This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json) Hash identifier: fRR0zFh37bWkNbsifYKOdC58Zr3/qN0XzDKPqBrHmaw= Subject key identifier: 54:96:49:B2:1F:B8:7A:C6:B1:66:58:D3:7B:74:99:BB:E7:BC:6D:88 Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9 Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9 Certificate serial: 019B39B3F4E53FBF5335D367EDB7A0120723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft Manifest number: 0838 Signing time: Sat 20 Dec 2025 03:00:53 +0000 Manifest this update: Sat 20 Dec 2025 03:00:53 +0000 Manifest next update: Sun 21 Dec 2025 03:00:53 +0000 Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: ZpFkGJ/fFB8zOUiGUrbOL0Lrl/T5YfSnhCveIVfWFQk=) 2: qARNDLbWZGpXclqzpXtzfvYP72c.roa (hash: yeRNjTwXDaIWE/tdw8m2d67pmit4bLUSMZLje7zj8IA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:f4:e5:3f:bf:53:35:d3:67:ed:b7:a0:12:07:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9 Validity Not Before: Dec 20 03:00:53 2025 GMT Not After : Dec 21 03:00:53 2025 GMT Subject: CN=549649b21fb87ac6b16658d37b7499bbe7bc6d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:82:8c:21:c0:03:8c:5a:f7:fc:2e:40:6f:9f: c9:ab:90:72:ea:43:55:70:f7:8b:01:a6:59:59:28: 79:d6:f8:e2:6d:9a:55:8b:dc:4b:75:17:90:21:04: a7:17:6d:b6:7b:d6:b4:75:b6:b1:58:75:4a:31:07: e9:50:c8:41:b5:8a:1b:a5:49:e2:da:bf:ae:08:bd: e4:14:63:d9:39:8d:dd:0f:7b:9b:fb:6b:0f:35:e6: be:bf:9f:0a:34:09:3a:ed:ea:02:c0:e6:a2:b6:46: 00:b9:a3:e9:ec:59:10:e3:25:83:a7:c4:55:20:47: 71:a6:8d:57:f1:83:e1:2a:21:84:93:83:d4:ce:07: 42:cc:b2:47:32:01:6f:87:cd:da:56:6e:4b:96:dd: 11:89:49:d4:4e:66:35:65:6a:d7:8c:df:d2:7c:75: 2a:fe:07:d0:0c:b3:e5:bc:b4:ba:fb:09:9d:4d:71: 17:f4:ed:ed:8c:b9:0f:9d:54:1d:52:ca:bf:d4:2e: eb:33:5c:1c:c4:4a:16:f9:96:fc:51:8a:a8:e8:37: e7:b4:36:33:ac:bd:f1:cf:a7:bd:92:1f:36:4c:1d: 3d:57:19:93:40:31:6a:e1:fd:db:3a:11:dd:a9:1e: 02:16:ee:c6:48:4d:e0:db:fd:67:b2:ec:4d:ab:d3: 6b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:96:49:B2:1F:B8:7A:C6:B1:66:58:D3:7B:74:99:BB:E7:BC:6D:88 X509v3 Authority Key Identifier: keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e5:26:0b:3e:a6:fc:8f:ca:fe:60:5c:b9:79:51:a9:84:a4: 7e:93:d6:b6:da:30:05:1d:0e:97:8d:1d:4b:da:0f:ca:59:0c: 7e:35:0b:99:50:d3:76:ac:66:29:56:fb:9c:59:87:2f:25:44: f8:3b:ba:ab:28:c3:77:f4:d5:1a:11:59:40:f3:da:09:fa:bf: f2:bf:57:37:7a:75:a2:bf:0e:eb:46:13:03:50:ac:a6:8e:42: be:90:c7:7c:74:6e:a4:f7:ac:32:3a:7d:5d:b7:2f:ba:ef:ed: 1a:a1:8f:5a:eb:24:85:a4:d9:b9:5a:54:ae:dd:2e:4a:e7:5f: 76:51:7f:e0:bd:f1:2c:54:0c:3a:2b:82:e5:0a:d0:ee:b3:65: da:7c:8f:42:9f:02:e0:11:ff:8c:85:7b:0a:1b:23:5e:b5:54: bd:87:99:b8:57:c1:8e:7c:71:e5:12:ad:f2:f3:90:2d:15:ad: 9b:07:b7:ea:1f:f2:02:ba:ef:08:8a:e3:8a:3f:8b:3b:4f:b7: 1c:dc:9e:32:62:7e:47:2a:09:a2:22:20:01:4b:b3:79:b8:62: d2:bd:d2:b1:2d:a2:67:57:fc:51:0c:23:ea:4e:5b:ce:30:42: 85:be:96:a3:5e:fb:70:70:d0:8f:6d:9c:22:94:03:4a:32:74: c3:55:15:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s/TlP79TNdNn7begEgcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMWI5ZmU4ZjFhMzM5MTdmZWU3ZTRkYmU5ZmFiOTI1ZWI4 NjI1YTkwHhcNMjUxMjIwMDMwMDUzWhcNMjUxMjIxMDMwMDUzWjAzMTEwLwYDVQQD Eyg1NDk2NDliMjFmYjg3YWM2YjE2NjU4ZDM3Yjc0OTliYmU3YmM2ZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YKMIcADjFr3/C5Ab5/Jq5By6kNV cPeLAaZZWSh51vjibZpVi9xLdReQIQSnF222e9a0dbaxWHVKMQfpUMhBtYobpUni 2r+uCL3kFGPZOY3dD3ub+2sPNea+v58KNAk67eoCwOaitkYAuaPp7FkQ4yWDp8RV IEdxpo1X8YPhKiGEk4PUzgdCzLJHMgFvh83aVm5Llt0RiUnUTmY1ZWrXjN/SfHUq /gfQDLPlvLS6+wmdTXEX9O3tjLkPnVQdUsq/1C7rM1wcxEoW+Zb8UYqo6DfntDYz rL3xz6e9kh82TB09VxmTQDFq4f3bOhHdqR4CFu7GSE3g2/1nsuxNq9Nr9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSWSbIfuHrGsWZY03t0mbvnvG2IMB8GA1UdIwQY MBaAFNobn+jxozkX/ufk2+n6uSXrhiWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80MmExNjYtOGE4Ni00OGRhLWJiOTYt NzlmZDUwMjNkZTM2LzEvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80MmExNjYtOGE4Ni00OGRhLWJiOTYtNzlmZDUwMjNkZTM2 LzEvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+UmCz6m /I/K/mBcuXlRqYSkfpPWttowBR0Ol40dS9oPylkMfjULmVDTdqxmKVb7nFmHLyVE +Du6qyjDd/TVGhFZQPPaCfq/8r9XN3p1or8O60YTA1Cspo5CvpDHfHRupPesMjp9 Xbcvuu/tGqGPWuskhaTZuVpUrt0uSudfdlF/4L3xLFQMOiuC5QrQ7rNl2nyPQp8C 4BH/jIV7ChsjXrVUvYeZuFfBjnxx5RKt8vOQLRWtmwe36h/yArrvCIrjij+LO0+3 HNyeMmJ+RyoJoiIgAUuzebhi0r3SsS2iZ1f8UQwj6k5bzjBChb6Wo177cHDQj22c IpQDSjJ0w1UVog== -----END CERTIFICATE-----Generated at Sat Dec 20 10:38:37 2025 by rpki-client