This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json) Hash identifier: WMfC2IuNhwEZNJLdavk2vadHYaopdCY9qhKZetBKMJ8= Subject key identifier: 9D:3F:4A:30:ED:3D:FF:B3:1B:9E:0B:4D:20:D2:78:32:5F:ED:93:E8 Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc Certificate serial: 019B7F709DD3C7102CAF892D40E1A3C13D63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft Manifest number: 0F40 Signing time: Fri 02 Jan 2026 16:00:45 +0000 Manifest this update: Fri 02 Jan 2026 16:00:45 +0000 Manifest next update: Sat 03 Jan 2026 16:00:45 +0000 Files and hashes: 1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=) 2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: DNOMLghTDJpaFug+3RSUMlszbbMaBhfwH3y3335jHGA=) 3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=) 4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=) 5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:70:9d:d3:c7:10:2c:af:89:2d:40:e1:a3:c1:3d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc Validity Not Before: Jan 2 16:00:45 2026 GMT Not After : Jan 3 16:00:45 2026 GMT Subject: CN=9d3f4a30ed3dffb31b9e0b4d20d278325fed93e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:f5:94:6e:5f:eb:d7:36:2b:32:e0:fe:9f: 63:9e:15:1c:c1:29:2a:46:db:aa:07:b8:9c:cb:a0: 56:1e:6e:40:d8:92:a8:14:1a:25:f6:9c:6a:57:f7: 87:c0:be:f5:87:0a:a8:f6:41:17:f7:57:a5:d5:e1: 2e:06:c8:54:dd:28:18:bd:b5:5d:9a:9b:1e:17:e3: b2:31:eb:79:c4:7f:51:f9:b1:d3:3a:31:ef:fb:5e: 0d:2d:70:b0:ae:2e:7d:3d:76:54:e1:ef:b9:29:c6: 1f:85:4b:98:aa:f9:c2:5e:92:fd:0b:01:33:d1:83: 4b:c9:2c:6e:33:5c:f6:c2:ec:61:2b:9f:bd:d5:1d: f0:7b:c8:ae:59:4d:3b:f6:ab:54:d1:fc:75:a7:ca: a0:6d:8b:5a:88:a0:79:b9:e2:11:fe:43:ce:c3:53: 57:38:93:08:bc:10:a4:d0:12:61:4e:44:28:a5:f0: a0:75:b2:d8:71:c5:4d:5a:64:cf:d1:0f:37:56:01: f2:2a:b3:38:94:8f:1e:20:c1:a2:4e:af:1e:72:8b: 25:5e:8f:05:75:1a:07:0d:84:cf:72:45:e0:3d:0c: 73:69:2d:6f:8f:d2:cc:c5:c9:74:63:d0:75:c4:3c: 85:41:50:df:ec:13:38:db:59:c8:14:74:ad:1f:0f: fa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3F:4A:30:ED:3D:FF:B3:1B:9E:0B:4D:20:D2:78:32:5F:ED:93:E8 X509v3 Authority Key Identifier: keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c0:4a:c1:b2:ec:30:e6:78:c1:25:71:11:20:3e:45:19:cd: e6:2c:f6:2f:54:7c:9d:27:25:94:1b:f8:65:9f:68:09:e3:59: d1:c8:33:ca:3b:9b:24:76:79:1b:ab:64:75:36:ba:ca:87:58: 31:33:ba:57:21:e9:45:ba:bf:68:df:d8:da:bf:58:14:0a:be: d0:64:a1:95:fb:2e:38:58:56:a2:03:e2:8d:bf:0b:8c:19:b3: 09:ff:2d:c7:78:82:1c:12:9a:a3:f8:1c:95:19:ea:b4:f1:4c: 54:6a:dc:5c:91:2b:12:f5:96:62:92:c0:fa:97:60:12:34:01: ea:43:20:69:6f:b2:9f:0c:cd:bd:21:0a:34:4f:8b:d4:d6:13: 6b:3b:64:0d:3c:dc:ff:f7:1e:8e:c1:13:d3:04:d4:a4:98:0a: 3b:d9:69:83:cd:bf:5e:15:76:91:c3:c3:5d:1e:1b:b5:e5:2c: 94:b0:a1:e1:78:4f:11:a9:32:35:c8:64:2f:30:5c:ea:6f:60: c7:36:44:b2:f0:a8:fb:4e:d5:46:60:ff:9e:da:72:15:75:b0: e1:63:e8:bf:4f:97:94:f7:41:bd:78:fa:e2:62:84:42:1c:ef: 7b:0b:70:76:9e:de:cd:50:e5:78:3d:2b:d1:26:8d:05:4b:d2: 02:03:4d:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/cJ3TxxAsr4ktQOGjwT1jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBi NmJkY2MwHhcNMjYwMTAyMTYwMDQ1WhcNMjYwMTAzMTYwMDQ1WjAzMTEwLwYDVQQD Eyg5ZDNmNGEzMGVkM2RmZmIzMWI5ZTBiNGQyMGQyNzgzMjVmZWQ5M2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy71lG5f69c2KzLg/p9jnhUcwSkq RtuqB7icy6BWHm5A2JKoFBol9pxqV/eHwL71hwqo9kEX91el1eEuBshU3SgYvbVd mpseF+OyMet5xH9R+bHTOjHv+14NLXCwri59PXZU4e+5KcYfhUuYqvnCXpL9CwEz 0YNLySxuM1z2wuxhK5+91R3we8iuWU079qtU0fx1p8qgbYtaiKB5ueIR/kPOw1NX OJMIvBCk0BJhTkQopfCgdbLYccVNWmTP0Q83VgHyKrM4lI8eIMGiTq8ecoslXo8F dRoHDYTPckXgPQxzaS1vj9LMxcl0Y9B1xDyFQVDf7BM421nIFHStHw/6iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0/SjDtPf+zG54LTSDSeDJf7ZPoMB8GA1UdIwQY MBaAFNrDJjKqkVQlPG3NIzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2Mjct MjQ2NTRlOTQxYzEyLzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEy LzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcBKwbLs MOZ4wSVxESA+RRnN5iz2L1R8nScllBv4ZZ9oCeNZ0cgzyjubJHZ5G6tkdTa6yodY MTO6VyHpRbq/aN/Y2r9YFAq+0GShlfsuOFhWogPijb8LjBmzCf8tx3iCHBKao/gc lRnqtPFMVGrcXJErEvWWYpLA+pdgEjQB6kMgaW+ynwzNvSEKNE+L1NYTaztkDTzc //cejsET0wTUpJgKO9lpg82/XhV2kcPDXR4bteUslLCh4XhPEakyNchkLzBc6m9g xzZEsvCo+07VRmD/ntpyFXWw4WPov0+XlPdBvXj64mKEQhzvewtwdp7ezVDleD0r 0SaNBUvSAgNNyw== -----END CERTIFICATE-----Generated at Fri Jan 2 23:51:57 2026 by rpki-client