This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json) Hash identifier: Y1QZlkEd9QKYuSXPPScD6uDznpM9JmlWYZxfC89ID14= Subject key identifier: E7:83:33:A8:A3:E4:57:7D:9C:26:5B:19:10:99:78:02:C5:06:FE:BD Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c Certificate serial: 019B58D11F9C13B643E4FD06F839D94A01DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft Manifest number: 0D88 Signing time: Fri 26 Dec 2025 04:00:58 +0000 Manifest this update: Fri 26 Dec 2025 04:00:58 +0000 Manifest next update: Sat 27 Dec 2025 04:00:58 +0000 Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: JQpnUBXLH07YoLCRFu2+E9sFn2+Wd9FSS3xNh5AkDKk=) 2: YHLRl_WXzdzzbEECoeCuzULL-4o.roa (hash: dgNymUUNR8TTRsR7QDHhCOUwJZ3G729GHYq3cmwXwNE=) 3: _dm0as-nFQQ1bS3pghCSO6ryUwQ.roa (hash: fzQteoaQMk8gRjZgQC3tI6Hb34tGlOG3z2safrXEkbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:1f:9c:13:b6:43:e4:fd:06:f8:39:d9:4a:01:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c Validity Not Before: Dec 26 04:00:58 2025 GMT Not After : Dec 27 04:00:58 2025 GMT Subject: CN=e78333a8a3e4577d9c265b1910997802c506febd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:23:e1:82:54:bf:f1:b7:1e:cc:c2:8e:5f: af:5c:2d:d4:ed:4f:89:27:b2:7f:0f:17:6a:29:15: 89:3b:cb:53:1b:be:4f:0d:8a:d3:e9:c1:c1:1a:c5: 07:80:fd:42:c8:b6:98:be:2e:f1:3d:a1:b5:2d:71: 05:56:7b:8b:3b:00:3f:7a:5d:e0:ec:e9:f4:1f:6d: 1b:f1:4d:96:85:06:d3:b6:ce:98:4d:c3:ac:e8:d0: 8d:b6:09:ac:b6:7e:10:91:44:40:b4:e9:d9:f7:a5: 9c:f1:78:54:a8:e1:7c:c1:51:1a:38:3b:29:90:de: 4b:bc:28:5b:a9:f8:53:a6:04:86:a4:5f:6b:40:85: 82:0f:2e:95:41:b6:cf:c4:5a:a6:2e:02:be:cf:3a: 40:b2:77:89:0c:92:a5:c1:3c:6b:23:6c:de:9f:1c: 9f:2d:b9:6f:ed:66:3e:d2:1e:8d:08:76:92:44:6c: c4:83:f1:0c:e8:cd:41:29:ac:af:c4:38:ad:5f:2a: 4a:07:36:e6:1e:39:71:65:8d:8f:e9:0c:04:c7:eb: cf:1b:72:16:2d:fd:cb:1f:54:8c:66:af:2a:93:0a: d8:37:58:32:cd:df:47:32:6b:6f:48:9c:a5:d2:a2: 27:a4:ae:0e:1d:f0:15:03:86:de:1d:e5:94:ff:4e: 21:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:83:33:A8:A3:E4:57:7D:9C:26:5B:19:10:99:78:02:C5:06:FE:BD X509v3 Authority Key Identifier: keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0d:50:d5:f1:da:0c:9d:ba:01:56:bd:10:07:54:26:8b:d6: 83:c7:1f:7b:9e:b0:16:6b:38:fd:43:26:ee:bb:a2:3d:ac:cd: 00:5c:aa:42:92:84:b5:7b:e8:c8:e7:f0:37:98:03:7a:16:4d: 01:09:49:92:a4:64:9c:93:d9:b5:29:d7:b8:37:74:d2:28:6a: e7:3b:96:0f:34:4f:81:12:1b:b5:0b:f9:b1:ea:95:bc:2f:52: 1f:cd:96:0f:fb:30:3b:f1:7e:95:1d:02:b3:e9:bf:61:f9:b5: d9:74:78:d6:78:a5:23:5c:ec:f4:16:e8:05:54:f5:7b:48:51: fd:2b:70:bf:86:d2:37:07:08:12:87:d5:6e:c1:b6:56:3b:31: 79:7c:1f:b8:48:21:f6:c2:2c:28:4a:35:87:21:5e:bf:54:e6: 01:bc:f7:03:93:fd:49:f8:f8:15:45:2a:56:03:cc:bb:e0:92: 9c:25:cd:9f:ad:50:de:b9:e3:dd:b4:34:4e:65:3b:b5:f2:45: d0:d1:ad:38:6c:c1:de:b9:7d:9c:cb:06:54:66:47:06:a8:8d: ab:7a:4d:f1:b4:02:34:a3:de:19:fb:21:5b:4d:da:2a:35:d6: cb:64:c7:02:58:5d:a0:f2:e7:c3:1c:a3:a7:c3:be:a6:4a:2c: cd:f1:d0:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0R+cE7ZD5P0G+DnZSgHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMjcxMTNkYjU1YjYzYjY3YTRhNjI3YTcwMDhhOGFmYzJi Y2M0MmMwHhcNMjUxMjI2MDQwMDU4WhcNMjUxMjI3MDQwMDU4WjAzMTEwLwYDVQQD EyhlNzgzMzNhOGEzZTQ1NzdkOWMyNjViMTkxMDk5NzgwMmM1MDZmZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCUj4YJUv/G3HszCjl+vXC3U7U+J J7J/DxdqKRWJO8tTG75PDYrT6cHBGsUHgP1CyLaYvi7xPaG1LXEFVnuLOwA/el3g 7On0H20b8U2WhQbTts6YTcOs6NCNtgmstn4QkURAtOnZ96Wc8XhUqOF8wVEaODsp kN5LvChbqfhTpgSGpF9rQIWCDy6VQbbPxFqmLgK+zzpAsneJDJKlwTxrI2zenxyf Lblv7WY+0h6NCHaSRGzEg/EM6M1BKayvxDitXypKBzbmHjlxZY2P6QwEx+vPG3IW Lf3LH1SMZq8qkwrYN1gyzd9HMmtvSJyl0qInpK4OHfAVA4beHeWU/04hRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeDM6ij5Fd9nCZbGRCZeALFBv69MB8GA1UdIwQY MBaAFNonET21W2O2ekpienAIqK/CvMQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTct MjNiMjhmMzlhNjAyLzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTctMjNiMjhmMzlhNjAy LzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkw1Q1fHa DJ26AVa9EAdUJovWg8cfe56wFms4/UMm7ruiPazNAFyqQpKEtXvoyOfwN5gDehZN AQlJkqRknJPZtSnXuDd00ihq5zuWDzRPgRIbtQv5seqVvC9SH82WD/swO/F+lR0C s+m/Yfm12XR41nilI1zs9BboBVT1e0hR/Stwv4bSNwcIEofVbsG2VjsxeXwfuEgh 9sIsKEo1hyFev1TmAbz3A5P9Sfj4FUUqVgPMu+CSnCXNn61Q3rnj3bQ0TmU7tfJF 0NGtOGzB3rl9nMsGVGZHBqiNq3pN8bQCNKPeGfshW03aKjXWy2THAlhdoPLnwxyj p8O+pkoszfHQjw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:25 2025 by rpki-client