This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft File: 2C4TD2tr3205KA43XfNE5uCjSzw.mft (raw, json) Hash identifier: xhRr8yJsUwhvIeWKcYpQVZ2TD8auMk7ea9fNQTb+wFA= Subject key identifier: DD:B7:82:EB:B0:11:AA:09:F4:EA:07:F3:B2:78:3D:12:AE:1F:E2:60 Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C Certificate issuer: /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c Certificate serial: 019B424A207E7A9124442E0570FE9CF08E51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 19:01:52 +0000 Manifest this update: Sun 21 Dec 2025 19:01:52 +0000 Manifest next update: Mon 22 Dec 2025 19:01:52 +0000 Files and hashes: 1: 2C4TD2tr3205KA43XfNE5uCjSzw.crl (hash: GIdIDZ67oJd6gaQNduneUKQd+8t74UByC0BYrjq5BmA=) 2: _y5CZTQPUqUUQngHW900Y82Ke5c.roa (hash: NWkl1e7xKV8FX9A552bXtm6FLbLssbeZQgoWd/8O4Xs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:20:7e:7a:91:24:44:2e:05:70:fe:9c:f0:8e:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c Validity Not Before: Dec 21 19:01:52 2025 GMT Not After : Dec 22 19:01:52 2025 GMT Subject: CN=ddb782ebb011aa09f4ea07f3b2783d12ae1fe260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:0e:39:6e:a2:70:51:2a:71:f0:e3:6d:8a: 44:08:58:a5:7f:1c:27:1a:6e:26:e9:1a:57:83:7f: c8:f3:8c:61:53:16:61:67:91:63:37:e7:5d:bb:0b: 12:6b:9e:4c:bf:44:d3:c9:bc:73:33:a1:f9:cc:04: fb:18:92:3a:21:c8:75:51:3e:5b:06:af:94:30:ea: 9d:cb:f6:8a:d6:6a:c6:9b:12:97:66:0f:9d:95:78: c7:5d:76:8c:e6:57:55:b8:09:b2:bf:6c:59:d4:ba: fd:db:52:1d:07:19:64:68:f2:16:98:05:71:ec:71: 73:b5:95:30:cb:9a:55:07:37:62:80:41:4d:ef:29: 6f:d8:38:9d:1b:59:67:ec:1c:c5:79:ad:35:90:7d: 20:98:d0:68:4b:38:de:83:1f:db:bd:85:a2:c3:75: 12:d9:89:2d:fd:67:50:4c:21:97:35:0f:57:cf:e3: 44:a3:ce:7d:e9:d7:67:f6:07:8d:10:03:4c:16:1f: e8:e7:31:0c:f4:52:56:fc:3e:cb:b5:4f:84:10:bd: f5:95:fa:c6:5f:ef:46:4a:f0:70:6b:01:25:57:78: 9e:57:27:ca:ab:d5:08:b9:24:2b:d7:f9:63:3a:e9: 33:b3:1a:aa:3d:3f:e2:39:7b:64:95:db:c0:16:73: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B7:82:EB:B0:11:AA:09:F4:EA:07:F3:B2:78:3D:12:AE:1F:E2:60 X509v3 Authority Key Identifier: keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1b:c9:32:a5:2b:4a:76:fb:94:99:0c:84:e8:ad:b9:27:df: d4:63:31:dc:ae:14:c4:b7:44:06:7c:df:5a:0e:f8:fc:ce:e8: 1f:c5:90:a1:6c:9a:8d:09:89:4a:8a:b3:37:e4:70:fa:52:75: bd:a9:09:e8:01:0c:b4:03:d7:15:8e:dd:db:b6:70:96:42:13: b7:8d:64:ee:b2:e5:04:b1:60:d0:8f:79:2a:e3:d9:b3:9a:8e: f4:66:1a:74:31:87:fe:3d:3e:e0:92:43:27:02:6f:36:a6:31: 90:0a:ba:e3:3c:6b:88:84:82:1d:aa:39:16:6a:90:80:af:1a: 7e:12:6a:ea:de:d6:f8:3a:09:3e:48:de:c7:cf:43:0c:4b:09: 91:bd:d3:6b:84:3c:d4:16:44:ab:b8:ff:46:85:b3:3e:c4:e7: 41:09:fa:19:1b:9d:a6:f4:dd:61:27:9b:b6:ce:61:5b:1c:aa: e2:5b:45:37:21:26:b4:52:c9:5b:88:02:58:f9:f8:89:f1:f7: 94:a9:18:fe:fd:76:90:60:4e:b0:b8:d4:92:3c:07:5a:b9:d6: d7:ff:88:9c:6f:bf:b7:fe:f8:ca:d3:75:9f:f0:4f:8f:0f:f1: 81:e1:f5:55:68:74:7e:17:7b:cc:79:21:52:68:62:02:29:b4: 0a:a5:6f:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSiB+epEkRC4FcP6c8I5RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmUxMzBmNmI2YmRmNmQzOTI4MGUzNzVkZjM0NGU2ZTBh MzRiM2MwHhcNMjUxMjIxMTkwMTUyWhcNMjUxMjIyMTkwMTUyWjAzMTEwLwYDVQQD EyhkZGI3ODJlYmIwMTFhYTA5ZjRlYTA3ZjNiMjc4M2QxMmFlMWZlMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwboOOW6icFEqcfDjbYpECFilfxwn Gm4m6RpXg3/I84xhUxZhZ5FjN+dduwsSa55Mv0TTybxzM6H5zAT7GJI6Ich1UT5b Bq+UMOqdy/aK1mrGmxKXZg+dlXjHXXaM5ldVuAmyv2xZ1Lr921IdBxlkaPIWmAVx 7HFztZUwy5pVBzdigEFN7ylv2DidG1ln7BzFea01kH0gmNBoSzjegx/bvYWiw3US 2Ykt/WdQTCGXNQ9Xz+NEo8596ddn9geNEANMFh/o5zEM9FJW/D7LtU+EEL31lfrG X+9GSvBwawElV3ieVyfKq9UIuSQr1/ljOukzsxqqPT/iOXtkldvAFnNyQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN23guuwEaoJ9OoH87J4PRKuH+JgMB8GA1UdIwQY MBaAFNguEw9ra99tOSgON13zRObgo0s8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZGFmMDQtNGY3Ni00MzMzLWFiZjAt MjM4ZTBiN2FlMjg0LzEvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yZGFmMDQtNGY3Ni00MzMzLWFiZjAtMjM4ZTBiN2FlMjg0 LzEvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBvJMqUr Snb7lJkMhOituSff1GMx3K4UxLdEBnzfWg74/M7oH8WQoWyajQmJSoqzN+Rw+lJ1 vakJ6AEMtAPXFY7d27ZwlkITt41k7rLlBLFg0I95KuPZs5qO9GYadDGH/j0+4JJD JwJvNqYxkAq64zxriISCHao5FmqQgK8afhJq6t7W+DoJPkjex89DDEsJkb3Ta4Q8 1BZEq7j/RoWzPsTnQQn6GRudpvTdYSebts5hWxyq4ltFNyEmtFLJW4gCWPn4ifH3 lKkY/v12kGBOsLjUkjwHWrnW1/+InG+/t/74ytN1n/BPjw/xgeH1VWh0fhd7zHkh UmhiAim0CqVv4A== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:57 2025 by rpki-client