This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json) Hash identifier: i5EIoWbxCMM41382z1N2b3BX+5PrQAjVsYmQZwbYPZU= Subject key identifier: 2D:81:A6:7F:69:A8:78:18:92:03:C7:0D:89:D5:7D:EF:45:30:E7:A8 Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9 Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9 Certificate serial: 019B3E6D881152920427C376671A1F87D3F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft Manifest number: 07FB Signing time: Sun 21 Dec 2025 01:02:04 +0000 Manifest this update: Sun 21 Dec 2025 01:02:04 +0000 Manifest next update: Mon 22 Dec 2025 01:02:04 +0000 Files and hashes: 1: JIUfJiSMwwRhLhXhNFBhDMd2oXs.roa (hash: o+w9uCPhfVsnCQk8/ZFs5vyGrQvgAaes0qJUqUvPv88=) 2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=) 3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=) 4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: 2iXLmro2zlLcf89AKZH1Xed0bDivbyyAhepMdiwbYd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:88:11:52:92:04:27:c3:76:67:1a:1f:87:d3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9 Validity Not Before: Dec 21 01:02:04 2025 GMT Not After : Dec 22 01:02:04 2025 GMT Subject: CN=2d81a67f69a878189203c70d89d57def4530e7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:3e:4a:c4:04:8e:0d:40:52:db:8b:95:57: 5c:5a:1d:ad:be:f1:f5:bd:fd:c4:87:73:3b:f1:db: 1c:5b:0e:b5:00:55:1e:98:7a:bc:f4:9d:de:c1:cf: e9:bb:39:45:e0:9e:82:6a:33:13:6a:7d:ed:aa:76: e6:f7:1c:ef:17:66:c7:e9:7f:ae:ee:9e:96:d5:fa: 80:fd:75:55:15:1a:83:b8:0f:ad:b8:16:68:d5:30: 4c:4b:b6:2a:69:47:27:8f:b3:7c:d8:18:1d:e5:13: c7:b3:72:7f:20:37:84:08:79:ca:60:e7:b3:8c:3e: 53:62:43:8b:3f:28:1d:b6:00:75:de:62:d7:af:12: 98:9d:e3:66:98:96:00:a6:97:c7:b1:00:0c:88:a0: c4:73:90:9c:da:56:cb:27:25:cf:e5:15:dd:1e:25: e6:ff:e8:de:05:33:09:e3:28:69:7c:f7:88:e2:76: 1b:ef:3d:65:23:60:1e:bb:12:96:43:84:f6:5d:79: e2:e4:ae:b3:fd:3d:3a:98:82:de:8a:e1:a9:b2:89: 8d:1c:9c:00:c8:52:78:b1:99:f1:b2:13:df:5c:b1: 98:5c:23:57:d1:10:6c:ce:a1:86:ff:b2:8f:d5:b4: 0d:dc:a3:b4:5d:ec:ea:f7:9f:97:82:6e:08:8a:55: 6c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:81:A6:7F:69:A8:78:18:92:03:C7:0D:89:D5:7D:EF:45:30:E7:A8 X509v3 Authority Key Identifier: keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f5:5c:5d:4f:8a:f5:95:a9:46:59:f9:10:35:cc:3c:3c:c6: 93:57:92:71:86:85:df:25:16:09:60:1c:75:b1:e1:f7:a1:72: b9:ba:71:db:99:e8:4b:c4:45:05:48:4f:0b:c0:1a:71:e8:2c: 4c:f7:94:9d:cf:47:fd:0c:21:a3:bf:01:b1:06:fb:38:2f:18: c1:d0:25:e4:7e:b5:b8:3a:bb:49:71:22:cf:7c:d7:3b:15:70: dd:de:78:6b:b4:0d:22:42:3c:d9:94:93:7b:5c:26:8a:f6:06: 9a:f6:7f:8f:42:ef:42:62:d8:b9:0f:e1:fb:55:11:20:81:0e: f7:06:24:04:f5:22:fe:41:02:4d:d4:4a:58:07:59:e1:ef:e6: 95:3e:db:53:66:94:6f:3b:31:53:a8:ea:09:06:32:98:10:27: 41:02:94:90:12:a7:3e:56:29:29:11:3a:af:00:ed:89:fb:18: 27:08:33:93:76:ea:46:d2:4e:fe:0d:1b:52:1c:c5:76:71:94: fd:aa:21:be:b4:a9:da:1a:17:e6:7f:9d:cd:de:75:39:bf:b4: e9:f1:fa:fa:57:1b:d8:8e:03:86:01:0f:c6:f0:98:c2:31:dd: 07:c6:0c:0b:bf:fb:6d:83:9d:47:42:74:39:51:e6:8d:a9:d3: e6:fd:bc:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bYgRUpIEJ8N2Zxofh9PwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNjBmMDA5N2JlNDgxYzIxYmIxZDUxYzg1ZDQ0ZjY1NzQx NThhYTkwHhcNMjUxMjIxMDEwMjA0WhcNMjUxMjIyMDEwMjA0WjAzMTEwLwYDVQQD EygyZDgxYTY3ZjY5YTg3ODE4OTIwM2M3MGQ4OWQ1N2RlZjQ1MzBlN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLk+SsQEjg1AUtuLlVdcWh2tvvH1 vf3Eh3M78dscWw61AFUemHq89J3ewc/puzlF4J6CajMTan3tqnbm9xzvF2bH6X+u 7p6W1fqA/XVVFRqDuA+tuBZo1TBMS7YqaUcnj7N82Bgd5RPHs3J/IDeECHnKYOez jD5TYkOLPygdtgB13mLXrxKYneNmmJYAppfHsQAMiKDEc5Cc2lbLJyXP5RXdHiXm /+jeBTMJ4yhpfPeI4nYb7z1lI2AeuxKWQ4T2XXni5K6z/T06mILeiuGpsomNHJwA yFJ4sZnxshPfXLGYXCNX0RBszqGG/7KP1bQN3KO0Xezq95+Xgm4IilVs9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2Bpn9pqHgYkgPHDYnVfe9FMOeoMB8GA1UdIwQY MBaAFLNg8Al75IHCG7HVHIXUT2V0FYqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYt NWEzNjEyMzUyYjM3LzEvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYtNWEzNjEyMzUyYjM3 LzEvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafVcXU+K 9ZWpRln5EDXMPDzGk1eScYaF3yUWCWAcdbHh96Fyubpx25noS8RFBUhPC8Aacegs TPeUnc9H/Qwho78BsQb7OC8YwdAl5H61uDq7SXEiz3zXOxVw3d54a7QNIkI82ZST e1wmivYGmvZ/j0LvQmLYuQ/h+1URIIEO9wYkBPUi/kECTdRKWAdZ4e/mlT7bU2aU bzsxU6jqCQYymBAnQQKUkBKnPlYpKRE6rwDtifsYJwgzk3bqRtJO/g0bUhzFdnGU /aohvrSp2hoX5n+dzd51Ob+06fH6+lcb2I4DhgEPxvCYwjHdB8YMC7/7bYOdR0J0 OVHmjanT5v28mQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:17:17 2025 by rpki-client