This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json) Hash identifier: fIRgcwk3YXNrjmhFkpB6RUVqXI12gkFZzQqvncWxveQ= Subject key identifier: 36:A6:47:F8:B3:19:FE:9F:4D:F4:9A:AD:0B:FD:D0:07:9D:F7:CF:11 Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Certificate serial: 019B39EB24B84960D0337C7C881E129E99E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 04:01:10 +0000 Manifest this update: Sat 20 Dec 2025 04:01:10 +0000 Manifest next update: Sun 21 Dec 2025 04:01:10 +0000 Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: uVtAMFPIJ6aJyiV9AlCAg7RWHZnQQY/rP97J7uSxkqk=) 2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:24:b8:49:60:d0:33:7c:7c:88:1e:12:9e:99:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Validity Not Before: Dec 20 04:01:10 2025 GMT Not After : Dec 21 04:01:10 2025 GMT Subject: CN=36a647f8b319fe9f4df49aad0bfdd0079df7cf11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:37:ee:dd:fe:01:e5:df:84:e4:22:bb:ac: 8f:7f:01:63:43:24:f4:c4:ae:ee:10:05:9a:49:d7: af:c6:d1:d2:38:22:7a:c4:dd:0b:91:e5:b4:27:94: 93:06:3e:99:33:bb:bf:ce:47:54:2a:21:f1:4f:bc: cd:7f:0c:11:ce:00:f9:bb:c3:54:7b:fb:7f:c7:1f: a1:73:30:c9:0a:bc:42:a0:68:a9:ea:ae:85:d1:68: f8:85:4f:2b:2f:72:fc:45:61:eb:a0:9e:0a:f6:4f: b5:3d:2b:12:08:9f:31:da:3c:39:3c:77:09:b7:7b: f0:27:68:56:ff:e6:2c:6a:f9:a9:6e:01:b0:64:de: fe:aa:af:f2:d3:25:95:01:43:90:91:58:ac:43:aa: f2:a5:fd:98:34:8c:af:25:9b:12:20:1e:0d:56:6d: 7a:4c:b4:17:1d:3e:11:03:9a:c3:23:f5:3f:58:67: 58:d5:3c:72:a2:f5:69:47:f9:ab:41:21:d8:fb:ea: 85:81:f3:fd:30:0c:94:6f:e8:78:0d:8b:7b:d7:42: b3:15:a7:4c:7d:69:cc:64:b0:e9:5c:d4:37:f1:2a: ba:6e:be:fc:ec:65:4f:b6:ca:b9:83:20:8e:24:04: c8:b5:98:98:0d:d6:73:6d:14:d6:b5:37:00:bc:03: 51:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A6:47:F8:B3:19:FE:9F:4D:F4:9A:AD:0B:FD:D0:07:9D:F7:CF:11 X509v3 Authority Key Identifier: keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0e:62:6e:64:ee:4f:d5:6b:3b:56:c3:38:9b:56:71:e6:89: a9:be:49:23:4e:57:07:fc:b9:f7:dd:29:52:5a:b3:47:31:92: 31:aa:9a:70:fd:b8:98:a1:cb:67:2d:e3:cf:91:e5:fc:c2:e4: 0c:f6:97:89:2a:f3:c0:ad:8a:a0:3d:00:b8:d6:fe:ed:f9:f7: 24:bc:b7:25:b6:17:e6:7c:5d:00:cd:5e:90:91:a5:82:46:56: 78:a3:1c:4e:34:9c:70:7f:8e:07:7e:0d:42:89:9a:d0:c5:95: d5:e5:6b:88:14:b5:f2:3c:cd:07:a1:79:9b:1e:17:86:8c:d7: e3:80:fe:c5:5c:e1:13:0d:90:20:bf:49:53:5f:ac:73:2d:bd: cf:d0:c9:7f:dd:f9:9e:10:cc:92:f5:0a:22:8e:d6:a5:c6:f2: b7:59:6e:a5:49:9a:8c:42:f5:0a:61:b4:29:9b:16:b9:8b:7c: dc:0f:19:8b:67:b0:55:b3:7c:5b:0d:fe:91:6e:89:5c:30:ae: b8:ef:c6:b6:eb:20:db:76:30:95:af:5c:58:81:01:5c:f0:f3: f5:be:10:49:67:8a:2e:05:c0:da:eb:3e:71:09:bc:1c:0d:3d: 75:69:9b:d7:65:0b:a6:48:b5:ff:1f:a3:02:b3:ab:a7:8b:d4: 09:2e:31:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56yS4SWDQM3x8iB4SnpnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YWFhYzA1OTk2YTViNDYxNGM2ZWVkYWZmZTdmOGY1Zjlh MmJjNjcwHhcNMjUxMjIwMDQwMTEwWhcNMjUxMjIxMDQwMTEwWjAzMTEwLwYDVQQD EygzNmE2NDdmOGIzMTlmZTlmNGRmNDlhYWQwYmZkZDAwNzlkZjdjZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMM37t3+AeXfhOQiu6yPfwFjQyT0 xK7uEAWaSdevxtHSOCJ6xN0LkeW0J5STBj6ZM7u/zkdUKiHxT7zNfwwRzgD5u8NU e/t/xx+hczDJCrxCoGip6q6F0Wj4hU8rL3L8RWHroJ4K9k+1PSsSCJ8x2jw5PHcJ t3vwJ2hW/+YsavmpbgGwZN7+qq/y0yWVAUOQkVisQ6rypf2YNIyvJZsSIB4NVm16 TLQXHT4RA5rDI/U/WGdY1TxyovVpR/mrQSHY++qFgfP9MAyUb+h4DYt710KzFadM fWnMZLDpXNQ38Sq6br787GVPtsq5gyCOJATItZiYDdZzbRTWtTcAvANR7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDamR/izGf6fTfSarQv90Aed988RMB8GA1UdIwQY MBaAFNiqrAWZaltGFMbu2v/n+PX5orxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYt ZjUzZWUzMmVkODE2LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYtZjUzZWUzMmVkODE2 LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPw5ibmTu T9VrO1bDOJtWceaJqb5JI05XB/y5990pUlqzRzGSMaqacP24mKHLZy3jz5Hl/MLk DPaXiSrzwK2KoD0AuNb+7fn3JLy3JbYX5nxdAM1ekJGlgkZWeKMcTjSccH+OB34N Qoma0MWV1eVriBS18jzNB6F5mx4XhozX44D+xVzhEw2QIL9JU1+scy29z9DJf935 nhDMkvUKIo7Wpcbyt1lupUmajEL1CmG0KZsWuYt83A8Zi2ewVbN8Ww3+kW6JXDCu uO/Gtusg23Ywla9cWIEBXPDz9b4QSWeKLgXA2us+cQm8HA09dWmb12ULpki1/x+j ArOrp4vUCS4xQA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:33:01 2025 by rpki-client