This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json) Hash identifier: ojlcbduErl7sA1XJCzlurx6iip5lOcRtdB8b2dR1zSo= Subject key identifier: 54:BE:23:1D:EE:97:8F:06:39:61:5F:63:5A:C1:5D:F3:D3:C2:59:78 Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9 Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9 Certificate serial: 019B26646CB1769866267B9EAC1213FB2634 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft Manifest number: 082E Signing time: Tue 16 Dec 2025 09:01:14 +0000 Manifest this update: Tue 16 Dec 2025 09:01:14 +0000 Manifest next update: Wed 17 Dec 2025 09:01:14 +0000 Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: KWfCSmFSYzBAl/ap/cf91yf6aIv8ni0hHWxoJ8IvAbY=) 2: qARNDLbWZGpXclqzpXtzfvYP72c.roa (hash: yeRNjTwXDaIWE/tdw8m2d67pmit4bLUSMZLje7zj8IA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:6c:b1:76:98:66:26:7b:9e:ac:12:13:fb:26:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9 Validity Not Before: Dec 16 09:01:14 2025 GMT Not After : Dec 17 09:01:14 2025 GMT Subject: CN=54be231dee978f0639615f635ac15df3d3c25978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8c:9f:4d:54:e0:38:27:47:75:a0:fa:61:fb: 06:d1:96:e8:98:ba:03:de:cd:52:8b:c6:51:68:a5: 80:59:23:4d:d4:a4:3a:6d:b6:3f:67:cc:1e:2d:67: 22:d8:be:ed:3d:2f:73:7e:f6:9f:1b:03:ef:13:b1: fb:ca:7e:76:7f:40:33:ba:0c:54:f7:85:fe:42:54: 9b:96:96:81:7a:b5:a4:00:f2:27:4d:29:28:57:ef: ae:5d:35:31:b3:7a:30:85:e8:26:a6:1e:99:a0:fa: 2d:46:ff:81:49:0a:22:1d:d9:80:f7:8b:07:ff:f6: 80:ef:2f:3b:b4:18:98:b6:a6:e9:1e:84:72:46:21: 47:c7:9e:cc:89:92:af:cf:1a:9e:0c:ac:62:a8:aa: 58:ec:90:2a:a5:de:98:aa:5d:7d:81:91:d1:1e:15: 36:00:21:b4:43:2a:a5:10:a3:70:cc:94:a0:2c:80: 93:3f:52:98:02:8e:75:f8:1f:4a:db:96:bf:7e:ec: 4d:d2:83:17:e0:87:ad:f8:d8:1d:12:00:cd:40:35: 74:ad:52:c0:6b:1a:d5:cc:1a:f1:45:cc:79:75:4e: 88:25:55:de:88:35:5e:ff:6f:af:a7:0b:76:8d:dc: 58:e6:d0:ed:83:36:b8:05:28:ef:3d:f7:c2:73:ca: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BE:23:1D:EE:97:8F:06:39:61:5F:63:5A:C1:5D:F3:D3:C2:59:78 X509v3 Authority Key Identifier: keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0b:2b:1e:22:95:d8:7d:69:37:f8:32:18:14:42:0b:f7:df: cd:94:93:f2:64:8b:0c:bf:ac:ef:71:c3:8c:f0:59:a0:ad:19: e6:c7:a8:78:12:bb:45:ca:dd:47:17:93:bb:95:22:e2:f0:1e: 15:11:2d:56:5a:bb:33:d5:ad:99:7a:74:bb:41:69:1b:58:15: 52:8c:1c:69:82:90:f6:85:e1:d1:74:75:75:b1:51:31:15:78: 26:9d:2b:2b:e1:fc:9b:3e:a4:f1:89:36:3f:c6:81:67:13:8f: 9f:e5:7f:c9:46:84:4b:46:2e:d1:d2:07:dc:72:77:2e:c5:24: 09:6a:64:a4:b8:57:18:14:d3:50:f5:27:83:12:cf:a9:9f:f7: 9f:00:42:a7:eb:78:0f:82:66:35:bd:0c:36:2e:1e:c5:27:9c: a5:b4:ea:a5:a8:33:57:b5:fd:09:af:29:d4:2d:74:11:25:e6: 8d:e2:e2:5a:0c:8b:18:6d:2a:f2:55:5e:b4:ab:b3:33:26:24: 67:e5:f8:54:63:41:ab:30:30:d4:87:73:63:9d:d6:42:be:3f: 67:0c:31:6a:2a:4c:1f:2a:44:8f:b3:80:c7:4f:84:0d:91:80: d8:ec:45:0f:32:65:a7:c6:0c:e3:5c:07:22:10:2c:ad:fb:df: 95:5f:6a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZGyxdphmJnuerBIT+yY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMWI5ZmU4ZjFhMzM5MTdmZWU3ZTRkYmU5ZmFiOTI1ZWI4 NjI1YTkwHhcNMjUxMjE2MDkwMTE0WhcNMjUxMjE3MDkwMTE0WjAzMTEwLwYDVQQD Eyg1NGJlMjMxZGVlOTc4ZjA2Mzk2MTVmNjM1YWMxNWRmM2QzYzI1OTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYyfTVTgOCdHdaD6YfsG0ZbomLoD 3s1Si8ZRaKWAWSNN1KQ6bbY/Z8weLWci2L7tPS9zfvafGwPvE7H7yn52f0AzugxU 94X+QlSblpaBerWkAPInTSkoV++uXTUxs3owhegmph6ZoPotRv+BSQoiHdmA94sH //aA7y87tBiYtqbpHoRyRiFHx57MiZKvzxqeDKxiqKpY7JAqpd6Yql19gZHRHhU2 ACG0QyqlEKNwzJSgLICTP1KYAo51+B9K25a/fuxN0oMX4Iet+NgdEgDNQDV0rVLA axrVzBrxRcx5dU6IJVXeiDVe/2+vpwt2jdxY5tDtgza4BSjvPffCc8qP7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFS+Ix3ul48GOWFfY1rBXfPTwll4MB8GA1UdIwQY MBaAFNobn+jxozkX/ufk2+n6uSXrhiWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80MmExNjYtOGE4Ni00OGRhLWJiOTYt NzlmZDUwMjNkZTM2LzEvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80MmExNjYtOGE4Ni00OGRhLWJiOTYtNzlmZDUwMjNkZTM2 LzEvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwsrHiKV 2H1pN/gyGBRCC/ffzZST8mSLDL+s73HDjPBZoK0Z5seoeBK7RcrdRxeTu5Ui4vAe FREtVlq7M9WtmXp0u0FpG1gVUowcaYKQ9oXh0XR1dbFRMRV4Jp0rK+H8mz6k8Yk2 P8aBZxOPn+V/yUaES0Yu0dIH3HJ3LsUkCWpkpLhXGBTTUPUngxLPqZ/3nwBCp+t4 D4JmNb0MNi4exSecpbTqpagzV7X9Ca8p1C10ESXmjeLiWgyLGG0q8lVetKuzMyYk Z+X4VGNBqzAw1IdzY53WQr4/ZwwxaipMHypEj7OAx0+EDZGA2OxFDzJlp8YM41wH IhAsrfvflV9q5A== -----END CERTIFICATE-----Generated at Tue Dec 16 14:04:22 2025 by rpki-client