This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft File: x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json) Hash identifier: R3JluDaobjq7UlfJOAfLEOdGs3HYUsBqyQomyWN6Ez8= Subject key identifier: 7B:85:ED:C2:C5:64:C8:E1:0D:B4:96:06:68:15:7B:01:A5:B3:17:ED Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA Certificate issuer: /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa Certificate serial: 019B59770F007E18A32D150767F5043EE510 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 07:02:13 +0000 Manifest this update: Fri 26 Dec 2025 07:02:13 +0000 Manifest next update: Sat 27 Dec 2025 07:02:13 +0000 Files and hashes: 1: 58adO5UB1FKlEoStUB0aT9zK1OU.roa (hash: VcDtIG0g4QLm3R4L3wJoUxzRN4qEZkuyhBUiyX4ea8Q=) 2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: FWO1jn/emFDegyOZHQM6gJngbBR8Tmjw7Oqjl29BKM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:0f:00:7e:18:a3:2d:15:07:67:f5:04:3e:e5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa Validity Not Before: Dec 26 07:02:13 2025 GMT Not After : Dec 27 07:02:13 2025 GMT Subject: CN=7b85edc2c564c8e10db4960668157b01a5b317ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:40:4f:62:68:9b:98:43:0a:f8:09:e9:59:28: 99:ce:c8:8f:bc:0d:d0:62:e7:97:bd:a4:66:aa:96: 52:95:74:2c:f7:a2:81:b1:20:78:b3:99:38:44:bb: a8:fd:58:99:bc:17:6b:f2:22:49:f1:de:f7:f2:cf: f7:87:26:80:1c:e0:7a:88:a4:ef:64:54:0b:79:c4: e7:54:09:7f:01:3c:85:e8:07:1a:e4:db:22:f8:17: 1f:18:bd:9c:fe:3d:83:6c:75:b5:a4:3c:69:e7:c9: 34:5b:29:a4:d9:9e:72:1e:01:a8:81:01:b6:c9:f6: 7c:81:8f:03:78:5e:c8:09:1f:d8:63:56:f4:40:09: 2d:26:74:86:26:dd:fc:36:02:b0:1a:38:84:ea:2a: 6b:72:c3:0b:a3:cd:d6:96:ee:ab:a2:b3:72:66:f1: 53:5b:89:13:e2:43:72:a5:5c:4b:58:a8:8f:a7:4e: ac:53:da:66:b0:4c:bd:4a:b9:8c:5b:60:cb:fa:97: 0a:3e:c2:bf:ba:c5:67:72:f9:98:7b:c0:71:f3:d7: d2:ef:4f:7f:32:ed:40:cb:29:3c:d2:fc:2b:ac:5a: 37:fd:28:4c:65:d0:f8:3e:a5:05:14:41:c1:fc:a9: 54:07:74:7f:57:a6:68:74:a9:e9:d9:b4:d7:95:21: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:85:ED:C2:C5:64:C8:E1:0D:B4:96:06:68:15:7B:01:A5:B3:17:ED X509v3 Authority Key Identifier: keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e6:33:dd:c8:5a:9e:c5:9e:33:0f:a5:ad:93:ff:4f:1b:1b: bd:1e:27:0c:26:7c:9f:00:69:a1:a0:b9:67:7b:55:2d:a5:ab: fe:d0:96:32:79:b7:60:ee:64:15:c2:b6:1f:4d:b6:20:0a:f0: 3d:ef:42:13:21:e8:50:fe:38:f8:8c:0c:58:0b:d0:82:37:5c: 1c:d7:90:88:c9:1a:6d:5b:05:ba:65:fb:f2:10:1b:98:b5:dd: 4b:c0:36:4f:7a:80:96:20:6d:67:fb:ec:83:f8:94:b6:5c:e0: 57:c7:9f:f2:f4:de:cc:75:e2:4c:ff:56:88:18:e3:fd:80:da: 39:7d:14:41:f5:1f:9a:9f:3c:6a:61:6f:e8:72:11:ea:5a:e4: 63:14:44:33:85:c3:b0:7b:c7:42:53:74:f0:2e:18:13:89:49: 78:e6:10:0d:cd:89:91:89:58:52:94:b7:56:3b:62:58:40:47: c1:74:5b:50:92:88:8f:23:23:ed:14:45:f3:15:14:e6:38:38: e9:f5:0e:97:6b:df:f6:1b:f9:ca:7f:a1:45:ee:da:4a:85:1c: 4e:44:b7:12:6d:c8:06:43:20:80:cb:bf:f4:c4:1e:5d:55:00: dc:53:0d:9f:d0:d5:d9:c3:d8:9a:6b:e9:8d:94:f4:a8:9b:20: 0f:fa:21:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdw8AfhijLRUHZ/UEPuUQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmJmNmI3ODFiY2Y4YzI4MDA4YThlOGZkZGU2MGU3YWUz MTIyYWEwHhcNMjUxMjI2MDcwMjEzWhcNMjUxMjI3MDcwMjEzWjAzMTEwLwYDVQQD Eyg3Yjg1ZWRjMmM1NjRjOGUxMGRiNDk2MDY2ODE1N2IwMWE1YjMxN2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0BPYmibmEMK+AnpWSiZzsiPvA3Q YueXvaRmqpZSlXQs96KBsSB4s5k4RLuo/ViZvBdr8iJJ8d738s/3hyaAHOB6iKTv ZFQLecTnVAl/ATyF6Aca5Nsi+BcfGL2c/j2DbHW1pDxp58k0Wymk2Z5yHgGogQG2 yfZ8gY8DeF7ICR/YY1b0QAktJnSGJt38NgKwGjiE6iprcsMLo83Wlu6rorNyZvFT W4kT4kNypVxLWKiPp06sU9pmsEy9SrmMW2DL+pcKPsK/usVncvmYe8Bx89fS709/ Mu1Ayyk80vwrrFo3/ShMZdD4PqUFFEHB/KlUB3R/V6ZodKnp2bTXlSGEBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuF7cLFZMjhDbSWBmgVewGlsxftMB8GA1UdIwQY MBaAFMdr9reBvPjCgAio6P3eYOeuMSKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEt YWJmNDg0MGVhNjA3LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEtYWJmNDg0MGVhNjA3 LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+Yz3cha nsWeMw+lrZP/TxsbvR4nDCZ8nwBpoaC5Z3tVLaWr/tCWMnm3YO5kFcK2H022IArw Pe9CEyHoUP44+IwMWAvQgjdcHNeQiMkabVsFumX78hAbmLXdS8A2T3qAliBtZ/vs g/iUtlzgV8ef8vTezHXiTP9WiBjj/YDaOX0UQfUfmp88amFv6HIR6lrkYxREM4XD sHvHQlN08C4YE4lJeOYQDc2JkYlYUpS3VjtiWEBHwXRbUJKIjyMj7RRF8xUU5jg4 6fUOl2vf9hv5yn+hRe7aSoUcTkS3Em3IBkMggMu/9MQeXVUA3FMNn9DV2cPYmmvp jZT0qJsgD/oh3w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:01 2025 by rpki-client