This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json) Hash identifier: llfUJB8oILJMreaqiUqe0r1W1d+J//i2sFIzL7akSTk= Subject key identifier: 77:CF:DA:A0:AB:98:2E:CB:7C:7D:AE:4E:FC:7C:3D:84:81:DD:2F:D8 Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71 Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771 Certificate serial: 019B3FED4ABF050E88BE2E2DAB2632219E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 08:01:14 +0000 Manifest this update: Sun 21 Dec 2025 08:01:14 +0000 Manifest next update: Mon 22 Dec 2025 08:01:14 +0000 Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: GAHl6B9QpJKYEHleYXKXj/4QPhP/dzf8Zg4OV//qTrA=) 2: rE87pRMGrIGW2-QCo2IWgU4T1zg.roa (hash: YOlXp2sGo61mpLlpdmbznU7uW49evw4d47+WkKfymmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:4a:bf:05:0e:88:be:2e:2d:ab:26:32:21:9e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771 Validity Not Before: Dec 21 08:01:14 2025 GMT Not After : Dec 22 08:01:14 2025 GMT Subject: CN=77cfdaa0ab982ecb7c7dae4efc7c3d8481dd2fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ea:8b:4b:46:90:57:dd:0b:44:1f:12:af:73: b6:e8:e7:f5:cc:a2:69:08:5c:81:87:5c:9e:83:d0: 62:99:dc:d9:6e:79:06:9c:f2:1e:1f:28:64:34:6f: a5:87:3f:64:1a:e7:10:28:d4:48:46:f3:fd:62:cc: 9d:56:48:bf:5c:ee:e2:ae:00:e9:0d:70:9b:94:e1: e3:ed:e6:e1:ef:a5:6c:60:8c:ad:5a:be:75:d6:2d: 32:d6:c7:93:3d:5e:cd:66:6b:9f:9a:f1:40:f4:6a: 6b:95:29:ac:45:de:90:bf:67:2d:c5:9c:91:ba:2c: 4a:2b:cb:c5:63:f3:06:d0:41:af:44:1a:7b:6a:f0: a8:71:ce:98:b6:6d:78:b4:21:0d:95:55:c5:b9:98: 6c:04:af:cd:69:f1:a7:2a:31:89:59:2d:ff:f1:2c: 72:47:15:41:43:6f:ac:c5:dd:a4:24:0a:c1:b4:00: 55:ce:78:96:6c:00:53:06:4b:08:a9:0b:a0:d2:51: 5f:9c:12:2a:56:5f:cf:76:c6:06:33:58:ac:2a:ff: 05:7b:bd:ee:0a:11:f4:57:1b:21:a2:6f:e1:da:ef: 36:33:35:8f:67:42:ee:31:3d:c9:4b:09:19:f1:c1: 45:62:88:1c:c3:cb:1a:0b:71:c5:ed:00:96:cd:1f: d7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CF:DA:A0:AB:98:2E:CB:7C:7D:AE:4E:FC:7C:3D:84:81:DD:2F:D8 X509v3 Authority Key Identifier: keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:e2:b3:d9:ee:df:44:10:ad:f3:9d:b9:5a:32:cc:f6:3d:ab: 17:6f:df:bf:b9:dc:59:6c:ff:83:06:0a:6a:75:e5:3a:bb:6f: 96:85:79:51:75:6c:17:81:98:ed:83:49:1e:6f:bb:83:e0:f3: 61:65:1c:6b:cf:6e:5a:02:a1:06:4f:db:da:56:b2:33:bf:91: e8:03:13:aa:b0:26:cf:18:5a:eb:b5:45:a7:18:a6:b7:22:b9: 4a:fe:c9:2a:4c:31:f4:d7:aa:d4:40:f5:21:97:b7:5c:25:1b: 7d:2c:a5:2e:7a:b3:51:79:f4:97:fa:38:63:71:bd:9e:ac:e1: 18:cc:17:27:1c:73:b5:d8:23:dc:fa:79:92:f8:30:c6:0e:70: e9:3f:94:c3:ee:ba:83:f1:4d:48:fd:9b:b7:4e:95:d6:9c:c6: 50:14:41:8d:29:e8:21:18:f3:c2:fb:da:4c:f9:11:c1:ee:21: f5:5d:d7:db:61:29:e7:7c:d6:21:40:cc:b2:32:8d:e8:35:c6: 70:52:87:cf:60:1c:53:43:e9:17:51:14:59:60:fd:93:1d:99: 27:46:5d:b8:90:5b:75:eb:57:58:70:2b:88:8d:2c:b4:e4:2c: 79:c6:db:2d:50:df:c6:32:27:f9:29:73:35:15:73:41:7a:7b: 49:5f:6c:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7Uq/BQ6Ivi4tqyYyIZ5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjFjMDMwODhlYmZlNTUzODEyYjMxNTQ3YzAzYzkwYTI1 ZDg3NzEwHhcNMjUxMjIxMDgwMTE0WhcNMjUxMjIyMDgwMTE0WjAzMTEwLwYDVQQD Eyg3N2NmZGFhMGFiOTgyZWNiN2M3ZGFlNGVmYzdjM2Q4NDgxZGQyZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuqLS0aQV90LRB8Sr3O26Of1zKJp CFyBh1yeg9BimdzZbnkGnPIeHyhkNG+lhz9kGucQKNRIRvP9YsydVki/XO7irgDp DXCblOHj7ebh76VsYIytWr511i0y1seTPV7NZmufmvFA9GprlSmsRd6Qv2ctxZyR uixKK8vFY/MG0EGvRBp7avCocc6Ytm14tCENlVXFuZhsBK/NafGnKjGJWS3/8Sxy RxVBQ2+sxd2kJArBtABVzniWbABTBksIqQug0lFfnBIqVl/PdsYGM1isKv8Fe73u ChH0Vxshom/h2u82MzWPZ0LuMT3JSwkZ8cFFYogcw8saC3HF7QCWzR/XmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfP2qCrmC7LfH2uTvx8PYSB3S/YMB8GA1UdIwQY MBaAFNqxwDCI6/5VOBKzFUfAPJCiXYdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEt YjcyMzk4MDcwODIzLzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEtYjcyMzk4MDcwODIz LzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx+Kz2e7f RBCt8525WjLM9j2rF2/fv7ncWWz/gwYKanXlOrtvloV5UXVsF4GY7YNJHm+7g+Dz YWUca89uWgKhBk/b2layM7+R6AMTqrAmzxha67VFpximtyK5Sv7JKkwx9Neq1ED1 IZe3XCUbfSylLnqzUXn0l/o4Y3G9nqzhGMwXJxxztdgj3Pp5kvgwxg5w6T+Uw+66 g/FNSP2bt06V1pzGUBRBjSnoIRjzwvvaTPkRwe4h9V3X22Ep53zWIUDMsjKN6DXG cFKHz2AcU0PpF1EUWWD9kx2ZJ0ZduJBbdetXWHAriI0stOQsecbbLVDfxjIn+Slz NRVzQXp7SV9sFw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:23:28 2025 by rpki-client