This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json) Hash identifier: WKKsSJkffLMx3MK7/XAFfnIpjnTmse47ioHAhjYijb4= Subject key identifier: 8D:8C:2B:D0:18:D0:63:2C:AB:A3:B9:9B:BE:EF:0E:16:EE:97:31:17 Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a Certificate serial: 019B5BD1C32926187512F7A3069F98B667B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft Manifest number: 172A Signing time: Fri 26 Dec 2025 18:00:32 +0000 Manifest this update: Fri 26 Dec 2025 18:00:32 +0000 Manifest next update: Sat 27 Dec 2025 18:00:32 +0000 Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: O7ka11HXu2sjgKFrXO5JMo68yKQOSpYLx/2pKME1rQ4=) 2: SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (hash: j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d1:c3:29:26:18:75:12:f7:a3:06:9f:98:b6:67:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a Validity Not Before: Dec 26 18:00:32 2025 GMT Not After : Dec 27 18:00:32 2025 GMT Subject: CN=8d8c2bd018d0632caba3b99bbeef0e16ee973117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d9:ae:1b:7f:e0:ed:80:55:54:fe:98:ef:44: 4c:a9:52:cc:2b:c5:fc:6d:f4:da:7c:01:ec:8e:d1: 25:a2:62:20:2a:8f:ca:68:09:da:89:e8:92:87:c3: b4:c7:c0:fc:08:55:83:e0:b1:c6:20:91:0e:d3:62: 35:4e:94:71:20:8f:2d:60:82:23:61:58:22:83:a3: ed:91:36:7a:d5:d8:81:ca:7e:ed:c2:6b:26:b3:ef: d7:21:c5:b4:93:37:6a:e3:ad:7a:81:80:36:89:27: 14:b5:8f:ac:16:cb:66:99:28:ea:a0:9f:4a:ef:16: 12:59:f7:69:f1:48:94:fc:93:4f:96:8a:76:48:3e: 64:bb:ce:6c:fe:6e:9c:64:f4:8e:88:0c:c6:4b:13: 92:fe:54:5d:73:96:d6:4b:e4:07:75:b0:b8:0d:74: fe:5f:fe:37:84:46:08:a8:6a:86:92:a9:91:f0:87: 50:eb:65:63:6c:3a:0e:3d:e9:ed:01:e0:75:7d:4c: 30:33:ab:3c:35:99:84:56:f1:b8:02:55:d1:2e:27: ce:48:09:35:1c:11:2f:78:cd:31:f1:4b:36:f1:5d: 28:26:5b:86:1f:b5:b5:3a:16:33:a9:65:b7:b0:5c: 9d:85:55:5e:45:24:f2:0b:dc:ad:72:fd:bf:2a:72: 93:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8C:2B:D0:18:D0:63:2C:AB:A3:B9:9B:BE:EF:0E:16:EE:97:31:17 X509v3 Authority Key Identifier: keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:61:3c:f8:66:6c:77:2a:22:57:f3:b7:e4:b7:25:cb:cf:c8: ff:9d:33:6e:47:78:4d:69:79:17:ed:76:c7:d1:ba:b8:57:cd: db:0f:21:b3:01:2c:ad:59:43:f9:35:3d:e8:11:89:13:2e:83: 64:24:7a:bc:71:65:98:58:f4:2e:bf:9f:2e:8a:14:13:22:9b: 02:17:95:fc:3e:d8:59:8a:78:c1:cb:84:41:bf:07:9b:0a:75: 8c:f3:80:49:2c:75:6e:0f:42:9b:84:1b:18:61:32:df:16:92: 81:38:34:50:b5:95:80:78:91:bd:da:00:7e:cb:21:e6:88:d7: 8c:3e:b5:f9:70:ee:ca:22:68:70:e4:71:5e:45:56:1f:ca:e1: 9c:c8:e9:15:a9:02:8c:42:6d:5c:13:af:e2:58:66:5e:cc:bf: a0:43:27:27:2a:53:8c:d0:8e:86:f1:f3:2d:7a:32:9e:ff:f6: 14:04:4e:60:c5:6c:b7:bb:84:de:2f:70:82:4a:9e:b4:07:3f: e4:6b:83:b7:40:17:44:02:cc:d8:d1:36:be:24:54:4a:6e:d0: b1:5a:36:0d:b6:94:72:d3:79:2e:bb:83:44:d5:65:08:d6:78: c4:19:af:53:cc:9c:61:54:e2:cf:a8:f1:9a:65:ce:5b:b9:b3: 6c:cb:36:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0cMpJhh1EvejBp+YtmeyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTI3MzY4MjA2ZTNlOWE1OTI0MDgxZGY2Mzg4MDI0NmU1 YzU0MWEwHhcNMjUxMjI2MTgwMDMyWhcNMjUxMjI3MTgwMDMyWjAzMTEwLwYDVQQD Eyg4ZDhjMmJkMDE4ZDA2MzJjYWJhM2I5OWJiZWVmMGUxNmVlOTczMTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49muG3/g7YBVVP6Y70RMqVLMK8X8 bfTafAHsjtElomIgKo/KaAnaieiSh8O0x8D8CFWD4LHGIJEO02I1TpRxII8tYIIj YVgig6PtkTZ61diByn7twmsms+/XIcW0kzdq4616gYA2iScUtY+sFstmmSjqoJ9K 7xYSWfdp8UiU/JNPlop2SD5ku85s/m6cZPSOiAzGSxOS/lRdc5bWS+QHdbC4DXT+ X/43hEYIqGqGkqmR8IdQ62VjbDoOPentAeB1fUwwM6s8NZmEVvG4AlXRLifOSAk1 HBEveM0x8Us28V0oJluGH7W1OhYzqWW3sFydhVVeRSTyC9ytcv2/KnKTcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2MK9AY0GMsq6O5m77vDhbulzEXMB8GA1UdIwQY MBaAFNlSc2ggbj6aWSQIHfY4gCRuXFQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84MjEyOWEtNTI2My00M2QyLWJjNjMt MTk2MjA2MTU1NzliLzEvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84MjEyOWEtNTI2My00M2QyLWJjNjMtMTk2MjA2MTU1Nzli LzEvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGE8+GZs dyoiV/O35Lcly8/I/50zbkd4TWl5F+12x9G6uFfN2w8hswEsrVlD+TU96BGJEy6D ZCR6vHFlmFj0Lr+fLooUEyKbAheV/D7YWYp4wcuEQb8Hmwp1jPOASSx1bg9Cm4Qb GGEy3xaSgTg0ULWVgHiRvdoAfssh5ojXjD61+XDuyiJocORxXkVWH8rhnMjpFakC jEJtXBOv4lhmXsy/oEMnJypTjNCOhvHzLXoynv/2FAROYMVst7uE3i9wgkqetAc/ 5GuDt0AXRALM2NE2viRUSm7QsVo2DbaUctN5LruDRNVlCNZ4xBmvU8ycYVTiz6jx mmXOW7mzbMs24g== -----END CERTIFICATE-----Generated at Fri Dec 26 21:05:29 2025 by rpki-client