This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json) Hash identifier: /ElPi9+JgBNvTZNQUNpLRxyGZH0X54Qp57SjUPLfNQs= Subject key identifier: 2E:32:D4:5F:F8:98:9A:D8:49:1A:B9:BB:C2:E5:FE:D7:8A:21:99:B3 Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99 Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599 Certificate serial: 019B7CA73D7EF11DAFF15261A0E248F761DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft Manifest number: 1682 Signing time: Fri 02 Jan 2026 03:01:33 +0000 Manifest this update: Fri 02 Jan 2026 03:01:33 +0000 Manifest next update: Sat 03 Jan 2026 03:01:33 +0000 Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=) 2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: xm/BL9BRxT5T4qixbiXIckEN46zk5MQiKnE7q6jUhFc=) 3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:a7:3d:7e:f1:1d:af:f1:52:61:a0:e2:48:f7:61:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599 Validity Not Before: Jan 2 03:01:33 2026 GMT Not After : Jan 3 03:01:33 2026 GMT Subject: CN=2e32d45ff8989ad8491ab9bbc2e5fed78a2199b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:b0:44:d9:85:f2:6b:cc:ca:f1:9e:8f:4f: 8a:34:b7:77:1c:5e:a0:85:06:6c:83:2e:27:9d:a3: c8:64:26:8c:08:c9:61:e3:36:71:9a:6a:d3:9e:0e: 7f:25:46:b5:60:fe:40:57:94:12:44:29:8e:12:9b: f7:22:12:8a:a2:dc:aa:24:76:91:e7:97:a5:0f:91: ff:e1:bc:69:d3:bd:6a:70:44:f0:c2:f6:ff:3e:65: a1:58:27:ea:ac:2c:d0:19:b3:df:9e:3d:39:76:e1: 7e:ce:4e:ea:22:60:26:c6:56:c2:2e:53:99:d1:ca: 57:ca:af:64:05:66:71:db:71:1e:ce:61:31:93:6b: 10:9f:fd:34:fd:35:32:e3:25:45:22:c9:a1:2d:72: d0:c2:3f:c5:dd:82:61:df:0c:6b:b7:cd:88:1e:5c: c6:74:9f:94:d8:95:90:f8:12:05:6a:99:a4:35:75: 62:72:b7:76:ab:58:de:45:dd:09:96:ea:63:8d:07: d4:a8:ba:c5:60:e1:8a:49:85:cf:f5:ca:ab:d5:b1: c1:da:7a:3d:5b:44:e0:45:4b:1e:34:e5:4f:22:68: df:74:49:17:f8:ad:c7:51:a7:49:8f:4e:19:2b:44: 0f:ae:1b:f3:c8:a9:5d:48:18:b0:68:e3:65:20:dd: ea:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:32:D4:5F:F8:98:9A:D8:49:1A:B9:BB:C2:E5:FE:D7:8A:21:99:B3 X509v3 Authority Key Identifier: keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:24:00:a7:f5:d7:02:6f:bf:82:f5:42:80:a0:38:7d:ce:a9: 0b:89:0d:b9:e1:9f:b7:d7:f9:91:bb:bd:3d:f8:16:d7:2e:0b: 14:f2:7d:25:2f:06:92:5b:f6:21:37:3f:78:4b:72:8e:2c:c7: e8:74:42:f1:2a:a5:88:6d:97:f8:a1:bb:1f:6b:68:46:ec:02: 9c:a0:f0:21:6b:0a:a3:10:e4:dc:0a:77:49:7c:59:ad:f8:bb: 35:5f:90:50:f7:6b:9d:10:f7:6b:6c:59:9b:fd:a7:5e:d1:43: ab:b9:28:ea:b5:51:c0:d9:f0:c2:b2:1e:ba:97:e3:c2:68:cb: b2:72:7b:23:39:40:fd:1f:44:95:01:b6:9a:d3:1b:72:63:ba: 38:71:58:94:15:f1:c3:c9:62:8a:95:c8:71:b1:b3:2b:bd:06: 5b:e9:44:cd:d7:2e:ed:95:cf:0e:95:97:c2:3a:eb:87:11:03: 30:bc:86:1e:92:b8:d0:7e:70:7d:79:4a:8e:cf:fd:dd:2b:05: 7f:34:50:b2:e8:24:23:60:35:74:6f:89:9f:f2:11:9b:cc:5d: e6:d9:01:e6:1e:ae:86:82:72:fc:b3:b1:44:c7:d5:9b:d9:9b: 23:3b:32:96:f3:85:49:67:4c:1f:44:1a:56:3b:ea:13:9b:79: d0:7a:f2:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8pz1+8R2v8VJhoOJI92HaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNmMxZGY2NjIzNzRkNGFlY2QwYzhiM2Y4NDMxMmRmNDIx MjU1OTkwHhcNMjYwMTAyMDMwMTMzWhcNMjYwMTAzMDMwMTMzWjAzMTEwLwYDVQQD EygyZTMyZDQ1ZmY4OTg5YWQ4NDkxYWI5YmJjMmU1ZmVkNzhhMjE5OWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtuwRNmF8mvMyvGej0+KNLd3HF6g hQZsgy4nnaPIZCaMCMlh4zZxmmrTng5/JUa1YP5AV5QSRCmOEpv3IhKKotyqJHaR 55elD5H/4bxp071qcETwwvb/PmWhWCfqrCzQGbPfnj05duF+zk7qImAmxlbCLlOZ 0cpXyq9kBWZx23EezmExk2sQn/00/TUy4yVFIsmhLXLQwj/F3YJh3wxrt82IHlzG dJ+U2JWQ+BIFapmkNXVicrd2q1jeRd0JlupjjQfUqLrFYOGKSYXP9cqr1bHB2no9 W0TgRUseNOVPImjfdEkX+K3HUadJj04ZK0QPrhvzyKldSBiwaONlIN3qnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4y1F/4mJrYSRq5u8Ll/teKIZmzMB8GA1UdIwQY MBaAFL9sHfZiN01K7NDIs/hDEt9CElWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzct OTA4NDE5ZDM5NDAxLzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzctOTA4NDE5ZDM5NDAx LzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwiQAp/XX Am+/gvVCgKA4fc6pC4kNueGft9f5kbu9PfgW1y4LFPJ9JS8Gklv2ITc/eEtyjizH 6HRC8SqliG2X+KG7H2toRuwCnKDwIWsKoxDk3Ap3SXxZrfi7NV+QUPdrnRD3a2xZ m/2nXtFDq7ko6rVRwNnwwrIeupfjwmjLsnJ7IzlA/R9ElQG2mtMbcmO6OHFYlBXx w8liipXIcbGzK70GW+lEzdcu7ZXPDpWXwjrrhxEDMLyGHpK40H5wfXlKjs/93SsF fzRQsugkI2A1dG+Jn/IRm8xd5tkB5h6uhoJy/LOxRMfVm9mbIzsylvOFSWdMH0Qa VjvqE5t50Hry5w== -----END CERTIFICATE-----Generated at Fri Jan 2 11:20:42 2026 by rpki-client