This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft File: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json) Hash identifier: H0tbDkVhbnCaHwMc9qPa9nVqSO9b/MK8ruEqlpB+A+g= Subject key identifier: E8:7E:F9:25:20:B3:D4:03:5B:05:B1:59:6D:09:2B:29:B2:DE:9B:BA Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38 Certificate issuer: /CN=d9d0318f2685e32d2dba923f6662771427359738 Certificate serial: 019B59E3EFF58B084AB6BDBAE4FB2615040D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 09:01:08 +0000 Manifest this update: Fri 26 Dec 2025 09:01:08 +0000 Manifest next update: Sat 27 Dec 2025 09:01:08 +0000 Files and hashes: 1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: tfYKMRNSLollbD8qigejSPlyYjFUFisBT0vMkJ98F4w=) 2: 7qHMf0tDla85K4MWekgfnZC_GZ0.roa (hash: JjXdTvxVzICRsVC2xEQhCc6QbY1Z09t0LaEqj7BxkCU=) 3: NqNZtnoXM7iwpxu3KH3ENc53u_M.roa (hash: tIhk+tugHOEbprNpMaqqI4LseamZ25JrNrb/ctC6o6U=) 4: OCzx_78p6LuRZ2Y9VdripBX2gM8.roa (hash: Mc0jDuk9HPzcuOYUP3zkI8gHInm8/SYkdeSbffcFADA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:ef:f5:8b:08:4a:b6:bd:ba:e4:fb:26:15:04:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738 Validity Not Before: Dec 26 09:01:08 2025 GMT Not After : Dec 27 09:01:08 2025 GMT Subject: CN=e87ef92520b3d4035b05b1596d092b29b2de9bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:17:8e:0d:77:78:75:93:a0:32:77:96:86: a6:37:3a:f6:e0:0e:a1:0c:1f:7d:c5:8c:b7:2d:06: dc:c8:c8:62:33:d4:cd:69:3a:b2:4e:7a:45:b6:4d: 7c:ff:92:d8:37:02:38:61:93:30:6e:42:33:74:bf: 00:20:e9:3b:4e:8d:84:f5:e2:9f:cb:d0:8f:1b:e8: de:b0:a1:41:eb:95:3a:b0:15:67:1e:4a:ad:9f:b0: d3:4d:0b:6b:c8:7d:0f:7f:e4:48:2e:45:e7:e0:2a: 02:42:a2:2f:38:1d:3d:cc:ae:aa:78:75:6c:d6:08: 33:51:59:50:4f:78:4c:17:4d:4a:0a:68:2f:fc:17: 43:fa:b4:b8:e1:5b:6c:de:c4:0f:16:f4:d5:cd:24: 0a:78:5e:5d:c2:ee:e3:24:e9:7b:a6:89:37:51:fe: a9:33:61:51:17:37:28:9a:d1:a0:9e:7b:c5:1a:55: 5f:66:24:12:c6:00:c7:5e:5e:95:70:9f:c3:01:11: 00:ed:3f:1d:34:47:86:3a:78:77:68:d9:f7:ec:0f: 26:9f:72:98:8e:5a:86:c0:2b:38:24:ef:4e:28:20: 94:f9:f9:67:3c:14:09:ae:f1:8d:ef:70:06:d5:5a: 47:56:bf:b4:64:70:15:c2:1d:d1:27:47:1e:d1:ae: 56:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7E:F9:25:20:B3:D4:03:5B:05:B1:59:6D:09:2B:29:B2:DE:9B:BA X509v3 Authority Key Identifier: keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9b:2e:8b:fa:f0:25:42:02:2f:21:ff:c9:23:7c:d4:ba:eb: 19:26:62:44:e8:72:1e:fb:b7:37:04:fb:26:8a:f0:d5:be:3e: 37:da:6e:f7:7b:5c:d3:6e:45:54:29:c3:51:8a:fe:14:a1:4a: 68:dd:c9:c7:73:44:f0:28:0e:42:ca:d5:1b:41:b4:ab:a1:c3: 5b:2b:3b:e4:80:35:c9:53:37:23:f6:81:f8:08:f7:91:e8:97: cf:7c:df:3b:e6:0f:a2:b6:76:e1:b7:be:1e:f5:11:d3:51:9c: 22:e8:1a:2c:7c:d9:4d:e7:20:a6:3e:08:98:1f:e5:e7:23:c9: 68:04:2b:11:27:22:d3:7b:8c:fe:59:d7:85:84:d3:a5:cc:01: 79:71:df:c3:c9:0b:21:c8:01:ae:d8:04:e0:79:2c:82:d3:a3: 78:97:e5:ad:7f:bb:43:11:6a:c6:25:f0:63:d2:b7:41:f2:13: 9a:de:39:8c:b5:99:58:33:aa:d8:39:ca:33:e9:7f:da:91:84: d6:9b:d3:08:d7:07:83:5c:c6:26:db:ec:7f:7b:33:d3:99:2f: ea:3a:49:83:93:21:f6:94:33:33:a5:60:76:ca:7a:60:5d:78: c6:9e:bc:b8:a2:34:e4:ba:ed:30:78:76:f7:54:32:c3:19:b9: 82:3c:f0:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4+/1iwhKtr265PsmFQQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZDAzMThmMjY4NWUzMmQyZGJhOTIzZjY2NjI3NzE0Mjcz NTk3MzgwHhcNMjUxMjI2MDkwMTA4WhcNMjUxMjI3MDkwMTA4WjAzMTEwLwYDVQQD EyhlODdlZjkyNTIwYjNkNDAzNWIwNWIxNTk2ZDA5MmIyOWIyZGU5YmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGoXjg13eHWToDJ3loamNzr24A6h DB99xYy3LQbcyMhiM9TNaTqyTnpFtk18/5LYNwI4YZMwbkIzdL8AIOk7To2E9eKf y9CPG+jesKFB65U6sBVnHkqtn7DTTQtryH0Pf+RILkXn4CoCQqIvOB09zK6qeHVs 1ggzUVlQT3hMF01KCmgv/BdD+rS44Vts3sQPFvTVzSQKeF5dwu7jJOl7pok3Uf6p M2FRFzcomtGgnnvFGlVfZiQSxgDHXl6VcJ/DAREA7T8dNEeGOnh3aNn37A8mn3KY jlqGwCs4JO9OKCCU+flnPBQJrvGN73AG1VpHVr+0ZHAVwh3RJ0ce0a5WXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOh++SUgs9QDWwWxWW0JKymy3pu6MB8GA1UdIwQY MBaAFNnQMY8mheMtLbqSP2ZidxQnNZc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84Y2U2MDktZGIxZC00OTk3LTlkOGEt OTZkZGQ1YTAyMzlkLzEvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84Y2U2MDktZGIxZC00OTk3LTlkOGEtOTZkZGQ1YTAyMzlk LzEvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZsui/rw JUICLyH/ySN81LrrGSZiROhyHvu3NwT7Jorw1b4+N9pu93tc025FVCnDUYr+FKFK aN3Jx3NE8CgOQsrVG0G0q6HDWys75IA1yVM3I/aB+Aj3keiXz3zfO+YPorZ24be+ HvUR01GcIugaLHzZTecgpj4ImB/l5yPJaAQrESci03uM/lnXhYTTpcwBeXHfw8kL IcgBrtgE4HksgtOjeJflrX+7QxFqxiXwY9K3QfITmt45jLWZWDOq2DnKM+l/2pGE 1pvTCNcHg1zGJtvsf3sz05kv6jpJg5Mh9pQzM6Vgdsp6YF14xp68uKI05LrtMHh2 91Qywxm5gjzwmQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:03 2025 by rpki-client