This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json) Hash identifier: UleC1O9037yXXa+TRbte9NzFLruWWnmh/oVm17Xe08Y= Subject key identifier: 43:5C:6D:D0:68:5F:CB:ED:EC:8C:36:AA:60:9F:59:54:6A:98:69:F2 Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Certificate serial: 019B3E3571F01A0C46FA8C552F72F9244469 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 00:00:48 +0000 Manifest this update: Sun 21 Dec 2025 00:00:48 +0000 Manifest next update: Mon 22 Dec 2025 00:00:48 +0000 Files and hashes: 1: 0I8Tv0UylD63i4vV2xwB6rppwxI.roa (hash: QA7YvKS+a4NHe+cVmaIAaBQvm5w2dBSibTU49pm5mxM=) 2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: AN0Jv0GjOnnX7R/Vw+W+/CCwK4HnQEawoCjBYDOp3Yk=) 3: 8Dt0TuVJVMCN6RnRhXhKGlf_lII.roa (hash: sSGLTETKxbNSq3MrBGV2DgOI7we1i0Q8mkHNa5K3SUY=) 4: BvWnnBlWW44V8sVOxm98LqahBBA.roa (hash: 6mRHK+yOMdXINEIp3lFBzgdVlSN/9ntwMd5HVLaTroY=) 5: GSlFodh40GWtFXJ0cvtNrC5QQZs.roa (hash: OLiyxfNtsv2LTCfXCwftWJpdQJ+N0fnXvmkjqgnZmno=) 6: S-JnIhmXL5e2DsjQFgno_k2Vz8E.roa (hash: /YQsaxBTg9/GiAQu4cI2KHBUoCqKcZjkOS7l2+NOeWg=) 7: pVnXYoxQriC-WtOLcwsA6Za2gDI.roa (hash: 1qcQ0hH+Vk55dAqX/63+B6qLf3cPHgQEfJdfgWLNx0w=) 8: q_VxYTNksLn-A2DiKrfsqvcSMaw.roa (hash: 9v/49noAVbeRiYCi+xkrBzJwESjZSadJSkvsw1PN9x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:71:f0:1a:0c:46:fa:8c:55:2f:72:f9:24:44:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Validity Not Before: Dec 21 00:00:48 2025 GMT Not After : Dec 22 00:00:48 2025 GMT Subject: CN=435c6dd0685fcbedec8c36aa609f59546a9869f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:41:0b:42:73:6c:07:83:1f:83:4c:bb:88:a6: 52:f1:5b:53:36:7b:be:93:82:1a:04:cd:74:2b:09: 28:32:c2:20:8d:cf:b9:12:66:5f:e3:e8:02:fa:c7: 26:7b:41:b8:00:46:53:0f:ee:16:cd:5d:c2:05:60: b3:c9:7d:f4:48:4a:38:82:85:23:78:d6:e2:28:ad: ab:5a:eb:04:6d:91:c4:30:4c:ce:16:30:8d:6f:c6: c9:9c:f4:b3:20:ac:05:f7:07:f9:b1:05:33:c2:33: fd:83:0d:05:10:78:f7:fd:d2:37:7a:46:d7:13:47: 81:d7:f4:26:46:41:3c:2b:a5:9b:99:bb:0a:b3:a4: 5e:ac:15:e0:d9:f5:27:a9:29:59:41:6c:0d:f0:b8: 86:08:c3:d5:60:64:66:3c:9e:82:87:5a:25:6a:0f: a4:49:46:d3:0f:89:ed:d3:f8:2e:a1:fb:af:2e:7f: 05:e6:cc:6b:fb:8b:a4:0d:dd:c2:17:49:14:e4:49: 14:16:bc:29:ae:7b:4e:27:30:a3:76:36:dc:35:c5: d1:d2:7a:17:99:63:71:f3:9c:89:98:c3:18:c0:21: 3c:7d:98:58:e6:c7:9a:31:35:c1:9e:de:6e:8b:33: 03:61:30:fb:e6:34:3a:68:00:2b:5b:08:02:2d:e8: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5C:6D:D0:68:5F:CB:ED:EC:8C:36:AA:60:9F:59:54:6A:98:69:F2 X509v3 Authority Key Identifier: keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:59:81:22:43:e8:12:0f:94:bf:9c:fd:db:d9:a1:2a:b8:3b: ab:ce:5f:86:79:c5:bf:d4:bd:cb:58:02:74:fd:46:a5:ea:80: a0:f6:c0:d5:92:5d:ea:48:0f:a8:4b:ce:0d:5f:83:08:4b:cd: 66:c4:33:a8:01:76:2d:7f:51:f1:d8:41:dd:db:ee:0c:90:0e: 6a:65:28:ce:d9:20:d9:18:ed:00:8c:c5:e1:fb:17:4d:af:95: 29:27:16:e6:19:e0:39:0b:2a:4f:c8:dc:a3:80:56:49:94:86: b0:6a:28:3d:1b:3c:39:50:bd:75:00:67:73:d8:ef:84:8c:37: ad:66:4a:07:55:da:46:9e:83:84:a9:f8:cb:63:29:41:ce:34: 20:a3:ad:1c:60:4c:bd:cd:99:55:9e:b8:19:6f:39:ed:1d:25: ee:ac:c2:90:92:be:42:6b:d4:24:f0:44:96:ca:85:05:97:41: 93:02:95:fa:9a:2b:b4:3c:c1:b2:6d:af:54:6a:b4:b8:6e:47: 4a:7f:9c:b1:86:11:c4:96:41:bc:70:56:49:5b:d4:6a:c6:30: b4:5e:e2:18:51:c1:fd:92:bc:83:1d:a2:35:9b:d0:a4:66:fb: d1:17:12:9d:34:3a:64:88:35:ec:5a:f2:ee:75:2e:c4:42:99: 5d:de:88:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXHwGgxG+oxVL3L5JERpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj NGZkMjIwHhcNMjUxMjIxMDAwMDQ4WhcNMjUxMjIyMDAwMDQ4WjAzMTEwLwYDVQQD Eyg0MzVjNmRkMDY4NWZjYmVkZWM4YzM2YWE2MDlmNTk1NDZhOTg2OWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokELQnNsB4Mfg0y7iKZS8VtTNnu+ k4IaBM10KwkoMsIgjc+5EmZf4+gC+scme0G4AEZTD+4WzV3CBWCzyX30SEo4goUj eNbiKK2rWusEbZHEMEzOFjCNb8bJnPSzIKwF9wf5sQUzwjP9gw0FEHj3/dI3ekbX E0eB1/QmRkE8K6WbmbsKs6RerBXg2fUnqSlZQWwN8LiGCMPVYGRmPJ6Ch1olag+k SUbTD4nt0/guofuvLn8F5sxr+4ukDd3CF0kU5EkUFrwprntOJzCjdjbcNcXR0noX mWNx85yJmMMYwCE8fZhY5seaMTXBnt5uizMDYTD75jQ6aAArWwgCLehxqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENcbdBoX8vt7Iw2qmCfWVRqmGnyMB8GA1UdIwQY MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt MzQ2OTAzNGZhNDQxLzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVmBIkPo Eg+Uv5z929mhKrg7q85fhnnFv9S9y1gCdP1GpeqAoPbA1ZJd6kgPqEvODV+DCEvN ZsQzqAF2LX9R8dhB3dvuDJAOamUoztkg2RjtAIzF4fsXTa+VKScW5hngOQsqT8jc o4BWSZSGsGooPRs8OVC9dQBnc9jvhIw3rWZKB1XaRp6DhKn4y2MpQc40IKOtHGBM vc2ZVZ64GW857R0l7qzCkJK+QmvUJPBElsqFBZdBkwKV+portDzBsm2vVGq0uG5H Sn+csYYRxJZBvHBWSVvUasYwtF7iGFHB/ZK8gx2iNZvQpGb70RcSnTQ6ZIg17Fry 7nUuxEKZXd6IXA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:15:53 2025 by rpki-client