This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json) Hash identifier: iETH1VcviPMPPT9m4jsq5o3fZMevqAvefcc7XhUmeeo= Subject key identifier: 2A:6A:87:ED:23:21:75:40:F4:F3:D9:B1:88:0A:39:EB:21:60:D8:5A Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d Certificate serial: 019B5977B451DB1E9F3BB5422C4809C9555C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 07:02:55 +0000 Manifest this update: Fri 26 Dec 2025 07:02:55 +0000 Manifest next update: Sat 27 Dec 2025 07:02:55 +0000 Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: O8qM0ovsPWzRQCb1wnfFVK4GH2Uj9RHXnfsrxVPIPFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:b4:51:db:1e:9f:3b:b5:42:2c:48:09:c9:55:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d Validity Not Before: Dec 26 07:02:55 2025 GMT Not After : Dec 27 07:02:55 2025 GMT Subject: CN=2a6a87ed23217540f4f3d9b1880a39eb2160d85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:7f:fc:1d:1a:93:2b:50:a8:70:4a:06:87: e8:d5:3a:97:f9:81:9e:44:e1:18:35:de:de:04:6f: 17:b3:5b:6b:06:a0:4e:62:38:ae:77:65:d1:db:04: dc:61:d9:ab:24:d7:4e:88:97:58:b1:65:d1:b5:6d: 71:e4:95:a2:52:c9:74:ac:ab:d0:88:90:19:02:11: f4:12:61:9e:d3:87:cd:88:44:c3:2a:6e:05:62:18: 70:c3:8b:de:63:94:e1:19:a4:c7:4a:29:e2:33:34: 46:b0:f4:17:ee:57:62:d3:c5:19:a1:ec:a8:e9:3b: 99:49:77:b5:5d:3e:2c:c0:2f:dc:f6:49:d0:1b:04: e4:5d:4e:f2:e9:9c:08:32:55:94:06:6d:c2:b8:03: e4:82:8f:cb:0d:8b:9c:b6:b7:b1:b3:38:ed:f5:34: 0e:ab:37:4e:6e:49:99:d8:a5:b0:5e:5c:ba:af:8c: 3b:38:6d:7d:dd:b4:df:b9:14:3d:5b:a3:b3:3f:cf: c0:05:bd:26:1f:dc:03:8a:74:bd:9e:82:b9:cb:f9: 29:96:65:56:47:8b:fe:0c:9e:b8:9e:98:99:d2:9d: 0d:b8:b1:0c:39:31:cb:5d:00:f6:9a:2f:db:27:4b: c9:28:7f:09:f5:5a:e2:5f:5f:3d:6e:fe:57:bc:6b: 10:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6A:87:ED:23:21:75:40:F4:F3:D9:B1:88:0A:39:EB:21:60:D8:5A X509v3 Authority Key Identifier: keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:da:44:fa:ad:67:81:f2:bd:c2:e8:ca:e2:2f:df:62:99:c6: 74:73:88:85:b8:58:35:c4:7b:e5:01:0a:c7:fe:58:9a:6d:4b: 14:8e:4e:e4:67:ab:48:51:77:a8:68:af:c8:f2:35:4c:d8:45: 07:63:4e:df:98:43:ce:f6:61:83:ac:62:1f:86:3c:0b:e9:f6: e9:3f:7d:36:89:b7:90:ec:21:6f:6d:b8:c0:4a:72:44:80:2a: 47:45:75:3d:25:11:fa:05:4a:e2:90:d8:7b:d3:bc:80:c6:a0: 10:52:19:0f:ce:84:7b:2a:c6:cf:9f:20:c8:73:bd:90:fe:52: a5:a1:43:79:4a:5f:9d:dc:5c:b6:93:36:7a:de:9b:28:28:22: 72:c9:29:7e:22:a3:cd:cb:67:94:70:67:6a:d8:b5:95:bc:b9: ba:a6:ae:9d:4b:a9:6c:c5:94:ea:ee:22:0b:f3:b0:dd:51:17: 15:b1:d9:99:68:03:71:de:64:1b:36:d0:af:88:66:4a:94:c8: e5:39:83:fc:4e:e4:44:90:41:c6:60:58:c1:f4:92:f1:03:dd: c1:ac:55:b6:1a:7f:86:88:26:c0:d8:2c:45:ea:81:f9:d2:bd: 22:7f:ff:8c:6c:64:a7:e8:79:dd:64:60:37:82:3e:99:3c:ce: e4:18:ff:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd7RR2x6fO7VCLEgJyVVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDgyOTFjZmM3MjhkMDE3NjBlYzQyNzgxMDk2YWM2YjRj NzRhNWQwHhcNMjUxMjI2MDcwMjU1WhcNMjUxMjI3MDcwMjU1WjAzMTEwLwYDVQQD EygyYTZhODdlZDIzMjE3NTQwZjRmM2Q5YjE4ODBhMzllYjIxNjBkODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxt//B0akytQqHBKBofo1TqX+YGe ROEYNd7eBG8Xs1trBqBOYjiud2XR2wTcYdmrJNdOiJdYsWXRtW1x5JWiUsl0rKvQ iJAZAhH0EmGe04fNiETDKm4FYhhww4veY5ThGaTHSiniMzRGsPQX7ldi08UZoeyo 6TuZSXe1XT4swC/c9knQGwTkXU7y6ZwIMlWUBm3CuAPkgo/LDYuctrexszjt9TQO qzdObkmZ2KWwXly6r4w7OG193bTfuRQ9W6OzP8/ABb0mH9wDinS9noK5y/kplmVW R4v+DJ64npiZ0p0NuLEMOTHLXQD2mi/bJ0vJKH8J9VriX189bv5XvGsQ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpqh+0jIXVA9PPZsYgKOeshYNhaMB8GA1UdIwQY MBaAFNoIKRz8co0Bdg7EJ4EJasa0x0pdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80NGRhYzAtMTY3YS00OTkzLWI5YTgt YjA1Y2ZmYjE4N2ZhLzEvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC80NGRhYzAtMTY3YS00OTkzLWI5YTgtYjA1Y2ZmYjE4N2Zh LzEvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNpE+q1n gfK9wujK4i/fYpnGdHOIhbhYNcR75QEKx/5Ymm1LFI5O5GerSFF3qGivyPI1TNhF B2NO35hDzvZhg6xiH4Y8C+n26T99Nom3kOwhb224wEpyRIAqR0V1PSUR+gVK4pDY e9O8gMagEFIZD86EeyrGz58gyHO9kP5SpaFDeUpfndxctpM2et6bKCgicskpfiKj zctnlHBnati1lby5uqaunUupbMWU6u4iC/Ow3VEXFbHZmWgDcd5kGzbQr4hmSpTI 5TmD/E7kRJBBxmBYwfSS8QPdwaxVthp/hogmwNgsReqB+dK9In//jGxkp+h53WRg N4I+mTzO5Bj/LQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:27 2025 by rpki-client