This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json) Hash identifier: LTagqOrttpCmIwbnt7YTMCYgLRsfL2e/lWMskUid2Z4= Subject key identifier: 65:74:2D:40:B7:C3:9E:67:3C:8D:B7:5B:B6:57:02:6A:20:29:01:76 Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Certificate serial: 019B4392948E542A4EA582C79EDBF1F8698C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 01:00:38 +0000 Manifest this update: Mon 22 Dec 2025 01:00:38 +0000 Manifest next update: Tue 23 Dec 2025 01:00:38 +0000 Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: cEZIBy528dcZFVPDjOibIHyhqYXqQi3EWGe2gAK8EUQ=) 2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:94:8e:54:2a:4e:a5:82:c7:9e:db:f1:f8:69:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Validity Not Before: Dec 22 01:00:38 2025 GMT Not After : Dec 23 01:00:38 2025 GMT Subject: CN=65742d40b7c39e673c8db75bb657026a20290176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:83:bb:65:80:bf:40:4d:79:6b:69:2e:0e: 24:73:ac:f5:4e:4d:13:7d:55:3d:3f:7a:95:6e:71: 33:6d:29:7d:20:79:a1:b3:28:a2:ae:89:6e:a5:8a: 02:45:50:54:7e:f7:59:2b:e2:73:11:94:c3:0c:6c: e3:41:d5:d4:c6:97:cb:52:96:18:44:a9:b3:10:a0: 4d:90:45:6a:35:86:aa:23:05:dc:e6:ee:5d:ee:67: 56:11:36:69:f1:e9:0d:bb:a7:36:5e:3c:ee:0d:a7: 9a:38:69:bf:01:49:3a:c2:e8:36:ca:d7:0d:7a:85: 26:83:b9:e8:82:f3:6d:50:9f:89:0d:bd:f6:73:23: 66:3f:1c:cb:da:c0:db:11:95:69:f4:8a:4a:db:78: 75:7e:07:20:e2:3c:91:a5:35:0f:cf:bf:5f:a2:f7: a3:b8:c2:5a:26:d6:f8:eb:ff:fb:37:40:ce:7e:b0: cb:c9:a2:74:3b:a3:0b:e3:94:bf:ea:50:d0:59:aa: 3f:65:e7:f6:b7:d0:c4:2e:14:1c:c5:10:82:1c:96: 5c:96:74:42:53:c6:af:51:92:05:32:27:f0:a6:c4: ce:7c:49:23:16:26:91:6e:89:8b:81:c5:8c:fb:9e: ca:51:89:f5:7c:92:ab:ea:b6:2f:49:51:62:21:79: ee:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:74:2D:40:B7:C3:9E:67:3C:8D:B7:5B:B6:57:02:6A:20:29:01:76 X509v3 Authority Key Identifier: keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:51:93:39:a5:61:d3:51:47:83:c5:55:8f:ae:76:60:65:80: 44:52:b8:2a:a4:a5:61:f0:92:3c:c1:3c:be:41:92:68:b4:a9: 5f:2d:fd:c8:79:fd:c5:be:b0:05:c1:bf:dc:b6:cb:e6:38:6b: eb:d5:13:a7:66:3b:7c:2c:f2:bb:87:fa:1c:0c:c2:2d:f9:60: 8e:f7:09:d9:59:58:9a:6f:5c:30:d6:75:80:c6:ff:34:e9:57: db:77:91:5f:a7:0a:72:a0:f4:13:44:66:36:5c:c3:c7:68:12: c5:4b:bd:37:9f:16:63:42:29:11:10:54:06:ba:9d:23:0a:ed: 2e:57:cc:f5:8c:5e:2a:7d:e6:da:55:d6:6e:55:63:be:66:69: a0:2e:ba:e9:38:35:31:32:94:a0:94:5b:e7:6c:95:04:56:0d: 6e:c9:b9:f3:e5:80:8f:b7:28:58:05:15:28:f8:a6:f2:49:e8: 2e:7a:6e:62:db:84:42:33:48:44:ab:67:37:e8:3e:b2:a4:44: 7b:37:ac:a3:5d:57:a6:1f:e5:98:42:5e:dc:1c:48:18:64:be: e2:26:82:21:3a:5a:1d:e5:31:2c:82:0e:0e:1d:c5:ab:2a:5e: 62:ca:1e:e7:f1:16:3c:87:e5:d9:8a:f0:a9:83:0d:d2:81:f2: dd:c9:93:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkpSOVCpOpYLHntvx+GmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YWFhYzA1OTk2YTViNDYxNGM2ZWVkYWZmZTdmOGY1Zjlh MmJjNjcwHhcNMjUxMjIyMDEwMDM4WhcNMjUxMjIzMDEwMDM4WjAzMTEwLwYDVQQD Eyg2NTc0MmQ0MGI3YzM5ZTY3M2M4ZGI3NWJiNjU3MDI2YTIwMjkwMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi6Du2WAv0BNeWtpLg4kc6z1Tk0T fVU9P3qVbnEzbSl9IHmhsyiirolupYoCRVBUfvdZK+JzEZTDDGzjQdXUxpfLUpYY RKmzEKBNkEVqNYaqIwXc5u5d7mdWETZp8ekNu6c2XjzuDaeaOGm/AUk6wug2ytcN eoUmg7nogvNtUJ+JDb32cyNmPxzL2sDbEZVp9IpK23h1fgcg4jyRpTUPz79fovej uMJaJtb46//7N0DOfrDLyaJ0O6ML45S/6lDQWao/Zef2t9DELhQcxRCCHJZclnRC U8avUZIFMifwpsTOfEkjFiaRbomLgcWM+57KUYn1fJKr6rYvSVFiIXnudQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGV0LUC3w55nPI23W7ZXAmogKQF2MB8GA1UdIwQY MBaAFNiqrAWZaltGFMbu2v/n+PX5orxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYt ZjUzZWUzMmVkODE2LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYtZjUzZWUzMmVkODE2 LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFGTOaVh 01FHg8VVj652YGWARFK4KqSlYfCSPME8vkGSaLSpXy39yHn9xb6wBcG/3LbL5jhr 69UTp2Y7fCzyu4f6HAzCLflgjvcJ2VlYmm9cMNZ1gMb/NOlX23eRX6cKcqD0E0Rm NlzDx2gSxUu9N58WY0IpERBUBrqdIwrtLlfM9YxeKn3m2lXWblVjvmZpoC666Tg1 MTKUoJRb52yVBFYNbsm58+WAj7coWAUVKPim8knoLnpuYtuEQjNIRKtnN+g+sqRE ezeso11Xph/lmEJe3BxIGGS+4iaCITpaHeUxLIIODh3FqypeYsoe5/EWPIfl2Yrw qYMN0oHy3cmTrw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:22:09 2025 by rpki-client