This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json) Hash identifier: E8BwFxqvBsQtI6S6rJ5uk1Q7Tj+ioWk4DW67zUaDJiA= Subject key identifier: AE:94:0E:A8:39:23:1F:94:71:4D:69:10:53:10:E0:17:EB:6F:CA:BB Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9 Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9 Certificate serial: 019B5A51A7CF902C7096DC7292BDBF412586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 11:00:59 +0000 Manifest this update: Fri 26 Dec 2025 11:00:59 +0000 Manifest next update: Sat 27 Dec 2025 11:00:59 +0000 Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: V4038gXCTnWKDP+9bk52zNNbl7bq8DdOPeo8b18HsPU=) 2: 7IrvKFJoIFvYm_SaTn84qzlHGRs.roa (hash: hUswVz2HCEFpTIdk0ppWtjvST0HpVnKMXk9uiSlgF48=) 3: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (hash: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=) 4: f__gtya754lWl6PiypfMMRlv6ak.roa (hash: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:a7:cf:90:2c:70:96:dc:72:92:bd:bf:41:25:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9 Validity Not Before: Dec 26 11:00:59 2025 GMT Not After : Dec 27 11:00:59 2025 GMT Subject: CN=ae940ea839231f94714d69105310e017eb6fcabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:f7:d1:87:85:90:69:8c:07:b8:1a:b5:8e: ce:1d:f9:37:1a:b4:31:24:93:28:c7:89:bd:24:e2: dc:ae:59:e3:e7:32:bf:99:d8:f9:c8:70:44:d9:21: b3:04:e9:ea:da:3a:a1:f4:f8:5f:92:5d:2b:1e:81: 9d:ac:0d:0b:bd:ad:02:c2:40:01:d0:2f:ff:d0:9a: 2e:73:1b:06:7f:df:59:35:11:a5:72:c0:2f:87:87: fb:42:de:d5:12:5f:e9:34:d9:54:1c:c7:ff:9c:cf: 64:2f:a1:fb:9e:57:b4:48:24:bb:76:f1:8b:b1:97: 27:04:3a:e1:d2:51:5b:99:e2:24:8a:6e:2a:89:0c: 1b:c7:93:21:68:b8:01:2c:54:6a:6c:bf:17:5b:d2: d6:02:9d:4f:3e:df:87:bf:ae:33:e7:c9:a0:56:0d: 69:25:d6:85:90:5b:47:58:4a:6c:6b:2e:2c:76:23: 16:b0:55:40:61:6d:0c:8a:d7:34:e6:2b:a3:bc:4b: 59:e9:65:af:c0:54:81:4f:63:e2:a6:9b:14:8e:70: cc:90:75:a6:41:02:0d:63:52:90:89:92:72:17:db: f8:d1:5b:b8:63:bd:03:84:b0:12:cb:08:46:ca:8d: 12:85:0e:75:20:7e:f2:7f:ce:cb:73:3d:7d:aa:07: 83:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:94:0E:A8:39:23:1F:94:71:4D:69:10:53:10:E0:17:EB:6F:CA:BB X509v3 Authority Key Identifier: keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:29:a9:0e:02:d2:ef:a9:84:22:e1:d2:f8:47:43:19:a4:19: dd:c2:8e:5f:47:31:15:f3:6b:4e:0a:92:17:74:92:73:8e:6c: ef:0a:bd:6e:41:75:f7:1c:ff:07:36:d0:34:19:28:6b:92:0a: d0:f6:0c:b1:63:5d:55:2e:12:93:b8:6b:7b:d7:c5:93:6a:70: 89:a5:af:f9:02:5c:85:27:b3:b8:dd:b4:d9:97:76:1a:c8:8e: a8:12:29:b3:4b:80:83:42:74:aa:a7:7f:28:10:4d:32:21:50: b0:f0:d9:dc:60:46:8e:81:5f:70:54:35:4d:3a:48:49:ac:d2: ed:35:3c:b8:1d:c6:ad:df:92:7a:39:9d:75:76:12:fc:ad:99: 68:cb:24:92:9e:bd:95:87:5b:d0:fd:32:1d:4b:84:c9:97:3d: 85:d7:d8:d0:26:95:2c:11:29:cb:e6:60:7a:58:cc:53:db:9a: 7d:af:ac:56:db:9e:a8:fc:ab:75:60:d5:d6:4e:35:bd:17:a6: 7b:5e:54:c0:07:e7:86:8c:03:e3:74:35:a4:bd:0d:28:9e:2d: 03:47:cc:d1:13:f1:ca:8a:02:d1:41:d7:f8:2f:e8:25:90:a9: 32:57:cf:55:cc:e4:38:2c:26:dc:2b:b4:d5:11:e0:be:d4:c2: 68:2b:9e:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUafPkCxwltxykr2/QSWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm MWZmZTkwHhcNMjUxMjI2MTEwMDU5WhcNMjUxMjI3MTEwMDU5WjAzMTEwLwYDVQQD EyhhZTk0MGVhODM5MjMxZjk0NzE0ZDY5MTA1MzEwZTAxN2ViNmZjYWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOf30YeFkGmMB7gatY7OHfk3GrQx JJMox4m9JOLcrlnj5zK/mdj5yHBE2SGzBOnq2jqh9Phfkl0rHoGdrA0Lva0CwkAB 0C//0JoucxsGf99ZNRGlcsAvh4f7Qt7VEl/pNNlUHMf/nM9kL6H7nle0SCS7dvGL sZcnBDrh0lFbmeIkim4qiQwbx5MhaLgBLFRqbL8XW9LWAp1PPt+Hv64z58mgVg1p JdaFkFtHWEpsay4sdiMWsFVAYW0Mitc05iujvEtZ6WWvwFSBT2PippsUjnDMkHWm QQINY1KQiZJyF9v40Vu4Y70DhLASywhGyo0ShQ51IH7yf87Lcz19qgeDZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6UDqg5Ix+UcU1pEFMQ4Bfrb8q7MB8GA1UdIwQY MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt MDc1ZGM0NjA0YWVmLzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSmpDgLS 76mEIuHS+EdDGaQZ3cKOX0cxFfNrTgqSF3SSc45s7wq9bkF19xz/BzbQNBkoa5IK 0PYMsWNdVS4Sk7hre9fFk2pwiaWv+QJchSezuN202Zd2GsiOqBIps0uAg0J0qqd/ KBBNMiFQsPDZ3GBGjoFfcFQ1TTpISazS7TU8uB3Grd+SejmddXYS/K2ZaMskkp69 lYdb0P0yHUuEyZc9hdfY0CaVLBEpy+ZgeljMU9uafa+sVtueqPyrdWDV1k41vRem e15UwAfnhowD43Q1pL0NKJ4tA0fM0RPxyooC0UHX+C/oJZCpMlfPVczkOCwm3Cu0 1RHgvtTCaCueBw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:25 2025 by rpki-client