This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json) Hash identifier: hJ/4v9h1HdU/r+kQqWv5Upu90QoWPGZSDstszbqJ/lk= Subject key identifier: 99:23:8C:77:39:3E:87:97:1B:52:AD:70:73:88:7D:77:ED:17:D1:F9 Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91 Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591 Certificate serial: 019B3DC77456579EA779883492F2A02CFDC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:00:40 +0000 Manifest this update: Sat 20 Dec 2025 22:00:40 +0000 Manifest next update: Sun 21 Dec 2025 22:00:40 +0000 Files and hashes: 1: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: gE976S9GdK/s4kKQbnH+V1sWtr07Gfjvbq5Qp9HajoM=) 2: tFYWfziNY6T1pgWT96la8X957p4.roa (hash: 08hpQSe8BwmYvsZjvFViF9kdWzrXeHJU+sA3OilF/oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:74:56:57:9e:a7:79:88:34:92:f2:a0:2c:fd:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591 Validity Not Before: Dec 20 22:00:40 2025 GMT Not After : Dec 21 22:00:40 2025 GMT Subject: CN=99238c77393e87971b52ad7073887d77ed17d1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:b4:d8:9e:0e:e8:b0:55:60:d2:0b:4c:fd: 74:ef:a1:06:ac:16:a0:24:88:12:50:ce:d1:16:30: 8f:7f:e4:78:95:a4:d9:f6:57:40:9c:fe:4a:b5:12: 9d:8a:25:4f:3b:ad:0e:a7:84:c2:fe:30:78:9e:72: 18:3e:26:6d:db:17:1b:b3:8b:b5:30:59:90:89:84: 58:22:69:07:7e:93:7c:f8:f6:5f:17:46:e8:b1:73: 44:c4:2b:ea:8b:0d:84:a4:27:7f:4f:61:42:96:51: 8f:a8:18:55:a2:17:60:fc:b8:64:2b:c8:79:20:fa: 47:45:7c:c7:d2:06:a4:6e:c2:8e:87:46:c4:88:3e: 13:72:a3:dd:5c:fc:f5:cb:da:48:11:2a:75:f9:f8: 9e:1e:13:2d:c4:a0:fa:61:9e:43:8f:ea:0e:5f:bc: a0:a5:10:d7:a3:85:35:66:33:31:fe:58:9a:c8:da: b2:ac:0c:6f:cd:2e:12:79:1f:81:57:e4:ab:e2:27: 84:e3:e9:24:15:bd:cd:dc:58:fa:26:f3:60:d7:23: f6:4e:14:12:46:87:b0:0d:76:ba:ee:30:ac:c9:35: f8:00:47:50:c2:55:d6:54:e9:fa:2b:8b:32:40:d6: 0d:88:75:da:9c:a6:47:bc:a2:37:d6:16:fd:e6:aa: 6f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:23:8C:77:39:3E:87:97:1B:52:AD:70:73:88:7D:77:ED:17:D1:F9 X509v3 Authority Key Identifier: keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:c4:d1:c1:b1:b7:a3:34:4a:4d:f7:48:25:94:02:a5:60:00: 0d:71:83:52:70:71:5e:09:a0:cd:12:e5:31:54:72:69:29:c3: 38:f2:a5:03:64:3e:73:1f:e5:ea:81:cd:43:9e:55:c0:25:6d: 34:1d:2f:2b:29:64:87:ef:82:70:04:76:93:5a:88:e5:52:27: e6:80:d6:67:07:c4:62:0f:4a:22:60:03:7f:fd:ad:7f:55:37: 9a:f4:ab:29:10:1c:d9:71:d0:98:48:9b:79:c7:68:3c:af:ca: 3f:a0:62:64:b1:ae:15:88:70:23:0b:ef:8d:06:11:8b:83:82: 77:cd:ad:45:43:bc:38:eb:5e:b4:d6:4a:de:6e:a0:10:46:2a: 5e:de:87:fb:5f:86:a4:17:3b:5a:99:88:01:a3:60:ec:1a:73: 86:da:18:50:92:6b:ce:44:0c:49:56:20:5d:58:27:c3:89:32: ac:51:e3:b5:72:e4:17:50:c0:df:d0:67:eb:ca:82:95:24:51: 95:55:23:a6:7b:69:68:f1:a6:5e:25:51:a9:fe:7b:f3:ef:0f: 86:20:c6:58:5a:f9:86:18:a7:48:16:d7:3e:b6:7b:69:c6:80: 45:cd:70:39:bd:15:17:ee:58:a8:2e:4e:a0:63:01:22:6e:a7: 66:be:e1:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3RWV56neYg0kvKgLP3BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YWNmMzRiZTJiMDRjN2NjZWYyMjIxZThkMWZjYjZjYWJi NDE1OTEwHhcNMjUxMjIwMjIwMDQwWhcNMjUxMjIxMjIwMDQwWjAzMTEwLwYDVQQD Eyg5OTIzOGM3NzM5M2U4Nzk3MWI1MmFkNzA3Mzg4N2Q3N2VkMTdkMWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm+02J4O6LBVYNILTP1076EGrBag JIgSUM7RFjCPf+R4laTZ9ldAnP5KtRKdiiVPO60Op4TC/jB4nnIYPiZt2xcbs4u1 MFmQiYRYImkHfpN8+PZfF0bosXNExCvqiw2EpCd/T2FCllGPqBhVohdg/LhkK8h5 IPpHRXzH0gakbsKOh0bEiD4TcqPdXPz1y9pIESp1+fieHhMtxKD6YZ5Dj+oOX7yg pRDXo4U1ZjMx/liayNqyrAxvzS4SeR+BV+Sr4ieE4+kkFb3N3Fj6JvNg1yP2ThQS RoewDXa67jCsyTX4AEdQwlXWVOn6K4syQNYNiHXanKZHvKI31hb95qpvPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkjjHc5PoeXG1KtcHOIfXftF9H5MB8GA1UdIwQY MBaAFNis80visEx8zvIiHo0fy2yrtBWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZGYzNDEtMDE3Yy00NjYwLThjZjct NDRkNjRiOWRhNDU5LzEvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZGYzNDEtMDE3Yy00NjYwLThjZjctNDRkNjRiOWRhNDU5 LzEvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusTRwbG3 ozRKTfdIJZQCpWAADXGDUnBxXgmgzRLlMVRyaSnDOPKlA2Q+cx/l6oHNQ55VwCVt NB0vKylkh++CcAR2k1qI5VIn5oDWZwfEYg9KImADf/2tf1U3mvSrKRAc2XHQmEib ecdoPK/KP6BiZLGuFYhwIwvvjQYRi4OCd82tRUO8OOtetNZK3m6gEEYqXt6H+1+G pBc7WpmIAaNg7BpzhtoYUJJrzkQMSVYgXVgnw4kyrFHjtXLkF1DA39Bn68qClSRR lVUjpntpaPGmXiVRqf578+8PhiDGWFr5hhinSBbXPrZ7acaARc1wOb0VF+5YqC5O oGMBIm6nZr7h8w== -----END CERTIFICATE-----Generated at Sun Dec 21 01:12:18 2025 by rpki-client