This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft File: 2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json) Hash identifier: cRfGHJVYmmlAP8OajtjdmACAu6W9mHuBMIvhCIGbDQs= Subject key identifier: B3:F9:24:2F:B0:35:48:BC:91:17:AD:1A:AF:B7:7F:FD:69:C3:06:B3 Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F Certificate issuer: /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f Certificate serial: 019B511724AE08114638C4D59FEE724C83F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft Manifest number: 0928 Signing time: Wed 24 Dec 2025 16:00:29 +0000 Manifest this update: Wed 24 Dec 2025 16:00:29 +0000 Manifest next update: Thu 25 Dec 2025 16:00:29 +0000 Files and hashes: 1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: oR/XZbotpcQtINdePpZlAsJmmKj1iciJQQItgklM99U=) 2: v--QteSWi6tQPkHDzqMh-ib3Ea0.roa (hash: 4DKBaLEIdscFHQJRoeUgffvp/rQ3x54nPWPAJ4H+N0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:24:ae:08:11:46:38:c4:d5:9f:ee:72:4c:83:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f Validity Not Before: Dec 24 16:00:29 2025 GMT Not After : Dec 25 16:00:29 2025 GMT Subject: CN=b3f9242fb03548bc9117ad1aafb77ffd69c306b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:fa:d7:54:42:3d:9b:05:23:18:69:1f:44: 73:4f:a0:03:83:86:bb:7e:bb:2a:8a:ed:4b:a5:07: ef:f6:b0:e4:11:06:fa:00:be:98:5c:78:19:92:b7: 78:ae:fd:f6:f7:4c:5f:f1:ef:20:f8:82:a0:52:71: 04:9e:2e:7c:91:fa:9a:51:e0:61:d8:76:aa:58:2e: ce:cc:9a:6a:a0:aa:7f:69:63:8c:ae:49:b4:62:8d: 31:49:b9:be:7d:13:e4:72:e0:ba:7a:b6:63:59:74: a8:ab:41:3a:6a:39:5d:a3:1b:5e:ad:09:cf:c6:22: 66:ab:a0:27:6f:ed:c9:17:48:21:30:8f:ae:fb:7f: 67:ad:fb:29:2c:58:91:c5:35:48:64:06:d6:1c:e6: 1d:07:01:64:73:0d:a4:51:76:47:a6:fa:c5:b6:12: 78:1c:5e:56:6b:ae:ae:d7:ec:0a:4c:6b:df:96:e5: 3c:24:1d:3b:ab:a8:f5:20:08:9f:04:46:d7:cf:b0: 99:b4:59:5e:36:26:0f:a7:f3:20:eb:f7:56:9e:ca: e1:5c:71:97:07:75:8a:b4:c5:d9:71:00:fd:7b:f2: 88:54:6b:a7:6d:cd:06:67:20:4c:95:fa:7b:de:b8: ce:bc:89:d2:34:bb:91:67:a4:fe:db:07:f3:e6:2c: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F9:24:2F:B0:35:48:BC:91:17:AD:1A:AF:B7:7F:FD:69:C3:06:B3 X509v3 Authority Key Identifier: keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:72:de:8c:8e:64:60:3e:20:27:60:a6:eb:24:f1:70:03:7a: 6e:d5:1b:53:0e:bc:70:69:39:08:04:92:0d:62:5f:0d:48:cb: 98:fb:59:29:2b:70:8a:ce:7f:33:52:46:38:63:c9:de:66:95: 6a:e1:bd:d2:45:52:56:3a:3b:87:05:5e:2d:5d:d9:3f:9a:52: 83:92:15:a1:35:b1:ca:27:68:31:fb:af:d7:18:95:7e:98:a3: 8d:79:9a:c4:86:56:ad:a2:18:06:27:de:bc:2f:64:01:a2:7b: 02:6a:37:72:ed:c0:89:91:83:e6:06:94:38:67:ef:8b:2d:22: e4:b3:56:a6:91:f1:e9:63:4b:85:e9:e1:c6:69:cb:d6:9d:1a: d9:86:a1:e9:9a:bb:aa:5a:7b:00:7e:32:e2:f6:59:a3:59:31: f0:98:02:8b:bd:e3:2a:ad:1b:eb:92:65:47:ba:0b:5e:4d:11: 43:b9:79:87:12:42:91:a7:2e:f8:75:be:b7:8c:7c:9c:11:e4: d1:07:4f:a2:54:7e:b6:59:b1:4c:a0:c9:da:63:e3:3e:1e:c1: a7:ea:81:cb:4c:d8:d8:70:b4:bc:e1:ac:b4:ff:21:e3:16:33: 10:42:bf:12:24:a3:a3:1a:d3:21:86:ab:41:ef:73:c0:59:04: 47:31:95:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRFySuCBFGOMTVn+5yTIP5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzIwOTZjYzBjNTU1N2NiYWI2YzEwZDYxZDA3N2QwNzhm ZTcxN2YwHhcNMjUxMjI0MTYwMDI5WhcNMjUxMjI1MTYwMDI5WjAzMTEwLwYDVQQD EyhiM2Y5MjQyZmIwMzU0OGJjOTExN2FkMWFhZmI3N2ZmZDY5YzMwNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu77611RCPZsFIxhpH0RzT6ADg4a7 frsqiu1LpQfv9rDkEQb6AL6YXHgZkrd4rv3290xf8e8g+IKgUnEEni58kfqaUeBh 2HaqWC7OzJpqoKp/aWOMrkm0Yo0xSbm+fRPkcuC6erZjWXSoq0E6ajldoxterQnP xiJmq6Anb+3JF0ghMI+u+39nrfspLFiRxTVIZAbWHOYdBwFkcw2kUXZHpvrFthJ4 HF5Wa66u1+wKTGvfluU8JB07q6j1IAifBEbXz7CZtFleNiYPp/Mg6/dWnsrhXHGX B3WKtMXZcQD9e/KIVGunbc0GZyBMlfp73rjOvInSNLuRZ6T+2wfz5izi4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLP5JC+wNUi8kRetGq+3f/1pwwazMB8GA1UdIwQY MBaAFNjCCWzAxVV8urbBDWHQd9B4/nF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1JSmJNREZWWHk2dHNFTllkQjMwSGotY1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81ZTUxYmEtNTA4Zi00ZjIzLWE3OWYt NDMyODNiMzcxOGRjLzEvMk1JSmJNREZWWHk2dHNFTllkQjMwSGotY1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy81ZTUxYmEtNTA4Zi00ZjIzLWE3OWYtNDMyODNiMzcxOGRj LzEvMk1JSmJNREZWWHk2dHNFTllkQjMwSGotY1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0nLejI5k YD4gJ2Cm6yTxcAN6btUbUw68cGk5CASSDWJfDUjLmPtZKStwis5/M1JGOGPJ3maV auG90kVSVjo7hwVeLV3ZP5pSg5IVoTWxyidoMfuv1xiVfpijjXmaxIZWraIYBife vC9kAaJ7Amo3cu3AiZGD5gaUOGfviy0i5LNWppHx6WNLhenhxmnL1p0a2Yah6Zq7 qlp7AH4y4vZZo1kx8JgCi73jKq0b65JlR7oLXk0RQ7l5hxJCkacu+HW+t4x8nBHk 0QdPolR+tlmxTKDJ2mPjPh7Bp+qBy0zY2HC0vOGstP8h4xYzEEK/EiSjoxrTIYar Qe9zwFkERzGV2g== -----END CERTIFICATE-----Generated at Wed Dec 24 23:27:03 2025 by rpki-client