This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json) Hash identifier: GMoJ38EOi5oHrMQnA8NLsufyNRGqP/maBW4X6UjEC5A= Subject key identifier: CF:B6:8C:EA:31:D4:1E:AD:33:D1:17:3C:05:9E:35:13:36:EA:82:06 Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25 Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825 Certificate serial: 019B23D1A108E074D9A82D31A5CDEB6D16A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 21:01:39 +0000 Manifest this update: Mon 15 Dec 2025 21:01:39 +0000 Manifest next update: Tue 16 Dec 2025 21:01:39 +0000 Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: iBuAsj3AZRPHiPPpUiw9ry8RVFKixDBlY3vTpMQv9oA=) 2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=) 3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:a1:08:e0:74:d9:a8:2d:31:a5:cd:eb:6d:16:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daac15b782bc32747b538dec2a222416cd684825 Validity Not Before: Dec 15 21:01:39 2025 GMT Not After : Dec 16 21:01:39 2025 GMT Subject: CN=cfb68cea31d41ead33d1173c059e351336ea8206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:1d:a8:c6:65:29:f2:16:2c:90:96:28:7b: 28:25:af:55:bf:56:67:92:87:3f:26:b1:db:76:90: 8e:bb:0e:a2:1f:9a:47:bd:5c:b2:0a:da:fd:6c:8b: 70:11:e8:11:2c:eb:9b:04:21:5e:a6:20:06:fb:59: af:60:bf:88:4b:19:1a:5d:af:9c:09:7e:32:22:24: ae:4b:61:21:31:24:a7:2f:f1:b1:67:36:a7:97:f0: 66:2d:8e:14:8c:57:b8:81:ce:f6:85:9c:96:fb:63: 73:1d:f5:b6:97:31:e9:50:aa:c9:45:5b:c4:4b:2b: 64:30:f6:96:89:e6:9d:f3:6d:32:7a:01:c7:81:07: 83:94:c2:75:22:d5:75:32:ce:8e:98:f3:78:7b:74: 71:7d:5e:99:ea:b8:e6:96:0c:82:e4:d8:cb:6d:b1: 58:29:34:29:e3:ee:5a:cd:48:22:6d:a3:05:3e:91: 5a:ce:f5:2f:49:c7:09:f1:59:a8:13:c3:21:e4:41: 28:9f:ac:d8:9a:5e:f9:27:65:8e:47:56:14:d8:81: 5d:10:b1:7b:0e:0f:17:b9:f3:d8:a0:ef:7e:62:3b: 61:9f:ae:03:0d:bc:b4:2f:23:e6:19:ae:fc:83:6b: fc:08:7f:f9:1e:13:64:49:c4:5a:a4:7e:6f:ea:89: 13:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B6:8C:EA:31:D4:1E:AD:33:D1:17:3C:05:9E:35:13:36:EA:82:06 X509v3 Authority Key Identifier: keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ba:99:bd:3a:bf:77:d1:78:45:1f:18:d5:57:23:76:30:83: c6:01:9a:ec:ab:b9:4e:a4:bd:73:29:f9:52:b2:6d:ae:9e:dd: a1:21:13:14:48:db:7d:3c:8b:78:56:97:82:94:5f:bc:92:21: 4c:7a:e1:47:c0:13:87:49:c0:1a:87:45:9c:da:cb:2d:88:9e: 47:bb:cf:a5:a7:66:45:89:2e:23:5e:9f:c2:e9:0a:ef:1b:3c: e4:58:fe:9f:cc:df:4e:af:3f:66:d9:3c:c0:2e:8b:ca:07:82: 42:fe:d4:91:21:4c:61:82:a5:17:e2:08:0f:bd:9d:87:8e:68: 8c:03:f3:d7:a4:ab:69:fe:9a:53:89:87:b3:08:04:06:47:db: c3:d1:46:0f:0f:27:0a:9f:39:fd:14:4c:f9:54:15:17:cd:df: 84:25:15:e7:61:d6:58:17:a8:92:d0:12:33:0b:ef:81:e4:93: f3:5c:0d:a9:e9:48:1c:bf:fc:26:a1:9f:03:5f:b2:b7:d9:f4: a6:01:00:69:2f:37:64:7c:6d:b0:f5:d5:3e:b9:04:7a:6e:29: 0a:be:11:7b:22:36:c2:9d:da:87:d5:b3:7f:f1:e4:cd:12:29: 24:15:d2:96:f3:cf:4e:6b:2e:fd:fd:25:a2:71:24:75:d0:bc: 1a:6f:23:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0aEI4HTZqC0xpc3rbRakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWMxNWI3ODJiYzMyNzQ3YjUzOGRlYzJhMjIyNDE2Y2Q2 ODQ4MjUwHhcNMjUxMjE1MjEwMTM5WhcNMjUxMjE2MjEwMTM5WjAzMTEwLwYDVQQD EyhjZmI2OGNlYTMxZDQxZWFkMzNkMTE3M2MwNTllMzUxMzM2ZWE4MjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/gdqMZlKfIWLJCWKHsoJa9Vv1Zn koc/JrHbdpCOuw6iH5pHvVyyCtr9bItwEegRLOubBCFepiAG+1mvYL+ISxkaXa+c CX4yIiSuS2EhMSSnL/GxZzanl/BmLY4UjFe4gc72hZyW+2NzHfW2lzHpUKrJRVvE SytkMPaWiead820yegHHgQeDlMJ1ItV1Ms6OmPN4e3RxfV6Z6rjmlgyC5NjLbbFY KTQp4+5azUgibaMFPpFazvUvSccJ8VmoE8Mh5EEon6zYml75J2WOR1YU2IFdELF7 Dg8XufPYoO9+Yjthn64DDby0LyPmGa78g2v8CH/5HhNkScRapH5v6okTwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+2jOox1B6tM9EXPAWeNRM26oIGMB8GA1UdIwQY MBaAFNqsFbeCvDJ0e1ON7CoiJBbNaEglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYt MTgyNDMyYTk2ZGJkLzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYtMTgyNDMyYTk2ZGJk LzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbqZvTq/ d9F4RR8Y1VcjdjCDxgGa7Ku5TqS9cyn5UrJtrp7doSETFEjbfTyLeFaXgpRfvJIh THrhR8ATh0nAGodFnNrLLYieR7vPpadmRYkuI16fwukK7xs85Fj+n8zfTq8/Ztk8 wC6LygeCQv7UkSFMYYKlF+IID72dh45ojAPz16Sraf6aU4mHswgEBkfbw9FGDw8n Cp85/RRM+VQVF83fhCUV52HWWBeoktASMwvvgeST81wNqelIHL/8JqGfA1+yt9n0 pgEAaS83ZHxtsPXVPrkEem4pCr4ReyI2wp3ah9Wzf/HkzRIpJBXSlvPPTmsu/f0l onEkddC8Gm8jrg== -----END CERTIFICATE-----Generated at Tue Dec 16 06:25:35 2025 by rpki-client