This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json) Hash identifier: Byalu0qZETUQr/p/aIOtfrhqOuIaR8cct47vhdTvmxM= Subject key identifier: 08:7B:5C:07:42:13:83:41:78:91:1E:EA:4B:3F:AC:0F:6F:80:D0:87 Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9 Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9 Certificate serial: 019B3D5A5A5C5AFBED9FFA175D5EDF232129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 20:01:30 +0000 Manifest this update: Sat 20 Dec 2025 20:01:30 +0000 Manifest next update: Sun 21 Dec 2025 20:01:30 +0000 Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: +O5RiUBOGVdHMiXYiTbo9hJM4q+kdy6To6kfYGEkgYg=) 2: 7IrvKFJoIFvYm_SaTn84qzlHGRs.roa (hash: hUswVz2HCEFpTIdk0ppWtjvST0HpVnKMXk9uiSlgF48=) 3: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (hash: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=) 4: f__gtya754lWl6PiypfMMRlv6ak.roa (hash: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:5a:5c:5a:fb:ed:9f:fa:17:5d:5e:df:23:21:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9 Validity Not Before: Dec 20 20:01:30 2025 GMT Not After : Dec 21 20:01:30 2025 GMT Subject: CN=087b5c074213834178911eea4b3fac0f6f80d087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:44:7a:11:b3:11:4c:21:c3:07:03:69:fa: de:8d:df:3a:4e:25:62:1f:82:a7:eb:95:7d:e9:56: 26:8a:96:f6:99:d7:f7:f7:bc:c3:28:4a:54:56:04: 1f:f3:3a:0d:ef:60:fd:11:04:e1:4d:4f:cb:47:95: c7:ca:b3:cd:89:1c:1c:d4:bf:cf:4b:81:a5:46:14: 0b:c5:e9:14:e6:2b:79:66:c8:ab:31:8e:a2:e1:1b: 78:43:f2:13:51:c5:23:8e:7f:b6:0d:f8:36:e8:13: 50:42:d8:45:76:4d:e5:dc:4b:8f:ab:b3:e1:37:1b: 1f:20:01:c7:6d:b2:d9:57:4c:d5:4e:b4:62:6a:b4: 1c:1d:e7:b5:02:ab:1e:df:c1:93:da:f9:35:54:1b: dd:e0:82:bb:4b:8f:1b:6b:b1:54:72:02:50:e4:61: 8b:0b:58:00:4d:7f:f8:62:7f:24:28:d5:d1:43:ef: ae:2d:b3:21:91:3a:90:de:e2:38:f3:33:a1:f9:90: f3:68:08:08:e1:48:a4:d1:88:c1:98:0a:81:e8:bd: 9b:88:33:04:79:9d:82:ca:8d:12:82:2e:ad:92:c0: 87:87:bf:54:d5:1f:8f:05:61:62:d6:ec:30:c2:d2: 58:9b:26:11:ef:c7:52:75:fa:b8:2e:3b:b5:db:cb: 92:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7B:5C:07:42:13:83:41:78:91:1E:EA:4B:3F:AC:0F:6F:80:D0:87 X509v3 Authority Key Identifier: keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a5:8a:24:25:dd:94:40:a8:1c:79:d0:df:05:25:73:c1:a0: 5c:1c:18:c5:06:35:66:e1:1c:54:af:89:da:4a:9f:b9:4a:3a: 63:a3:85:a0:60:df:3e:de:2e:16:6c:0c:d5:95:44:0c:de:51: 22:eb:03:37:23:da:d5:cc:42:8b:61:a9:61:a8:0b:f8:dd:ad: 73:27:53:4a:9e:92:2b:f5:d9:c8:f9:94:61:1b:cc:91:66:6f: bc:fa:00:e3:ab:d8:1c:53:d7:c2:0f:da:d2:66:82:33:8e:08: 3c:e4:d2:b9:3e:19:a8:48:39:0f:76:ef:c0:c5:cd:00:c7:14: 31:a4:af:8f:6b:27:8e:5e:09:31:28:35:72:60:0c:3a:df:51: 27:c6:e1:ea:17:3b:79:c2:dd:c9:36:57:23:36:78:50:57:59: 64:90:19:57:86:93:33:ff:21:e0:42:df:17:37:ae:58:1a:e2: 37:c9:a8:a7:a8:16:cd:c7:2b:6e:0a:86:18:5c:91:cc:80:d1: 97:38:d8:29:b1:53:c9:9f:b3:91:35:3e:a7:32:64:e8:97:34: 40:db:be:6b:ee:32:5e:5b:3c:03:74:29:07:74:ab:38:1e:da: 0c:13:62:19:b8:a1:5d:85:6c:a2:4a:4b:26:5f:ac:40:1d:29: f3:ef:00:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WlpcWvvtn/oXXV7fIyEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm MWZmZTkwHhcNMjUxMjIwMjAwMTMwWhcNMjUxMjIxMjAwMTMwWjAzMTEwLwYDVQQD EygwODdiNWMwNzQyMTM4MzQxNzg5MTFlZWE0YjNmYWMwZjZmODBkMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/9EehGzEUwhwwcDafrejd86TiVi H4Kn65V96VYmipb2mdf397zDKEpUVgQf8zoN72D9EQThTU/LR5XHyrPNiRwc1L/P S4GlRhQLxekU5it5ZsirMY6i4Rt4Q/ITUcUjjn+2Dfg26BNQQthFdk3l3EuPq7Ph NxsfIAHHbbLZV0zVTrRiarQcHee1Aqse38GT2vk1VBvd4IK7S48ba7FUcgJQ5GGL C1gATX/4Yn8kKNXRQ++uLbMhkTqQ3uI48zOh+ZDzaAgI4Uik0YjBmAqB6L2biDME eZ2Cyo0Sgi6tksCHh79U1R+PBWFi1uwwwtJYmyYR78dSdfq4Lju128uSiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAh7XAdCE4NBeJEe6ks/rA9vgNCHMB8GA1UdIwQY MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt MDc1ZGM0NjA0YWVmLzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqWKJCXd lECoHHnQ3wUlc8GgXBwYxQY1ZuEcVK+J2kqfuUo6Y6OFoGDfPt4uFmwM1ZVEDN5R IusDNyPa1cxCi2GpYagL+N2tcydTSp6SK/XZyPmUYRvMkWZvvPoA46vYHFPXwg/a 0maCM44IPOTSuT4ZqEg5D3bvwMXNAMcUMaSvj2snjl4JMSg1cmAMOt9RJ8bh6hc7 ecLdyTZXIzZ4UFdZZJAZV4aTM/8h4ELfFzeuWBriN8mop6gWzccrbgqGGFyRzIDR lzjYKbFTyZ+zkTU+pzJk6Jc0QNu+a+4yXls8A3QpB3SrOB7aDBNiGbihXYVsokpL Jl+sQB0p8+8AQg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:01 2025 by rpki-client