This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json) Hash identifier: VNLJLNMfYQhdJWE9/vRHi8x9tkHEFBnGIGjvNM8wVas= Subject key identifier: C5:72:F8:66:E5:61:1F:26:AF:87:23:25:6B:75:B6:43:61:63:E4:94 Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64 Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664 Certificate serial: 019B5977BD261B33650EC722DEC7CA9B2E51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft Manifest number: 08F4 Signing time: Fri 26 Dec 2025 07:02:57 +0000 Manifest this update: Fri 26 Dec 2025 07:02:57 +0000 Manifest next update: Sat 27 Dec 2025 07:02:57 +0000 Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: D7uzJdOxLj6yFNGmC5fc7K7p3gdnKH9w/Qr1nLxxFgs=) 2: JwOlXzHs1rdGVXlkVOqZWuxz-yI.roa (hash: PGrtrfZNHqKpdplaHtlzlb/8zTI8cEQQrTdbVPKqLz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:bd:26:1b:33:65:0e:c7:22:de:c7:ca:9b:2e:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664 Validity Not Before: Dec 26 07:02:57 2025 GMT Not After : Dec 27 07:02:57 2025 GMT Subject: CN=c572f866e5611f26af8723256b75b6436163e494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e9:a8:58:e7:b3:26:df:64:ff:ac:64:6b:99: 84:12:c7:88:6a:5f:4c:6b:cd:9c:cf:57:2c:e7:4f: 35:82:45:4d:94:f1:13:0d:78:41:3e:84:46:4e:62: 31:4e:13:dc:a6:17:b3:81:99:eb:29:59:0d:64:54: 13:5b:e4:da:14:02:ac:43:15:b5:82:24:86:7f:b9: d1:67:96:71:c2:83:aa:44:ee:82:10:97:98:a9:4e: f2:f0:13:21:bf:70:35:61:4a:b7:63:eb:25:60:06: d0:dd:4c:54:50:71:31:d8:8f:79:9a:46:3c:b1:46: 51:64:76:03:c0:8e:9e:67:ac:1c:1f:ae:91:bc:8d: 7c:aa:8f:57:52:d3:f4:7f:61:39:e9:a2:e6:d3:1f: 1b:13:36:a2:99:4d:77:a5:b1:62:85:53:b4:7d:fd: f7:8e:af:4b:1d:d6:90:9a:a8:0e:95:17:10:c8:fe: d2:0a:a9:07:e2:65:a9:3d:9a:3c:bb:6f:3f:e5:86: 68:2f:d7:0e:a6:3b:bb:c1:bf:11:ae:4d:f0:d0:ad: ed:32:38:29:07:e7:ff:1b:1a:18:6d:55:39:f2:12: cf:a5:26:a7:7f:2d:b0:38:1e:6a:69:fb:d7:b6:3b: 82:97:ef:ea:d9:bc:a8:41:cc:e7:07:90:ec:45:26: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:72:F8:66:E5:61:1F:26:AF:87:23:25:6B:75:B6:43:61:63:E4:94 X509v3 Authority Key Identifier: keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:46:34:7f:cc:88:8f:22:96:2b:28:d8:92:34:3f:7a:ce:3f: 4f:5f:9b:6d:c6:46:36:5e:c8:bc:ac:61:8d:a2:9a:5a:b5:4a: 37:cc:42:97:59:7d:97:79:d9:d6:26:69:ff:b4:30:42:e3:3d: 57:ca:65:6d:f5:94:bb:1a:c3:1c:8d:d2:2c:95:25:ad:dc:25: a2:c7:bb:a4:32:7c:59:87:f9:22:9f:f0:5e:94:22:94:60:37: da:36:09:44:cb:8a:f8:13:01:c5:3e:a2:60:0a:31:21:97:16: d3:8f:06:05:71:e9:56:8d:45:4e:f0:ef:df:03:36:28:e6:1f: 18:b6:22:cc:fe:59:fe:bb:e9:d9:05:eb:0f:63:65:61:e5:9e: 54:14:00:d7:73:a5:68:1d:14:a0:47:9c:96:bd:b2:6a:b2:b5: 1c:bb:00:86:b3:d1:ec:09:e2:6a:12:37:00:2a:98:4f:08:2c: 8a:5d:2a:a8:99:6d:62:89:92:dd:58:81:ac:3e:63:01:c6:ac: 98:dc:7b:59:bb:c3:7c:51:9e:35:91:f5:11:df:57:21:e1:6a: af:3a:8e:61:09:d8:d3:03:a8:83:95:39:bf:ad:9e:04:09:50: d4:50:82:ec:35:bd:c9:f1:9e:08:96:21:3d:28:23:3b:02:e8: 94:84:4b:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd70mGzNlDsci3sfKmy5RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNmRjNDE5MjY0NWM4NDJhNGZhMmY4ODIzNGYyZTVhMTg0 Yzc2NjQwHhcNMjUxMjI2MDcwMjU3WhcNMjUxMjI3MDcwMjU3WjAzMTEwLwYDVQQD EyhjNTcyZjg2NmU1NjExZjI2YWY4NzIzMjU2Yjc1YjY0MzYxNjNlNDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+moWOezJt9k/6xka5mEEseIal9M a82cz1cs5081gkVNlPETDXhBPoRGTmIxThPcphezgZnrKVkNZFQTW+TaFAKsQxW1 giSGf7nRZ5ZxwoOqRO6CEJeYqU7y8BMhv3A1YUq3Y+slYAbQ3UxUUHEx2I95mkY8 sUZRZHYDwI6eZ6wcH66RvI18qo9XUtP0f2E56aLm0x8bEzaimU13pbFihVO0ff33 jq9LHdaQmqgOlRcQyP7SCqkH4mWpPZo8u28/5YZoL9cOpju7wb8Rrk3w0K3tMjgp B+f/GxoYbVU58hLPpSanfy2wOB5qafvXtjuCl+/q2byoQcznB5DsRSaEXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVy+GblYR8mr4cjJWt1tkNhY+SUMB8GA1UdIwQY MBaAFNptxBkmRchCpPoviCNPLloYTHZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUt ZWVmNzBhYWIwMzVlLzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUtZWVmNzBhYWIwMzVl LzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUY0f8yI jyKWKyjYkjQ/es4/T1+bbcZGNl7IvKxhjaKaWrVKN8xCl1l9l3nZ1iZp/7QwQuM9 V8plbfWUuxrDHI3SLJUlrdwlose7pDJ8WYf5Ip/wXpQilGA32jYJRMuK+BMBxT6i YAoxIZcW048GBXHpVo1FTvDv3wM2KOYfGLYizP5Z/rvp2QXrD2NlYeWeVBQA13Ol aB0UoEeclr2yarK1HLsAhrPR7AniahI3ACqYTwgsil0qqJltYomS3ViBrD5jAcas mNx7WbvDfFGeNZH1Ed9XIeFqrzqOYQnY0wOog5U5v62eBAlQ1FCC7DW9yfGeCJYh PSgjOwLolIRLHQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:05 2025 by rpki-client