This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json) Hash identifier: jHuhQNfJJ2++XI72uZAmE+VjZAociLqjhwFIwQ0WW5Q= Subject key identifier: 49:74:EE:71:28:C7:7D:8F:48:74:AC:87:62:88:1E:CD:C2:31:B7:44 Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Certificate serial: 019B3946B62BCC229314D6774068BECF4BB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft Manifest number: 149F Signing time: Sat 20 Dec 2025 01:01:33 +0000 Manifest this update: Sat 20 Dec 2025 01:01:33 +0000 Manifest next update: Sun 21 Dec 2025 01:01:33 +0000 Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=) 2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: KDJfle55RjwvMtUEUuTjRZ43UgDuXosSpKdw2iawo7k=) 3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=) 4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:b6:2b:cc:22:93:14:d6:77:40:68:be:cf:4b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Validity Not Before: Dec 20 01:01:33 2025 GMT Not After : Dec 21 01:01:33 2025 GMT Subject: CN=4974ee7128c77d8f4874ac8762881ecdc231b744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:a3:7b:22:32:34:a8:39:81:51:50:8b:17: c0:0a:d1:c8:98:96:bf:38:0a:5b:23:4d:e6:e4:1b: 1f:3f:de:73:7a:31:a4:9a:d1:f5:10:32:aa:b4:fa: ea:22:d2:7b:d7:a7:6e:0c:ae:e5:a0:88:f4:15:57: 86:6b:20:53:81:b9:41:96:fd:35:c1:c1:01:5b:c2: 49:52:29:22:de:47:a7:7d:e6:f2:18:0e:e4:2f:a6: 9b:38:d1:4b:52:d1:65:04:85:ca:42:61:c2:91:6a: 11:1a:da:07:d6:2e:6d:a4:70:2a:73:b6:cb:f0:53: 4f:21:6e:d2:5f:1c:a2:c8:ac:c9:1f:d9:77:8e:bc: 99:a9:53:32:ff:09:bf:74:d6:1d:b5:36:00:87:1a: f4:5d:c3:ad:46:90:60:e6:be:62:df:ca:d1:99:f4: 23:7f:f2:b3:b5:50:bf:1a:0e:18:c8:35:56:99:c9: 03:4d:76:58:7b:60:ce:f1:6b:04:e0:9f:c6:b3:16: 93:45:37:72:bc:45:49:c6:61:04:a9:35:fb:a5:dd: 3d:a1:0f:bf:61:b8:05:60:3a:f2:d6:ab:5f:94:30: 51:b8:06:56:f6:49:94:de:c6:a7:31:24:d5:de:e6: 14:85:a9:07:56:22:57:7c:2e:6d:6e:ba:6b:ca:4a: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:74:EE:71:28:C7:7D:8F:48:74:AC:87:62:88:1E:CD:C2:31:B7:44 X509v3 Authority Key Identifier: keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0c:7c:08:91:b9:88:07:ee:38:a7:8e:fa:9d:27:8f:dd:2f: 55:3b:27:6d:5c:b4:8b:3f:73:c6:8e:00:cf:86:4f:59:22:c4: 8b:90:53:17:1a:a4:46:49:eb:c3:31:f1:1d:04:f3:6b:55:ae: 97:24:92:0a:91:09:e8:f3:51:87:4a:07:10:b9:7a:79:3d:05: cd:a8:d8:ed:38:6f:da:1c:7a:09:19:07:bf:0b:6f:26:85:67: e8:12:71:07:4f:0f:6b:15:1a:46:d9:a9:fd:99:b8:54:67:24: ca:49:a5:78:b6:50:74:e6:a9:cf:91:e9:c3:ef:65:60:68:94: 5c:7c:27:35:54:d2:38:18:a9:22:31:64:1d:35:83:c1:71:c8: 08:5e:84:5c:ae:b0:bd:75:67:d2:e5:aa:c4:e1:7f:10:0b:ec: f3:9a:6a:7d:b6:c6:39:20:28:f0:ba:4d:cd:97:83:b8:c1:2d: f1:34:51:64:e3:0f:08:b5:d7:39:4d:54:77:a1:ba:32:c0:a0: b6:50:c0:7a:82:11:96:62:c6:8d:82:6b:7c:6b:2f:4f:3a:ab: 67:5a:42:a5:22:ec:56:44:cc:60:1f:dd:b9:9b:1d:a5:fc:90: e2:7d:a4:3d:7d:8d:d4:63:6e:3f:13:21:49:c0:f7:22:51:6e: 56:90:2a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RrYrzCKTFNZ3QGi+z0u0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MjZjYTVkNTNjMWI1MzA4ZTJjOWM3OTFjNjMwYTBmMjIz Mzc5NDMwHhcNMjUxMjIwMDEwMTMzWhcNMjUxMjIxMDEwMTMzWjAzMTEwLwYDVQQD Eyg0OTc0ZWU3MTI4Yzc3ZDhmNDg3NGFjODc2Mjg4MWVjZGMyMzFiNzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW+jeyIyNKg5gVFQixfACtHImJa/ OApbI03m5BsfP95zejGkmtH1EDKqtPrqItJ716duDK7loIj0FVeGayBTgblBlv01 wcEBW8JJUiki3kenfebyGA7kL6abONFLUtFlBIXKQmHCkWoRGtoH1i5tpHAqc7bL 8FNPIW7SXxyiyKzJH9l3jryZqVMy/wm/dNYdtTYAhxr0XcOtRpBg5r5i38rRmfQj f/KztVC/Gg4YyDVWmckDTXZYe2DO8WsE4J/GsxaTRTdyvEVJxmEEqTX7pd09oQ+/ YbgFYDry1qtflDBRuAZW9kmU3sanMSTV3uYUhakHViJXfC5tbrprykpTBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEl07nEox32PSHSsh2KIHs3CMbdEMB8GA1UdIwQY MBaAFNgmyl1TwbUwjiyceRxjCg8iM3lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGIt NThkMmVlOTgyODc5LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGItNThkMmVlOTgyODc5 LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQx8CJG5 iAfuOKeO+p0nj90vVTsnbVy0iz9zxo4Az4ZPWSLEi5BTFxqkRknrwzHxHQTza1Wu lySSCpEJ6PNRh0oHELl6eT0FzajY7Thv2hx6CRkHvwtvJoVn6BJxB08PaxUaRtmp /Zm4VGckykmleLZQdOapz5Hpw+9lYGiUXHwnNVTSOBipIjFkHTWDwXHICF6EXK6w vXVn0uWqxOF/EAvs85pqfbbGOSAo8LpNzZeDuMEt8TRRZOMPCLXXOU1Ud6G6MsCg tlDAeoIRlmLGjYJrfGsvTzqrZ1pCpSLsVkTMYB/duZsdpfyQ4n2kPX2N1GNuPxMh ScD3IlFuVpAq7g== -----END CERTIFICATE-----Generated at Sat Dec 20 07:46:29 2025 by rpki-client