This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json) Hash identifier: onQgLfx041VRJTgYY81945blLg7dCBgkPE9HHlBRXi0= Subject key identifier: 21:CA:14:07:9B:EB:06:43:6F:1F:6E:09:0F:29:7A:BF:09:71:55:EF Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a Certificate serial: 019B3CEBB188B61DCE9FF5FFC03EB20A2221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 18:00:37 +0000 Manifest this update: Sat 20 Dec 2025 18:00:37 +0000 Manifest next update: Sun 21 Dec 2025 18:00:37 +0000 Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: 1MctJu5tOulqQjQuKJQbxuPkd9PPV7u9sXt33SRAob0=) 2: SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (hash: j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:b1:88:b6:1d:ce:9f:f5:ff:c0:3e:b2:0a:22:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a Validity Not Before: Dec 20 18:00:37 2025 GMT Not After : Dec 21 18:00:37 2025 GMT Subject: CN=21ca14079beb06436f1f6e090f297abf097155ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:c1:38:40:51:a6:7d:c9:a6:52:43:77:b4: ea:62:76:bd:39:47:eb:9e:02:46:d3:74:a8:51:95: d4:7a:1d:94:ed:5d:47:d7:38:c4:2a:24:ad:d9:60: 05:06:1a:2d:af:5d:4d:f2:ab:7d:db:69:ba:08:dc: 53:ff:3c:95:9e:21:18:32:75:fe:8c:1f:20:75:6b: ef:47:eb:40:d7:ca:b1:79:e8:c5:88:28:bf:f4:67: 38:23:41:8c:47:98:7c:94:d4:7c:6d:f1:f3:53:cf: 33:cb:2c:c4:3f:cd:8f:88:52:50:d7:f3:d5:7b:6c: 96:29:e0:f0:a5:41:75:be:b8:3c:d6:59:01:f6:b0: 98:5c:f5:c7:32:e1:95:d8:e6:71:be:cd:86:d5:a4: 2c:1e:f7:9c:9a:e2:e3:03:30:ef:38:09:ba:50:c3: fa:58:62:36:5a:e7:1a:77:2b:e1:8a:4c:72:6a:b9: c4:28:df:56:12:40:32:c5:8f:70:38:4e:1f:5a:8f: 46:bb:ab:a4:52:80:78:c8:7d:3a:08:61:6b:fb:7e: 21:c7:16:3c:67:f8:a8:6d:08:25:40:d5:94:4a:da: 50:0b:45:23:99:2f:74:13:f6:eb:79:01:ad:5b:a7: 1e:7b:04:85:2d:15:9b:91:af:7f:42:61:93:c7:d7: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CA:14:07:9B:EB:06:43:6F:1F:6E:09:0F:29:7A:BF:09:71:55:EF X509v3 Authority Key Identifier: keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:26:71:a2:c6:f7:eb:4e:f6:1b:8c:56:8f:1a:ce:79:74:5a: d7:a2:05:ee:72:b8:83:80:29:4c:5a:96:93:e1:0f:10:c0:c3: cf:91:27:94:4e:5d:e2:5d:a9:c1:a0:e5:be:de:4a:1d:b4:39: 53:ce:16:ff:40:9c:77:ba:29:89:cc:9c:22:b4:8b:33:2d:db: 5b:10:a2:80:11:08:70:43:99:ee:79:1b:96:68:0f:6d:74:d3: 90:6e:47:c8:fb:d4:e6:6d:84:38:b7:e6:c7:c5:89:59:5c:60: 75:8a:14:8f:3c:6c:36:e7:f4:7a:1a:6c:3c:fb:28:c5:17:79: 9b:ea:a3:3f:44:e1:0f:cd:82:a4:cc:fa:e0:eb:fe:65:18:27: fe:44:d8:1b:76:28:10:10:1a:d8:17:04:9c:22:a4:32:06:71: 52:3b:3b:77:7c:ea:01:83:18:8f:9f:66:3a:7b:a0:13:da:f7: 17:7b:e4:ee:10:89:0d:ea:36:8e:0d:b2:19:5e:67:e8:0d:7a: a5:1f:0b:fb:a6:6d:39:3d:6b:f3:c7:50:c0:ac:13:fc:02:3a: 74:a6:a8:23:4d:7e:21:23:f6:76:ab:ea:fe:68:26:ef:41:c8: 88:d4:35:82:db:7a:37:ff:c1:48:1d:a6:2c:96:81:29:f0:d5: 10:87:be:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs867GIth3On/X/wD6yCiIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTI3MzY4MjA2ZTNlOWE1OTI0MDgxZGY2Mzg4MDI0NmU1 YzU0MWEwHhcNMjUxMjIwMTgwMDM3WhcNMjUxMjIxMTgwMDM3WjAzMTEwLwYDVQQD EygyMWNhMTQwNzliZWIwNjQzNmYxZjZlMDkwZjI5N2FiZjA5NzE1NWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR3BOEBRpn3JplJDd7TqYna9OUfr ngJG03SoUZXUeh2U7V1H1zjEKiSt2WAFBhotr11N8qt922m6CNxT/zyVniEYMnX+ jB8gdWvvR+tA18qxeejFiCi/9Gc4I0GMR5h8lNR8bfHzU88zyyzEP82PiFJQ1/PV e2yWKeDwpUF1vrg81lkB9rCYXPXHMuGV2OZxvs2G1aQsHvecmuLjAzDvOAm6UMP6 WGI2WucadyvhikxyarnEKN9WEkAyxY9wOE4fWo9Gu6ukUoB4yH06CGFr+34hxxY8 Z/iobQglQNWUStpQC0UjmS90E/breQGtW6ceewSFLRWbka9/QmGTx9fClQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHKFAeb6wZDbx9uCQ8per8JcVXvMB8GA1UdIwQY MBaAFNlSc2ggbj6aWSQIHfY4gCRuXFQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84MjEyOWEtNTI2My00M2QyLWJjNjMt MTk2MjA2MTU1NzliLzEvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84MjEyOWEtNTI2My00M2QyLWJjNjMtMTk2MjA2MTU1Nzli LzEvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5CZxosb3 6072G4xWjxrOeXRa16IF7nK4g4ApTFqWk+EPEMDDz5EnlE5d4l2pwaDlvt5KHbQ5 U84W/0Ccd7opicycIrSLMy3bWxCigBEIcEOZ7nkblmgPbXTTkG5HyPvU5m2EOLfm x8WJWVxgdYoUjzxsNuf0ehpsPPsoxRd5m+qjP0ThD82CpMz64Ov+ZRgn/kTYG3Yo EBAa2BcEnCKkMgZxUjs7d3zqAYMYj59mOnugE9r3F3vk7hCJDeo2jg2yGV5n6A16 pR8L+6ZtOT1r88dQwKwT/AI6dKaoI01+ISP2dqvq/mgm70HIiNQ1gtt6N//BSB2m LJaBKfDVEIe+9g== -----END CERTIFICATE-----Generated at Sat Dec 20 19:56:44 2025 by rpki-client