This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json) Hash identifier: vQ/1eCEaoSvBUrz6nxYy+U7IaTWGRZMrqnksXNJ6bKc= Subject key identifier: 8C:18:50:E1:EA:A2:7A:86:E9:FB:A2:E5:86:C5:C5:03:47:B4:36:61 Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb Certificate serial: 019B3AC694DF652ED08F70C8EF4EF3ABFF26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft Manifest number: 04E7 Signing time: Sat 20 Dec 2025 08:00:51 +0000 Manifest this update: Sat 20 Dec 2025 08:00:51 +0000 Manifest next update: Sun 21 Dec 2025 08:00:51 +0000 Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: hdrwhUhSMDwkgZAo7CdY5EUTxS8veJkVheOSGycEhFk=) 2: xaTFNHvIwGFGt2nvvisSJGJJn1U.roa (hash: dncutlGZCp4ijfHdULe589Ce9+6dKbRvNV71t7mvtSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:94:df:65:2e:d0:8f:70:c8:ef:4e:f3:ab:ff:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb Validity Not Before: Dec 20 08:00:51 2025 GMT Not After : Dec 21 08:00:51 2025 GMT Subject: CN=8c1850e1eaa27a86e9fba2e586c5c50347b43661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:47:e8:23:c0:60:60:07:09:7d:71:e3:43:f3: aa:c3:88:16:7f:30:c5:64:b7:8c:aa:40:4e:96:1b: ca:86:e7:a6:d7:c0:02:31:9e:3d:11:90:66:11:7e: 79:ea:41:1a:37:43:e1:95:ba:55:94:5c:d8:cf:aa: f9:32:d2:71:1e:6e:d0:af:df:7d:9b:c2:aa:f0:fb: 51:9e:80:ed:31:0e:c9:63:f1:86:1f:b1:c2:b6:1a: b5:8b:91:01:c5:bd:00:eb:6e:6e:8c:14:e7:51:3e: 7c:d9:d3:d8:a5:b9:29:a3:42:84:48:9a:5f:73:7a: 3f:a1:e6:6f:fb:fa:ad:29:af:91:e6:ed:5e:73:4b: 91:16:95:08:b6:83:98:da:c8:c1:ba:9f:c2:6b:53: e4:e3:c3:28:b6:15:91:e9:ac:ae:ba:78:59:6f:94: 5f:73:67:2c:64:ed:d9:2e:8e:25:8c:76:fd:24:67: f4:ed:98:c2:1d:06:13:3b:e3:81:e6:fa:10:7b:d5: e4:f2:5b:68:02:a5:7f:c1:47:fd:4c:6d:00:0b:40: c6:54:5b:8e:cd:bd:c6:a8:83:55:fe:e6:ce:bd:51: 6e:ec:3e:8d:5e:bc:5f:8c:44:1a:ba:45:c4:c3:62: cf:f3:1d:9b:f5:82:41:a8:13:17:3e:59:41:fc:01: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:18:50:E1:EA:A2:7A:86:E9:FB:A2:E5:86:C5:C5:03:47:B4:36:61 X509v3 Authority Key Identifier: keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1b:de:5c:63:ea:43:1b:8d:bd:a4:41:08:2a:24:35:58:42: 6f:87:a6:21:76:98:b5:03:f0:37:02:29:d1:a3:8c:a5:4c:44: 72:59:22:bc:a9:52:cb:c6:c5:a0:47:bf:43:1a:13:bc:eb:1c: 2f:96:fb:62:54:c7:da:cf:02:99:7e:7e:4d:27:f1:2e:6c:35: 52:fb:60:b9:ad:67:f1:e9:8b:10:9b:11:c4:a4:dd:78:98:ec: f2:c0:fc:f3:5a:9a:7b:ed:ca:ac:b4:87:83:54:18:d6:e7:84: ec:ee:0a:89:53:5b:13:07:29:da:ef:b7:36:7f:83:2f:5e:b5: 93:68:c5:92:2c:b4:ee:36:c7:1e:43:bd:85:5f:4c:1b:fd:22: d3:94:cd:9f:87:88:bc:1d:d3:e3:83:af:d2:e7:64:69:4c:88: ae:0e:14:e2:06:65:88:68:cb:5e:86:25:a2:5d:54:10:2d:7c: 08:c5:42:56:db:e0:e3:20:44:20:b3:12:a5:47:fe:68:d4:18: 11:0d:e3:59:aa:47:bb:2d:c1:2c:10:f8:2c:ab:7c:62:0f:02: 79:e9:77:ea:3b:aa:8c:f4:ab:60:ff:80:f7:ab:8c:eb:32:0b: a9:d9:c1:12:08:34:8c:e9:f5:30:23:68:8b:af:b3:bd:f9:28: a4:66:5b:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xpTfZS7Qj3DI707zq/8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NmI5YzE3NzhhMDUyOWVlN2UyMzIwMDNjYmU1Yzk5M2Mz NmZkZGIwHhcNMjUxMjIwMDgwMDUxWhcNMjUxMjIxMDgwMDUxWjAzMTEwLwYDVQQD Eyg4YzE4NTBlMWVhYTI3YTg2ZTlmYmEyZTU4NmM1YzUwMzQ3YjQzNjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUfoI8BgYAcJfXHjQ/Oqw4gWfzDF ZLeMqkBOlhvKhuem18ACMZ49EZBmEX556kEaN0PhlbpVlFzYz6r5MtJxHm7Qr999 m8Kq8PtRnoDtMQ7JY/GGH7HCthq1i5EBxb0A625ujBTnUT582dPYpbkpo0KESJpf c3o/oeZv+/qtKa+R5u1ec0uRFpUItoOY2sjBup/Ca1Pk48MothWR6ayuunhZb5Rf c2csZO3ZLo4ljHb9JGf07ZjCHQYTO+OB5voQe9Xk8ltoAqV/wUf9TG0AC0DGVFuO zb3GqINV/ubOvVFu7D6NXrxfjEQaukXEw2LP8x2b9YJBqBMXPllB/AFaxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwYUOHqonqG6fui5YbFxQNHtDZhMB8GA1UdIwQY MBaAFNhrnBd4oFKe5+IyADy+XJk8Nv3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85NzBmOWEtOTQ4MC00ZmRkLWE0ZjQt YTgwYTk1ZTVhMDk5LzEvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC85NzBmOWEtOTQ4MC00ZmRkLWE0ZjQtYTgwYTk1ZTVhMDk5 LzEvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRveXGPq QxuNvaRBCCokNVhCb4emIXaYtQPwNwIp0aOMpUxEclkivKlSy8bFoEe/QxoTvOsc L5b7YlTH2s8CmX5+TSfxLmw1Uvtgua1n8emLEJsRxKTdeJjs8sD881qae+3KrLSH g1QY1ueE7O4KiVNbEwcp2u+3Nn+DL161k2jFkiy07jbHHkO9hV9MG/0i05TNn4eI vB3T44Ov0udkaUyIrg4U4gZliGjLXoYlol1UEC18CMVCVtvg4yBEILMSpUf+aNQY EQ3jWapHuy3BLBD4LKt8Yg8Ceel36juqjPSrYP+A96uM6zILqdnBEgg0jOn1MCNo i6+zvfkopGZbKg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:38:30 2025 by rpki-client