This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json) Hash identifier: s35z9HSiV4Lvbs++2b/AKt3mnY1lANriHyWYNjLrb/s= Subject key identifier: 84:00:A5:BC:9B:73:BA:6E:E9:27:9E:A5:9C:BE:1D:41:22:40:DC:CB Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e Certificate serial: 019B3EDA48F4D071DB551DE2D294D510A36B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 03:00:51 +0000 Manifest this update: Sun 21 Dec 2025 03:00:51 +0000 Manifest next update: Mon 22 Dec 2025 03:00:51 +0000 Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: gZRNxufGcvOCbq+yH5OHlci7jJLr9EC0v+QNDeAC3bc=) 2: A8jjmK0kbHo3shuzOjuaZPLY0lA.roa (hash: vis28C1mwfjy7KcDtg+2X5RUSRegAsoJjOlr68nOUKw=) 3: AxYrlpLs1hzYP3fW7HLLvBvzGpQ.roa (hash: Q7nlxsfzrWdD9hSpE1mmCZFMWmLhOUPGmqqA4g2obUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:48:f4:d0:71:db:55:1d:e2:d2:94:d5:10:a3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e Validity Not Before: Dec 21 03:00:51 2025 GMT Not After : Dec 22 03:00:51 2025 GMT Subject: CN=8400a5bc9b73ba6ee9279ea59cbe1d412240dccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:85:3d:c8:cf:84:7b:23:f9:5d:8a:fd:21: 2a:58:26:49:cb:e9:fa:b8:bc:1b:c7:28:92:d6:43: 27:f5:91:dc:7f:0d:97:a3:27:30:d3:cf:f1:4d:a5: f1:0d:8e:06:1b:48:77:97:58:00:97:66:2f:9a:f0: e4:31:50:e9:8f:00:a7:0e:a7:a1:46:fe:b4:8a:e1: 79:6f:c0:e9:62:d1:d7:08:6d:89:9a:ec:10:dc:ee: d5:a7:6c:25:ac:f0:5e:8a:c8:cf:eb:e9:dc:0c:a6: 7e:7e:4f:73:bd:36:53:13:8e:3a:10:bd:86:52:c2: 96:17:6d:d5:be:1b:26:1a:3f:6f:14:10:b4:41:1b: 98:2d:d0:65:c4:c3:a5:fc:7e:7a:6e:9a:56:c4:c9: 9f:42:e8:ac:76:04:19:be:0e:0f:16:de:0a:8a:95: 45:94:fa:bd:97:83:d5:4d:0f:32:6d:94:7c:d7:64: fe:18:4e:6a:10:e7:a6:5f:9c:fd:e6:ca:2d:1e:e2: 2e:4a:a6:3f:ad:db:8b:e0:23:d6:bf:c0:66:56:f7: f1:6e:4d:80:ce:0b:f4:31:72:d9:cf:d5:40:f9:6b: b2:01:18:de:b3:60:21:d1:35:8d:80:00:77:60:90: 9e:fe:ba:1e:21:57:49:3a:6a:d4:8c:49:9e:dd:64: f2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:00:A5:BC:9B:73:BA:6E:E9:27:9E:A5:9C:BE:1D:41:22:40:DC:CB X509v3 Authority Key Identifier: keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1d:26:ba:ca:28:5c:2f:11:1e:f9:9f:23:e2:90:df:9b:d4: ab:ea:ae:40:33:4f:e1:c4:b1:19:25:78:c6:a0:27:86:5e:b6: 87:3c:7b:ec:cc:e7:e6:cb:b5:47:92:b7:e4:5a:7b:62:5b:8a: 98:6e:d0:df:e5:42:a7:d3:ef:b4:81:1f:d9:1d:86:d5:bb:d9: 99:da:26:0c:ef:00:30:59:7c:53:5e:10:a9:47:37:be:8e:69: a5:44:5d:b0:1c:e4:2c:eb:a7:41:b6:cb:0b:f5:26:29:a3:4b: 0e:ed:5e:c4:a2:91:58:3a:60:cb:97:e1:5e:e0:dc:cb:c7:37: 43:b6:44:4f:c0:ca:a0:fd:ea:1a:dd:d7:39:cc:6b:fa:dd:aa: 32:03:3d:bf:f8:d2:99:cb:37:a5:c7:24:86:4e:de:ab:4e:65: dc:fb:4d:4d:86:0e:43:c8:c1:08:71:07:4c:f6:0c:85:99:b4: b9:90:22:33:0f:ae:70:9b:fe:45:3d:a5:88:5c:6a:d0:56:7a: e9:6c:cb:da:26:7e:43:79:eb:f3:13:a3:d2:87:c1:3a:46:82: 09:62:36:81:09:24:00:38:49:7b:e5:41:26:80:67:02:e5:10: 17:bf:e1:8b:db:07:a4:44:ed:71:1c:c0:b1:a6:39:98:7f:42: 31:34:35:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2kj00HHbVR3i0pTVEKNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZTEwMTliYmUxMWI1NTExNDg3NGM5NjE3MTZlYjIzOGEx MWNkNGUwHhcNMjUxMjIxMDMwMDUxWhcNMjUxMjIyMDMwMDUxWjAzMTEwLwYDVQQD Eyg4NDAwYTViYzliNzNiYTZlZTkyNzllYTU5Y2JlMWQ0MTIyNDBkY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutyFPcjPhHsj+V2K/SEqWCZJy+n6 uLwbxyiS1kMn9ZHcfw2Xoycw08/xTaXxDY4GG0h3l1gAl2YvmvDkMVDpjwCnDqeh Rv60iuF5b8DpYtHXCG2JmuwQ3O7Vp2wlrPBeisjP6+ncDKZ+fk9zvTZTE446EL2G UsKWF23VvhsmGj9vFBC0QRuYLdBlxMOl/H56bppWxMmfQuisdgQZvg4PFt4KipVF lPq9l4PVTQ8ybZR812T+GE5qEOemX5z95sotHuIuSqY/rduL4CPWv8BmVvfxbk2A zgv0MXLZz9VA+WuyARjes2Ah0TWNgAB3YJCe/roeIVdJOmrUjEme3WTyuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQApbybc7pu6SeepZy+HUEiQNzLMB8GA1UdIwQY MBaAFNnhAZu+EbVRFIdMlhcW6yOKEc1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2It NDUyNTYxOTM1MDMxLzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2ItNDUyNTYxOTM1MDMx LzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlx0musoo XC8RHvmfI+KQ35vUq+quQDNP4cSxGSV4xqAnhl62hzx77Mzn5su1R5K35Fp7YluK mG7Q3+VCp9PvtIEf2R2G1bvZmdomDO8AMFl8U14QqUc3vo5ppURdsBzkLOunQbbL C/UmKaNLDu1exKKRWDpgy5fhXuDcy8c3Q7ZET8DKoP3qGt3XOcxr+t2qMgM9v/jS mcs3pcckhk7eq05l3PtNTYYOQ8jBCHEHTPYMhZm0uZAiMw+ucJv+RT2liFxq0FZ6 6WzL2iZ+Q3nr8xOj0ofBOkaCCWI2gQkkADhJe+VBJoBnAuUQF7/hi9sHpETtcRzA saY5mH9CMTQ1Gg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:05:31 2025 by rpki-client