This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json) Hash identifier: W7OE++U+B67LoO/2roXDk3ZS+mg9KHNCCH0Ye3m+blU= Subject key identifier: 27:6E:F5:3E:9E:C3:2F:12:65:EE:3E:15:91:EF:27:4A:44:F8:53:5F Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73 Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773 Certificate serial: 019B59E44681128CEE56F8E69ABB203EDF4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft Manifest number: 0832 Signing time: Fri 26 Dec 2025 09:01:31 +0000 Manifest this update: Fri 26 Dec 2025 09:01:31 +0000 Manifest next update: Sat 27 Dec 2025 09:01:31 +0000 Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: rkK4E03y+vaJpessiEllU85QdFffVnnDFYwMWc53R04=) 2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:46:81:12:8c:ee:56:f8:e6:9a:bb:20:3e:df:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773 Validity Not Before: Dec 26 09:01:31 2025 GMT Not After : Dec 27 09:01:31 2025 GMT Subject: CN=276ef53e9ec32f1265ee3e1591ef274a44f8535f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:6d:96:94:d3:25:d5:f9:d0:63:03:7f:88: 6c:e0:c1:49:39:3f:8f:6d:31:97:ad:3c:39:3a:15: d6:9f:d2:7a:be:1d:66:4e:43:cd:0a:c4:fb:6d:c4: 60:cb:1d:e2:da:f8:2f:ff:3d:ac:d3:95:8a:95:91: a8:ca:a4:da:ea:9b:84:98:74:7a:6d:87:8c:e9:e4: b1:d6:2d:8b:96:26:b2:d8:92:04:63:1d:c5:13:f1: af:06:2f:65:a6:19:c2:c7:77:5c:f2:da:79:7f:63: 72:e4:ad:df:53:cd:74:29:c2:0a:82:c2:0e:b2:e9: 0d:b5:20:f1:ef:54:05:82:f4:84:3a:40:20:35:32: 3b:d3:c8:4b:f6:c3:e9:af:da:03:40:fd:94:06:ea: ce:74:b6:e9:3b:92:a5:85:f3:0b:09:fa:38:e9:b1: 65:78:a6:d9:e9:67:dd:b6:22:6b:78:4d:c4:5e:41: 81:5e:5c:fb:c8:f0:8c:45:58:8e:fc:78:b8:26:3f: ad:88:11:39:1c:c0:ee:00:24:b8:39:6d:52:e0:03: 19:4f:c7:69:b2:1a:e7:e0:1f:a8:cc:6b:72:b4:53: ca:a9:cf:be:28:5a:cf:3f:dc:39:1e:b7:95:b5:37: 5e:21:e0:e8:29:9c:82:1b:b5:d0:c8:36:a5:4d:b9: 61:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6E:F5:3E:9E:C3:2F:12:65:EE:3E:15:91:EF:27:4A:44:F8:53:5F X509v3 Authority Key Identifier: keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3a:f0:ae:32:95:1f:46:65:4a:9c:96:44:0f:90:70:50:66: 5e:e1:f1:4f:a9:f7:95:d3:91:e8:e4:74:6e:03:93:b7:16:fb: 1f:3b:25:e2:ba:9b:e2:32:4f:b1:f4:60:4e:14:b6:20:9c:59: 8a:6d:2b:dc:2d:a9:d8:03:ac:ad:91:7c:7a:30:c8:a6:6c:af: e3:51:85:03:4d:44:35:13:df:42:5b:4a:13:98:32:ca:b6:d0: ca:31:e5:6e:8f:ed:9f:fd:14:04:b7:a0:d8:e3:7e:7d:98:53: 1f:f2:d4:8d:b3:93:8a:37:a7:eb:d4:7a:3b:a0:07:ab:55:93: 67:ae:fe:96:c6:31:86:34:f7:4d:5a:a3:0c:94:fc:7d:8b:0f: 1f:a9:ea:9a:3d:35:10:7c:e2:b1:79:ed:b1:0c:a3:80:97:8e: d6:8a:a7:84:fa:5a:c9:c9:67:53:9d:eb:85:2b:8e:f6:ff:37: 60:1f:51:b7:76:75:69:b5:db:73:84:06:5e:7b:16:22:5e:fa: 10:5b:86:5c:eb:f2:77:91:0d:f7:cf:88:e3:cb:21:e5:48:65: 4a:af:62:45:d9:01:56:d3:5c:7a:0f:e5:e4:9b:fd:a5:c8:4a: dc:3c:41:3a:ae:fc:df:94:16:0f:fc:36:47:0d:0a:71:9e:b9: 4e:74:97:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5EaBEozuVvjmmrsgPt9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWVjNTk3ZDFiMzc5ZWE4MzIzNjMxMmM2ZjhiMmJjZTc0 Mzk3NzMwHhcNMjUxMjI2MDkwMTMxWhcNMjUxMjI3MDkwMTMxWjAzMTEwLwYDVQQD EygyNzZlZjUzZTllYzMyZjEyNjVlZTNlMTU5MWVmMjc0YTQ0Zjg1MzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPJtlpTTJdX50GMDf4hs4MFJOT+P bTGXrTw5OhXWn9J6vh1mTkPNCsT7bcRgyx3i2vgv/z2s05WKlZGoyqTa6puEmHR6 bYeM6eSx1i2Lliay2JIEYx3FE/GvBi9lphnCx3dc8tp5f2Ny5K3fU810KcIKgsIO sukNtSDx71QFgvSEOkAgNTI708hL9sPpr9oDQP2UBurOdLbpO5KlhfMLCfo46bFl eKbZ6WfdtiJreE3EXkGBXlz7yPCMRViO/Hi4Jj+tiBE5HMDuACS4OW1S4AMZT8dp shrn4B+ozGtytFPKqc++KFrPP9w5HreVtTdeIeDoKZyCG7XQyDalTblhowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdu9T6ewy8SZe4+FZHvJ0pE+FNfMB8GA1UdIwQY MBaAFNquxZfRs3nqgyNjEsb4srznQ5dzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3Mjct OGI4NWIyOGZiYjc5LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3MjctOGI4NWIyOGZiYjc5 LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDrwrjKV H0ZlSpyWRA+QcFBmXuHxT6n3ldOR6OR0bgOTtxb7Hzsl4rqb4jJPsfRgThS2IJxZ im0r3C2p2AOsrZF8ejDIpmyv41GFA01ENRPfQltKE5gyyrbQyjHlbo/tn/0UBLeg 2ON+fZhTH/LUjbOTijen69R6O6AHq1WTZ67+lsYxhjT3TVqjDJT8fYsPH6nqmj01 EHzisXntsQyjgJeO1oqnhPpayclnU53rhSuO9v83YB9Rt3Z1abXbc4QGXnsWIl76 EFuGXOvyd5EN98+I48sh5UhlSq9iRdkBVtNceg/l5Jv9pchK3DxBOq7835QWD/w2 Rw0KcZ65TnSXTA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:26 2025 by rpki-client