This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json) Hash identifier: ehWSWBHhKKoqzt5Vxg4UavIGXyYQUJlVjWTXIOG0v44= Subject key identifier: F7:D5:AA:EF:BC:95:06:06:FD:60:8A:3E:9F:61:53:32:DA:6A:7F:04 Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56 Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256 Certificate serial: 019B318C6CF9005757B33F9212997149EC07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft Manifest number: 1449 Signing time: Thu 18 Dec 2025 13:00:45 +0000 Manifest this update: Thu 18 Dec 2025 13:00:45 +0000 Manifest next update: Fri 19 Dec 2025 13:00:45 +0000 Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: wn5yNP3AIzPAdxMQTTAhy1mtTbRsNZlM/7mJh6AyeyU=) 2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=) 3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:6c:f9:00:57:57:b3:3f:92:12:99:71:49:ec:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256 Validity Not Before: Dec 18 13:00:45 2025 GMT Not After : Dec 19 13:00:45 2025 GMT Subject: CN=f7d5aaefbc950606fd608a3e9f615332da6a7f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:f0:b0:9e:1b:a7:5c:eb:e7:4c:03:be:d4: 05:e8:56:db:80:b4:6a:c8:a6:fa:0a:c3:8c:d4:87: 3b:16:69:64:3b:37:59:7f:fc:90:5c:b9:ee:dd:d1: 3b:a0:f1:ed:0f:23:ba:28:37:bb:a7:cb:2d:f4:5e: ac:f1:4a:ce:27:74:21:c5:3d:c0:7e:b6:12:1e:44: 05:06:21:00:95:11:59:75:63:12:83:71:34:f7:3e: 55:2f:db:53:36:fa:ab:6b:1c:d1:7e:30:df:a4:83: 58:b9:fa:da:4a:c6:29:cb:2d:c4:eb:9e:83:b8:42: cc:af:33:c0:70:db:da:55:65:c3:f6:6c:e8:80:fa: 65:73:da:5f:1e:ed:14:89:37:f3:98:0f:e3:9e:f3: 6e:00:0b:32:d0:39:93:71:dc:b0:51:34:b4:15:5f: 0e:44:94:28:14:07:44:f7:b0:c7:d6:ca:18:2d:90: 33:7e:24:1c:48:cc:c2:bb:4d:fd:3b:ca:bf:0a:d2: 2b:f1:4a:f2:d8:39:00:d0:d4:09:06:1f:56:0f:3d: 4f:1d:d6:f6:1c:9a:f8:6e:3d:fc:01:a2:73:a2:30: da:a5:39:1d:f6:98:0b:9f:10:18:6a:f8:de:b8:44: b0:60:be:cd:e0:a4:54:57:79:db:58:b1:a2:da:51: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D5:AA:EF:BC:95:06:06:FD:60:8A:3E:9F:61:53:32:DA:6A:7F:04 X509v3 Authority Key Identifier: keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1d:c1:f3:47:82:e2:04:d7:3a:c9:cd:59:af:e6:b9:23:16: 09:c7:55:95:a1:46:e3:4a:55:af:12:8f:cd:40:00:8d:2c:ae: dd:f1:34:6d:10:44:1d:2f:e9:10:a7:75:0e:03:8c:b5:95:0a: cd:bd:74:7e:0c:5e:58:d4:f5:19:3b:14:e3:f0:ad:f9:ff:43: b8:fd:3f:cb:f2:bb:24:71:36:bd:39:c6:fd:8d:2c:4c:b3:87: 7c:02:98:dc:fb:6c:4b:7f:07:70:90:20:f0:f2:93:e3:28:a8: e5:34:80:e4:1f:43:19:03:60:08:1e:bf:1c:49:3e:58:20:49: b4:d2:c6:91:30:14:7f:1c:5f:2c:27:de:b1:c7:e3:92:1a:47: 5e:48:de:b4:e0:c8:b8:f7:4c:b3:55:4a:3f:df:7b:a8:f7:1e: b8:1a:2b:86:67:17:21:11:2e:f4:06:5f:68:c1:d5:6a:4e:bd: d0:5d:d1:f6:c4:0a:10:09:0f:25:bf:6a:b4:8f:f9:e0:33:41: ac:a1:80:32:fe:1b:0a:68:82:1c:04:cc:c2:36:88:71:0c:4d: 63:0c:f5:67:d7:a0:ac:52:2d:6f:33:df:43:a5:6d:cc:b4:83: 77:2c:09:91:eb:46:d2:a9:68:31:47:99:b9:31:40:86:a6:5a: d6:2f:6d:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjGz5AFdXsz+SEplxSewHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4 NDEyNTYwHhcNMjUxMjE4MTMwMDQ1WhcNMjUxMjE5MTMwMDQ1WjAzMTEwLwYDVQQD EyhmN2Q1YWFlZmJjOTUwNjA2ZmQ2MDhhM2U5ZjYxNTMzMmRhNmE3ZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr7wsJ4bp1zr50wDvtQF6FbbgLRq yKb6CsOM1Ic7FmlkOzdZf/yQXLnu3dE7oPHtDyO6KDe7p8st9F6s8UrOJ3QhxT3A frYSHkQFBiEAlRFZdWMSg3E09z5VL9tTNvqraxzRfjDfpINYufraSsYpyy3E656D uELMrzPAcNvaVWXD9mzogPplc9pfHu0UiTfzmA/jnvNuAAsy0DmTcdywUTS0FV8O RJQoFAdE97DH1soYLZAzfiQcSMzCu039O8q/CtIr8Ury2DkA0NQJBh9WDz1PHdb2 HJr4bj38AaJzojDapTkd9pgLnxAYavjeuESwYL7N4KRUV3nbWLGi2lGqIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfVqu+8lQYG/WCKPp9hUzLaan8EMB8GA1UdIwQY MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt NWQ1YWVjMjBmYzlhLzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfx3B80eC 4gTXOsnNWa/muSMWCcdVlaFG40pVrxKPzUAAjSyu3fE0bRBEHS/pEKd1DgOMtZUK zb10fgxeWNT1GTsU4/Ct+f9DuP0/y/K7JHE2vTnG/Y0sTLOHfAKY3PtsS38HcJAg 8PKT4yio5TSA5B9DGQNgCB6/HEk+WCBJtNLGkTAUfxxfLCfescfjkhpHXkjetODI uPdMs1VKP997qPceuBorhmcXIREu9AZfaMHVak690F3R9sQKEAkPJb9qtI/54DNB rKGAMv4bCmiCHATMwjaIcQxNYwz1Z9egrFItbzPfQ6VtzLSDdywJketG0qloMUeZ uTFAhqZa1i9tEQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:38:29 2025 by rpki-client