This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/425958-8e23-4927-a7be-8793274cfa34/1/2Exdz8P6S_jYD167J3tQmGsEFTQ.mft File: 2Exdz8P6S_jYD167J3tQmGsEFTQ.mft (raw, json) Hash identifier: PVJahzJ2C3dZKVuaX45Fq+yWUCBqvtVOe65i2+vikzg= Subject key identifier: 1F:53:61:FF:5A:7F:8C:CD:BB:9B:24:5B:F0:50:24:A1:E8:3A:0C:DC Authority key identifier: D8:4C:5D:CF:C3:FA:4B:F8:D8:0F:5E:BB:27:7B:50:98:6B:04:15:34 Certificate issuer: /CN=d84c5dcfc3fa4bf8d80f5ebb277b50986b041534 Certificate serial: 019B593ED1604FD47EEA47ABDDAFE41253A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Exdz8P6S_jYD167J3tQmGsEFTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/425958-8e23-4927-a7be-8793274cfa34/1/2Exdz8P6S_jYD167J3tQmGsEFTQ.mft Manifest number: 56 Signing time: Fri 26 Dec 2025 06:00:47 +0000 Manifest this update: Fri 26 Dec 2025 06:00:47 +0000 Manifest next update: Sat 27 Dec 2025 06:00:47 +0000 Files and hashes: 1: 2Exdz8P6S_jYD167J3tQmGsEFTQ.crl (hash: wm6cGk9qmJC/dAwlTKnaJw03LMilYFe1d9ox+pdl6ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/425958-8e23-4927-a7be-8793274cfa34/1/2Exdz8P6S_jYD167J3tQmGsEFTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/425958-8e23-4927-a7be-8793274cfa34/1/2Exdz8P6S_jYD167J3tQmGsEFTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2Exdz8P6S_jYD167J3tQmGsEFTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:d1:60:4f:d4:7e:ea:47:ab:dd:af:e4:12:53:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d84c5dcfc3fa4bf8d80f5ebb277b50986b041534 Validity Not Before: Dec 26 06:00:47 2025 GMT Not After : Dec 27 06:00:47 2025 GMT Subject: CN=1f5361ff5a7f8ccdbb9b245bf05024a1e83a0cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:aa:1a:68:72:cd:4b:fa:cb:9d:e9:1a:a6: f9:b7:c5:cc:87:e5:14:bb:ce:07:59:40:bf:99:4c: 07:73:c5:20:75:c0:b6:4b:9d:58:93:c9:f4:f5:bd: e2:9f:31:95:cc:fa:58:2c:b4:0f:86:c6:fa:42:bd: e7:56:f0:31:13:45:84:aa:15:3a:58:7d:85:bb:47: 6f:c1:3a:f2:11:21:2b:d8:51:8f:bd:ae:90:7c:56: 20:a5:0c:e9:ae:c2:2e:a0:67:77:12:dc:6c:19:a5: 5c:50:0e:fa:89:04:a6:03:2d:77:f5:fc:44:2c:de: d4:53:45:b4:8c:da:61:32:a9:3b:1c:fd:45:51:d5: ef:25:d4:99:d4:c5:1a:de:a9:94:f3:f4:f3:1e:75: 8c:5f:d5:74:66:96:f4:cf:c8:54:79:f9:b5:8b:a0: 58:9b:c3:1a:56:9b:dd:58:1f:2a:34:9a:51:d9:fc: 31:ed:c3:6a:0a:77:a0:fb:56:fb:d9:51:f8:55:80: 63:95:11:b9:db:d3:e3:88:42:04:ea:ce:c1:20:5d: 02:8a:cb:3f:47:f7:bb:1a:c1:8a:19:93:11:bf:10: a9:82:9f:e8:c4:7c:14:b6:b4:0b:30:80:c8:c1:bd: b6:09:43:64:a7:6f:e1:1d:1a:2d:2c:b9:1b:a0:1d: b2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:53:61:FF:5A:7F:8C:CD:BB:9B:24:5B:F0:50:24:A1:E8:3A:0C:DC X509v3 Authority Key Identifier: keyid:D8:4C:5D:CF:C3:FA:4B:F8:D8:0F:5E:BB:27:7B:50:98:6B:04:15:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Exdz8P6S_jYD167J3tQmGsEFTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/425958-8e23-4927-a7be-8793274cfa34/1/2Exdz8P6S_jYD167J3tQmGsEFTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/425958-8e23-4927-a7be-8793274cfa34/1/2Exdz8P6S_jYD167J3tQmGsEFTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:51:94:18:dc:41:72:da:3c:5f:5c:46:1e:71:4f:a6:b3:b1: ba:75:79:5f:b5:f9:a4:38:d8:3a:02:00:e7:3a:dd:83:ab:fe: b9:0d:a1:a1:e5:18:a3:0f:ad:e7:ad:f1:5c:49:78:2a:30:ad: 0a:9b:d3:8a:79:01:b9:2e:59:c9:34:ad:74:7f:df:48:12:60: 69:49:db:f9:48:22:30:e1:34:e0:ca:e4:a9:1a:13:c7:7a:69: 8b:a9:46:a7:a0:29:a9:17:58:5a:d7:ff:06:46:e4:d6:e0:f9: 24:05:d5:b3:dc:58:c7:0a:2b:6b:30:ac:5a:12:fd:f6:1b:11: ab:5a:c6:2e:e3:2b:28:72:c7:95:7a:d8:76:9a:9c:a2:d0:34: ab:e4:2b:1c:47:05:38:1e:3a:59:ed:8e:b6:77:b3:d0:48:bc: d8:33:97:05:90:64:68:25:51:69:d2:ec:3f:4c:77:9b:ca:de: be:4b:b4:e2:dc:7c:87:05:bd:86:f5:ed:b5:86:b0:f4:1f:88: f9:88:40:de:86:e6:a4:af:31:e6:52:c9:19:33:fe:45:77:c8: ef:84:e0:b4:d2:c5:75:c4:25:ee:80:41:e1:28:7d:1d:32:99: d0:7c:30:d4:fa:f4:59:92:d7:79:f7:a4:51:ac:cf:8a:68:ae: 2b:d7:51:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPtFgT9R+6ker3a/kElOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NGM1ZGNmYzNmYTRiZjhkODBmNWViYjI3N2I1MDk4NmIw NDE1MzQwHhcNMjUxMjI2MDYwMDQ3WhcNMjUxMjI3MDYwMDQ3WjAzMTEwLwYDVQQD EygxZjUzNjFmZjVhN2Y4Y2NkYmI5YjI0NWJmMDUwMjRhMWU4M2EwY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPWqGmhyzUv6y53pGqb5t8XMh+UU u84HWUC/mUwHc8UgdcC2S51Yk8n09b3inzGVzPpYLLQPhsb6Qr3nVvAxE0WEqhU6 WH2Fu0dvwTryESEr2FGPva6QfFYgpQzprsIuoGd3EtxsGaVcUA76iQSmAy139fxE LN7UU0W0jNphMqk7HP1FUdXvJdSZ1MUa3qmU8/TzHnWMX9V0Zpb0z8hUefm1i6BY m8MaVpvdWB8qNJpR2fwx7cNqCneg+1b72VH4VYBjlRG529PjiEIE6s7BIF0Ciss/ R/e7GsGKGZMRvxCpgp/oxHwUtrQLMIDIwb22CUNkp2/hHRotLLkboB2yKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9TYf9af4zNu5skW/BQJKHoOgzcMB8GA1UdIwQY MBaAFNhMXc/D+kv42A9euyd7UJhrBBU0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkV4ZHo4UDZTX2pZRDE2N0ozdFFtR3NFRlRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80MjU5NTgtOGUyMy00OTI3LWE3YmUt ODc5MzI3NGNmYTM0LzEvMkV4ZHo4UDZTX2pZRDE2N0ozdFFtR3NFRlRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC80MjU5NTgtOGUyMy00OTI3LWE3YmUtODc5MzI3NGNmYTM0 LzEvMkV4ZHo4UDZTX2pZRDE2N0ozdFFtR3NFRlRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1GUGNxB cto8X1xGHnFPprOxunV5X7X5pDjYOgIA5zrdg6v+uQ2hoeUYow+t563xXEl4KjCt CpvTinkBuS5ZyTStdH/fSBJgaUnb+UgiMOE04MrkqRoTx3ppi6lGp6ApqRdYWtf/ Bkbk1uD5JAXVs9xYxworazCsWhL99hsRq1rGLuMrKHLHlXrYdpqcotA0q+QrHEcF OB46We2Otnez0Ei82DOXBZBkaCVRadLsP0x3m8revku04tx8hwW9hvXttYaw9B+I +YhA3obmpK8x5lLJGTP+RXfI74TgtNLFdcQl7oBB4Sh9HTKZ0Hww1Pr0WZLXefek UazPimiuK9dRng== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:13 2025 by rpki-client