This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json) Hash identifier: uuXOTcGJOXpxkNVWjg60ebJIDfEQlcMutUUzfLptnRQ= Subject key identifier: A8:FD:21:86:A3:7C:00:1A:4B:23:22:BE:F6:9E:08:19:4D:82:B0:97 Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61 Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461 Certificate serial: 019B318CE12F549F9154C11FE6180C4D727D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 13:01:14 +0000 Manifest this update: Thu 18 Dec 2025 13:01:14 +0000 Manifest next update: Fri 19 Dec 2025 13:01:14 +0000 Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: tMF6T8+ZF/V0hucKHnuDhTR6F2hC87byZddb/CDVO2Y=) 2: WsuMLx8hOYo9zbhOH79qMxC9w1o.roa (hash: cB8DG/oK3A/ZTuFz/7P7kYL4Kctl8w+rRh6Gw20a3lg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:e1:2f:54:9f:91:54:c1:1f:e6:18:0c:4d:72:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461 Validity Not Before: Dec 18 13:01:14 2025 GMT Not After : Dec 19 13:01:14 2025 GMT Subject: CN=a8fd2186a37c001a4b2322bef69e08194d82b097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:d6:e7:8b:23:35:69:96:f7:3a:c2:5e:be: d5:fb:b6:11:c2:27:d1:4a:2a:0a:56:63:0b:f4:47: c8:46:0f:58:2f:af:dc:49:0d:2d:3f:2c:5c:5a:85: 2d:ee:15:6f:23:ff:38:cf:c9:92:1d:98:21:23:0a: 28:2d:56:72:03:c9:4b:87:c9:1f:6c:56:16:f3:ce: 5f:59:40:fd:e0:2b:43:e8:62:76:b7:b1:8d:26:67: 88:f3:5e:d8:d9:30:01:9a:f1:5c:fd:47:48:9f:5f: 1c:65:73:19:f9:32:32:fe:b7:8e:75:7e:ef:9f:db: 8d:ba:98:16:6e:c3:15:ee:1f:70:40:47:dc:f8:d0: b1:1b:f4:aa:a5:c8:b5:25:50:03:c3:fd:3a:ee:20: 7f:70:ae:01:a5:50:b8:59:11:bb:9e:ca:d8:b3:f5: d2:45:b9:84:42:6d:3b:32:02:0a:fa:2e:bd:c2:03: 7f:75:62:c6:44:3b:f8:39:72:a8:d9:f2:a0:99:de: cb:1a:39:85:5d:bf:8f:4d:d5:0c:eb:51:9d:e9:5f: b5:9e:fe:f1:c8:22:02:c2:18:38:fb:59:74:9d:60: 48:c7:04:6e:11:d7:be:8e:3a:13:4e:86:ed:f3:ba: c7:35:1d:f9:3a:e8:38:f6:fd:18:85:bd:29:ac:9a: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FD:21:86:A3:7C:00:1A:4B:23:22:BE:F6:9E:08:19:4D:82:B0:97 X509v3 Authority Key Identifier: keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:58:1d:8d:d1:b4:e2:d4:79:da:e9:18:1f:57:3f:9d:78:d1: 9c:99:2a:59:ce:69:dd:0e:e9:f1:90:c6:de:70:b1:6d:b4:ad: d1:60:bd:0c:35:26:c5:ff:02:a0:5e:38:70:b9:b8:28:1a:35: b3:6b:fb:1f:e3:da:c8:be:f2:e3:4c:7a:a1:2e:4b:68:c1:e5: b6:bc:25:94:89:d8:db:ad:bd:a4:52:56:f5:14:04:17:b4:f2: e7:0b:3d:dc:39:2d:55:48:e2:d3:e0:27:00:fe:60:d5:65:c1: 02:90:43:c3:c5:de:36:22:be:4a:ce:5b:a9:03:ad:e0:eb:a7: 37:26:53:be:a0:9d:9b:07:a7:aa:3c:0f:8d:08:44:78:69:96: 99:95:9a:bb:d1:72:0b:c5:dc:aa:a2:7d:8d:a9:f9:dd:46:b9: 1f:ab:fc:fc:8f:a9:7d:a8:d5:18:45:b9:62:8b:f1:c5:09:87: 25:b8:7e:e1:e1:2d:77:59:39:b3:09:8f:f3:01:62:91:85:6d: ed:ac:73:f2:76:79:b7:5c:52:a0:76:34:b3:5d:da:72:1b:f5: d0:a7:e2:e8:49:33:26:2e:30:06:28:38:67:bd:87:b4:25:d2: 72:68:f2:9c:24:c7:63:5f:54:fc:fd:bb:72:e3:47:95:e5:9f: 0c:bc:8b:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjOEvVJ+RVMEf5hgMTXJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNjA5OWU3ZmYzYTE3MWJjZTNiNmZlOTllYmI0ZDI0Y2I4 NWU0NjEwHhcNMjUxMjE4MTMwMTE0WhcNMjUxMjE5MTMwMTE0WjAzMTEwLwYDVQQD EyhhOGZkMjE4NmEzN2MwMDFhNGIyMzIyYmVmNjllMDgxOTRkODJiMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptTW54sjNWmW9zrCXr7V+7YRwifR SioKVmML9EfIRg9YL6/cSQ0tPyxcWoUt7hVvI/84z8mSHZghIwooLVZyA8lLh8kf bFYW885fWUD94CtD6GJ2t7GNJmeI817Y2TABmvFc/UdIn18cZXMZ+TIy/reOdX7v n9uNupgWbsMV7h9wQEfc+NCxG/Sqpci1JVADw/067iB/cK4BpVC4WRG7nsrYs/XS RbmEQm07MgIK+i69wgN/dWLGRDv4OXKo2fKgmd7LGjmFXb+PTdUM61Gd6V+1nv7x yCICwhg4+1l0nWBIxwRuEde+jjoTTobt87rHNR35Oug49v0Yhb0prJrwqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj9IYajfAAaSyMivvaeCBlNgrCXMB8GA1UdIwQY MBaAFNpgmef/Ohcbzjtv6Z67TSTLheRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUt NDU5ODY4OWQ1NTFlLzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUtNDU5ODY4OWQ1NTFl LzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFgdjdG0 4tR52ukYH1c/nXjRnJkqWc5p3Q7p8ZDG3nCxbbSt0WC9DDUmxf8CoF44cLm4KBo1 s2v7H+PayL7y40x6oS5LaMHltrwllInY2629pFJW9RQEF7Ty5ws93DktVUji0+An AP5g1WXBApBDw8XeNiK+Ss5bqQOt4OunNyZTvqCdmwenqjwPjQhEeGmWmZWau9Fy C8XcqqJ9jan53Ua5H6v8/I+pfajVGEW5YovxxQmHJbh+4eEtd1k5swmP8wFikYVt 7axz8nZ5t1xSoHY0s13achv10Kfi6EkzJi4wBig4Z72HtCXScmjynCTHY19U/P27 cuNHleWfDLyLFA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:36:40 2025 by rpki-client