This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json) Hash identifier: ofp8sV9ZDEPlPz69JPzS84JhQMnuVqNHMWYt3ZKpuDw= Subject key identifier: 0E:05:B0:D3:76:2B:80:6B:4B:5F:00:C9:40:73:BB:7D:47:F3:25:69 Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb Certificate serial: 019B2EFABC8A8D7E36933F48EE5C1840DD3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft Manifest number: 1555 Signing time: Thu 18 Dec 2025 01:02:22 +0000 Manifest this update: Thu 18 Dec 2025 01:02:22 +0000 Manifest next update: Fri 19 Dec 2025 01:02:22 +0000 Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: eX+n6i83mi2l6EV+G1eQnplDpuMKsREez5N7ujPM86g=) 2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:bc:8a:8d:7e:36:93:3f:48:ee:5c:18:40:dd:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb Validity Not Before: Dec 18 01:02:22 2025 GMT Not After : Dec 19 01:02:22 2025 GMT Subject: CN=0e05b0d3762b806b4b5f00c94073bb7d47f32569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:4d:b5:0f:2d:df:6b:0f:00:d1:14:85:91: ed:42:2f:c5:67:35:23:5d:d3:27:1b:d1:d7:7d:ec: 96:81:8b:d4:d2:1b:44:23:99:93:cf:c6:c8:50:f3: 95:05:8e:c4:61:59:d8:13:e9:79:08:d6:a3:3a:ca: 78:1d:e4:4c:85:96:2a:ec:e1:3e:78:fb:47:39:63: 99:74:03:4b:12:2d:19:b1:9d:f3:89:ed:27:42:8d: da:03:c7:05:dc:55:77:6d:89:3c:4f:b5:2e:a0:c2: 4a:27:20:30:14:fc:7b:8b:1c:c0:61:12:b1:ae:d9: b9:f5:21:b2:6e:f4:b1:22:dd:3c:00:9b:80:0c:5b: 26:0c:be:2a:ae:fc:7b:04:a5:d7:12:0e:f2:ae:6d: ac:e7:62:e9:4c:25:3a:cf:88:74:94:a2:00:9d:eb: a9:1b:da:be:d9:ec:75:9c:a7:9b:b6:c2:e8:db:fe: c1:bc:27:94:e8:0d:f5:23:85:e8:c4:2a:29:d4:8b: c9:2f:3a:59:6a:dc:59:3f:9e:8d:64:4d:59:36:8d: cb:ce:0a:a7:9b:ab:61:79:6e:16:fb:34:cb:7a:ba: ab:c2:92:73:43:1e:44:3d:11:7b:bf:e7:9a:cb:46: 47:7c:84:2d:74:6a:4b:46:8e:90:e7:a2:a1:36:29: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:05:B0:D3:76:2B:80:6B:4B:5F:00:C9:40:73:BB:7D:47:F3:25:69 X509v3 Authority Key Identifier: keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:88:db:f9:6a:ad:f7:b5:1d:1a:b0:cb:b7:e4:5e:50:90:09: 9e:83:66:f9:4a:fc:77:68:57:96:6e:8f:0b:2e:35:dc:78:99: 4c:58:9c:55:fc:0a:2f:4a:af:d7:f9:9c:0f:da:db:69:79:72: ae:af:08:19:14:d7:aa:64:41:e9:e1:81:d2:86:84:50:5d:2d: 69:0b:6a:d5:4a:25:7f:19:cb:bc:fa:fa:da:11:d8:c2:27:b0: 7a:76:72:35:ab:d1:4e:a3:67:2f:08:45:d7:71:2a:3c:fe:d0: ac:0a:ac:9d:f0:7b:16:46:b7:79:6a:bb:f3:2a:aa:1f:f0:28: d6:91:b0:b3:3a:d0:00:d3:de:a4:27:0c:1d:a5:46:ba:72:7c: 59:c2:35:c5:37:6e:19:2e:2a:5d:b7:ae:a1:04:73:b7:87:24: 86:34:fd:eb:e6:25:61:58:51:3b:11:43:89:53:ad:38:e5:06: e0:06:ae:56:f8:33:10:38:5b:d3:85:dd:6c:c7:56:19:c9:17: d2:b0:f6:e8:20:ad:25:71:af:d2:f8:8a:c1:5e:68:5c:33:0a: cc:61:9a:8d:0c:54:69:21:56:f9:9e:5d:97:08:23:f1:37:79: b2:8e:8e:d0:c9:35:02:c3:5a:e9:23:3a:a4:34:1f:c9:95:93: 1f:b8:97:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+ryKjX42kz9I7lwYQN06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDM4OWQ4NWVhMTI2ZTBlZmJlYmM1ZDg0NTllZjcwOWZi ODk1Y2IwHhcNMjUxMjE4MDEwMjIyWhcNMjUxMjE5MDEwMjIyWjAzMTEwLwYDVQQD EygwZTA1YjBkMzc2MmI4MDZiNGI1ZjAwYzk0MDczYmI3ZDQ3ZjMyNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F1NtQ8t32sPANEUhZHtQi/FZzUj XdMnG9HXfeyWgYvU0htEI5mTz8bIUPOVBY7EYVnYE+l5CNajOsp4HeRMhZYq7OE+ ePtHOWOZdANLEi0ZsZ3zie0nQo3aA8cF3FV3bYk8T7UuoMJKJyAwFPx7ixzAYRKx rtm59SGybvSxIt08AJuADFsmDL4qrvx7BKXXEg7yrm2s52LpTCU6z4h0lKIAneup G9q+2ex1nKebtsLo2/7BvCeU6A31I4XoxCop1IvJLzpZatxZP56NZE1ZNo3Lzgqn m6theW4W+zTLerqrwpJzQx5EPRF7v+eay0ZHfIQtdGpLRo6Q56KhNin4uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4FsNN2K4BrS18AyUBzu31H8yVpMB8GA1UdIwQY MBaAFNoDidheoSbg7768XYRZ73CfuJXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQt ZWE2MTM0NzA2YTQwLzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQtZWE2MTM0NzA2YTQw LzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4jb+Wqt 97UdGrDLt+ReUJAJnoNm+Ur8d2hXlm6PCy413HiZTFicVfwKL0qv1/mcD9rbaXly rq8IGRTXqmRB6eGB0oaEUF0taQtq1UolfxnLvPr62hHYwiewenZyNavRTqNnLwhF 13EqPP7QrAqsnfB7Fka3eWq78yqqH/Ao1pGwszrQANPepCcMHaVGunJ8WcI1xTdu GS4qXbeuoQRzt4ckhjT96+YlYVhROxFDiVOtOOUG4AauVvgzEDhb04XdbMdWGckX 0rD26CCtJXGv0viKwV5oXDMKzGGajQxUaSFW+Z5dlwgj8Td5so6O0Mk1AsNa6SM6 pDQfyZWTH7iXtw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:31:34 2025 by rpki-client