This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json) Hash identifier: y87fSyGnhjemXKh9ILkE/GJrR13EN8ylSHiLiCAYuos= Subject key identifier: 24:A8:7F:53:6D:30:8D:CD:0A:15:3F:D0:87:D2:73:21:7A:1B:55:A0 Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d Certificate serial: 019B3C0FF72283CEBB6852F1091FD1CEB77C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 14:00:37 +0000 Manifest this update: Sat 20 Dec 2025 14:00:37 +0000 Manifest next update: Sun 21 Dec 2025 14:00:37 +0000 Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: 9EfEhjUzS/vcacbpAHcB7im1tyYzuIMZmnnszszGBAc=) 2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=) 3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:f7:22:83:ce:bb:68:52:f1:09:1f:d1:ce:b7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d Validity Not Before: Dec 20 14:00:37 2025 GMT Not After : Dec 21 14:00:37 2025 GMT Subject: CN=24a87f536d308dcd0a153fd087d273217a1b55a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:d0:da:a0:f1:a4:e1:f2:d4:3e:09:ec:a5: 99:5a:ba:5e:f0:65:78:8d:3a:93:e8:17:b3:04:d4: 0e:5a:40:19:fb:96:9a:ce:5e:2e:e8:52:1b:1f:ea: 1d:ec:a3:83:09:25:df:77:0d:3a:9c:2b:42:f5:f9: 54:96:f8:af:8e:ca:6d:86:56:b3:b7:7b:10:24:3c: 36:99:3b:d5:d7:22:f5:14:bc:a4:2b:a8:8e:b3:fb: 59:4f:9f:85:86:4c:ab:16:be:c3:f9:e0:8b:68:90: 8f:de:27:64:ac:10:8e:22:fd:32:09:bc:12:a5:86: c3:cd:32:3a:7c:5b:50:23:8a:93:30:09:de:bf:24: 03:5b:19:41:4e:4a:13:19:db:48:6c:bf:57:60:2c: 95:d2:4c:2a:09:76:b0:6c:ec:39:a5:e0:3d:2f:93: 11:0f:5a:fe:df:b6:1e:a0:2f:83:94:c5:26:49:a1: 1d:fc:b3:4d:47:7f:53:24:f6:26:7f:fd:8c:a3:64: 99:e8:0f:47:07:32:9d:ee:3a:cc:08:5b:ae:51:de: 30:1b:15:9e:4f:44:de:1c:b2:c5:27:6f:fe:b0:d3: f2:24:2f:a8:91:51:36:be:50:2d:94:20:72:1a:28: 0b:bc:7f:e4:1c:21:9c:b8:45:77:50:45:a4:d9:d4: ec:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A8:7F:53:6D:30:8D:CD:0A:15:3F:D0:87:D2:73:21:7A:1B:55:A0 X509v3 Authority Key Identifier: keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:58:9d:1e:f0:12:20:14:61:bb:8b:df:44:3d:49:43:94:13: 03:ac:73:30:10:47:3a:27:cc:97:f1:c1:42:bb:32:65:13:2f: 94:83:38:ab:ef:18:d0:1f:e6:de:62:5c:ef:e3:15:fb:36:5c: b6:8c:f0:1e:a6:ce:6e:b2:7d:4f:43:66:fc:0a:65:35:61:b4: e4:55:3c:0d:7a:33:a2:c2:ce:75:77:a8:38:10:1f:62:ed:a9: 73:7a:87:6d:00:15:0a:79:43:35:bd:67:0f:15:bc:9b:ee:ef: 31:48:1a:1b:b7:b4:ca:22:77:90:ad:29:58:fb:3d:93:4b:c3: cc:ac:a5:cc:74:64:62:de:d3:ee:44:b3:29:0e:b4:3a:6a:b5: b9:16:ec:90:33:16:ab:34:04:3d:91:5b:29:4b:d9:88:9d:52: e4:d0:fe:53:5f:b0:89:87:6e:a8:5e:8a:9d:8d:ac:cb:68:27: 2f:c7:ed:44:f2:d1:5f:88:39:3a:14:64:9f:9d:ae:70:0b:53: 97:07:c7:67:80:b0:23:6a:db:0c:df:7e:49:34:1c:82:b4:2b: 29:ab:a8:0a:a7:0e:dd:63:68:bb:f6:f0:80:73:15:3a:50:b9: ea:5f:ff:63:65:72:2f:c5:ae:5e:05:7f:41:c8:e2:b7:5c:5a: 38:b6:9e:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/cig867aFLxCR/Rzrd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTVmYTcwZTNmN2RmMzYxMTUxZDU1Mzc5ZDRkOWI4NWRh ZGZkM2QwHhcNMjUxMjIwMTQwMDM3WhcNMjUxMjIxMTQwMDM3WjAzMTEwLwYDVQQD EygyNGE4N2Y1MzZkMzA4ZGNkMGExNTNmZDA4N2QyNzMyMTdhMWI1NWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtODQ2qDxpOHy1D4J7KWZWrpe8GV4 jTqT6BezBNQOWkAZ+5aazl4u6FIbH+od7KODCSXfdw06nCtC9flUlvivjspthlaz t3sQJDw2mTvV1yL1FLykK6iOs/tZT5+FhkyrFr7D+eCLaJCP3idkrBCOIv0yCbwS pYbDzTI6fFtQI4qTMAnevyQDWxlBTkoTGdtIbL9XYCyV0kwqCXawbOw5peA9L5MR D1r+37YeoC+DlMUmSaEd/LNNR39TJPYmf/2Mo2SZ6A9HBzKd7jrMCFuuUd4wGxWe T0TeHLLFJ2/+sNPyJC+okVE2vlAtlCByGigLvH/kHCGcuEV3UEWk2dTsIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSof1NtMI3NChU/0IfScyF6G1WgMB8GA1UdIwQY MBaAFNiV+nDj9982EVHVU3nU2bhdrf09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpYNmNPUDMzellSVWRWVGVkVFp1RjJ0X1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MGI1MDQtYzJkNC00Mzg3LTliNzUt ZjQ1YjhkYmUyZjk3LzEvMkpYNmNPUDMzellSVWRWVGVkVFp1RjJ0X1QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83MGI1MDQtYzJkNC00Mzg3LTliNzUtZjQ1YjhkYmUyZjk3 LzEvMkpYNmNPUDMzellSVWRWVGVkVFp1RjJ0X1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVidHvAS IBRhu4vfRD1JQ5QTA6xzMBBHOifMl/HBQrsyZRMvlIM4q+8Y0B/m3mJc7+MV+zZc tozwHqbObrJ9T0Nm/AplNWG05FU8DXozosLOdXeoOBAfYu2pc3qHbQAVCnlDNb1n DxW8m+7vMUgaG7e0yiJ3kK0pWPs9k0vDzKylzHRkYt7T7kSzKQ60Omq1uRbskDMW qzQEPZFbKUvZiJ1S5ND+U1+wiYduqF6KnY2sy2gnL8ftRPLRX4g5OhRkn52ucAtT lwfHZ4CwI2rbDN9+STQcgrQrKauoCqcO3WNou/bwgHMVOlC56l//Y2VyL8WuXgV/ Qcjit1xaOLaeHg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:07 2025 by rpki-client