This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json) Hash identifier: tZzasau8pKl+Q2vI5cRnVhq1bDjvikcY9h1i/SQO8Qw= Subject key identifier: 3C:AF:C7:C2:42:27:DD:10:BD:E0:67:9B:AB:3A:57:C6:6B:C5:06:D3 Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa Certificate serial: 019B2363CA54262EADF878684C210C113CE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft Manifest number: 06D2 Signing time: Mon 15 Dec 2025 19:01:40 +0000 Manifest this update: Mon 15 Dec 2025 19:01:40 +0000 Manifest next update: Tue 16 Dec 2025 19:01:40 +0000 Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: SApo0c+IfDmhUwGkHXvNuUX310xhKCy9F0J84xsXrDU=) 2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:ca:54:26:2e:ad:f8:78:68:4c:21:0c:11:3c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa Validity Not Before: Dec 15 19:01:40 2025 GMT Not After : Dec 16 19:01:40 2025 GMT Subject: CN=3cafc7c24227dd10bde0679bab3a57c66bc506d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:a8:cd:f9:36:e3:54:95:70:d7:d8:98:93: 76:7b:80:8a:4a:6d:df:af:4b:4f:d6:41:80:92:10: fd:0d:81:e5:e6:43:f4:87:3a:15:6c:5e:88:ad:69: 10:9f:11:8c:c5:35:c4:cf:81:36:b6:8d:1d:c1:ec: c4:ef:39:7e:69:d1:40:d6:5f:bf:bf:f7:2f:09:33: 48:6b:da:14:04:74:d7:08:16:43:ae:43:d4:9f:03: 01:eb:fd:85:bf:a3:58:b8:7d:93:7f:7b:bf:59:97: 75:4f:98:a0:07:94:8e:fe:61:68:14:6a:a4:64:4d: f3:3b:5e:73:af:c8:ea:34:50:4b:87:1d:bc:c6:0a: 5f:b4:a6:09:73:fb:b8:1f:85:ed:6d:f6:d1:62:b6: f6:e5:c0:b2:f7:60:0c:d5:91:29:38:1f:2f:b5:60: c3:f3:b0:1a:71:c3:88:8d:68:5f:2e:f0:f8:1d:5b: 12:85:a9:4b:42:ec:57:37:3d:74:f0:a0:8e:ea:a8: 32:f9:77:25:8d:31:ad:3e:8a:c2:92:57:d4:67:58: 55:1f:95:aa:bc:ba:07:fd:ad:7a:1f:bb:b3:50:4e: 26:d5:54:d9:53:91:3c:2a:f8:d2:aa:54:7d:87:f9: ef:6b:23:f0:c2:4e:ed:d2:ad:b9:18:05:48:2f:a8: a7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AF:C7:C2:42:27:DD:10:BD:E0:67:9B:AB:3A:57:C6:6B:C5:06:D3 X509v3 Authority Key Identifier: keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:34:f9:e7:fe:b4:3c:37:0b:84:ab:c8:82:1e:59:d5:15:39: e7:03:35:b3:0b:08:50:1d:c1:57:e3:ae:2f:e9:38:16:3d:96: 50:4d:b8:67:23:d0:bd:ae:38:5f:fa:db:1a:72:ef:39:dc:04: f7:1a:62:da:99:21:f5:ff:43:22:af:dd:4d:eb:d8:53:24:83: 4b:8b:91:98:a7:1c:d0:20:52:f7:bd:69:d7:53:1e:02:09:02: 22:6e:ee:83:c3:7e:6b:05:a9:ee:43:3a:f4:8d:1a:ae:8a:02: 58:e0:63:32:f5:45:70:e4:3d:88:24:3c:4a:b4:13:10:f9:41: 4e:54:b9:a5:02:29:e7:6b:e8:73:88:80:58:f9:ed:6c:05:08: 30:81:7b:e7:ac:e8:e8:d5:d6:c1:cd:83:47:06:21:29:d1:01: 56:92:7d:4f:cb:a1:35:74:6f:8c:5b:48:d9:fa:83:e7:fd:2f: 29:da:c0:0f:ab:c8:e0:03:75:ae:86:75:86:12:5f:90:ca:2d: 3d:88:9b:24:72:94:5f:df:a9:4a:81:d4:9f:5f:a4:43:e4:e0: 44:4f:5f:a7:51:bd:e8:35:05:4e:52:94:b0:04:13:92:8c:7f: 48:c1:dc:07:3c:55:51:6f:b6:cd:a2:e2:6f:0f:d6:7c:39:94: b0:12:33:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY8pUJi6t+HhoTCEMETzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5 MWY4ZmEwHhcNMjUxMjE1MTkwMTQwWhcNMjUxMjE2MTkwMTQwWjAzMTEwLwYDVQQD EygzY2FmYzdjMjQyMjdkZDEwYmRlMDY3OWJhYjNhNTdjNjZiYzUwNmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvqozfk241SVcNfYmJN2e4CKSm3f r0tP1kGAkhD9DYHl5kP0hzoVbF6IrWkQnxGMxTXEz4E2to0dwezE7zl+adFA1l+/ v/cvCTNIa9oUBHTXCBZDrkPUnwMB6/2Fv6NYuH2Tf3u/WZd1T5igB5SO/mFoFGqk ZE3zO15zr8jqNFBLhx28xgpftKYJc/u4H4XtbfbRYrb25cCy92AM1ZEpOB8vtWDD 87AaccOIjWhfLvD4HVsShalLQuxXNz108KCO6qgy+XcljTGtPorCklfUZ1hVH5Wq vLoH/a16H7uzUE4m1VTZU5E8KvjSqlR9h/nvayPwwk7t0q25GAVIL6inEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyvx8JCJ90QveBnm6s6V8ZrxQbTMB8GA1UdIwQY MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt YWYzYWYwODJmOTQzLzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjT55/60 PDcLhKvIgh5Z1RU55wM1swsIUB3BV+OuL+k4Fj2WUE24ZyPQva44X/rbGnLvOdwE 9xpi2pkh9f9DIq/dTevYUySDS4uRmKcc0CBS971p11MeAgkCIm7ug8N+awWp7kM6 9I0arooCWOBjMvVFcOQ9iCQ8SrQTEPlBTlS5pQIp52voc4iAWPntbAUIMIF756zo 6NXWwc2DRwYhKdEBVpJ9T8uhNXRvjFtI2fqD5/0vKdrAD6vI4AN1roZ1hhJfkMot PYibJHKUX9+pSoHUn1+kQ+TgRE9fp1G96DUFTlKUsAQTkox/SMHcBzxVUW+2zaLi bw/WfDmUsBIzJQ== -----END CERTIFICATE-----Generated at Mon Dec 15 23:49:26 2025 by rpki-client