This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft File: 2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json) Hash identifier: TW9RzfClJScfSjxhA3PBef4O8Sfir74Ta73b5LFpqHs= Subject key identifier: C9:6B:56:6D:BC:20:D0:13:32:3E:83:83:A5:63:B5:FA:6F:F4:E5:65 Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec Certificate serial: 019B3FB60846A4D51F03CA8A30C0C2779722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 07:00:52 +0000 Manifest this update: Sun 21 Dec 2025 07:00:52 +0000 Manifest next update: Mon 22 Dec 2025 07:00:52 +0000 Files and hashes: 1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: NkNb2v4JUGocQwxYMW9oXgjCmOzTgw22O4V99P23qio=) 2: 5Be6EqezXfxwhrFPLeonCfAyvI8.roa (hash: 5DTu5fQoOJxSVXmen8IkdRj7K/ip+zcpfYhUFVu0omI=) 3: T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa (hash: 2VUmqYcTbyu3BGa2UNYaNxKK9/e/jdNeWFxD6j6APMw=) 4: V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa (hash: exDIqb2dn4rGevhqSLgxGPDH0tG5qTPwydwCvYcD+yY=) 5: Ypy0H2Bsr39UgswuoV5q1-sR_N4.roa (hash: pHbM4Rba/93pouqqIiXpHU4F3MQUwXB/YNEqfbXWHBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:08:46:a4:d5:1f:03:ca:8a:30:c0:c2:77:97:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d894365b28a082834a751a97771b791124524dec Validity Not Before: Dec 21 07:00:52 2025 GMT Not After : Dec 22 07:00:52 2025 GMT Subject: CN=c96b566dbc20d013323e8383a563b5fa6ff4e565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d0:93:f4:53:ad:d1:40:15:19:ae:d0:3d:34: 84:3a:62:d8:4e:90:42:35:eb:27:ab:f4:4d:1a:40: 8e:b0:e8:d0:d0:59:55:4b:3f:ab:52:1a:b8:5e:55: 59:5c:c4:71:ae:47:11:73:65:0e:70:64:07:5e:e6: 23:86:07:dc:4e:0d:f2:b8:4e:e3:0b:46:4c:c8:92: e9:83:bb:0c:97:74:8d:7d:1b:2e:ae:b8:4c:ff:ea: 77:85:3a:8a:85:32:26:7b:98:88:97:a6:36:ab:61: f0:cb:62:f7:6a:b2:63:5d:b7:fa:67:57:36:e5:52: 52:bc:c4:28:c7:3b:f1:f0:08:4b:82:bf:47:78:06: 81:a0:5b:38:39:1f:a5:e9:b7:9a:10:f5:30:25:5e: 9e:8f:93:37:ee:45:a6:9c:bb:9a:19:25:a6:1d:24: 61:2a:02:16:d2:d4:2f:f9:c3:a3:56:7c:12:74:7e: 4f:59:5d:a5:c8:dd:f2:a1:f5:bd:13:50:84:f5:77: 99:a3:5f:86:d0:de:11:12:3b:a5:eb:af:67:6c:93: 1d:23:09:a2:a5:9b:5d:72:5e:a7:a1:5d:81:b5:65: 20:d1:e7:b9:3f:7e:5d:89:be:b5:d8:90:08:97:67: 1d:7e:87:f6:e5:47:f2:6d:28:75:4b:2b:88:2f:8f: 06:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6B:56:6D:BC:20:D0:13:32:3E:83:83:A5:63:B5:FA:6F:F4:E5:65 X509v3 Authority Key Identifier: keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:92:43:db:ae:67:5b:70:1c:2a:cb:09:87:52:fa:e8:c7:57: 33:65:13:9f:80:e9:6b:3e:cc:f1:ea:9b:85:68:43:b1:54:6d: 5c:41:5a:a5:7d:f4:8c:6b:c9:11:c8:18:3d:37:fe:19:76:3c: 65:4e:03:51:8a:7d:98:a0:9f:b6:3f:1e:e5:98:97:bf:42:0c: b1:64:90:b8:a7:cd:8b:9b:51:db:a5:78:57:d1:45:76:5d:03: 78:f4:02:36:a0:4e:ff:f0:57:29:b4:7f:21:cb:a3:5a:b6:54: 97:72:89:f8:09:67:0a:88:f8:fe:5c:fa:bd:f6:1b:15:ae:b9: 7c:54:8a:58:14:8e:f8:e9:b6:4f:c0:6c:b5:a4:1d:91:27:20: cc:d2:b4:54:c8:97:21:3f:90:d5:2e:e7:4f:fc:bf:17:4e:91: 04:09:37:42:08:76:d8:70:11:30:c8:e3:18:76:fa:a5:1f:64: 36:08:66:f8:cf:49:78:ab:52:c6:1c:7f:8f:ed:29:c5:0e:21: 4d:1c:16:5a:9a:88:f9:81:23:90:0a:00:a0:fd:92:0b:7a:67: 18:ff:41:89:a5:0b:42:08:1d:75:6a:84:65:8c:06:b5:db:07: 23:ee:ac:57:98:56:8f:6c:ef:60:fe:87:98:ef:16:25:c5:77: 40:17:78:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tghGpNUfA8qKMMDCd5ciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTQzNjViMjhhMDgyODM0YTc1MWE5Nzc3MWI3OTExMjQ1 MjRkZWMwHhcNMjUxMjIxMDcwMDUyWhcNMjUxMjIyMDcwMDUyWjAzMTEwLwYDVQQD EyhjOTZiNTY2ZGJjMjBkMDEzMzIzZTgzODNhNTYzYjVmYTZmZjRlNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdCT9FOt0UAVGa7QPTSEOmLYTpBC Nesnq/RNGkCOsOjQ0FlVSz+rUhq4XlVZXMRxrkcRc2UOcGQHXuYjhgfcTg3yuE7j C0ZMyJLpg7sMl3SNfRsurrhM/+p3hTqKhTIme5iIl6Y2q2Hwy2L3arJjXbf6Z1c2 5VJSvMQoxzvx8AhLgr9HeAaBoFs4OR+l6beaEPUwJV6ej5M37kWmnLuaGSWmHSRh KgIW0tQv+cOjVnwSdH5PWV2lyN3yofW9E1CE9XeZo1+G0N4REjul669nbJMdIwmi pZtdcl6noV2BtWUg0ee5P35dib612JAIl2cdfof25UfybSh1SyuIL48GkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlrVm28INATMj6Dg6Vjtfpv9OVlMB8GA1UdIwQY MBaAFNiUNlsooIKDSnUal3cbeREkUk3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEt MjE0NjE3OWQ4ZTJiLzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEtMjE0NjE3OWQ4ZTJi LzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5JD265n W3AcKssJh1L66MdXM2UTn4Dpaz7M8eqbhWhDsVRtXEFapX30jGvJEcgYPTf+GXY8 ZU4DUYp9mKCftj8e5ZiXv0IMsWSQuKfNi5tR26V4V9FFdl0DePQCNqBO//BXKbR/ IcujWrZUl3KJ+AlnCoj4/lz6vfYbFa65fFSKWBSO+Om2T8BstaQdkScgzNK0VMiX IT+Q1S7nT/y/F06RBAk3Qgh22HARMMjjGHb6pR9kNghm+M9JeKtSxhx/j+0pxQ4h TRwWWpqI+YEjkAoAoP2SC3pnGP9BiaULQggddWqEZYwGtdsHI+6sV5hWj2zvYP6H mO8WJcV3QBd4bQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:19:27 2025 by rpki-client