This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft File: 2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json) Hash identifier: ioOT/AA+JlNG3bgd3vrFZoX0SHRXGUDze2g4NZhFnrA= Subject key identifier: BA:09:40:4C:1B:35:5E:05:98:78:2F:F0:35:76:01:F3:12:74:4B:F6 Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec Certificate serial: 019B269AE6A284D453A7EB259DD361A3ADB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft Manifest number: 1780 Signing time: Tue 16 Dec 2025 10:00:44 +0000 Manifest this update: Tue 16 Dec 2025 10:00:44 +0000 Manifest next update: Wed 17 Dec 2025 10:00:44 +0000 Files and hashes: 1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: zZyrlQzrquKcVzi27kMMKOWeqS/8WwEqBSl8LmabF5M=) 2: 5Be6EqezXfxwhrFPLeonCfAyvI8.roa (hash: 5DTu5fQoOJxSVXmen8IkdRj7K/ip+zcpfYhUFVu0omI=) 3: T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa (hash: 2VUmqYcTbyu3BGa2UNYaNxKK9/e/jdNeWFxD6j6APMw=) 4: V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa (hash: exDIqb2dn4rGevhqSLgxGPDH0tG5qTPwydwCvYcD+yY=) 5: Ypy0H2Bsr39UgswuoV5q1-sR_N4.roa (hash: pHbM4Rba/93pouqqIiXpHU4F3MQUwXB/YNEqfbXWHBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9a:e6:a2:84:d4:53:a7:eb:25:9d:d3:61:a3:ad:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d894365b28a082834a751a97771b791124524dec Validity Not Before: Dec 16 10:00:44 2025 GMT Not After : Dec 17 10:00:44 2025 GMT Subject: CN=ba09404c1b355e0598782ff0357601f312744bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:67:14:1b:b3:a7:29:5c:d3:cb:01:9d:da: 1d:49:d8:64:c4:9b:72:c9:6c:ba:5d:9f:c5:3e:7b: 08:8e:d7:59:fc:e2:49:de:52:59:d3:03:6c:89:65: 0e:92:3f:b4:eb:49:78:23:38:8c:e8:7f:1b:3b:6e: 86:bd:92:97:0e:35:c6:6a:2a:ff:b5:1f:3b:f6:cf: 44:42:93:73:64:29:c7:e6:b3:d4:12:bc:25:4d:4f: 0d:6a:f7:8a:3b:92:47:e6:1f:53:7f:a9:55:c9:25: af:d1:92:4e:02:3e:47:5f:92:fb:5b:3e:c4:e0:0d: b7:9d:16:fc:6a:f1:23:12:f7:cb:31:0f:9c:c9:da: 19:7c:42:db:8d:cd:6a:9c:c1:15:af:b7:ca:95:be: 6c:85:e9:fb:34:8e:06:c9:55:a3:f7:13:91:53:49: f5:a8:7d:2b:68:ee:3a:f3:b8:b7:05:b1:9d:9a:14: ad:b0:25:61:99:75:3f:22:0e:a7:cc:2e:c7:d4:0e: df:ea:89:2f:82:93:cc:3f:6e:41:b5:93:a5:10:fa: 56:d1:d1:d1:34:58:96:fb:d3:66:66:4b:42:31:4b: 46:8f:f7:b2:7d:fa:9b:0f:d2:a3:ad:35:d4:a4:95: 94:21:de:1e:94:6d:14:bb:ba:3f:d9:db:18:28:1e: bf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:09:40:4C:1B:35:5E:05:98:78:2F:F0:35:76:01:F3:12:74:4B:F6 X509v3 Authority Key Identifier: keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:db:b8:a7:7e:5c:fe:29:3a:19:55:4f:d8:20:71:83:33:fe: 9c:e4:d3:8c:c9:34:d5:54:16:b9:d8:b3:d5:37:a3:50:a3:1e: 20:fd:f7:34:78:ea:ca:ba:2f:94:f6:a2:fa:fe:5d:51:16:68: bb:25:01:52:a6:6f:5e:85:8c:c8:0a:9e:26:37:bb:41:6a:6e: d6:ff:e7:3a:9c:b5:73:19:96:b0:a3:ad:7d:9c:ac:31:fe:20: 51:ba:4a:96:33:2b:81:f0:89:8c:24:54:5f:82:80:9b:9c:10: 66:0a:bc:e7:52:29:28:b5:ac:42:c7:1c:4a:35:7e:a2:d5:0a: 95:41:48:fe:1f:5b:f9:fc:ea:de:51:74:15:44:5e:5a:b3:ef: bd:99:43:99:2c:79:5f:69:84:af:7f:de:d3:33:a2:89:7b:8b: 7d:48:a3:38:fb:82:45:8f:c1:f4:25:04:f4:cd:28:38:3b:a2: 75:ac:bc:d7:b9:4a:40:f9:19:53:11:be:13:94:b3:01:38:c2: 0f:80:b6:d1:95:ac:0f:bc:ef:84:d5:4f:9a:fa:47:52:91:7d: db:99:2a:ca:0f:76:8e:2e:cd:b9:38:7f:5c:fd:cd:31:1f:ce: 88:7e:ef:fb:9b:8e:ff:0e:66:07:92:7e:cd:05:bc:a7:c1:0d: e4:78:44:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmmuaihNRTp+slndNho62xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTQzNjViMjhhMDgyODM0YTc1MWE5Nzc3MWI3OTExMjQ1 MjRkZWMwHhcNMjUxMjE2MTAwMDQ0WhcNMjUxMjE3MTAwMDQ0WjAzMTEwLwYDVQQD EyhiYTA5NDA0YzFiMzU1ZTA1OTg3ODJmZjAzNTc2MDFmMzEyNzQ0YmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyklnFBuzpylc08sBndodSdhkxJty yWy6XZ/FPnsIjtdZ/OJJ3lJZ0wNsiWUOkj+060l4IziM6H8bO26GvZKXDjXGair/ tR879s9EQpNzZCnH5rPUErwlTU8NaveKO5JH5h9Tf6lVySWv0ZJOAj5HX5L7Wz7E 4A23nRb8avEjEvfLMQ+cydoZfELbjc1qnMEVr7fKlb5shen7NI4GyVWj9xORU0n1 qH0raO4687i3BbGdmhStsCVhmXU/Ig6nzC7H1A7f6okvgpPMP25BtZOlEPpW0dHR NFiW+9NmZktCMUtGj/eyffqbD9KjrTXUpJWUId4elG0Uu7o/2dsYKB6/IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoJQEwbNV4FmHgv8DV2AfMSdEv2MB8GA1UdIwQY MBaAFNiUNlsooIKDSnUal3cbeREkUk3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEt MjE0NjE3OWQ4ZTJiLzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEtMjE0NjE3OWQ4ZTJi LzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9u4p35c /ik6GVVP2CBxgzP+nOTTjMk01VQWudiz1TejUKMeIP33NHjqyrovlPai+v5dURZo uyUBUqZvXoWMyAqeJje7QWpu1v/nOpy1cxmWsKOtfZysMf4gUbpKljMrgfCJjCRU X4KAm5wQZgq851IpKLWsQsccSjV+otUKlUFI/h9b+fzq3lF0FUReWrPvvZlDmSx5 X2mEr3/e0zOiiXuLfUijOPuCRY/B9CUE9M0oODuiday817lKQPkZUxG+E5SzATjC D4C20ZWsD7zvhNVPmvpHUpF925kqyg92ji7NuTh/XP3NMR/OiH7v+5uO/w5mB5J+ zQW8p8EN5HhE0w== -----END CERTIFICATE-----Generated at Tue Dec 16 12:31:41 2025 by rpki-client