This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft File: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json) Hash identifier: AdJw+isLlerOgjuiQZqlxKL9WZLD+wWbIAUPV/FRZxw= Subject key identifier: C4:0C:A4:73:BD:94:8D:79:21:AE:F3:32:72:6D:AF:3D:0E:FD:16:6A Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed Certificate serial: 019B38A2E8F51D8546EE38AD66C3C6A65F59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft Manifest number: 178C Signing time: Fri 19 Dec 2025 22:02:38 +0000 Manifest this update: Fri 19 Dec 2025 22:02:38 +0000 Manifest next update: Sat 20 Dec 2025 22:02:38 +0000 Files and hashes: 1: 0ftKGAqo6skKR7cqi9qtdL_HV70.roa (hash: TjEgBHjrqw3YVxgjrIc7R6ndwP73iZoqAQbMc4u67Jw=) 2: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: 0D5IHZ1KSbbJqva/G6BexAZkXIWClb3fD80epGpk3Rs=) 3: 555OtsBoO5k75PqRH4BO_DA3D2k.roa (hash: JoD/O0cUloB5B7+5WbDwTZ/ljwNvngOLp/z0qSnIMTQ=) 4: 6hWOpEB79Jwd3tjKR90wreFxatA.roa (hash: Q/14jrNN3dPge3RXtvSabOT2/zXSC7oSEv0xGz0lOr8=) 5: Fn45TpW1nllwbpJD6OV7oWwSzA8.roa (hash: xg/TTDjWMXGzawL9NfcMIpoU54tFEBQogD7gmrohTKc=) 6: MkgmNw57sqsTbXVssEVVHrIwxnE.roa (hash: Z5vjMyipD469Qc1QSOUIWfFBwT2/MlLQmdGSNOJrb+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:e8:f5:1d:85:46:ee:38:ad:66:c3:c6:a6:5f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed Validity Not Before: Dec 19 22:02:38 2025 GMT Not After : Dec 20 22:02:38 2025 GMT Subject: CN=c40ca473bd948d7921aef332726daf3d0efd166a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:dd:e0:4e:23:0f:4a:c6:6f:12:9a:3a:d0: 82:67:96:b4:bf:2c:8f:c3:82:9e:fa:b5:37:29:cf: a7:e8:eb:61:42:ca:b6:6a:6c:e3:22:60:9b:ad:16: 8e:b6:a7:0c:04:f6:2a:a7:a1:fe:c9:d7:31:eb:de: 31:dd:63:bb:0e:6e:5f:3f:fc:78:4f:bd:ce:b8:a4: 95:87:e1:b5:7c:9d:7a:5a:b5:9a:61:46:5f:79:a9: 82:0e:0f:b6:2d:19:fa:91:8d:43:ea:4d:41:8a:e9: 98:dd:27:29:66:69:20:4f:f7:38:6e:e1:b9:39:26: 67:62:3b:48:6b:36:4b:d5:cb:9c:56:aa:e9:bd:3c: 75:f4:9c:81:7d:32:e2:c3:80:2a:5a:cc:2e:8a:7b: fb:3e:a8:b1:c6:62:1c:bf:d3:60:9b:62:c3:78:6e: 9f:63:7c:44:74:55:1d:8f:2e:91:53:fe:15:75:35: 7a:2b:67:10:d2:d4:a5:f2:10:d9:d6:a1:3a:93:c6: 71:2f:89:c5:ca:4c:57:eb:36:0e:5f:13:65:c1:12: 5d:99:14:c9:2c:86:64:df:53:68:f6:50:7f:3f:ce: 18:34:5a:d4:ce:37:d2:40:ad:c6:80:6d:1a:c7:70: a2:b9:a0:e3:3e:0f:65:22:f2:68:97:41:53:4a:b8: 99:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0C:A4:73:BD:94:8D:79:21:AE:F3:32:72:6D:AF:3D:0E:FD:16:6A X509v3 Authority Key Identifier: keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2d:a1:5a:fc:0c:a6:62:27:4d:2f:fa:b0:6b:1f:37:11:cb: 0e:0c:5f:23:39:dc:8a:a0:66:24:c7:25:13:25:c5:52:50:3c: 97:49:f4:96:de:71:7c:4b:48:2c:d5:16:93:f4:ae:33:5e:6c: 25:72:1d:7e:c0:30:b0:96:d6:e9:4c:74:6e:ff:9f:1a:bf:75: 85:79:27:5f:7f:3b:b3:57:01:08:72:dc:b0:69:e7:a7:e3:26: 68:69:c8:0d:06:09:3b:c5:93:bb:42:f7:65:e2:26:6f:5a:34: 79:a0:cc:20:76:09:95:ba:fa:67:8a:a4:bc:e3:f6:e2:06:4b: 08:a4:61:91:df:f0:c4:62:4b:aa:05:01:d8:3f:b8:1c:37:b7: fd:07:f4:d4:84:32:dc:8c:57:e9:8d:26:20:ae:c9:2e:52:09: c9:1d:0f:33:e2:57:ba:00:1b:a9:77:86:fe:65:7a:78:c8:8b: 3f:62:e1:6c:a7:f6:30:59:61:3c:79:be:70:a4:30:bc:e0:dc: aa:a4:9c:e2:86:66:4b:9a:b5:36:6b:bd:e2:e3:b9:92:98:40: bd:cc:c2:2a:04:a2:88:ed:58:6d:47:7c:74:00:01:14:df:6a: ee:00:f9:f5:21:98:48:12:e8:73:26:f5:0e:a6:a7:ce:04:8c: 75:6d:67:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ouj1HYVG7jitZsPGpl9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZjlmYTdiOTQ0ZjdlN2M2MGQ3M2VmMTBiNzc2ZmMyNzk5 NWE0ZWQwHhcNMjUxMjE5MjIwMjM4WhcNMjUxMjIwMjIwMjM4WjAzMTEwLwYDVQQD EyhjNDBjYTQ3M2JkOTQ4ZDc5MjFhZWYzMzI3MjZkYWYzZDBlZmQxNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqADd4E4jD0rGbxKaOtCCZ5a0vyyP w4Ke+rU3Kc+n6OthQsq2amzjImCbrRaOtqcMBPYqp6H+ydcx694x3WO7Dm5fP/x4 T73OuKSVh+G1fJ16WrWaYUZfeamCDg+2LRn6kY1D6k1BiumY3ScpZmkgT/c4buG5 OSZnYjtIazZL1cucVqrpvTx19JyBfTLiw4AqWswuinv7PqixxmIcv9Ngm2LDeG6f Y3xEdFUdjy6RU/4VdTV6K2cQ0tSl8hDZ1qE6k8ZxL4nFykxX6zYOXxNlwRJdmRTJ LIZk31No9lB/P84YNFrUzjfSQK3GgG0ax3CiuaDjPg9lIvJol0FTSriZvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQMpHO9lI15Ia7zMnJtrz0O/RZqMB8GA1UdIwQY MBaAFNn5+nuUT358YNc+8Qt3b8J5laTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUt MDhiZjIyZjY0MDk3LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUtMDhiZjIyZjY0MDk3 LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfS2hWvwM pmInTS/6sGsfNxHLDgxfIznciqBmJMclEyXFUlA8l0n0lt5xfEtILNUWk/SuM15s JXIdfsAwsJbW6Ux0bv+fGr91hXknX387s1cBCHLcsGnnp+MmaGnIDQYJO8WTu0L3 ZeImb1o0eaDMIHYJlbr6Z4qkvOP24gZLCKRhkd/wxGJLqgUB2D+4HDe3/Qf01IQy 3IxX6Y0mIK7JLlIJyR0PM+JXugAbqXeG/mV6eMiLP2LhbKf2MFlhPHm+cKQwvODc qqSc4oZmS5q1Nmu94uO5kphAvczCKgSiiO1YbUd8dAABFN9q7gD59SGYSBLocyb1 DqanzgSMdW1nMg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:25 2025 by rpki-client