This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json) Hash identifier: OwFJWTX+/kvxgVgY4xCXsdxa0WcItj6VPiwDxxeBvfY= Subject key identifier: E3:8B:56:D5:83:4B:1A:4A:3E:8B:09:9B:B6:74:8E:C9:1C:28:4F:D9 Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66 Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466 Certificate serial: 019B59083785702BDF18BF18FEA50CC28105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 05:01:09 +0000 Manifest this update: Fri 26 Dec 2025 05:01:09 +0000 Manifest next update: Sat 27 Dec 2025 05:01:09 +0000 Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: 2h0tySfu/Ma/oH8aPRiedz3W2Tb04QUIkyOt2tB24qI=) 2: zOidZa_WBKrrVFNvnxbTNUXsqyA.roa (hash: c6CaCJCPxyhkXhFJHJ0Gvk/jlU50dgYSjedGTRGmMqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:37:85:70:2b:df:18:bf:18:fe:a5:0c:c2:81:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466 Validity Not Before: Dec 26 05:01:09 2025 GMT Not After : Dec 27 05:01:09 2025 GMT Subject: CN=e38b56d5834b1a4a3e8b099bb6748ec91c284fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:76:25:23:a8:56:8c:e4:bf:f7:16:7c:d3: 87:06:6e:db:47:a1:1b:6b:df:94:6f:21:2b:01:9e: 6f:2f:10:e3:4d:70:78:cc:22:11:91:d6:4b:23:17: 65:93:4c:19:b5:10:b9:90:e7:02:0a:a1:d6:a7:94: 7c:64:fa:2d:e1:9e:35:99:a3:c5:b3:25:2f:60:1c: 92:45:46:3e:6b:ca:79:c2:12:ce:44:5f:e2:88:88: 96:76:13:21:d9:d1:02:87:f5:1d:81:2b:47:82:3b: 18:36:42:8d:4f:9c:a8:87:f3:a9:99:c6:f5:17:af: 7e:52:64:9a:33:15:f7:8b:13:ae:39:02:47:e8:f5: a4:76:b0:eb:27:a6:fb:bd:0f:85:30:51:47:d0:8e: bd:26:59:eb:76:f0:c2:90:da:7f:44:26:9f:a8:52: ac:6c:92:3f:83:93:9e:f6:19:01:d5:e0:3f:77:74: e2:33:a6:0d:3d:0d:5e:af:c4:24:65:b5:6f:57:5e: c9:fc:cc:dd:d2:63:31:8c:6a:67:0a:61:aa:6c:fe: a4:3f:71:b3:e1:78:9b:e8:51:2d:d5:78:80:11:4f: 3f:fd:9e:c5:14:8b:58:00:82:e0:61:bf:58:ed:bb: aa:af:d5:c7:b7:b8:18:1d:cb:65:85:3b:60:e5:24: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8B:56:D5:83:4B:1A:4A:3E:8B:09:9B:B6:74:8E:C9:1C:28:4F:D9 X509v3 Authority Key Identifier: keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:48:eb:5c:ec:5c:ac:9a:32:d7:1f:7d:5d:6a:02:15:15:3a: 37:0d:c0:5c:30:3c:1d:b3:81:5b:c1:9b:c7:d5:ea:f4:d9:5c: ea:e1:6c:0d:2c:54:f8:c5:fe:e0:55:a3:e4:bb:bb:2b:1b:86: 26:cd:55:c4:0e:27:2e:33:c7:21:b5:b1:84:8a:7f:be:2c:08: 8d:e5:53:2d:5b:12:cd:67:50:6c:7f:b6:e3:07:8e:e8:0e:f8: fe:cb:6b:da:e8:d6:28:7c:da:35:96:8c:2f:7b:9f:84:c3:32: e1:bd:19:39:e1:f8:ba:00:20:d5:96:4a:2e:7e:23:2b:f3:fe: 6a:10:4e:3d:49:ea:fc:ac:c0:f1:80:cd:bf:76:22:7a:02:2f: 96:10:f3:53:70:0e:df:f0:49:fe:93:ce:43:fa:1c:10:27:7b: 37:90:08:86:38:d2:dd:2e:4c:d4:ff:51:44:90:16:00:a8:ce: a3:e0:82:af:5f:52:56:3e:75:f4:7a:6e:46:86:0e:bf:bb:fc: 64:74:b0:bd:12:d2:7a:da:5a:10:66:02:40:0d:6d:77:36:5a: 65:8f:c3:ba:15:35:82:46:51:47:47:e3:5f:6c:df:fc:8c:68: 20:ae:1d:b5:66:2d:61:e5:75:00:25:7a:dd:81:ad:9f:09:a6: 8a:6d:65:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCDeFcCvfGL8Y/qUMwoEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDA0N2RhYzhlZWY4OTQ0ZDc4YzFiN2EyNjg2OGMwM2Uy Y2U0NjYwHhcNMjUxMjI2MDUwMTA5WhcNMjUxMjI3MDUwMTA5WjAzMTEwLwYDVQQD EyhlMzhiNTZkNTgzNGIxYTRhM2U4YjA5OWJiNjc0OGVjOTFjMjg0ZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4t2JSOoVozkv/cWfNOHBm7bR6Eb a9+UbyErAZ5vLxDjTXB4zCIRkdZLIxdlk0wZtRC5kOcCCqHWp5R8ZPot4Z41maPF syUvYBySRUY+a8p5whLORF/iiIiWdhMh2dECh/UdgStHgjsYNkKNT5yoh/Opmcb1 F69+UmSaMxX3ixOuOQJH6PWkdrDrJ6b7vQ+FMFFH0I69JlnrdvDCkNp/RCafqFKs bJI/g5Oe9hkB1eA/d3TiM6YNPQ1er8QkZbVvV17J/Mzd0mMxjGpnCmGqbP6kP3Gz 4Xib6FEt1XiAEU8//Z7FFItYAILgYb9Y7buqr9XHt7gYHctlhTtg5STyWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOLVtWDSxpKPosJm7Z0jskcKE/ZMB8GA1UdIwQY MBaAFNoAR9rI7viUTXjBt6JoaMA+LORmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEt YWM5YzhhNTBmMjRlLzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEtYWM5YzhhNTBmMjRl LzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEjrXOxc rJoy1x99XWoCFRU6Nw3AXDA8HbOBW8Gbx9Xq9Nlc6uFsDSxU+MX+4FWj5Lu7KxuG Js1VxA4nLjPHIbWxhIp/viwIjeVTLVsSzWdQbH+24weO6A74/str2ujWKHzaNZaM L3ufhMMy4b0ZOeH4ugAg1ZZKLn4jK/P+ahBOPUnq/KzA8YDNv3YiegIvlhDzU3AO 3/BJ/pPOQ/ocECd7N5AIhjjS3S5M1P9RRJAWAKjOo+CCr19SVj519HpuRoYOv7v8 ZHSwvRLSetpaEGYCQA1tdzZaZY/DuhU1gkZRR0fjX2zf/IxoIK4dtWYtYeV1ACV6 3YGtnwmmim1lNA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:09 2025 by rpki-client