This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft File: 2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json) Hash identifier: qZ4WrDpYPsIv5eTYyCDAZnYJC5ZNxHAoPqNDioLdWu8= Subject key identifier: 55:51:36:B1:24:CA:92:D5:FF:0F:33:4F:B8:DA:AB:BA:57:72:3B:16 Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92 Certificate issuer: /CN=db239685409f64ba1c3a54a8ef141c924e71d892 Certificate serial: 019B2B1E2108D6ED685F2CE65E6AF7F7A466 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft Manifest number: 178C Signing time: Wed 17 Dec 2025 07:02:33 +0000 Manifest this update: Wed 17 Dec 2025 07:02:33 +0000 Manifest next update: Thu 18 Dec 2025 07:02:33 +0000 Files and hashes: 1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: qK8Pte2Pqzn9RqkIIhOU3m4aQWD8tJpuKBjhzhgeLy0=) 2: 9AJVL74Koo20QslQbsW5LgWmuN0.roa (hash: ywfcVkqztZIsa4yV5w7CN7DaKI/bsZeXQWa9VUzq1PU=) 3: J0YtvwjSdo7VUDjhuTN3dGHM7bY.roa (hash: 44Y8BMgB+sH5b8+axfLWpVcHTARgYoCnMt7xMsge5P8=) 4: _SYIhCf3pmsd3GO_bPZ9LmXX9yI.roa (hash: yLq+2S7VzCleP2MSt8WxD7vanT3ofV/BHsfwwfGB6uA=) 5: k8SmLkdRoGivF16GFM2hqIOouBo.roa (hash: Ktq3us91dVySgQu0CPwEqVesPVx0pk3gPFhcWjBn49E=) 6: qHajeM7KS0OkvXZ6gKIN6UcTzPg.roa (hash: 9Inme+UM24UQgsOmhNMhOS7m0XYuhceY/GRE7b5eI94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:21:08:d6:ed:68:5f:2c:e6:5e:6a:f7:f7:a4:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892 Validity Not Before: Dec 17 07:02:33 2025 GMT Not After : Dec 18 07:02:33 2025 GMT Subject: CN=555136b124ca92d5ff0f334fb8daabba57723b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:19:0f:97:20:50:83:78:d9:4a:7d:46:c0: 4a:67:f0:6d:54:f1:c3:8c:42:cf:77:b8:3d:67:be: 15:12:ef:ac:15:fb:db:79:47:9d:7c:7e:46:66:87: 58:49:df:8a:7f:3a:12:92:b4:17:8a:f3:b7:c0:8f: e1:66:b2:b1:36:e6:43:28:ca:82:41:cd:d3:07:29: f6:bd:f3:1c:14:32:ff:a1:6d:48:88:c9:57:1a:76: b7:78:f3:6d:3d:39:28:64:fb:65:99:34:8f:bd:4b: c3:76:d9:f5:4a:49:c3:51:e8:ee:6a:d5:0f:49:db: 4e:93:20:68:42:1f:9b:ce:74:29:d4:62:3c:f9:9f: 8a:b6:57:10:d0:36:c6:4b:5e:e0:02:ae:28:c7:e9: 34:36:df:c6:64:eb:4f:85:b5:5b:59:57:10:e4:8d: 47:95:9c:98:26:c0:e6:81:ed:1c:be:b9:dc:cd:16: 4b:9f:9b:02:7d:dd:37:79:1e:a6:c7:96:35:7f:22: a6:51:b1:5a:b2:d9:39:4e:a5:aa:de:76:f5:07:55: 04:04:be:59:d7:f7:21:62:b0:2e:80:17:9e:c6:b1: 60:4e:fa:6d:b7:86:57:11:bc:e1:3b:51:33:25:23: 83:9c:9c:ec:c8:52:7c:38:3c:5c:99:48:fe:d2:6f: 28:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:51:36:B1:24:CA:92:D5:FF:0F:33:4F:B8:DA:AB:BA:57:72:3B:16 X509v3 Authority Key Identifier: keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d9:f7:a6:b7:a8:d0:d5:83:12:73:ca:73:87:90:96:b6:5c: 12:ce:b3:9b:d9:0b:85:aa:25:90:1e:4b:db:40:ee:db:29:86: 5b:7d:59:16:be:b7:8b:5e:f0:4e:53:db:90:c6:5e:1f:5a:28: 07:42:0c:6a:99:47:c3:96:37:77:35:c7:5b:2c:06:33:d9:5b: e0:53:d3:4e:a8:2c:13:74:e7:24:eb:ed:1c:f1:29:af:5e:14: 4b:46:5f:95:9e:9c:19:a9:07:e6:c3:fa:0b:b4:29:0b:db:84: 0e:53:86:21:9b:fd:e3:a5:75:30:a1:f6:e5:16:dd:94:8e:72: ca:70:b0:39:ec:b3:1d:ca:ce:29:e3:c2:0d:e5:4f:72:cd:3b: 30:72:43:a0:aa:06:d9:99:cc:6e:35:d3:ad:d8:57:34:e4:9b: 6d:7c:ab:82:48:e1:32:5b:27:ad:09:f3:10:4a:c0:1e:6e:f0: a8:75:d2:60:56:15:5a:d7:1b:3b:b6:57:c7:6a:d0:32:08:31: 03:c0:eb:2f:1c:54:78:b1:3d:77:8b:87:0d:ac:c1:15:10:3b: 1c:87:09:15:0c:42:fb:64:9b:36:9f:e9:eb:e4:5e:11:c6:a6: 70:16:76:e5:c8:72:3b:63:24:43:23:27:d0:22:86:dc:e4:79: 0b:6a:96:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHiEI1u1oXyzmXmr396RmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjM5Njg1NDA5ZjY0YmExYzNhNTRhOGVmMTQxYzkyNGU3 MWQ4OTIwHhcNMjUxMjE3MDcwMjMzWhcNMjUxMjE4MDcwMjMzWjAzMTEwLwYDVQQD Eyg1NTUxMzZiMTI0Y2E5MmQ1ZmYwZjMzNGZiOGRhYWJiYTU3NzIzYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOMZD5cgUIN42Up9RsBKZ/BtVPHD jELPd7g9Z74VEu+sFfvbeUedfH5GZodYSd+KfzoSkrQXivO3wI/hZrKxNuZDKMqC Qc3TByn2vfMcFDL/oW1IiMlXGna3ePNtPTkoZPtlmTSPvUvDdtn1SknDUejuatUP SdtOkyBoQh+bznQp1GI8+Z+KtlcQ0DbGS17gAq4ox+k0Nt/GZOtPhbVbWVcQ5I1H lZyYJsDmge0cvrnczRZLn5sCfd03eR6mx5Y1fyKmUbFastk5TqWq3nb1B1UEBL5Z 1/chYrAugBeexrFgTvptt4ZXEbzhO1EzJSODnJzsyFJ8ODxcmUj+0m8oTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVRNrEkypLV/w8zT7jaq7pXcjsWMB8GA1UdIwQY MBaAFNsjloVAn2S6HDpUqO8UHJJOcdiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmIt MmVmNDQ3ZTFiMDhjLzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmItMmVmNDQ3ZTFiMDhj LzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotn3preo 0NWDEnPKc4eQlrZcEs6zm9kLhaolkB5L20Du2ymGW31ZFr63i17wTlPbkMZeH1oo B0IMaplHw5Y3dzXHWywGM9lb4FPTTqgsE3TnJOvtHPEpr14US0ZflZ6cGakH5sP6 C7QpC9uEDlOGIZv946V1MKH25RbdlI5yynCwOeyzHcrOKePCDeVPcs07MHJDoKoG 2ZnMbjXTrdhXNOSbbXyrgkjhMlsnrQnzEErAHm7wqHXSYFYVWtcbO7ZXx2rQMggx A8DrLxxUeLE9d4uHDazBFRA7HIcJFQxC+2SbNp/p6+ReEcamcBZ25chyO2MkQyMn 0CKG3OR5C2qWhA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:23:27 2025 by rpki-client