:3f:8e:52:90:1a:2c:5e:a6:68:8f: ea:5c:35:31:ef:3c:07:bb:e6:54:6b:00:05:89:b8:a0:28:6b: f0:3e:ce:45:29:cb:5c:ed:0c:03:bd:9b:44:87:27:7c:75:59: 29:0a:b8:f2:b8:27:3d:e5:ba:6a:ef:09:df:92:85:30:36:3b: 74:86:87:4e:f4:22:7a:9f:72:63:ca:97:d7:5e:ad:18:3a:65: d2:4d:e6:c4:4b:1d:9f:bf:f3:4a:91:16:15:68:b7:e3:be:73: 16:6d:ca:7a:2d:01:08:14:d6:d1:af:a7:e4:7f:d4:86:85:ae: 40:d3:63:d7:09:5a:96:b1:36:a7:81:5c:f4:94:1b:2a:5a:f9: 21:89:cd:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Iy5kkn1S9V0Fi2HglipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkw YWI3NzAwHhcNMjUxMjE5MTkwMDU2WhcNMjUxMjIwMTkwMDU2WjAzMTEwLwYDVQQD EygzNGIzNmU1NTFiZjMxODczY2I3ZWQwM2NiZjAwZmUxNmIzMTQ1YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVPPWXhDBD/dIhJ2xHnJ0rEYnQFc P/iDPS4H9q3Pi/HNLKRrb+rEf8VooLi9s7QFhU6TPvg0EWNfUmiYs8PZ7psAk0e9 x6LFhDw0WLpScB4J6D6pHyw6s+gBNJu/wU2K7UPZw3H99G5FTIX4XCCOmaoqh7Kb GtQ1E3huefLFSsnZe3An/EbwpqPpZeBTdqOmwggLA8S8/UkVlcS3JO/Hm7vwMGaN 8crKYK83f34jR1C9ih9fF02S5PX2+Pl+zDqlB2etoL6jN/VBhEELE/Q7vWrIZrql npAtSjP/S0GMOdAAtGz7yoSgAZGmZ7ZGXUizRvJWaLHaNMSOhYqCjT8i1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSzblUb8xhzy37QPL8A/hazFFoWMB8GA1UdIwQY MBaAFNnv6dNvX4j98EdCxBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1Yzkt MzlmNmQ2NDI1MzM4LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4 LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATipIrARM p+tgrDVLMHa3FnDJryslpdx3sSVNqyCFZNcu1BS0doG3xrA7VlQhBj6NCeAW4in2 Gi5v3yYPKLsSBJvORCXFl1Po7AyYCQoWTr558U0vZ8BNMkZeVU64Pc8gj6MeLNHd a0MozsQDtW7QiS0bGmA/jlKQGixepmiP6lw1Me88B7vmVGsABYm4oChr8D7ORSnL XO0MA72bRIcnfHVZKQq48rgnPeW6au8J35KFMDY7dIaHTvQiep9yY8qX116tGDpl 0k3mxEsdn7/zSpEWFWi3475zFm3Kei0BCBTW0a+n5H/UhoWuQNNj1wlalrE2p4Fc 9JQbKlr5IYnNaw== -----END CERTIFICATE-----Generated at Sat Dec 20 03:32:54 2025 by rpki-client