This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json) Hash identifier: 4lAI9Vpldcmirl6dEAuvCzj2ruhguUv9HnxmwJ/Tr5w= Subject key identifier: 76:FD:28:5F:CF:5B:37:09:4A:45:30:F1:87:E7:41:B2:F3:F1:7F:B7 Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C Certificate issuer: /CN=d977120937500eb46696428962e510e02c348e6c Certificate serial: 019B5907E40733E6794AC7DEED3518EA1E78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft Manifest number: 0E7E Signing time: Fri 26 Dec 2025 05:00:47 +0000 Manifest this update: Fri 26 Dec 2025 05:00:47 +0000 Manifest next update: Sat 27 Dec 2025 05:00:47 +0000 Files and hashes: 1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: +8M7pXcq5JsyTTFTaSjHI8556JXQQtYlL812sLgA3dM=) 2: ABCdWHfeRuB4x9Cfjqm_Nsu7Efc.roa (hash: bp8ugvHYl4CGZn0o8RUyCE5vXn4l+aGFTzhE2reh5sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:e4:07:33:e6:79:4a:c7:de:ed:35:18:ea:1e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d977120937500eb46696428962e510e02c348e6c Validity Not Before: Dec 26 05:00:47 2025 GMT Not After : Dec 27 05:00:47 2025 GMT Subject: CN=76fd285fcf5b37094a4530f187e741b2f3f17fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:47:bc:61:08:2b:03:7a:04:bb:28:a5:10: be:b6:d2:61:a4:5c:14:dd:dc:96:fe:2f:4e:b5:70: b4:a8:2e:1a:41:62:27:2a:6f:b9:19:d9:bf:1c:6c: 64:37:9e:56:94:31:c6:7f:9d:c9:47:71:f0:6d:9c: b4:d4:f6:28:d3:1c:06:c7:98:0e:99:3a:bc:42:f5: 0c:5e:cd:54:b3:3f:0d:d0:8e:52:62:a2:e4:e0:81: 40:fc:f9:25:d3:31:13:96:d3:be:33:eb:28:45:75: d0:c0:48:ec:01:ab:cd:46:32:2c:4c:c9:2d:c7:76: 71:fa:25:70:f2:67:0b:97:bd:5d:b3:3e:c5:3b:aa: e0:b6:f1:e1:2a:a2:cb:09:2b:6f:90:d5:0b:e3:7a: f6:7e:36:46:c9:53:28:f1:bf:4b:a0:18:ef:cc:7f: 76:4f:9f:56:6a:fd:27:8b:ef:a8:94:c4:a9:cd:e3: ee:13:78:1a:aa:e9:b0:6a:e5:a9:67:17:ee:1f:02: 44:a9:fa:76:15:92:c8:b6:37:ee:ce:92:b7:09:2c: 04:1b:f4:58:91:c9:a3:b5:4b:c8:db:da:51:af:10: bf:a4:7a:ce:eb:7a:b7:86:f2:cc:3c:77:41:d7:e0: 25:71:b6:58:0a:07:52:68:1d:88:11:bc:3b:f2:a8: bb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FD:28:5F:CF:5B:37:09:4A:45:30:F1:87:E7:41:B2:F3:F1:7F:B7 X509v3 Authority Key Identifier: keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ef:d6:df:b8:cc:9a:bb:22:0b:4e:96:5f:ce:b7:cc:0f:b5: bb:1e:0d:96:de:36:85:c8:35:b4:c0:40:e2:03:ed:14:e0:a9: 6c:4c:59:c8:8d:7d:79:72:72:0c:d9:4a:3f:d0:9b:33:e9:25: 74:1e:79:cd:18:99:ca:8b:30:73:d4:05:a6:7f:59:01:62:f6: 9f:d3:98:db:e7:7e:a2:f1:ea:0c:6d:2e:ae:c2:de:bc:da:45: 23:be:30:57:09:8d:6c:14:d7:8f:79:d2:0b:ba:c9:dc:27:89: 1b:4f:c8:27:6d:23:23:3e:2f:9d:30:fe:b9:60:b4:b6:fd:72: 4e:c6:65:28:65:f0:f6:87:60:84:a1:2c:49:57:fe:4e:e5:d6: 7f:c0:52:2e:66:56:bb:44:68:19:81:b3:1d:e6:2b:01:9e:3a: 8b:98:18:64:10:4f:42:68:04:ad:01:7d:63:f8:2e:75:fc:2d: 2f:62:c0:70:93:54:00:5d:13:e4:39:53:bc:3d:10:15:e4:46: da:ec:79:91:30:5b:fa:92:5b:11:6e:53:eb:01:a2:c1:b2:fa: 1f:ac:73:ee:16:0c:0b:43:78:5f:6f:01:b0:76:b8:97:9e:5b: ab:e4:98:74:75:8c:eb:54:bb:4c:b4:4d:6a:82:1d:a1:bb:23: 72:0d:13:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB+QHM+Z5Ssfe7TUY6h54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NzcxMjA5Mzc1MDBlYjQ2Njk2NDI4OTYyZTUxMGUwMmMz NDhlNmMwHhcNMjUxMjI2MDUwMDQ3WhcNMjUxMjI3MDUwMDQ3WjAzMTEwLwYDVQQD Eyg3NmZkMjg1ZmNmNWIzNzA5NGE0NTMwZjE4N2U3NDFiMmYzZjE3ZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgNHvGEIKwN6BLsopRC+ttJhpFwU 3dyW/i9OtXC0qC4aQWInKm+5Gdm/HGxkN55WlDHGf53JR3HwbZy01PYo0xwGx5gO mTq8QvUMXs1Usz8N0I5SYqLk4IFA/Pkl0zETltO+M+soRXXQwEjsAavNRjIsTMkt x3Zx+iVw8mcLl71dsz7FO6rgtvHhKqLLCStvkNUL43r2fjZGyVMo8b9LoBjvzH92 T59Wav0ni++olMSpzePuE3gaqumwauWpZxfuHwJEqfp2FZLItjfuzpK3CSwEG/RY kcmjtUvI29pRrxC/pHrO63q3hvLMPHdB1+AlcbZYCgdSaB2IEbw78qi7kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHb9KF/PWzcJSkUw8YfnQbLz8X+3MB8GA1UdIwQY MBaAFNl3Egk3UA60ZpZCiWLlEOAsNI5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlhjU0NUZFFEclJtbGtLSll1VVE0Q3cwam13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZWVkYjktZTU5NC00MTViLWI4OGEt ZGUzODFkYjQzNmVjLzEvMlhjU0NUZFFEclJtbGtLSll1VVE0Q3cwam13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZWVkYjktZTU5NC00MTViLWI4OGEtZGUzODFkYjQzNmVj LzEvMlhjU0NUZFFEclJtbGtLSll1VVE0Q3cwam13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIu/W37jM mrsiC06WX863zA+1ux4Nlt42hcg1tMBA4gPtFOCpbExZyI19eXJyDNlKP9CbM+kl dB55zRiZyoswc9QFpn9ZAWL2n9OY2+d+ovHqDG0ursLevNpFI74wVwmNbBTXj3nS C7rJ3CeJG0/IJ20jIz4vnTD+uWC0tv1yTsZlKGXw9odghKEsSVf+TuXWf8BSLmZW u0RoGYGzHeYrAZ46i5gYZBBPQmgErQF9Y/gudfwtL2LAcJNUAF0T5DlTvD0QFeRG 2ux5kTBb+pJbEW5T6wGiwbL6H6xz7hYMC0N4X28BsHa4l55bq+SYdHWM61S7TLRN aoIdobsjcg0ToQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:30 2025 by rpki-client