This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json) Hash identifier: J6DhF17Nx0TVop5/pd65d502Uihlb6Hz6hzabBAAGuQ= Subject key identifier: 1E:4C:D4:B9:21:A4:1B:4E:DB:CD:5F:E1:4F:66:FB:07:C6:A2:F4:1B Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e Certificate serial: 019B5A88AA5E5C300C048A0CD62CB85CCB36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft Manifest number: 106A Signing time: Fri 26 Dec 2025 12:01:04 +0000 Manifest this update: Fri 26 Dec 2025 12:01:04 +0000 Manifest next update: Sat 27 Dec 2025 12:01:04 +0000 Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: G7oN/RCFb0vmkpK/sfYBVetHoFQJ6BfipUyv+CeglP0=) 2: AZz9ksdLlVeAbzeaU8MVCEKWTng.roa (hash: qwHNEbBQRa3YgFdH3RqllR/ytjATMfupEyjMH48twWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:aa:5e:5c:30:0c:04:8a:0c:d6:2c:b8:5c:cb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e Validity Not Before: Dec 26 12:01:04 2025 GMT Not After : Dec 27 12:01:04 2025 GMT Subject: CN=1e4cd4b921a41b4edbcd5fe14f66fb07c6a2f41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:33:de:77:6c:50:f6:76:32:68:06:05:ac:3c: 90:e0:e5:4a:14:7b:ee:30:98:c9:b5:a7:78:f1:18: 75:52:96:12:84:4d:6d:5a:c3:f0:e2:56:da:c9:23: 7d:77:c1:5d:08:d9:01:83:2f:37:96:72:cc:17:15: 89:50:7e:06:a5:7a:27:0c:7c:34:62:03:c4:f9:a6: e7:83:3f:95:ec:f1:20:7a:42:c8:e9:19:5f:e6:a5: 05:73:31:eb:e1:b1:45:2f:76:e5:a0:da:d5:4c:58: 9b:f0:b8:dc:8c:cc:bd:9a:39:9a:de:bc:84:f0:e5: 19:19:c5:45:4d:68:57:29:1c:eb:f7:1e:06:bc:25: 1a:ef:1e:e1:bd:6e:53:25:69:e2:f5:81:e7:62:1a: f8:a2:6a:39:05:51:3c:78:5c:46:a0:c9:cd:52:3b: 82:8c:b2:8a:3c:98:cc:ff:96:6e:ac:81:3c:9d:9f: fb:75:ce:c8:ff:d5:56:ea:5f:c3:bf:0e:f0:48:5b: a8:70:9c:68:08:ed:cd:7c:e7:c8:1d:fa:ba:3a:86: 3b:cd:9e:32:e7:47:c9:d5:09:27:a6:2a:e7:ad:d7: 71:f5:d3:da:a9:4b:a3:7a:3d:bb:f6:d7:29:91:7c: 40:43:ae:f6:a9:33:89:71:e7:1e:ee:e0:1d:08:ca: d3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4C:D4:B9:21:A4:1B:4E:DB:CD:5F:E1:4F:66:FB:07:C6:A2:F4:1B X509v3 Authority Key Identifier: keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:df:aa:e7:ff:c3:62:19:56:84:6b:e5:62:b9:7c:bd:7b:08: 64:80:c5:ad:cc:61:e0:4c:97:3a:d6:e9:e9:0f:c5:4f:2c:e5: 05:fe:83:c5:64:4f:20:93:44:3e:97:35:ad:b9:be:05:8c:0a: b4:72:bb:9a:4f:9a:d1:b2:db:37:72:3f:6d:c6:46:d7:ac:81: a2:70:a7:7a:4f:40:8b:36:42:c6:05:c8:85:bf:ea:cd:87:b5: 5c:74:47:da:e5:96:1d:6e:1e:15:fc:39:f4:f9:58:b4:44:74: 6f:46:ec:87:9a:00:e6:cb:57:98:5d:ba:1e:c5:1b:90:4f:21: e5:b2:b8:3f:1f:cb:c2:70:1a:20:6a:90:09:87:a8:32:9f:e3: 7f:2e:24:ec:c5:47:a7:49:6b:21:f0:ae:03:f3:50:1b:06:d3: 3c:a4:53:f5:e2:04:ba:5d:68:75:5a:20:c9:da:99:c3:82:90: af:39:8a:9c:6b:0f:6e:6e:c4:8a:1f:9a:2a:fd:00:1c:ff:91: 10:6e:18:41:97:7e:b2:cf:4a:c3:5e:e2:4e:af:e3:22:65:5f: 5b:2e:19:f0:50:53:c2:29:f3:bf:e0:c9:d1:05:03:82:f8:d8: 54:00:e9:4a:8a:b5:9c:fe:68:d5:9f:ba:c3:a0:dc:4a:c9:00: 0e:75:5e:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiKpeXDAMBIoM1iy4XMs2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZjkwZGE0MmEzM2ZmZDkxNjRkMGMwNWIwZGU0ZjY1NjI4 NzA3NmUwHhcNMjUxMjI2MTIwMTA0WhcNMjUxMjI3MTIwMTA0WjAzMTEwLwYDVQQD EygxZTRjZDRiOTIxYTQxYjRlZGJjZDVmZTE0ZjY2ZmIwN2M2YTJmNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjPed2xQ9nYyaAYFrDyQ4OVKFHvu MJjJtad48Rh1UpYShE1tWsPw4lbaySN9d8FdCNkBgy83lnLMFxWJUH4GpXonDHw0 YgPE+abngz+V7PEgekLI6Rlf5qUFczHr4bFFL3bloNrVTFib8LjcjMy9mjma3ryE 8OUZGcVFTWhXKRzr9x4GvCUa7x7hvW5TJWni9YHnYhr4omo5BVE8eFxGoMnNUjuC jLKKPJjM/5ZurIE8nZ/7dc7I/9VW6l/Dvw7wSFuocJxoCO3NfOfIHfq6OoY7zZ4y 50fJ1Qknpirnrddx9dPaqUujej279tcpkXxAQ672qTOJcece7uAdCMrTWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5M1LkhpBtO281f4U9m+wfGovQbMB8GA1UdIwQY MBaAFNj5DaQqM//ZFk0MBbDeT2VihwduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjkt MjNiNDYzYjVlYTc3LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjktMjNiNDYzYjVlYTc3 LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAut+q5//D YhlWhGvlYrl8vXsIZIDFrcxh4EyXOtbp6Q/FTyzlBf6DxWRPIJNEPpc1rbm+BYwK tHK7mk+a0bLbN3I/bcZG16yBonCnek9AizZCxgXIhb/qzYe1XHRH2uWWHW4eFfw5 9PlYtER0b0bsh5oA5stXmF26HsUbkE8h5bK4Px/LwnAaIGqQCYeoMp/jfy4k7MVH p0lrIfCuA/NQGwbTPKRT9eIEul1odVogydqZw4KQrzmKnGsPbm7Eih+aKv0AHP+R EG4YQZd+ss9Kw17iTq/jImVfWy4Z8FBTwinzv+DJ0QUDgvjYVADpSoq1nP5o1Z+6 w6DcSskADnVegw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:25 2025 by rpki-client