This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json) Hash identifier: FWSOnpGbxLkUwGRGtqADJT84boZ8qa37xwGzpvC+t/M= Subject key identifier: 6B:89:46:EB:23:03:7E:8D:23:9B:DC:FC:02:C5:FD:54:7E:9B:AC:DD Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f Certificate serial: 019B59E3F3D550EECCE18E17D4856D3403B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft Manifest number: 149E Signing time: Fri 26 Dec 2025 09:01:09 +0000 Manifest this update: Fri 26 Dec 2025 09:01:09 +0000 Manifest next update: Sat 27 Dec 2025 09:01:09 +0000 Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: qD4uQ4GgZmZLUSOQQBKk70JPoJsTWBpP1tidJr0wxkE=) 2: y-rAx3x5ggb3kBBIMyQl2KhriYw.roa (hash: j/sr0gEHuELryIqb8wmwmOpvCJwyct02mKuP2NU5Abs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:f3:d5:50:ee:cc:e1:8e:17:d4:85:6d:34:03:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f Validity Not Before: Dec 26 09:01:09 2025 GMT Not After : Dec 27 09:01:09 2025 GMT Subject: CN=6b8946eb23037e8d239bdcfc02c5fd547e9bacdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:32:fd:ea:a1:27:e3:25:8b:5e:eb:13:22: db:39:e9:f0:81:73:64:9d:c1:cf:1a:81:e1:67:b9: 75:51:23:a4:f5:58:6b:0d:0b:4e:6b:c3:b2:29:a3: 7c:2d:d1:a9:95:a6:b0:d9:f5:4f:22:91:ea:04:40: ac:94:c3:9d:28:2d:c2:9e:3e:78:16:06:b7:29:26: 96:c8:0e:ba:39:2f:30:d7:90:13:51:b0:c7:8d:5d: 4d:32:30:32:b6:a1:29:ab:57:24:a3:40:01:96:3b: 15:7f:61:94:f9:81:6c:3f:e5:ce:9b:ae:88:ff:23: 69:13:21:71:ca:08:7a:7a:12:d5:9f:79:6e:07:24: cd:2e:99:5c:3a:fe:8c:b6:39:60:50:01:55:fa:56: 72:f2:f8:fc:e3:c5:b3:20:fa:83:c3:0f:71:9b:fb: b7:fb:c9:32:9e:2d:8f:c1:7f:65:5a:0a:9d:36:b2: 8f:54:2b:18:a7:de:ea:4c:4d:72:5d:24:c0:70:d9: a3:15:d5:d4:d0:79:5d:0b:6e:e8:bc:76:7f:61:c9: c1:f6:d5:12:ec:1e:d5:58:b5:60:a7:f7:d6:5a:3e: a8:19:ad:09:6c:93:51:49:1c:26:9b:21:d2:3b:62: 0c:85:b1:29:53:9d:ce:54:c0:e0:5a:5b:33:8b:62: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:89:46:EB:23:03:7E:8D:23:9B:DC:FC:02:C5:FD:54:7E:9B:AC:DD X509v3 Authority Key Identifier: keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9f:f4:74:78:63:b3:03:70:fc:06:c1:10:6f:4a:86:22:c8: 83:3c:49:76:45:ae:b0:7a:6e:e0:6c:16:98:6a:e6:dd:b8:cd: 29:8c:8e:bd:10:48:b1:4a:fe:63:e6:a1:c3:8d:b6:a9:a2:89: 6d:04:83:cc:e7:93:a4:55:1e:4b:ed:63:a1:75:40:85:0c:18: a3:d4:7f:37:e8:78:7e:b2:6f:b1:e6:de:f8:f7:ab:02:1c:24: 3e:75:f7:4a:58:fd:d9:f9:4a:83:0d:63:0f:a2:7f:04:53:80: 72:dc:b2:89:25:d3:4f:ce:4c:fe:2b:75:bf:3c:8c:d9:36:19: 72:98:dd:71:d0:2a:f6:59:82:42:07:f5:d5:40:ab:bc:5c:f6: 4f:1a:26:10:51:fa:34:96:c4:65:0f:12:6c:c0:e0:65:dc:20: 83:fc:9c:57:92:9f:6f:c3:33:5c:53:c8:dd:65:3e:55:9e:0c: ca:e0:89:3b:11:9d:fb:b2:52:d2:64:36:c6:00:8c:57:93:4d: 50:3b:2c:14:b5:3d:d5:a3:be:ff:18:e4:06:93:cf:60:59:cb: 1d:cf:6f:18:fa:77:e7:8d:14:fa:1d:ba:9c:7a:30:9d:11:cd: c2:f2:72:55:52:7e:c6:d1:5f:eb:dc:64:ad:19:a1:13:6c:0b: 24:78:50:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4/PVUO7M4Y4X1IVtNAOwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMzQyMTZiM2JkOTIxYjZjNjYxODdhOGM4NmE0YTRiYjBl ZTUyM2YwHhcNMjUxMjI2MDkwMTA5WhcNMjUxMjI3MDkwMTA5WjAzMTEwLwYDVQQD Eyg2Yjg5NDZlYjIzMDM3ZThkMjM5YmRjZmMwMmM1ZmQ1NDdlOWJhY2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3oy/eqhJ+Mli17rEyLbOenwgXNk ncHPGoHhZ7l1USOk9VhrDQtOa8OyKaN8LdGplaaw2fVPIpHqBECslMOdKC3Cnj54 Fga3KSaWyA66OS8w15ATUbDHjV1NMjAytqEpq1cko0ABljsVf2GU+YFsP+XOm66I /yNpEyFxygh6ehLVn3luByTNLplcOv6MtjlgUAFV+lZy8vj848WzIPqDww9xm/u3 +8kyni2PwX9lWgqdNrKPVCsYp97qTE1yXSTAcNmjFdXU0HldC27ovHZ/YcnB9tUS 7B7VWLVgp/fWWj6oGa0JbJNRSRwmmyHSO2IMhbEpU53OVMDgWlszi2IBzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuJRusjA36NI5vc/ALF/VR+m6zdMB8GA1UdIwQY MBaAFNo0IWs72SG2xmGHqMhqSkuw7lI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjct MGJmNTkwNWIzNWVmLzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjctMGJmNTkwNWIzNWVm LzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZ/0dHhj swNw/AbBEG9KhiLIgzxJdkWusHpu4GwWmGrm3bjNKYyOvRBIsUr+Y+ahw422qaKJ bQSDzOeTpFUeS+1joXVAhQwYo9R/N+h4frJvsebe+PerAhwkPnX3Slj92flKgw1j D6J/BFOActyyiSXTT85M/it1vzyM2TYZcpjdcdAq9lmCQgf11UCrvFz2TxomEFH6 NJbEZQ8SbMDgZdwgg/ycV5Kfb8MzXFPI3WU+VZ4MyuCJOxGd+7JS0mQ2xgCMV5NN UDssFLU91aO+/xjkBpPPYFnLHc9vGPp3540U+h26nHownRHNwvJyVVJ+xtFf69xk rRmhE2wLJHhQOQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:18 2025 by rpki-client