This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft File: 2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json) Hash identifier: P/aghouMo/aS7oUbrG1KdVBNCV7aBtzVTVR5rRduftY= Subject key identifier: C5:6A:25:CB:45:D2:E0:D7:57:C7:F4:C1:AC:83:87:08:19:F9:30:F4 Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF Certificate issuer: /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf Certificate serial: 019B20CFB65C223CC8820F80F75EF758F05B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft Manifest number: 1776 Signing time: Mon 15 Dec 2025 07:00:42 +0000 Manifest this update: Mon 15 Dec 2025 07:00:42 +0000 Manifest next update: Tue 16 Dec 2025 07:00:42 +0000 Files and hashes: 1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: 9N/iOj9MT1I5yqlVtbgu9zyipwE5DaI7d2H44ovwxv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:b6:5c:22:3c:c8:82:0f:80:f7:5e:f7:58:f0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf Validity Not Before: Dec 15 07:00:42 2025 GMT Not After : Dec 16 07:00:42 2025 GMT Subject: CN=c56a25cb45d2e0d757c7f4c1ac83870819f930f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:47:73:1d:8f:c1:e7:76:5c:6e:17:ae:4c:55: 6b:a5:c1:87:df:a9:d0:71:9d:d3:05:82:78:ab:ee: 60:ea:ac:06:01:91:c4:66:ec:b1:9f:45:eb:3f:15: d8:a1:1a:04:57:1a:06:c1:7c:9b:12:7d:07:8a:66: 93:5b:cb:e5:f4:89:16:74:75:75:9b:8d:04:33:7a: 0f:b7:b3:09:18:16:fe:a1:1f:03:d8:82:f6:cd:e7: f9:cd:61:56:c1:46:d8:66:3f:3e:ee:af:5a:43:57: 7c:67:fc:57:3c:71:e1:66:55:32:ee:d6:39:09:e6: 0e:f7:5b:e5:a7:fb:90:4b:ff:2e:76:0d:35:13:54: 2d:5e:6b:ff:8f:53:a2:31:89:e0:12:76:cb:88:b0: 7e:fa:8a:04:fc:08:3a:99:4f:c3:8f:8b:e8:fc:40: 2c:a8:40:43:d1:78:22:a0:00:cd:89:ba:71:75:6e: 7f:ec:1a:d7:7a:2a:18:ab:0d:ec:82:74:9f:ba:cb: c2:28:e0:be:0f:a9:5d:d6:75:45:6c:76:24:79:60: d5:58:04:4e:03:b2:5f:83:9b:a4:02:09:2f:53:2e: 95:65:14:79:93:a6:7f:8c:3e:a0:d5:63:31:dc:88: 27:e2:77:91:1e:0c:bb:a1:16:33:d5:a4:4d:d8:98: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6A:25:CB:45:D2:E0:D7:57:C7:F4:C1:AC:83:87:08:19:F9:30:F4 X509v3 Authority Key Identifier: keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:69:d5:ff:91:f9:43:1e:b2:9d:b1:69:96:8e:b8:30:22:0e: 15:8b:b8:b9:a8:9f:ec:86:4e:43:f6:ac:70:13:b3:b8:ce:62: 7c:8b:d2:45:9d:61:60:bc:c3:2e:13:4c:32:b4:8c:80:08:94: 19:2b:3b:50:a4:34:e3:32:cf:cf:47:0f:6f:da:9f:c9:ee:53: ee:4d:11:ab:eb:26:ba:81:13:36:5d:e3:a9:01:b6:be:d5:21: 08:6e:42:4a:c4:da:16:6f:92:54:b2:09:38:04:1f:1b:a2:fe: 1b:6c:59:f4:9e:5a:2c:f3:a2:bd:16:80:41:0a:56:b7:94:eb: cb:b6:2b:32:3d:4b:76:d6:2b:62:e3:98:50:1d:91:a3:6a:13: e2:db:b9:a9:7e:dc:dd:65:4c:9d:25:be:b8:e9:0d:70:36:c7: f6:fd:2e:aa:86:cc:81:8c:dc:32:5e:39:27:af:d7:c9:8b:bb: 96:ea:08:a9:9d:4c:75:66:0b:31:30:ae:78:34:4f:99:5d:72: 5c:78:22:29:c5:a0:f6:1f:d0:d2:1c:77:53:64:da:e8:2a:8f: 34:b3:1d:ca:e4:c1:38:f9:7c:3e:a4:92:a4:95:83:1c:54:e6: b7:88:ac:07:3e:ce:45:1c:56:f5:29:04:46:25:15:f3:b7:4f: 9f:25:f0:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz7ZcIjzIgg+A9173WPBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5Y2ZhMGU0NDhhYmUzMGQyNmIwNjY1YTljMjk0ZDI5Yzk3 YjdlYmYwHhcNMjUxMjE1MDcwMDQyWhcNMjUxMjE2MDcwMDQyWjAzMTEwLwYDVQQD EyhjNTZhMjVjYjQ1ZDJlMGQ3NTdjN2Y0YzFhYzgzODcwODE5ZjkzMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0dzHY/B53ZcbheuTFVrpcGH36nQ cZ3TBYJ4q+5g6qwGAZHEZuyxn0XrPxXYoRoEVxoGwXybEn0HimaTW8vl9IkWdHV1 m40EM3oPt7MJGBb+oR8D2IL2zef5zWFWwUbYZj8+7q9aQ1d8Z/xXPHHhZlUy7tY5 CeYO91vlp/uQS/8udg01E1QtXmv/j1OiMYngEnbLiLB++ooE/Ag6mU/Dj4vo/EAs qEBD0XgioADNibpxdW5/7BrXeioYqw3sgnSfusvCKOC+D6ld1nVFbHYkeWDVWARO A7Jfg5ukAgkvUy6VZRR5k6Z/jD6g1WMx3Ign4neRHgy7oRYz1aRN2JhY6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVqJctF0uDXV8f0wayDhwgZ+TD0MB8GA1UdIwQY MBaAFNnPoORIq+MNJrBmWpwpTSnJe36/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9hMDE3MDUtN2EwNi00YjA0LTg2NDIt NWRmZGQyNTlkZDFiLzEvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9hMDE3MDUtN2EwNi00YjA0LTg2NDItNWRmZGQyNTlkZDFi LzEvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2nV/5H5 Qx6ynbFplo64MCIOFYu4uaif7IZOQ/ascBOzuM5ifIvSRZ1hYLzDLhNMMrSMgAiU GSs7UKQ04zLPz0cPb9qfye5T7k0Rq+smuoETNl3jqQG2vtUhCG5CSsTaFm+SVLIJ OAQfG6L+G2xZ9J5aLPOivRaAQQpWt5Try7YrMj1LdtYrYuOYUB2Ro2oT4tu5qX7c 3WVMnSW+uOkNcDbH9v0uqobMgYzcMl45J6/XyYu7luoIqZ1MdWYLMTCueDRPmV1y XHgiKcWg9h/Q0hx3U2Ta6CqPNLMdyuTBOPl8PqSSpJWDHFTmt4isBz7ORRxW9SkE RiUV87dPnyXwyA== -----END CERTIFICATE-----Generated at Mon Dec 15 09:54:58 2025 by rpki-client