This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft File: 2AOiwMslPPmzM18ONacI2a6fyYY.mft (raw, json) Hash identifier: OC6wi0IyF8lXTMDjwmvQwx8P4Fo7ifH/JA4+GKY97Pc= Subject key identifier: 63:8D:A0:07:52:4F:2C:A7:49:04:21:A2:25:52:E0:BE:FB:68:05:01 Authority key identifier: D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86 Certificate issuer: /CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986 Certificate serial: 019B59AC9396B753795959EFAC3ED6B05592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft Manifest number: 74 Signing time: Fri 26 Dec 2025 08:00:40 +0000 Manifest this update: Fri 26 Dec 2025 08:00:40 +0000 Manifest next update: Sat 27 Dec 2025 08:00:40 +0000 Files and hashes: 1: 2AOiwMslPPmzM18ONacI2a6fyYY.crl (hash: nmMj9UDoKrcDpo/wib+fP5e4kamcY1OIWxD06PwgKbM=) 2: IIOYiI5xrYPdbR4qy_NB1by3k8w.roa (hash: IMPI0ZFIXgwW+ovabDEnw4q8w52HbQuW+CoCXLtpKLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:93:96:b7:53:79:59:59:ef:ac:3e:d6:b0:55:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986 Validity Not Before: Dec 26 08:00:40 2025 GMT Not After : Dec 27 08:00:40 2025 GMT Subject: CN=638da007524f2ca7490421a22552e0befb680501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:1d:be:18:63:84:8e:74:c2:de:48:51:ab: 18:c3:d6:d3:0e:c9:6e:87:e6:de:5e:22:24:ef:21: 70:10:8d:57:96:ca:29:7c:6e:49:92:26:0d:a9:33: 7a:82:e1:43:3e:41:fa:c9:5c:24:b6:a1:c9:7d:a8: 15:1a:6b:03:b5:e2:81:38:42:ee:45:39:00:9a:21: bb:11:8d:4d:e5:a9:0b:58:ac:66:18:a3:1c:cd:c6: b4:eb:67:97:21:c3:5f:6a:9b:79:90:d5:de:ef:7f: 67:8c:d2:16:37:2d:55:df:aa:56:6c:7b:c2:f2:05: c9:fc:05:c4:0f:18:d6:a9:4b:ea:1c:6a:e2:42:6d: 80:b1:fb:a2:ad:7f:18:4e:54:c2:68:0e:9c:c2:7f: c1:d8:d2:55:3e:54:9d:4f:c2:95:c6:ad:c4:bf:28: b4:cb:b5:4a:7e:54:86:ef:f3:ec:45:17:c5:f1:67: 46:fc:58:43:01:f6:fc:fd:0a:ab:c9:21:a2:6f:5d: 97:f5:59:18:99:fe:54:0e:2b:e9:38:5d:a2:8c:fc: 79:a3:cc:16:84:34:65:93:6c:d1:75:c3:e7:e3:62: 15:dc:18:13:8f:62:86:91:ab:67:5d:3a:25:54:a7: c7:eb:87:06:55:af:c3:90:a6:dc:47:be:64:ba:e8: 20:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8D:A0:07:52:4F:2C:A7:49:04:21:A2:25:52:E0:BE:FB:68:05:01 X509v3 Authority Key Identifier: keyid:D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:cf:60:bd:76:ae:11:c6:fd:fe:3a:84:69:51:05:8e:3d:16: 71:62:71:7c:ca:4f:47:f7:6d:b6:d0:c3:32:79:7c:43:e4:4f: 42:61:85:f7:f8:a1:c2:28:c5:60:1b:93:09:83:13:5e:00:4b: 3c:23:5e:6b:27:b3:b9:73:a4:d7:9a:43:7a:d6:ab:62:dc:85: ea:e0:3c:5f:0b:4f:a3:34:34:41:77:84:1b:a1:f7:b8:02:c4: 96:9a:af:25:7a:6e:a5:e3:7d:68:62:56:5e:5c:1f:92:19:23: c3:88:5f:30:38:98:57:0b:f2:f4:9e:10:e1:41:99:04:7f:75: 26:30:6e:5f:f6:96:52:05:69:c0:8f:1e:dd:88:9b:47:5f:d0: 9f:01:14:53:ca:dd:9f:e7:5b:d5:48:39:37:37:98:52:d2:ad: 02:3e:12:b1:9f:f2:92:a7:c5:70:1b:d2:be:2c:04:76:eb:c8: cc:ed:ea:35:a6:c0:0a:3d:ef:69:f3:35:9f:fd:4f:09:06:e4: da:c6:fe:ba:a4:2b:23:56:da:5d:3a:ce:df:7b:2c:f1:e4:68: 2a:46:7d:b5:e2:55:16:fb:c3:20:25:0f:88:3c:b1:c4:ee:0c: e9:f5:56:46:39:8e:a8:9c:75:44:a0:dd:1b:53:66:c8:07:16: c0:c4:1c:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJOWt1N5WVnvrD7WsFWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MDNhMmMwY2IyNTNjZjliMzMzNWYwZTM1YTcwOGQ5YWU5 ZmM5ODYwHhcNMjUxMjI2MDgwMDQwWhcNMjUxMjI3MDgwMDQwWjAzMTEwLwYDVQQD Eyg2MzhkYTAwNzUyNGYyY2E3NDkwNDIxYTIyNTUyZTBiZWZiNjgwNTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi0dvhhjhI50wt5IUasYw9bTDslu h+beXiIk7yFwEI1XlsopfG5JkiYNqTN6guFDPkH6yVwktqHJfagVGmsDteKBOELu RTkAmiG7EY1N5akLWKxmGKMczca062eXIcNfapt5kNXe739njNIWNy1V36pWbHvC 8gXJ/AXEDxjWqUvqHGriQm2AsfuirX8YTlTCaA6cwn/B2NJVPlSdT8KVxq3Evyi0 y7VKflSG7/PsRRfF8WdG/FhDAfb8/QqrySGib12X9VkYmf5UDivpOF2ijPx5o8wW hDRlk2zRdcPn42IV3BgTj2KGkatnXTolVKfH64cGVa/DkKbcR75kuugg+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGONoAdSTyynSQQhoiVS4L77aAUBMB8GA1UdIwQY MBaAFNgDosDLJTz5szNfDjWnCNmun8mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkFPaXdNc2xQUG16TTE4T05hY0kyYTZmeVlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kZGNmZDktZDQxOS00MGRkLWEwZjAt OGUyZDIxMmNlZmVmLzEvMkFPaXdNc2xQUG16TTE4T05hY0kyYTZmeVlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kZGNmZDktZDQxOS00MGRkLWEwZjAtOGUyZDIxMmNlZmVm LzEvMkFPaXdNc2xQUG16TTE4T05hY0kyYTZmeVlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAc9gvXau Ecb9/jqEaVEFjj0WcWJxfMpPR/dtttDDMnl8Q+RPQmGF9/ihwijFYBuTCYMTXgBL PCNeayezuXOk15pDetarYtyF6uA8XwtPozQ0QXeEG6H3uALElpqvJXpupeN9aGJW Xlwfkhkjw4hfMDiYVwvy9J4Q4UGZBH91JjBuX/aWUgVpwI8e3YibR1/QnwEUU8rd n+db1Ug5NzeYUtKtAj4SsZ/ykqfFcBvSviwEduvIzO3qNabACj3vafM1n/1PCQbk 2sb+uqQrI1baXTrO33ss8eRoKkZ9teJVFvvDICUPiDyxxO4M6fVWRjmOqJx1RKDd G1NmyAcWwMQcAg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:20 2025 by rpki-client