This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json) Hash identifier: UNafRwcl8v9SfKiq7mFVWuogjK+EA05yjfOtr4HO8Aw= Subject key identifier: 27:7A:F8:09:B2:D8:22:D6:CC:9F:CF:BF:75:3F:56:D9:67:D7:13:F5 Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2 Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2 Certificate serial: 019B405B6A6E63C1D9EEFA2B7CF7895F0ACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 10:01:31 +0000 Manifest this update: Sun 21 Dec 2025 10:01:31 +0000 Manifest next update: Mon 22 Dec 2025 10:01:31 +0000 Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: 1wf7gyH9EeG1LYFHg+ujSyLfbuEJtK4Qhkzp5TKyfxw=) 2: uU6zg4YH1264IiROqTWMjBqhAVA.roa (hash: OWnA1HPfhWIThBzmOjCNNoLbJUm6FK12YolmGLT6gvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:6a:6e:63:c1:d9:ee:fa:2b:7c:f7:89:5f:0a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2 Validity Not Before: Dec 21 10:01:31 2025 GMT Not After : Dec 22 10:01:31 2025 GMT Subject: CN=277af809b2d822d6cc9fcfbf753f56d967d713f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:1e:df:b4:3b:ca:7a:38:e9:dd:a9:b4:d2: be:35:25:01:39:19:c2:4a:7f:88:d8:93:11:6f:6a: 5c:2a:ec:21:53:3f:bb:68:fe:8c:e9:e8:03:90:ef: ba:12:c2:68:87:49:e0:8b:9c:fa:7a:e7:da:70:19: 4c:44:f2:1f:7e:c8:e6:84:77:ae:c5:e0:db:14:fd: 85:91:04:07:37:d4:ed:49:45:ee:20:b3:7f:bb:1d: 07:aa:ff:52:e2:be:ba:09:ce:bd:ec:6e:29:df:2d: 2b:d9:dc:3c:83:07:3b:b4:7f:44:e5:c0:15:7a:21: 92:8c:06:77:cd:57:77:64:8a:8b:39:1f:ce:fa:eb: d8:a3:e9:14:35:0f:6c:47:32:59:ae:87:52:fe:f6: bd:a7:2f:6a:b1:a1:b5:3d:09:68:bd:d3:4d:9b:80: c1:58:b4:7d:b0:96:76:e4:fb:d8:fd:69:08:32:17: 64:ba:3e:46:78:15:33:c9:08:f1:5f:7b:4c:19:51: 6d:17:11:7e:b4:0c:32:ef:d8:a5:16:aa:fe:c6:11: 6f:fe:f5:f2:1f:e0:30:6b:4d:73:a4:f1:32:23:d5: 97:08:8d:a3:59:19:be:cf:b7:ac:80:69:c2:f9:0e: 0d:b4:aa:c1:df:2b:1c:e0:a0:3e:e9:af:37:86:8a: 68:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7A:F8:09:B2:D8:22:D6:CC:9F:CF:BF:75:3F:56:D9:67:D7:13:F5 X509v3 Authority Key Identifier: keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b0:2e:2c:78:d8:6e:28:dc:5f:79:bf:9c:3c:c6:a7:74:72: 2c:a6:82:04:0c:20:4b:9a:60:07:3e:5e:7f:59:ad:9f:cd:da: 70:2c:8b:91:9e:f7:5c:78:82:3b:ae:d8:f0:56:be:e2:b3:b0: ff:09:84:68:f6:6b:8f:05:af:17:22:98:50:5f:49:58:f4:fa: 1b:38:4b:73:7a:a9:68:7b:97:39:05:6e:14:91:48:e0:b1:e8: 3b:0e:a7:37:9b:5f:98:fe:a9:de:69:d4:55:ec:f0:8d:f0:af: 9a:1a:30:4c:1b:1c:82:f1:44:7e:bf:97:16:4f:e9:0f:e4:ac: 95:cc:31:92:76:71:e1:7a:e5:e4:d8:18:ed:41:d7:e1:41:98: b7:e8:e4:21:3f:53:a8:05:b2:76:ac:10:56:89:7e:fe:9b:18: b6:0d:b3:7c:9d:4e:24:be:a6:e5:b5:ca:69:b1:21:35:41:58: e9:4d:26:f6:41:54:1e:3b:64:fc:6a:ab:c0:c4:69:91:bc:7b: 0e:22:47:55:6c:d4:d1:57:33:e4:39:3d:a1:fd:61:b8:eb:fd: e0:d1:90:fe:6a:91:d9:63:8e:b8:88:f8:b9:3e:14:ef:aa:3c: f6:ad:01:d2:94:81:2a:96:9e:e1:ce:c7:f4:ac:9b:5f:bd:6e: 90:b9:0a:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW2puY8HZ7vorfPeJXwrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MmU1Y2RmNGM1NGZmODY4Y2U4OTUzMTVlYWI1OGYyZDg4 NjUwYzIwHhcNMjUxMjIxMTAwMTMxWhcNMjUxMjIyMTAwMTMxWjAzMTEwLwYDVQQD EygyNzdhZjgwOWIyZDgyMmQ2Y2M5ZmNmYmY3NTNmNTZkOTY3ZDcxM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxAe37Q7yno46d2ptNK+NSUBORnC Sn+I2JMRb2pcKuwhUz+7aP6M6egDkO+6EsJoh0ngi5z6eufacBlMRPIffsjmhHeu xeDbFP2FkQQHN9TtSUXuILN/ux0Hqv9S4r66Cc697G4p3y0r2dw8gwc7tH9E5cAV eiGSjAZ3zVd3ZIqLOR/O+uvYo+kUNQ9sRzJZrodS/va9py9qsaG1PQlovdNNm4DB WLR9sJZ25PvY/WkIMhdkuj5GeBUzyQjxX3tMGVFtFxF+tAwy79ilFqr+xhFv/vXy H+Awa01zpPEyI9WXCI2jWRm+z7esgGnC+Q4NtKrB3ysc4KA+6a83hopo+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCd6+Amy2CLWzJ/Pv3U/Vtln1xP1MB8GA1UdIwQY MBaAFNkuXN9MVP+GjOiVMV6rWPLYhlDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlM1YzMweFVfNGFNNkpVeFhxdFk4dGlHVU1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYzNjMzAtNDUyNy00NzIyLTk3MWIt ZjVmZTNlMWIwYTYzLzEvMlM1YzMweFVfNGFNNkpVeFhxdFk4dGlHVU1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wYzNjMzAtNDUyNy00NzIyLTk3MWItZjVmZTNlMWIwYTYz LzEvMlM1YzMweFVfNGFNNkpVeFhxdFk4dGlHVU1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7AuLHjY bijcX3m/nDzGp3RyLKaCBAwgS5pgBz5ef1mtn83acCyLkZ73XHiCO67Y8Fa+4rOw /wmEaPZrjwWvFyKYUF9JWPT6GzhLc3qpaHuXOQVuFJFI4LHoOw6nN5tfmP6p3mnU VezwjfCvmhowTBscgvFEfr+XFk/pD+SslcwxknZx4Xrl5NgY7UHX4UGYt+jkIT9T qAWydqwQVol+/psYtg2zfJ1OJL6m5bXKabEhNUFY6U0m9kFUHjtk/GqrwMRpkbx7 DiJHVWzU0Vcz5Dk9of1huOv94NGQ/mqR2WOOuIj4uT4U76o89q0B0pSBKpae4c7H 9KybX71ukLkKXg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:13:45 2025 by rpki-client