This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json) Hash identifier: iEKOGwQ3mwfc/55hgM+B1yub8Qrmt2l/WLXSLIOtHjk= Subject key identifier: 5D:4F:C5:93:BB:67:E7:E1:37:FB:DE:1E:DF:7E:C6:74:7A:EF:A7:92 Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93 Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93 Certificate serial: 019B3AC67E289D3E67806718D3D4D3878AA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 08:00:45 +0000 Manifest this update: Sat 20 Dec 2025 08:00:45 +0000 Manifest next update: Sun 21 Dec 2025 08:00:45 +0000 Files and hashes: 1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=) 2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: jSVYEJ6wNpZuuuuRFn2NMAmkVhTh2MoMesC5sIVFrnk=) 3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=) 4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=) 5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:7e:28:9d:3e:67:80:67:18:d3:d4:d3:87:8a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93 Validity Not Before: Dec 20 08:00:45 2025 GMT Not After : Dec 21 08:00:45 2025 GMT Subject: CN=5d4fc593bb67e7e137fbde1edf7ec6747aefa792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d2:77:a1:e2:4b:f8:75:d8:74:6d:56:1a:f3: 86:3d:a4:38:73:b7:3a:07:36:f1:e3:d4:98:83:de: fe:56:3b:48:af:54:12:c0:fb:cb:f5:f0:7c:e4:1c: 34:cd:50:32:7f:ce:d9:40:34:6b:0a:c9:f6:5e:b3: e8:8b:a4:a5:4c:81:0d:f7:5b:61:ed:2c:df:36:f2: 38:5a:be:cb:1c:9d:c4:1e:7d:4e:88:36:0d:21:88: d8:a2:dc:ca:9c:e9:6a:7f:1e:01:69:22:77:8a:e0: 03:62:f0:af:8e:40:10:2c:eb:98:80:cc:5f:f1:77: a4:53:c9:9f:ca:07:aa:66:ad:85:bd:47:b3:5e:c9: 02:ce:37:67:a3:80:f8:f1:17:54:37:05:b9:a4:66: 0b:7c:b8:bc:4f:99:12:53:f7:20:5d:66:c2:38:91: 2e:79:d7:83:60:70:c5:8b:3c:1a:73:34:ab:0e:5d: f8:44:85:84:dd:e5:55:33:dd:9a:f8:bb:d3:d6:c5: 4f:2f:4e:d8:13:cd:d5:f3:2d:67:5e:43:10:2b:9a: 39:58:33:b3:c3:4d:8a:b1:26:00:f2:47:bf:4f:0f: 5d:86:88:b1:ae:09:64:70:78:3e:18:bd:54:e7:a9: e6:a4:a9:2d:fd:1b:70:85:50:a3:bd:a7:1b:ec:91: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4F:C5:93:BB:67:E7:E1:37:FB:DE:1E:DF:7E:C6:74:7A:EF:A7:92 X509v3 Authority Key Identifier: keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:20:28:c8:b0:55:39:cd:8b:59:f8:2c:20:40:86:79:23:da: b4:a7:77:e2:43:a8:8a:12:ae:79:65:32:bf:12:50:5b:49:88: 35:71:f6:55:1e:43:88:a3:11:18:74:2a:5c:bb:ab:3d:1d:64: 9b:bd:69:bf:10:96:eb:5d:1c:99:3e:a7:0b:28:2e:8f:e1:af: f9:c3:dc:c3:e4:52:b2:9b:3a:b5:d4:d0:49:d8:71:c1:c8:52: 89:67:ae:04:b2:39:d1:90:a3:19:63:cb:38:85:2b:a8:12:54: 7b:36:be:56:f8:79:d1:a1:d9:85:14:74:ba:65:72:42:ed:5a: a9:b8:f6:45:ec:f8:05:44:5b:94:90:4b:af:eb:dc:d3:31:fc: 56:9f:4f:54:8e:7a:d9:f7:8e:3c:69:54:9f:a2:82:56:de:7a: 5a:f4:92:7f:be:3b:5f:0b:ac:04:5c:8e:76:72:88:86:70:0c: 49:f9:58:dc:dd:a6:25:66:c9:7d:8b:e7:1c:72:47:63:fe:6d: 6c:bb:09:d8:db:4d:2a:76:2b:4d:fb:6e:0d:0e:b4:81:72:6c: 1c:32:e9:ac:92:cb:30:33:eb:ce:24:44:3b:fb:07:93:08:ed: 98:82:ce:1c:64:34:ab:43:54:54:d4:a7:d0:68:ed:f4:db:26: 48:b5:27:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xn4onT5ngGcY09TTh4qlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOTgwYTQ1ZmU0ODczNjZlMzg2YjYwNjRjMmM2NTI1MTlm OWZjOTMwHhcNMjUxMjIwMDgwMDQ1WhcNMjUxMjIxMDgwMDQ1WjAzMTEwLwYDVQQD Eyg1ZDRmYzU5M2JiNjdlN2UxMzdmYmRlMWVkZjdlYzY3NDdhZWZhNzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9J3oeJL+HXYdG1WGvOGPaQ4c7c6 Bzbx49SYg97+VjtIr1QSwPvL9fB85Bw0zVAyf87ZQDRrCsn2XrPoi6SlTIEN91th 7SzfNvI4Wr7LHJ3EHn1OiDYNIYjYotzKnOlqfx4BaSJ3iuADYvCvjkAQLOuYgMxf 8XekU8mfygeqZq2FvUezXskCzjdno4D48RdUNwW5pGYLfLi8T5kSU/cgXWbCOJEu edeDYHDFizwaczSrDl34RIWE3eVVM92a+LvT1sVPL07YE83V8y1nXkMQK5o5WDOz w02KsSYA8ke/Tw9dhoixrglkcHg+GL1U56nmpKkt/RtwhVCjvacb7JFCtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1PxZO7Z+fhN/veHt9+xnR676eSMB8GA1UdIwQY MBaAFNqYCkX+SHNm44a2BkwsZSUZ+fyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMt M2YxMmFmZjI3NGRhLzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMtM2YxMmFmZjI3NGRh LzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSAoyLBV Oc2LWfgsIECGeSPatKd34kOoihKueWUyvxJQW0mINXH2VR5DiKMRGHQqXLurPR1k m71pvxCW610cmT6nCyguj+Gv+cPcw+RSsps6tdTQSdhxwchSiWeuBLI50ZCjGWPL OIUrqBJUeza+Vvh50aHZhRR0umVyQu1aqbj2Rez4BURblJBLr+vc0zH8Vp9PVI56 2feOPGlUn6KCVt56WvSSf747XwusBFyOdnKIhnAMSflY3N2mJWbJfYvnHHJHY/5t bLsJ2NtNKnYrTftuDQ60gXJsHDLprJLLMDPrziREO/sHkwjtmILOHGQ0q0NUVNSn 0Gjt9NsmSLUnJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:36:50 2025 by rpki-client