This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json) Hash identifier: F6rLGX0FgmVfU80/QsmzVFpisrpOuWUs4LT/hpAuIQs= Subject key identifier: E1:3C:AE:8A:6C:8C:EA:D0:D0:FF:A3:C7:E5:1D:1C:C4:8D:EA:4F:29 Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2 Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2 Certificate serial: 019B2250C824E090FA00F78C04790855CFC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft Manifest number: 0385 Signing time: Mon 15 Dec 2025 14:01:17 +0000 Manifest this update: Mon 15 Dec 2025 14:01:17 +0000 Manifest next update: Tue 16 Dec 2025 14:01:17 +0000 Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: SLhUW580/25k9utR7Gz4kwf7j4F+yh31vWv80E8LPQ0=) 2: oqk5KJmujXiysaX8VXypTA2T7SQ.roa (hash: 4j1HmrhOCzuuehX5YxvRwuekL1PdjN0/UeE0+HMMfsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:c8:24:e0:90:fa:00:f7:8c:04:79:08:55:cf:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2 Validity Not Before: Dec 15 14:01:17 2025 GMT Not After : Dec 16 14:01:17 2025 GMT Subject: CN=e13cae8a6c8cead0d0ffa3c7e51d1cc48dea4f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:88:48:36:1c:5a:d2:cb:73:6f:75:89:bf: 54:7c:ff:53:20:05:a1:9d:5a:13:10:ad:8f:ab:f7: fa:d2:73:00:01:75:fe:70:4f:9f:c1:35:f1:9d:87: 75:9e:5f:a7:2c:00:3f:d0:b7:14:23:98:9f:95:eb: 8c:db:6a:c3:66:7a:ea:ff:43:be:9e:88:44:b7:e8: cd:2d:a3:f6:d4:32:84:c7:fb:55:f2:55:0b:24:41: e8:ef:3c:5a:7b:4c:ea:b4:d8:5e:8a:5d:7c:d6:dc: 5e:5f:02:d2:8f:7d:10:43:7d:bd:be:ee:58:bb:1a: 9c:d7:4e:98:9d:69:07:a8:f7:3a:00:43:db:ae:d6: 0e:71:7e:30:2c:3e:02:7f:ad:90:18:d4:ad:0f:6f: 7c:0b:c4:bd:02:2a:9d:37:22:cb:7d:7b:f2:ee:d1: ab:f4:54:d4:b5:57:6c:b5:ed:9c:9b:f7:24:c6:db: 7d:38:67:a2:48:2a:c8:01:28:b9:32:56:01:71:cd: a5:cb:78:01:4c:bc:6d:93:74:5c:9c:ae:d0:60:7b: cc:b5:fd:8d:bb:90:24:76:89:38:b7:3a:39:42:4b: 0b:20:55:fa:8b:28:51:b2:96:f8:4f:94:d5:f0:b5: 57:bd:2b:1f:10:1c:3d:b4:8e:f0:41:b6:e7:c5:6b: a9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3C:AE:8A:6C:8C:EA:D0:D0:FF:A3:C7:E5:1D:1C:C4:8D:EA:4F:29 X509v3 Authority Key Identifier: keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ac:6b:3f:53:f0:9c:09:31:e8:27:24:17:30:a6:94:62:e3: 6a:53:aa:0d:d3:4d:0c:1a:1a:7c:3b:7d:bb:59:f9:02:c8:fe: dd:49:3c:71:ba:59:50:c9:61:84:e7:ea:81:d0:11:fe:45:e6: 39:8e:e9:c6:14:c6:3a:3f:51:24:5e:aa:4e:3d:dd:28:0e:b0: 6e:65:01:70:0e:7b:1b:e3:47:dc:85:ce:b5:4d:89:b9:ae:27: 91:62:70:4f:0f:b2:ab:d1:fb:47:e8:15:b5:da:b4:2f:82:a1: ec:0b:26:f8:16:34:7c:4f:4d:f1:c5:f7:a0:7c:23:bc:28:46: a1:04:8c:c2:8d:79:fe:16:3e:c9:e6:99:f1:d2:b2:4e:94:3b: ab:6b:f3:56:6d:61:fc:41:68:51:2c:2e:43:b2:dc:a6:5d:c6: 14:6f:c7:63:c0:9d:8e:3f:36:f0:d8:38:9e:d6:35:7b:d4:50: ab:3c:3f:7b:36:6a:65:e4:16:ac:6f:92:85:c7:82:2f:20:b8: c7:37:1c:5e:a5:35:71:22:f2:fa:7c:da:6f:99:67:c9:65:77: ee:ea:78:68:07:41:9a:0f:8f:2f:1a:0b:78:8e:f1:55:65:66: 9e:06:92:1d:fa:cd:52:5e:a4:99:8a:63:39:5c:d5:1e:04:c4: 6f:16:cb:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUMgk4JD6APeMBHkIVc/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmVmOTdjYTAxMGJhZDRmZjU5ZWY3ZDJiNmJjOTA3Nzg2 MGFhYjIwHhcNMjUxMjE1MTQwMTE3WhcNMjUxMjE2MTQwMTE3WjAzMTEwLwYDVQQD EyhlMTNjYWU4YTZjOGNlYWQwZDBmZmEzYzdlNTFkMWNjNDhkZWE0ZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhmISDYcWtLLc291ib9UfP9TIAWh nVoTEK2Pq/f60nMAAXX+cE+fwTXxnYd1nl+nLAA/0LcUI5ifleuM22rDZnrq/0O+ nohEt+jNLaP21DKEx/tV8lULJEHo7zxae0zqtNheil181txeXwLSj30QQ329vu5Y uxqc106YnWkHqPc6AEPbrtYOcX4wLD4Cf62QGNStD298C8S9AiqdNyLLfXvy7tGr 9FTUtVdste2cm/ckxtt9OGeiSCrIASi5MlYBcc2ly3gBTLxtk3RcnK7QYHvMtf2N u5Akdok4tzo5QksLIFX6iyhRspb4T5TV8LVXvSsfEBw9tI7wQbbnxWupqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOE8ropsjOrQ0P+jx+UdHMSN6k8pMB8GA1UdIwQY MBaAFNr++XygELrU/1nvfStryQd4YKqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgt YmZhOTRlYjFhYTAyLzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgtYmZhOTRlYjFhYTAy LzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaxrP1Pw nAkx6CckFzCmlGLjalOqDdNNDBoafDt9u1n5Asj+3Uk8cbpZUMlhhOfqgdAR/kXm OY7pxhTGOj9RJF6qTj3dKA6wbmUBcA57G+NH3IXOtU2Jua4nkWJwTw+yq9H7R+gV tdq0L4Kh7Asm+BY0fE9N8cX3oHwjvChGoQSMwo15/hY+yeaZ8dKyTpQ7q2vzVm1h /EFoUSwuQ7Lcpl3GFG/HY8Cdjj828Ng4ntY1e9RQqzw/ezZqZeQWrG+ShceCLyC4 xzccXqU1cSLy+nzab5lnyWV37up4aAdBmg+PLxoLeI7xVWVmngaSHfrNUl6kmYpj OVzVHgTEbxbLpA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:54:35 2025 by rpki-client