This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: adkjAQQ8dls3yYiNRnvwi7qPN2GHdpMNCK9K7sAzfos= Subject key identifier: 0B:18:21:9E:BF:BF:C5:1E:FB:44:F8:EE:C1:2A:6D:A0:50:F3:1A:22 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019AF80AF818833C5D2558A5E578D58ED270 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 1171 Signing time: Sun 07 Dec 2025 09:00:59 +0000 Manifest this update: Sun 07 Dec 2025 09:00:59 +0000 Manifest next update: Mon 08 Dec 2025 09:00:59 +0000 Files and hashes: 1: 1sKE36lDWeWUjMSloo6n26lQvxE.roa (hash: 0YFmLsRRla2daPn9GavHfi/iWCjcjVBR51fAM/YzUPA=) 2: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: j4WDw09HF5jgNl3L71pGqeNAmXiGsDF4M6o8Z6/7SaE=) 3: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (hash: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=) 4: 8GeGNNzjzZvJIEAAhJi9tW2bbrA.roa (hash: Eto9TySCaxnkkdyIGeX6PMXh8s89OGTNecNbv02FHmY=) 5: BinZKeyg5gKkO8gwYJ0Ze8CeRxs.roa (hash: y9nENbUlBNsJYj+Cw11EQBzVD35m8OwMSWBUyRfdWao=) 6: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (hash: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=) 7: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (hash: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=) 8: ZH0QvaHOPvJPYEbUbSGF-chYfuI.roa (hash: GNpLUKAR49JusHGuTxHkn0FssgkY3qDBV+p8eW6v2dA=) 9: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (hash: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=) 10: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (hash: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=) 11: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (hash: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=) 12: mP8Qz54E01SquciLEGB10XN2R-M.roa (hash: TdXFl7ZveLTgT4OrOlqkJ84pFNT0T+LUDZ5933YP0mE=) 13: suXcRzS6-_4AE_w0ZJlYPW8wMRM.roa (hash: +PBYO+10etR0ZMMQ1FwMVF/GjPtirIZFSfWGb9cD2rU=) 14: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (hash: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=) 15: yVFu2BG-2jPO42o54RBasvcduFQ.roa (hash: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:0a:f8:18:83:3c:5d:25:58:a5:e5:78:d5:8e:d2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Dec 7 09:00:59 2025 GMT Not After : Dec 8 09:00:59 2025 GMT Subject: CN=0b18219ebfbfc51efb44f8eec12a6da050f31a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1a:21:fb:11:97:30:14:90:2b:12:79:36:99: b5:c3:f5:e0:05:0c:28:a1:5f:74:89:a0:45:88:5f: ee:c7:84:40:a5:1c:f7:fa:a9:d4:9e:6c:5e:1f:0f: 18:29:89:db:f2:7c:a8:ab:5a:c4:ba:a6:ac:ae:ad: c1:34:be:b4:fb:94:44:86:e0:40:16:49:0b:c3:96: 14:6b:d7:c6:41:47:5c:d9:06:f5:71:28:78:dd:44: 28:15:e9:4a:6b:09:f8:4a:d0:60:bb:aa:88:5a:d0: 22:9a:8a:5a:5d:fe:17:cc:3e:82:32:98:1a:dd:a3: 4c:f4:c9:2d:cd:5e:e0:14:76:f4:e8:a0:da:84:18: c2:60:50:0c:0a:9d:e2:be:8c:ff:1a:61:84:ac:56: 70:bd:22:cc:64:b3:98:c0:e6:f4:57:50:34:6f:ba: dd:1e:27:1f:5e:87:dd:54:37:93:b8:44:c5:0d:95: d0:46:e3:f5:80:56:ad:00:2a:0f:2b:3d:9e:9f:ca: b2:de:9a:b3:5c:01:e6:9a:07:ff:43:74:5e:dc:27: 35:e9:15:74:6b:5b:06:ba:54:86:c3:91:e6:61:cf: fb:df:68:60:ff:74:cf:ff:80:81:ec:f2:e6:10:f0: 10:24:d2:3e:bf:4e:2c:cd:77:2b:10:78:fe:93:62: 75:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:18:21:9E:BF:BF:C5:1E:FB:44:F8:EE:C1:2A:6D:A0:50:F3:1A:22 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d7:3f:ad:fa:a6:4e:aa:d2:f5:6c:5a:d9:13:9e:1e:e0:90: 52:c4:1e:a5:a8:2c:64:23:7a:8c:f7:14:cf:0f:14:e9:18:b9: 40:76:d1:db:fa:34:39:04:c2:2e:83:97:3a:f7:7b:77:68:00: 6a:87:25:23:d1:a5:fb:28:5c:be:06:8c:6c:6a:c8:55:2d:5d: a2:f6:4f:31:8a:95:2d:54:2a:bb:3c:55:88:59:69:6f:4d:31: 57:8e:1a:0c:08:e2:0a:4f:ad:cc:d4:d7:02:20:40:3d:16:75: 24:ff:06:0b:8c:73:a5:64:79:be:fc:7d:a1:98:32:51:05:ae: c7:ca:69:b7:ce:71:ea:bf:55:65:91:28:8b:43:a1:7f:cf:bd: eb:0b:52:05:61:61:a1:8c:46:54:0a:79:f4:2e:74:43:9e:ea: b8:8b:59:46:25:cc:2c:16:5e:c2:e0:09:92:cd:db:fd:6d:da: 8b:6f:43:c4:00:b4:3c:25:e5:00:e1:de:79:e2:25:94:b5:72: b0:03:12:34:bf:16:85:fc:b1:1c:e0:2d:da:e1:84:f8:32:a6: 28:c0:27:a4:20:ec:2f:96:d4:6a:f4:05:94:03:ed:70:40:d5: 09:9a:0c:eb:42:7c:29:f3:d9:63:2c:e1:aa:86:df:a0:4b:96: f6:b1:c8:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4CvgYgzxdJVil5XjVjtJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjUxMjA3MDkwMDU5WhcNMjUxMjA4MDkwMDU5WjAzMTEwLwYDVQQD EygwYjE4MjE5ZWJmYmZjNTFlZmI0NGY4ZWVjMTJhNmRhMDUwZjMxYTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Boh+xGXMBSQKxJ5Npm1w/XgBQwo oV90iaBFiF/ux4RApRz3+qnUnmxeHw8YKYnb8nyoq1rEuqasrq3BNL60+5REhuBA FkkLw5YUa9fGQUdc2Qb1cSh43UQoFelKawn4StBgu6qIWtAimopaXf4XzD6CMpga 3aNM9MktzV7gFHb06KDahBjCYFAMCp3ivoz/GmGErFZwvSLMZLOYwOb0V1A0b7rd HicfXofdVDeTuETFDZXQRuP1gFatACoPKz2en8qy3pqzXAHmmgf/Q3Re3Cc16RV0 a1sGulSGw5HmYc/732hg/3TP/4CB7PLmEPAQJNI+v04szXcrEHj+k2J1HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsYIZ6/v8Ue+0T47sEqbaBQ8xoiMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNc/rfqm TqrS9Wxa2ROeHuCQUsQepagsZCN6jPcUzw8U6Ri5QHbR2/o0OQTCLoOXOvd7d2gA aoclI9Gl+yhcvgaMbGrIVS1dovZPMYqVLVQquzxViFlpb00xV44aDAjiCk+tzNTX AiBAPRZ1JP8GC4xzpWR5vvx9oZgyUQWux8ppt85x6r9VZZEoi0Ohf8+96wtSBWFh oYxGVAp59C50Q57quItZRiXMLBZewuAJks3b/W3ai29DxAC0PCXlAOHeeeIllLVy sAMSNL8WhfyxHOAt2uGE+DKmKMAnpCDsL5bUavQFlAPtcEDVCZoM60J8KfPZYyzh qobfoEuW9rHIUQ== -----END CERTIFICATE-----Generated at Sun Dec 7 14:58:55 2025 by rpki-client