This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json) Hash identifier: ARixhw8aNNNMkcj6MMd5RCpTzDqHxZDvzWrRNlI128w= Subject key identifier: DE:EA:68:3F:20:D8:72:20:38:84:E4:7B:2D:AA:81:54:54:7F:69:16 Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Certificate serial: 019B50731513B216C2D67B9C55C5C8310E73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft Manifest number: 14AB Signing time: Wed 24 Dec 2025 13:01:17 +0000 Manifest this update: Wed 24 Dec 2025 13:01:17 +0000 Manifest next update: Thu 25 Dec 2025 13:01:17 +0000 Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=) 2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: LvEFL22z+yhO3E8xkdbkJc2XfgIMt3OOB0U2+71W7lA=) 3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=) 4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:15:13:b2:16:c2:d6:7b:9c:55:c5:c8:31:0e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Validity Not Before: Dec 24 13:01:17 2025 GMT Not After : Dec 25 13:01:17 2025 GMT Subject: CN=deea683f20d872203884e47b2daa8154547f6916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:53:b8:94:6e:aa:88:23:ea:33:ac:b5:d7: 46:b0:ce:48:4f:e0:06:ef:78:d7:1f:31:3a:fc:e0: eb:34:cf:8e:1b:bd:d5:8b:ac:e5:e7:06:e0:bb:82: f0:83:96:6c:7f:13:b5:31:a9:05:aa:df:5a:d3:b3: 6c:d1:52:ff:5a:ca:c2:6f:bd:12:bb:b9:23:d9:0f: 8a:98:c8:df:df:0e:6e:b8:c4:d4:a9:31:d7:64:06: ea:39:3e:95:29:af:0e:23:0c:a3:0d:91:5c:15:81: 27:25:d4:58:26:bc:1d:57:d0:2b:f8:57:23:90:ff: 29:67:00:30:44:25:e1:8b:ed:04:15:09:e1:92:01: 48:80:b4:02:08:23:98:9a:d2:c1:d9:c4:7e:c4:cd: 52:6b:24:71:f2:fc:d8:28:07:69:df:91:4c:ad:33: b7:5d:46:5f:e1:61:63:3e:fc:94:e6:f8:28:dd:fb: 44:b5:0c:69:02:54:ed:e4:19:17:93:2f:f4:ed:97: 6e:83:7a:3b:ad:07:8b:24:8f:fc:04:29:cf:f2:2f: 78:a5:06:1f:38:64:ea:9b:76:fd:83:ce:44:f8:08: 46:d5:3f:17:c4:88:1a:b8:f4:43:91:fb:5d:f1:60: f1:1e:c3:c1:1d:cd:b4:9f:b0:0e:78:cb:84:9d:12: 14:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EA:68:3F:20:D8:72:20:38:84:E4:7B:2D:AA:81:54:54:7F:69:16 X509v3 Authority Key Identifier: keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ca:e6:eb:ff:16:25:d5:1a:10:1e:93:3d:b1:e6:42:d4:37: b2:95:15:a2:2c:85:96:26:b8:d4:7b:91:85:53:70:33:40:12: 53:77:4f:0d:8e:15:01:7e:ec:1c:68:6a:e1:31:71:64:98:98: 8e:09:93:ef:e8:11:d4:51:00:fe:a2:c5:90:ea:9b:d8:21:8c: f0:32:33:de:30:d7:c4:d9:20:66:b7:4f:5a:c9:19:fe:fa:77: 42:cf:6c:06:0c:6d:1e:55:dc:0b:22:3e:a6:f8:15:25:7f:69: 8c:31:3a:4f:9b:99:a4:0b:6b:9d:63:19:58:09:89:b2:f5:aa: e3:77:67:3d:b3:d0:f0:ae:06:a3:4c:81:5b:36:cc:d4:0f:8d: 38:f1:d5:37:d4:1c:20:3d:aa:75:57:5f:e0:33:0a:3f:d3:b1: 7a:b2:e6:3b:38:b5:54:b0:1a:53:b6:6a:d1:1d:4a:5e:68:33: 65:48:d2:02:75:a0:02:4b:96:e0:2f:4a:19:79:6e:0a:70:b6: 3f:84:04:77:ee:b7:3c:b1:01:ac:c8:a5:8a:09:ed:83:16:d0: 53:0d:c0:4c:19:6f:c6:06:02:05:b1:7e:67:97:63:f2:67:4c: 97:d9:18:19:b4:26:44:06:42:8c:39:c1:f7:73:7d:a1:82:3d: 91:c1:8a:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcxUTshbC1nucVcXIMQ5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MjZjYTVkNTNjMWI1MzA4ZTJjOWM3OTFjNjMwYTBmMjIz Mzc5NDMwHhcNMjUxMjI0MTMwMTE3WhcNMjUxMjI1MTMwMTE3WjAzMTEwLwYDVQQD EyhkZWVhNjgzZjIwZDg3MjIwMzg4NGU0N2IyZGFhODE1NDU0N2Y2OTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXpTuJRuqogj6jOstddGsM5IT+AG 73jXHzE6/ODrNM+OG73Vi6zl5wbgu4Lwg5ZsfxO1MakFqt9a07Ns0VL/WsrCb70S u7kj2Q+KmMjf3w5uuMTUqTHXZAbqOT6VKa8OIwyjDZFcFYEnJdRYJrwdV9Ar+Fcj kP8pZwAwRCXhi+0EFQnhkgFIgLQCCCOYmtLB2cR+xM1SayRx8vzYKAdp35FMrTO3 XUZf4WFjPvyU5vgo3ftEtQxpAlTt5BkXky/07Zdug3o7rQeLJI/8BCnP8i94pQYf OGTqm3b9g85E+AhG1T8XxIgauPRDkftd8WDxHsPBHc20n7AOeMuEnRIUJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7qaD8g2HIgOITkey2qgVRUf2kWMB8GA1UdIwQY MBaAFNgmyl1TwbUwjiyceRxjCg8iM3lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGIt NThkMmVlOTgyODc5LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGItNThkMmVlOTgyODc5 LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcrm6/8W JdUaEB6TPbHmQtQ3spUVoiyFlia41HuRhVNwM0ASU3dPDY4VAX7sHGhq4TFxZJiY jgmT7+gR1FEA/qLFkOqb2CGM8DIz3jDXxNkgZrdPWskZ/vp3Qs9sBgxtHlXcCyI+ pvgVJX9pjDE6T5uZpAtrnWMZWAmJsvWq43dnPbPQ8K4Go0yBWzbM1A+NOPHVN9Qc ID2qdVdf4DMKP9OxerLmOzi1VLAaU7Zq0R1KXmgzZUjSAnWgAkuW4C9KGXluCnC2 P4QEd+63PLEBrMiligntgxbQUw3ATBlvxgYCBbF+Z5dj8mdMl9kYGbQmRAZCjDnB 93N9oYI9kcGK9Q== -----END CERTIFICATE-----Generated at Wed Dec 24 18:38:22 2025 by rpki-client