This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json) Hash identifier: jwNqHU7z06doIS24DCIjWRIEhhFdov3CNgQgkx8wh9E= Subject key identifier: 3D:5D:73:87:2A:FB:8F:30:25:E5:4E:38:8B:35:13:75:11:86:E7:86 Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff Certificate serial: 019B1EE1769F147AB09D126B0F63FA1CF57B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 22:00:50 +0000 Manifest this update: Sun 14 Dec 2025 22:00:50 +0000 Manifest next update: Mon 15 Dec 2025 22:00:50 +0000 Files and hashes: 1: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: K6Qcf+5bFaVhiCFUXttLF4q81Zpzf0LM8dUZYlp4xBQ=) 2: I3BClUbx_tYnuY_rgQtQWY87dYI.roa (hash: hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:76:9f:14:7a:b0:9d:12:6b:0f:63:fa:1c:f5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff Validity Not Before: Dec 14 22:00:50 2025 GMT Not After : Dec 15 22:00:50 2025 GMT Subject: CN=3d5d73872afb8f3025e54e388b3513751186e786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:2d:3e:11:b2:30:44:b9:af:3f:68:cf:d1: 49:e3:4a:bd:dc:af:32:49:7a:ef:6e:78:58:03:d9: 2c:a8:64:fc:36:da:fd:a9:18:24:c9:08:56:37:a6: b1:0a:bd:c5:03:20:80:15:ee:98:a8:99:32:79:07: 48:82:bb:e4:f4:43:3d:33:0e:b0:aa:47:2e:b6:31: 53:f8:c8:bf:40:54:a6:9d:04:97:40:95:ce:bc:ce: 91:ad:a3:a5:71:b6:a4:d2:85:10:1a:29:72:13:1b: 58:6d:40:95:aa:53:fc:a0:af:9b:9e:4c:c3:83:bb: f3:fa:85:d7:19:a9:99:79:aa:8b:c4:60:51:c6:a8: ca:12:b9:ce:b1:eb:5c:27:ac:5f:91:db:23:3c:d5: 74:18:a4:41:2c:ac:a7:98:e2:26:94:45:92:37:5d: 57:c7:d4:db:88:25:56:5d:e1:3a:3a:b6:1f:81:06: 46:57:24:86:40:50:47:5e:a7:0c:fa:a8:85:8f:97: 69:22:2d:b7:2d:75:43:6f:ac:38:c3:9f:f0:4f:a6: 62:cd:0c:cf:6b:76:a0:66:46:52:a6:a5:14:ad:7e: 21:69:bb:76:e3:f3:f6:32:ed:07:05:07:50:15:df: fe:ff:f7:e8:53:c9:d5:b9:01:95:c5:b6:64:f4:ff: 8e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5D:73:87:2A:FB:8F:30:25:E5:4E:38:8B:35:13:75:11:86:E7:86 X509v3 Authority Key Identifier: keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:7f:53:ec:27:d8:4c:14:2f:d1:30:3a:53:6d:1f:2c:98:e5: 7f:6e:34:3f:51:66:d4:28:ce:a4:26:0f:54:b0:4b:bf:f6:c1: 40:3f:5e:49:bf:c8:bd:d8:57:39:5b:55:d4:d5:36:af:79:b1: 9e:65:4f:d7:f3:c8:24:f9:1e:16:43:45:9c:33:cc:df:52:54: 6b:6a:24:d3:1f:47:61:1d:fa:ba:98:5f:3b:8f:85:09:0a:ec: 4c:e9:e7:ec:43:2b:af:83:28:3d:57:8f:d4:ce:b2:34:f3:62: 4b:4f:92:17:ed:05:e4:7b:4b:9d:03:f2:6d:01:c7:ca:95:43: a5:fc:77:0b:bf:67:3b:91:c8:9c:46:c5:38:c4:a1:0f:04:5b: 51:f3:89:54:0d:bc:b6:25:3e:0d:79:3e:4d:fd:cb:3f:19:99: a2:88:f9:69:52:51:a4:a1:85:e3:7b:6a:c7:25:c9:aa:ab:4a: f3:31:a6:6d:b2:5d:71:a3:da:95:d9:60:51:57:33:b1:59:46: d9:5e:8a:2d:fa:bb:49:54:aa:5b:d8:38:6d:a4:a4:07:4d:d3: 34:af:3a:e2:59:f1:eb:3b:37:62:af:88:c7:31:02:b8:8b:69: a3:ea:1c:6e:b5:fd:99:16:22:da:45:f0:8e:18:04:0c:32:f9: 89:c2:d2:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4XafFHqwnRJrD2P6HPV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OWI2YTEwOTdiMWYyNTFmOTVjNTZkYTRlNGFhMzExYjk0 NzBiZmYwHhcNMjUxMjE0MjIwMDUwWhcNMjUxMjE1MjIwMDUwWjAzMTEwLwYDVQQD EygzZDVkNzM4NzJhZmI4ZjMwMjVlNTRlMzg4YjM1MTM3NTExODZlNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyItPhGyMES5rz9oz9FJ40q93K8y SXrvbnhYA9ksqGT8Ntr9qRgkyQhWN6axCr3FAyCAFe6YqJkyeQdIgrvk9EM9Mw6w qkcutjFT+Mi/QFSmnQSXQJXOvM6RraOlcbak0oUQGilyExtYbUCVqlP8oK+bnkzD g7vz+oXXGamZeaqLxGBRxqjKErnOsetcJ6xfkdsjPNV0GKRBLKynmOImlEWSN11X x9TbiCVWXeE6OrYfgQZGVySGQFBHXqcM+qiFj5dpIi23LXVDb6w4w5/wT6ZizQzP a3agZkZSpqUUrX4habt24/P2Mu0HBQdQFd/+//foU8nVuQGVxbZk9P+ObQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1dc4cq+48wJeVOOIs1E3URhueGMB8GA1UdIwQY MBaAFNibahCXsfJR+VxW2k5KoxG5Rwv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODIt ZDZkMzQyMmJhZWM4LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODItZDZkMzQyMmJhZWM4 LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQH9T7CfY TBQv0TA6U20fLJjlf240P1Fm1CjOpCYPVLBLv/bBQD9eSb/IvdhXOVtV1NU2r3mx nmVP1/PIJPkeFkNFnDPM31JUa2ok0x9HYR36uphfO4+FCQrsTOnn7EMrr4MoPVeP 1M6yNPNiS0+SF+0F5HtLnQPybQHHypVDpfx3C79nO5HInEbFOMShDwRbUfOJVA28 tiU+DXk+Tf3LPxmZooj5aVJRpKGF43tqxyXJqqtK8zGmbbJdcaPaldlgUVczsVlG 2V6KLfq7SVSqW9g4baSkB03TNK864lnx6zs3Yq+IxzECuItpo+ocbrX9mRYi2kXw jhgEDDL5icLSjQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:29 2025 by rpki-client