This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json) Hash identifier: zQTaJiqotgmhJ2SaJXOZe/X3Z8j6J5ha0uqeAyu8Qd4= Subject key identifier: 6B:19:57:7C:84:5A:25:18:53:93:60:61:36:93:EF:AE:5F:F0:65:F8 Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09 Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009 Certificate serial: 019B72C7D89339310B9EB70207DB5A552FE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft Manifest number: 1209 Signing time: Wed 31 Dec 2025 05:00:58 +0000 Manifest this update: Wed 31 Dec 2025 05:00:58 +0000 Manifest next update: Thu 01 Jan 2026 05:00:58 +0000 Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: Tu2A6s6qlxWzvFZU8sOk6PsMTD1Nz8FPXGT4Vt9Abmc=) 2: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (hash: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:c7:d8:93:39:31:0b:9e:b7:02:07:db:5a:55:2f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009 Validity Not Before: Dec 31 05:00:58 2025 GMT Not After : Jan 1 05:00:58 2026 GMT Subject: CN=6b19577c845a2518539360613693efae5ff065f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:82:42:aa:74:7e:99:1f:db:6a:1d:d2:3e: 3c:da:81:5e:51:24:04:bf:80:98:93:d2:73:36:b3: 0b:93:7a:b4:13:e5:d9:42:b2:7b:5e:15:9a:8a:26: 52:d0:bc:33:43:c4:27:84:22:ee:7b:35:5f:96:4d: 67:26:c0:3b:9e:23:04:1c:e3:60:04:1f:e3:91:da: 8c:cb:9b:90:8a:41:79:29:f3:72:f5:f7:36:a5:3f: 10:14:67:40:ae:2c:05:ad:5a:6c:6e:fc:83:da:fe: bb:8a:3f:4c:5a:69:78:25:ce:30:82:4e:af:bb:80: 5e:a7:6e:7f:e7:c5:4c:08:8c:ce:dc:0b:97:08:f6: 6a:51:32:b3:d0:c0:ef:bb:05:4f:15:bf:81:f8:35: 6d:2b:cf:38:14:30:fe:4c:ac:4f:9f:ff:47:46:e5: 50:5f:0a:d5:15:f7:19:a7:b4:0a:b8:c9:de:de:54: a4:7d:db:58:4b:38:2d:fd:5d:ad:5a:3d:43:f4:25: 50:8c:e8:10:a5:4c:63:99:47:35:2c:d0:6a:93:bd: c8:dc:e5:46:02:98:ee:db:1a:3e:1b:1b:80:46:af: 8d:b2:17:c2:c2:fa:b1:2b:88:f0:0d:c1:55:a2:89: 62:d9:30:66:5c:20:19:b2:32:cd:d4:85:cb:c4:70: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:19:57:7C:84:5A:25:18:53:93:60:61:36:93:EF:AE:5F:F0:65:F8 X509v3 Authority Key Identifier: keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:55:d0:d2:f8:70:03:c3:ca:4f:5d:25:9e:7a:8f:7b:15:bd: 8b:ad:df:96:c7:6e:48:bf:0f:db:4d:89:7d:14:6b:bb:a0:e1: bd:36:27:77:75:17:a1:65:5f:13:6f:29:e9:8b:39:42:b1:6c: 48:d6:d3:e8:21:4d:f2:4c:f3:44:67:f4:ed:bd:3c:8e:66:af: 27:be:56:c4:b7:2c:17:48:28:9a:8e:46:3f:67:74:e4:7f:f8: 1b:d3:9a:31:29:5b:26:ae:86:78:db:73:e5:fa:9b:ae:ac:c5: d2:d3:8e:5c:1b:3c:15:ca:38:b8:82:06:53:af:80:fb:2b:32: 07:f0:74:6c:aa:ca:c1:a3:3a:40:1d:9a:85:f3:a1:eb:6a:0c: 41:51:85:c9:54:00:60:b7:a5:08:34:ca:fe:ab:7b:bb:4a:b7: b7:35:51:13:36:d7:23:f6:9f:91:44:39:1a:9b:f4:91:87:a4: 10:1b:7e:a3:40:5a:6b:03:6d:a5:55:a7:bc:6c:17:9c:4e:dd: 1d:d7:b2:33:f8:5f:4b:79:f9:9a:f3:7a:ef:0e:35:86:80:80: eb:1f:e1:b9:01:f2:9e:89:cc:7b:f0:5c:13:5f:71:04:a0:44: 93:d1:bc:ad:88:3b:2d:2c:c4:8c:00:48:ce:01:97:50:2f:6e: 4f:50:83:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyx9iTOTELnrcCB9taVS/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTE1NjA5NjU2ZjA4ZjdhMjhkMjRiN2M0YmE5YjYzOWNh MGIwMDkwHhcNMjUxMjMxMDUwMDU4WhcNMjYwMTAxMDUwMDU4WjAzMTEwLwYDVQQD Eyg2YjE5NTc3Yzg0NWEyNTE4NTM5MzYwNjEzNjkzZWZhZTVmZjA2NWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyyCQqp0fpkf22od0j482oFeUSQE v4CYk9JzNrMLk3q0E+XZQrJ7XhWaiiZS0LwzQ8QnhCLuezVflk1nJsA7niMEHONg BB/jkdqMy5uQikF5KfNy9fc2pT8QFGdAriwFrVpsbvyD2v67ij9MWml4Jc4wgk6v u4Bep25/58VMCIzO3AuXCPZqUTKz0MDvuwVPFb+B+DVtK884FDD+TKxPn/9HRuVQ XwrVFfcZp7QKuMne3lSkfdtYSzgt/V2tWj1D9CVQjOgQpUxjmUc1LNBqk73I3OVG Apju2xo+GxuARq+NshfCwvqxK4jwDcFVooli2TBmXCAZsjLN1IXLxHA/eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsZV3yEWiUYU5NgYTaT765f8GX4MB8GA1UdIwQY MBaAFNiRVgllbwj3oo0kt8S6m2OcoLAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMt ZmU0YjVlMzQ2ODQwLzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMtZmU0YjVlMzQ2ODQw LzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1XQ0vhw A8PKT10lnnqPexW9i63flsduSL8P202JfRRru6DhvTYnd3UXoWVfE28p6Ys5QrFs SNbT6CFN8kzzRGf07b08jmavJ75WxLcsF0gomo5GP2d05H/4G9OaMSlbJq6GeNtz 5fqbrqzF0tOOXBs8Fco4uIIGU6+A+ysyB/B0bKrKwaM6QB2ahfOh62oMQVGFyVQA YLelCDTK/qt7u0q3tzVREzbXI/afkUQ5Gpv0kYekEBt+o0BaawNtpVWnvGwXnE7d HdeyM/hfS3n5mvN67w41hoCA6x/huQHynonMe/BcE19xBKBEk9G8rYg7LSzEjABI zgGXUC9uT1CDlg== -----END CERTIFICATE-----Generated at Wed Dec 31 13:09:30 2025 by rpki-client