This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json) Hash identifier: g6tUec5HzEWs8FGihR0/CAKxMVyJUGL+AO6IYal6nfY= Subject key identifier: E7:54:A3:4F:4F:02:F3:B7:21:14:CC:6E:15:09:8A:16:55:FF:E9:77 Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0 Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0 Certificate serial: 019B4FCDBF9A3E3936CB3E0EF5ADB779F465 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft Manifest number: 0716 Signing time: Wed 24 Dec 2025 10:00:42 +0000 Manifest this update: Wed 24 Dec 2025 10:00:42 +0000 Manifest next update: Thu 25 Dec 2025 10:00:42 +0000 Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: VRQsT6H22qqdTK62FGtE8aWeQc103xvoWCQGOFrlKTA=) 2: sLl8IyRQ7O2V3aDprs2XcWd9-Fc.roa (hash: Q0fY46XPSxXWXxA2rseUn7tBmmNzqG29JtQSVk/FutE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cd:bf:9a:3e:39:36:cb:3e:0e:f5:ad:b7:79:f4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0 Validity Not Before: Dec 24 10:00:42 2025 GMT Not After : Dec 25 10:00:42 2025 GMT Subject: CN=e754a34f4f02f3b72114cc6e15098a1655ffe977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:8d:6e:57:10:f2:39:57:a4:0c:b7:32:63: f3:06:f2:9f:d7:27:ee:04:31:93:e3:48:c5:21:04: 5b:bd:b3:21:16:1d:c1:3d:69:63:04:b6:12:f7:ed: 1a:33:2d:62:36:c3:76:5f:65:d9:bd:92:08:50:35: b4:ac:4a:c7:27:e4:1a:e8:03:ce:9e:49:3e:d1:f5: f2:53:2a:1c:ae:b4:59:f9:c2:97:1d:e3:be:4f:ee: dd:ae:04:0e:a8:1d:64:a1:51:a4:07:84:74:8c:8a: 18:d1:53:53:29:db:ca:55:f8:56:30:30:0b:d1:19: 7b:12:52:5f:92:67:8e:d8:0c:18:53:1e:33:91:6e: e8:44:da:02:c7:19:20:be:98:64:4b:7c:9e:ff:fe: 8f:29:cf:49:10:92:ba:5c:96:15:dc:f1:fa:01:ca: 39:60:38:73:03:07:c9:78:b1:46:03:c4:55:f3:57: 0b:dc:a6:e5:45:90:41:ae:dd:65:c2:af:43:a0:08: 03:64:dd:a6:21:1c:fd:e8:e5:ac:fc:3e:fe:48:e9: c8:79:07:4c:94:e1:7a:61:d7:8a:e4:73:2f:8f:05: 44:44:8c:41:3c:e0:11:d3:44:4c:fc:f8:5e:e3:1f: 7f:f0:85:24:66:4f:3f:d6:7b:39:af:45:5d:f7:c2: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:54:A3:4F:4F:02:F3:B7:21:14:CC:6E:15:09:8A:16:55:FF:E9:77 X509v3 Authority Key Identifier: keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:54:87:25:3f:c5:1e:7a:07:02:bd:b7:f6:be:87:00:fd:ea: 72:72:c4:62:18:d9:d1:9f:10:35:88:f0:4f:c6:92:9c:00:d9: 14:b3:af:14:37:40:50:c1:ce:32:73:56:95:a8:7b:b8:f2:51: 4e:80:25:f6:cd:97:5c:11:57:98:f4:56:41:b4:67:e0:06:65: 0e:74:a0:50:e3:de:6c:a2:7d:7b:f3:95:2e:99:8b:de:93:e6: 64:f0:be:bd:b1:02:3c:68:60:83:29:03:44:c2:92:f7:0c:b1: fe:39:ef:37:6d:58:3d:26:28:76:47:92:10:52:da:53:4c:56: 65:59:a7:da:bb:aa:38:8f:77:91:cc:b6:42:b5:67:c5:15:45: 10:90:5d:a8:56:9c:f3:b1:a1:09:ce:bb:fb:1b:e7:ac:6f:b2: 7c:fc:a4:0d:d3:8b:cd:84:b9:00:60:52:77:ff:dd:5b:b7:ec: c9:f3:4b:b1:0e:47:1a:cd:5d:e9:19:1c:6f:ec:0c:ca:1a:16: 2c:76:6a:e1:2f:a7:69:66:a9:4e:6f:e1:17:95:7b:f2:55:d9: d4:68:d5:3e:a9:d6:f4:99:3e:75:c0:81:a2:84:22:00:95:77: 33:21:68:dd:a9:c4:e9:dd:53:c6:52:60:f2:90:3b:c0:2a:2a: 75:e6:f8:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzb+aPjk2yz4O9a23efRlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTViZWU1NjA1NjMwZjcwNDhiMWZmYjNmMDAzYjM5ZDI5 ZTQ3YTAwHhcNMjUxMjI0MTAwMDQyWhcNMjUxMjI1MTAwMDQyWjAzMTEwLwYDVQQD EyhlNzU0YTM0ZjRmMDJmM2I3MjExNGNjNmUxNTA5OGExNjU1ZmZlOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLONblcQ8jlXpAy3MmPzBvKf1yfu BDGT40jFIQRbvbMhFh3BPWljBLYS9+0aMy1iNsN2X2XZvZIIUDW0rErHJ+Qa6APO nkk+0fXyUyocrrRZ+cKXHeO+T+7drgQOqB1koVGkB4R0jIoY0VNTKdvKVfhWMDAL 0Rl7ElJfkmeO2AwYUx4zkW7oRNoCxxkgvphkS3ye//6PKc9JEJK6XJYV3PH6Aco5 YDhzAwfJeLFGA8RV81cL3KblRZBBrt1lwq9DoAgDZN2mIRz96OWs/D7+SOnIeQdM lOF6YdeK5HMvjwVERIxBPOAR00RM/Phe4x9/8IUkZk8/1ns5r0Vd98KZYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdUo09PAvO3IRTMbhUJihZV/+l3MB8GA1UdIwQY MBaAFNiVvuVgVjD3BIsf+z8AOznSnkegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYt MjAyYTA5ODBjMTc2LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYtMjAyYTA5ODBjMTc2 LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlSHJT/F HnoHAr239r6HAP3qcnLEYhjZ0Z8QNYjwT8aSnADZFLOvFDdAUMHOMnNWlah7uPJR ToAl9s2XXBFXmPRWQbRn4AZlDnSgUOPebKJ9e/OVLpmL3pPmZPC+vbECPGhggykD RMKS9wyx/jnvN21YPSYodkeSEFLaU0xWZVmn2ruqOI93kcy2QrVnxRVFEJBdqFac 87GhCc67+xvnrG+yfPykDdOLzYS5AGBSd//dW7fsyfNLsQ5HGs1d6Rkcb+wMyhoW LHZq4S+naWapTm/hF5V78lXZ1GjVPqnW9Jk+dcCBooQiAJV3MyFo3anE6d1TxlJg 8pA7wCoqdeb4BQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:55:41 2025 by rpki-client