This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json) Hash identifier: 8if/co8CG5cdfbgtxkGFJ/VDZv7RrgXqrvCPQSitIho= Subject key identifier: 68:1D:20:7E:25:E7:98:D2:55:A6:B8:39:1F:85:AE:1C:46:8E:87:DE Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32 Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732 Certificate serial: 019B59AC74700FDFD09F489B02ED34207C12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 08:00:32 +0000 Manifest this update: Fri 26 Dec 2025 08:00:32 +0000 Manifest next update: Sat 27 Dec 2025 08:00:32 +0000 Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=) 2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: cXL5SQb8co6dD37Og/XEqqnk7W8t0k0fIrXSyPDxzp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:74:70:0f:df:d0:9f:48:9b:02:ed:34:20:7c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732 Validity Not Before: Dec 26 08:00:32 2025 GMT Not After : Dec 27 08:00:32 2025 GMT Subject: CN=681d207e25e798d255a6b8391f85ae1c468e87de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:61:2a:85:79:27:eb:36:2f:67:14:38:94:ab: 39:9b:29:a1:23:87:2a:77:b9:46:9f:42:bc:98:16: b4:5b:dd:d1:b1:9c:ee:92:37:49:2a:56:f8:fa:7c: 87:d7:76:a9:cd:cc:ab:55:15:86:24:c6:81:aa:1d: 55:dd:c3:b3:cf:01:ca:b5:45:7e:b8:d0:64:b8:d3: 17:67:63:cd:e9:b4:90:69:a8:59:60:14:62:f5:b8: 15:79:d1:2b:dc:d5:6d:44:71:4b:d5:c7:24:56:ba: 3f:e5:50:43:c2:93:bf:94:ee:0c:9f:51:1e:4b:e3: 30:86:53:f9:49:08:0a:6b:23:f1:2c:70:9f:b4:6f: 12:2a:7a:14:c1:5d:1a:05:de:6e:e9:cb:e2:7c:8b: 50:bb:13:c0:3f:33:a2:f6:9e:20:e6:31:61:aa:0d: 9e:8e:66:0b:b0:f0:00:6f:2c:21:04:70:be:32:1d: 8a:6e:3d:b6:f0:04:51:26:20:e2:e0:fe:5d:1e:9f: 90:53:b6:6b:ed:35:79:6c:e0:39:7c:d5:70:7f:4f: a1:70:f2:fe:97:aa:82:10:b6:a1:df:fb:05:a6:56: 31:85:2a:78:f9:3b:ce:50:96:92:21:a5:b7:da:52: dd:b8:27:98:3e:f4:02:b9:bf:69:a7:e4:22:5b:d1: cf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1D:20:7E:25:E7:98:D2:55:A6:B8:39:1F:85:AE:1C:46:8E:87:DE X509v3 Authority Key Identifier: keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:4a:4f:37:a3:d4:4e:ff:1a:d7:c0:26:82:cf:e4:88:60:be: dc:6e:28:25:78:54:22:d6:97:3d:b6:18:56:c6:b7:1f:da:2d: 73:a5:e2:f5:22:58:26:74:4b:8b:79:38:68:5e:d2:12:ba:9f: 96:bd:7d:9c:1d:20:f4:b4:08:97:d4:17:98:48:ea:cd:70:29: 00:1c:8b:59:1d:ee:5b:ee:ed:fb:82:94:26:4b:8d:a5:ca:8c: e8:97:95:5d:2a:43:b3:f7:84:89:f0:c0:6d:4e:e5:7d:6f:0a: 21:11:bb:52:d1:49:06:e6:f6:08:94:d4:ea:69:48:46:e4:a1: 4a:4a:ca:69:12:f7:c8:31:d8:17:36:1f:1f:71:f4:91:fc:fb: 56:95:e6:35:e2:5f:10:b8:5a:11:64:bf:c3:3b:7d:a3:c5:b3: 85:2e:46:0c:1d:5f:aa:e0:40:11:04:38:a9:a2:1f:50:5f:4d: 8b:6f:0e:5c:a6:e7:d5:00:88:a5:6f:9c:21:d2:b3:17:31:a9: 58:b2:9f:82:96:bd:1b:5f:cc:47:e5:c1:82:c5:e0:36:4f:2f: 84:92:3d:a5:3e:f4:b8:1d:ba:9d:37:1e:07:68:e7:39:de:ee: 3f:d1:a9:d6:59:3d:b7:a2:f6:0e:c3:d4:95:27:2a:d4:ab:41: bd:30:5a:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrHRwD9/Qn0ibAu00IHwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNjQ5NzlhYWVkNGU3ODhlNDUxMGVkZjhiNjk2YmQ5NmNh Yzc3MzIwHhcNMjUxMjI2MDgwMDMyWhcNMjUxMjI3MDgwMDMyWjAzMTEwLwYDVQQD Eyg2ODFkMjA3ZTI1ZTc5OGQyNTVhNmI4MzkxZjg1YWUxYzQ2OGU4N2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42EqhXkn6zYvZxQ4lKs5mymhI4cq d7lGn0K8mBa0W93RsZzukjdJKlb4+nyH13apzcyrVRWGJMaBqh1V3cOzzwHKtUV+ uNBkuNMXZ2PN6bSQaahZYBRi9bgVedEr3NVtRHFL1cckVro/5VBDwpO/lO4Mn1Ee S+MwhlP5SQgKayPxLHCftG8SKnoUwV0aBd5u6cvifItQuxPAPzOi9p4g5jFhqg2e jmYLsPAAbywhBHC+Mh2Kbj228ARRJiDi4P5dHp+QU7Zr7TV5bOA5fNVwf0+hcPL+ l6qCELah3/sFplYxhSp4+TvOUJaSIaW32lLduCeYPvQCub9pp+QiW9HP4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgdIH4l55jSVaa4OR+FrhxGjofeMB8GA1UdIwQY MBaAFL9kl5qu1OeI5FEO34tpa9lsrHcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84Zjc4OTItN2Y3ZC00OWRiLWE5MTIt MTMzZjg1OTk0YjFiLzEvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84Zjc4OTItN2Y3ZC00OWRiLWE5MTItMTMzZjg1OTk0YjFi LzEvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0pPN6PU Tv8a18Amgs/kiGC+3G4oJXhUItaXPbYYVsa3H9otc6Xi9SJYJnRLi3k4aF7SErqf lr19nB0g9LQIl9QXmEjqzXApAByLWR3uW+7t+4KUJkuNpcqM6JeVXSpDs/eEifDA bU7lfW8KIRG7UtFJBub2CJTU6mlIRuShSkrKaRL3yDHYFzYfH3H0kfz7VpXmNeJf ELhaEWS/wzt9o8WzhS5GDB1fquBAEQQ4qaIfUF9Ni28OXKbn1QCIpW+cIdKzFzGp WLKfgpa9G1/MR+XBgsXgNk8vhJI9pT70uB26nTceB2jnOd7uP9Gp1lk9t6L2DsPU lScq1KtBvTBakA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:21 2025 by rpki-client