This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json) Hash identifier: Z9jeaGf5Zj4qqYPIBEnm/3dzcasDRB8uB0d+nuw5Kvs= Subject key identifier: F5:B8:62:A9:2D:75:DC:A9:E1:6C:69:FA:93:15:24:42:26:59:25:20 Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d Certificate serial: 019B42120D5D551E0C3B5DDA2F8FCDB79397 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 18:00:37 +0000 Manifest this update: Sun 21 Dec 2025 18:00:37 +0000 Manifest next update: Mon 22 Dec 2025 18:00:37 +0000 Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: hiExtIgrXF+a7gyWM19EBGBIdAYFCbxjVk3ZShYSBIg=) 2: tzlp2jqFOd0_jBubUJxxkLqieDw.roa (hash: ax6nyhwBpkZjlZ25g9yNsNeKB7E3cmdhcCwA4m5T2eA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:12:0d:5d:55:1e:0c:3b:5d:da:2f:8f:cd:b7:93:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d Validity Not Before: Dec 21 18:00:37 2025 GMT Not After : Dec 22 18:00:37 2025 GMT Subject: CN=f5b862a92d75dca9e16c69fa9315244226592520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:5c:c0:7f:b4:df:84:25:4b:f9:0e:9b:b0: ca:c6:5f:5c:3d:ef:74:38:16:aa:a7:fd:25:0a:02: 7a:42:6a:c7:8c:42:3c:29:bd:19:c9:53:6b:29:3a: 1e:e4:25:0e:6c:5a:aa:9e:bc:cd:af:3c:83:30:eb: 7d:b9:d4:63:5c:49:eb:d7:ff:51:28:67:84:10:29: 1b:61:6c:58:ec:1e:c3:92:da:05:2a:82:d0:a2:1d: 75:4a:5a:2a:c0:52:25:63:30:e4:e4:7d:f9:5d:a4: 93:78:ba:be:f7:dd:4d:26:95:fc:9d:54:a2:7d:0d: ec:68:6a:4a:7f:11:83:35:e1:1d:bc:f6:a8:49:3d: ac:22:99:ec:c9:e8:c2:7e:c2:4c:59:aa:ad:85:9d: 12:58:eb:3b:90:b9:65:3e:3d:08:ad:09:43:38:36: 3f:e5:85:f4:7c:d0:3a:15:b2:24:8e:90:84:b7:7d: fc:43:2e:2d:ca:4a:ce:ba:a0:86:8e:3f:47:43:df: 45:e6:5e:21:91:52:20:16:e4:79:e4:8f:d0:42:d2: b1:3d:86:73:51:91:8a:15:2f:30:f0:ef:36:1b:bc: f3:82:c7:6a:cc:f2:95:90:f7:b0:2c:51:5f:38:ca: 02:6a:a9:e0:13:a7:fd:b1:53:5b:51:91:c2:c1:2f: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B8:62:A9:2D:75:DC:A9:E1:6C:69:FA:93:15:24:42:26:59:25:20 X509v3 Authority Key Identifier: keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2d:cb:69:c1:25:00:68:3c:b7:db:e3:90:e4:d2:ad:3b:3d: c2:b0:c8:25:27:3a:f0:a9:fc:e3:2f:05:b4:87:2c:7c:fa:a5: 7a:e8:c6:cb:46:6b:6f:39:d4:2c:bf:14:c9:ec:97:56:6c:7e: 8e:b1:68:84:03:85:fb:39:fc:0c:3e:11:1e:ff:e4:0d:55:45: 68:43:13:9a:0f:a7:55:77:48:5a:53:59:e3:19:68:a3:09:71: 4d:ac:c4:76:68:57:90:e6:e0:c0:5d:24:3b:5c:5b:21:23:1f: c5:ce:6c:23:9f:3e:24:70:ec:48:7c:9c:68:e0:e2:3f:e9:7e: 1b:11:9a:5b:f0:71:20:1f:4e:6c:50:0a:9c:9c:07:78:58:b3: 12:9f:a4:64:8d:e3:ee:3b:e5:5a:93:de:2b:99:bf:ff:c1:ff: 16:49:c2:4c:51:4c:3c:26:3b:c0:71:7a:61:70:c0:c8:e2:67: 34:39:d7:b7:b0:05:a7:5c:da:02:8f:d5:75:fd:3c:e1:a8:0e: ff:03:a4:c3:51:55:32:93:48:aa:2d:f4:c8:8a:42:ee:4e:7d: 72:12:d4:02:29:f1:4f:ad:3a:ce:23:b9:3e:a9:a4:20:d9:14: 96:08:cb:38:a9:77:1b:cb:2f:2b:1d:b3:a2:55:c2:bf:b7:2a: a0:e8:4d:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEg1dVR4MO13aL4/Nt5OXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5Zjg2NmZiMGFhODNhMjcxYTBjYjdkYzkwMzAxODhjODlk MjNlNWQwHhcNMjUxMjIxMTgwMDM3WhcNMjUxMjIyMTgwMDM3WjAzMTEwLwYDVQQD EyhmNWI4NjJhOTJkNzVkY2E5ZTE2YzY5ZmE5MzE1MjQ0MjI2NTkyNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWlcwH+034QlS/kOm7DKxl9cPe90 OBaqp/0lCgJ6QmrHjEI8Kb0ZyVNrKToe5CUObFqqnrzNrzyDMOt9udRjXEnr1/9R KGeEECkbYWxY7B7DktoFKoLQoh11SloqwFIlYzDk5H35XaSTeLq+991NJpX8nVSi fQ3saGpKfxGDNeEdvPaoST2sIpnsyejCfsJMWaqthZ0SWOs7kLllPj0IrQlDODY/ 5YX0fNA6FbIkjpCEt338Qy4tykrOuqCGjj9HQ99F5l4hkVIgFuR55I/QQtKxPYZz UZGKFS8w8O82G7zzgsdqzPKVkPewLFFfOMoCaqngE6f9sVNbUZHCwS9tuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPW4Yqktddyp4Wxp+pMVJEImWSUgMB8GA1UdIwQY MBaAFNn4ZvsKqDonGgy33JAwGIyJ0j5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYt NWMxZDVhNjk5MmQ4LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYtNWMxZDVhNjk5MmQ4 LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQy3LacEl AGg8t9vjkOTSrTs9wrDIJSc68Kn84y8FtIcsfPqleujGy0ZrbznULL8UyeyXVmx+ jrFohAOF+zn8DD4RHv/kDVVFaEMTmg+nVXdIWlNZ4xloowlxTazEdmhXkObgwF0k O1xbISMfxc5sI58+JHDsSHycaODiP+l+GxGaW/BxIB9ObFAKnJwHeFizEp+kZI3j 7jvlWpPeK5m//8H/FknCTFFMPCY7wHF6YXDAyOJnNDnXt7AFp1zaAo/Vdf084agO /wOkw1FVMpNIqi30yIpC7k59chLUAinxT606ziO5PqmkINkUlgjLOKl3G8svKx2z olXCv7cqoOhN/g== -----END CERTIFICATE-----Generated at Sun Dec 21 19:09:45 2025 by rpki-client