This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft File: 2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json) Hash identifier: JvDRajp+EpF6fOwvOjttWm+3gJS1iukAqzLHPUndhDs= Subject key identifier: 14:BF:5F:EA:2A:4E:62:53:47:51:9D:7A:05:FD:2A:7C:B9:5B:0A:1F Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff Certificate serial: 019B79379340D9E060E356ADE0EC34CE8835 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft Manifest number: 0E11 Signing time: Thu 01 Jan 2026 11:00:43 +0000 Manifest this update: Thu 01 Jan 2026 11:00:43 +0000 Manifest next update: Fri 02 Jan 2026 11:00:43 +0000 Files and hashes: 1: 17FLk26rZWNpnvEJucbEAG-7zqY.roa (hash: qMmpcRGKwOqOR5+GsVwNkgRbdBAdNorVpaMiale+nXI=) 2: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: afq6RXJ+wL53JJThVaRAlGQRGXbG0EMM7rNfWC712EE=) 3: bBGzNd5qGUUIPYH3-5zWMnwwyJg.roa (hash: 290Z2J6Jo9xanYpdqpciKr53wSmtU/PW4k3Qs+NnOTs=) 4: k29cbE30TGhu-1q8rRu7-jpqTg4.roa (hash: 9mQL8HUgIQzEZ7MXmoS/sUavd/K/UaaalJ5/ztoLSTk=) 5: s7mUu7WrVHVPJEBCCdi0H3bHpis.roa (hash: ExGJpFM76OJZURK1GFJNiBKKffY4pIrBrUBBm9tcC8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:37:93:40:d9:e0:60:e3:56:ad:e0:ec:34:ce:88:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff Validity Not Before: Jan 1 11:00:43 2026 GMT Not After : Jan 2 11:00:43 2026 GMT Subject: CN=14bf5fea2a4e625347519d7a05fd2a7cb95b0a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:37:91:a6:22:6d:e9:8a:e4:8a:3a:1c:79: f8:e2:fc:cd:96:38:d0:92:83:4c:55:8d:88:dc:56: c1:cd:f8:80:26:f8:43:c0:01:e3:17:de:f6:64:23: 6d:03:96:c7:2c:47:9a:71:19:a2:52:cd:e3:a0:d4: 68:1b:de:11:2f:6c:c0:ed:9f:3b:71:24:52:76:28: f4:2e:5b:63:a2:4e:38:17:30:b1:b0:47:af:04:15: 3c:56:c1:1a:d7:d9:79:07:0c:7c:f6:dc:2e:ef:6b: 81:84:fa:15:b5:9f:28:5a:09:3b:0f:87:98:70:52: 80:83:6d:67:16:da:30:43:b5:b4:69:3f:c1:4b:80: 74:e4:8d:c7:c5:31:26:35:15:b3:42:e4:64:93:20: 7b:cb:c0:7e:7e:24:af:bd:a6:90:a0:f9:bf:04:ef: 94:d1:b5:81:61:2f:d5:f1:51:ca:16:8e:15:b5:ed: 80:dd:a5:83:ea:b7:17:d1:ae:41:64:be:71:0b:d9: 0a:67:96:00:77:7f:1f:c1:95:fd:b0:30:79:db:56: 46:ef:7b:02:4a:11:8e:4b:ea:3e:b8:2c:43:b2:99: c1:04:b6:45:93:4d:ad:63:da:7f:2d:b3:59:8a:8e: 9d:1b:d3:94:6f:3c:58:5c:21:70:0c:a5:48:b7:12: 56:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BF:5F:EA:2A:4E:62:53:47:51:9D:7A:05:FD:2A:7C:B9:5B:0A:1F X509v3 Authority Key Identifier: keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d1:1a:0d:ec:8b:b4:e2:b4:d6:6b:c5:3a:4a:bc:f0:b9:3e: 0d:53:26:29:5a:f1:4d:70:4a:66:5e:ea:67:7a:9b:fc:ce:5c: 37:0e:61:d3:47:67:9d:17:42:5e:ea:5c:b4:34:2a:66:57:40: 77:6f:55:69:e1:e3:1f:ec:2b:a8:33:d7:ab:67:d0:6f:55:ba: 5a:a3:17:83:83:22:b3:51:4a:c3:97:27:cc:2f:0f:32:85:0d: 20:69:14:4a:4d:f6:a8:3f:63:53:1b:ad:f8:0d:46:d7:95:21: 4f:5b:37:d6:a6:a8:47:39:f6:34:d8:3e:42:3d:f1:94:99:0e: d0:d5:26:2d:fa:2b:e4:e2:0c:74:b2:5a:26:c1:55:16:6a:03: 30:dd:f8:93:39:3b:b0:4f:ad:bc:10:23:00:f1:5d:42:f6:22: 7e:75:7d:b5:9b:a2:9a:eb:01:26:c0:cd:43:0e:24:e5:37:12: 85:22:f2:eb:4b:d8:83:30:59:8c:31:3e:ec:30:f3:9c:6b:2d: 16:17:c8:0f:04:69:4c:1c:78:c0:f6:0f:4d:61:82:3f:a4:f2: 83:40:be:1e:dd:76:7b:e6:d8:0c:35:61:77:15:a2:0f:c4:15: 1c:5d:92:3a:9c:90:36:f7:69:29:67:8c:92:83:f7:b4:59:52: 0e:35:af:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5N5NA2eBg41at4Ow0zog1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGIzM2NkZGI3OTliN2JjZjVkM2RjZTAwNGZkYmE4YzNl ODY0ZmYwHhcNMjYwMTAxMTEwMDQzWhcNMjYwMTAyMTEwMDQzWjAzMTEwLwYDVQQD EygxNGJmNWZlYTJhNGU2MjUzNDc1MTlkN2EwNWZkMmE3Y2I5NWIwYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCg3kaYibemK5Io6HHn44vzNljjQ koNMVY2I3FbBzfiAJvhDwAHjF972ZCNtA5bHLEeacRmiUs3joNRoG94RL2zA7Z87 cSRSdij0Lltjok44FzCxsEevBBU8VsEa19l5Bwx89twu72uBhPoVtZ8oWgk7D4eY cFKAg21nFtowQ7W0aT/BS4B05I3HxTEmNRWzQuRkkyB7y8B+fiSvvaaQoPm/BO+U 0bWBYS/V8VHKFo4Vte2A3aWD6rcX0a5BZL5xC9kKZ5YAd38fwZX9sDB521ZG73sC ShGOS+o+uCxDspnBBLZFk02tY9p/LbNZio6dG9OUbzxYXCFwDKVItxJWqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBS/X+oqTmJTR1GdegX9Kny5WwofMB8GA1UdIwQY MBaAFNoLM83beZt7z109zgBP26jD6GT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQt NzczM2JkODg4ZTI4LzEvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQtNzczM2JkODg4ZTI4 LzEvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9EaDeyL tOK01mvFOkq88Lk+DVMmKVrxTXBKZl7qZ3qb/M5cNw5h00dnnRdCXupctDQqZldA d29VaeHjH+wrqDPXq2fQb1W6WqMXg4Mis1FKw5cnzC8PMoUNIGkUSk32qD9jUxut +A1G15UhT1s31qaoRzn2NNg+Qj3xlJkO0NUmLfor5OIMdLJaJsFVFmoDMN34kzk7 sE+tvBAjAPFdQvYifnV9tZuimusBJsDNQw4k5TcShSLy60vYgzBZjDE+7DDznGst FhfIDwRpTBx4wPYPTWGCP6Tyg0C+Ht12e+bYDDVhdxWiD8QVHF2SOpyQNvdpKWeM koP3tFlSDjWvWQ== -----END CERTIFICATE-----Generated at Thu Jan 1 14:24:02 2026 by rpki-client