This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json) Hash identifier: w1LOhUs1s5kEPgq95rDhy6fHEJQJIuLNODgkGHOAtFk= Subject key identifier: 0D:2E:7D:1D:E2:AB:EB:BE:41:4B:74:0B:90:E2:1D:4B:A5:BB:0D:28 Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77 Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577 Certificate serial: 019B5A515587E624484DBAD9377118860D08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft Manifest number: 05A3 Signing time: Fri 26 Dec 2025 11:00:38 +0000 Manifest this update: Fri 26 Dec 2025 11:00:38 +0000 Manifest next update: Sat 27 Dec 2025 11:00:38 +0000 Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: 6ShpA4crFAbKQ6uzttVjbcx6E9nXDrrea25gF+FG/08=) 2: kZsXR7fR0Ou_RuvSVexqd7WF5Zw.roa (hash: VeB6BvnRbCRLPDDkoYsxbMM4NdMeIicaUa0njjeL7mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:55:87:e6:24:48:4d:ba:d9:37:71:18:86:0d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577 Validity Not Before: Dec 26 11:00:38 2025 GMT Not After : Dec 27 11:00:38 2025 GMT Subject: CN=0d2e7d1de2abebbe414b740b90e21d4ba5bb0d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ea:f9:e7:48:5e:34:3f:c1:37:d0:a9:33:06: 4a:1b:8d:31:f4:61:43:f5:78:5f:5e:01:db:50:a4: 93:56:ce:2a:d7:c9:e0:28:fd:e2:8e:51:a6:e6:ca: 95:79:f9:0a:7c:a0:34:77:0e:0b:a5:d4:d2:b3:33: ec:98:79:10:91:07:8e:29:3e:a3:63:e6:78:65:15: f8:e5:b0:0e:48:f8:72:af:2e:8a:3a:2f:83:93:0a: af:ec:f4:dd:e3:f1:c8:10:1c:91:49:2a:e8:02:7b: 0a:3a:c5:94:a1:08:f9:cd:05:c4:1b:d6:16:72:8d: 6e:2f:7b:bd:f1:ca:26:e3:e2:c5:5b:7d:e7:66:e2: f5:21:dd:8f:ff:bd:6f:d0:9b:e0:79:e0:61:74:a6: b0:6a:36:8f:51:01:0d:69:27:6c:ed:76:76:ce:f3: 5a:b9:69:0f:d6:97:d0:79:99:cd:9a:7b:1d:fd:16: b1:d7:b5:d3:b9:41:64:4e:50:cf:dd:d7:4b:79:73: fa:8a:df:49:3f:5a:19:32:6c:fe:f6:cb:2c:39:df: 13:a7:0a:8b:06:ee:1a:dd:70:ee:86:37:28:af:5e: d8:7d:99:43:2e:d6:06:29:e1:98:f5:12:a7:b0:47: 98:f9:00:0b:fe:2d:00:f9:b8:58:16:62:93:00:7b: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2E:7D:1D:E2:AB:EB:BE:41:4B:74:0B:90:E2:1D:4B:A5:BB:0D:28 X509v3 Authority Key Identifier: keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:92:de:8e:e8:d2:ce:34:4f:72:48:ec:4e:71:9d:9e:95:7f: cf:3e:89:e5:71:12:9b:0a:f5:47:c9:71:eb:0d:a3:49:e0:67: c3:1f:71:0a:94:6d:e0:ca:ab:a5:f7:b1:e1:c5:36:62:6c:7a: 2e:f9:f9:0e:22:30:29:77:de:28:5a:aa:ce:59:9b:a6:4f:fe: 19:c0:6b:77:5f:2e:c2:16:10:25:ed:7b:f0:0d:f5:d5:c6:50: f1:63:19:80:09:3a:75:86:88:a1:90:72:00:81:03:78:ae:91: 8b:e9:fa:07:b0:c7:3d:5e:2f:6d:1e:0b:4d:76:dd:e1:2e:03: c6:24:d5:88:86:3c:5e:1e:ef:c5:33:d9:f2:05:61:56:e6:2b: f5:45:59:f5:ea:33:dc:14:8d:2a:70:5c:c4:51:87:f2:da:b8: 97:96:ba:44:ba:de:50:8c:76:40:d0:a8:ae:4f:fb:12:ab:e8: 0c:e8:7b:ef:48:07:62:b9:3e:0d:cb:5e:fa:7c:21:3a:25:fa: b1:f1:ae:98:95:2d:a6:51:72:f8:13:41:4d:32:90:56:ef:5d: f9:6d:12:0a:21:15:08:76:99:63:7d:e5:d3:00:c6:09:53:bc: e1:6b:c4:ec:23:27:57:41:91:fe:2e:61:0a:3f:7b:b9:54:02: 67:bf:bf:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVWH5iRITbrZN3EYhg0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MDQ4Mjc2MzA3MDk1NWU3ZWE4N2UyY2EzN2I4OTFiODY0 YjI1NzcwHhcNMjUxMjI2MTEwMDM4WhcNMjUxMjI3MTEwMDM4WjAzMTEwLwYDVQQD EygwZDJlN2QxZGUyYWJlYmJlNDE0Yjc0MGI5MGUyMWQ0YmE1YmIwZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOr550heND/BN9CpMwZKG40x9GFD 9XhfXgHbUKSTVs4q18ngKP3ijlGm5sqVefkKfKA0dw4LpdTSszPsmHkQkQeOKT6j Y+Z4ZRX45bAOSPhyry6KOi+Dkwqv7PTd4/HIEByRSSroAnsKOsWUoQj5zQXEG9YW co1uL3u98com4+LFW33nZuL1Id2P/71v0JvgeeBhdKawajaPUQENaSds7XZ2zvNa uWkP1pfQeZnNmnsd/Rax17XTuUFkTlDP3ddLeXP6it9JP1oZMmz+9sssOd8TpwqL Bu4a3XDuhjcor17YfZlDLtYGKeGY9RKnsEeY+QAL/i0A+bhYFmKTAHti6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0ufR3iq+u+QUt0C5DiHUuluw0oMB8GA1UdIwQY MBaAFNkEgnYwcJVefqh+LKN7iRuGSyV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgt YTliMjc2Njc3M2FhLzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgtYTliMjc2Njc3M2Fh LzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpLejujS zjRPckjsTnGdnpV/zz6J5XESmwr1R8lx6w2jSeBnwx9xCpRt4Mqrpfex4cU2Ymx6 Lvn5DiIwKXfeKFqqzlmbpk/+GcBrd18uwhYQJe178A311cZQ8WMZgAk6dYaIoZBy AIEDeK6Ri+n6B7DHPV4vbR4LTXbd4S4DxiTViIY8Xh7vxTPZ8gVhVuYr9UVZ9eoz 3BSNKnBcxFGH8tq4l5a6RLreUIx2QNCork/7EqvoDOh770gHYrk+Dcte+nwhOiX6 sfGumJUtplFy+BNBTTKQVu9d+W0SCiEVCHaZY33l0wDGCVO84WvE7CMnV0GR/i5h Cj97uVQCZ7+/3g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:38 2025 by rpki-client