This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json) Hash identifier: JbVYzY5o7J5118Ivj1xXmyi5Sw/3sArIwdObnWgAdyM= Subject key identifier: 5A:E0:84:B8:AC:B9:9D:AB:EB:99:71:DD:51:D4:73:7B:E2:AE:80:8D Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97 Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97 Certificate serial: 019B18A8C26FC9F86738E435F00219DC5B08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft Manifest number: 0ABB Signing time: Sat 13 Dec 2025 17:01:11 +0000 Manifest this update: Sat 13 Dec 2025 17:01:11 +0000 Manifest next update: Sun 14 Dec 2025 17:01:11 +0000 Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: nnActWSUES0CU+agwjn6D4ntQsm/bWksRakcMx6WFrs=) 2: bNv8eusD3Csjo1u3iFVspzQvWAc.roa (hash: GAiEsWZddqBZP7L/gvAH0WfEgVNJ0dl2gxsvC2wdCyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:c2:6f:c9:f8:67:38:e4:35:f0:02:19:dc:5b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97 Validity Not Before: Dec 13 17:01:11 2025 GMT Not After : Dec 14 17:01:11 2025 GMT Subject: CN=5ae084b8acb99dabeb9971dd51d4737be2ae808d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:50:8b:a7:dc:11:f2:18:b8:f0:3f:ff:33: c2:d2:a2:fb:c5:df:e7:04:61:4b:75:c1:f7:88:46: 6f:1f:d6:ec:86:e5:a6:a9:06:fd:e4:dd:10:eb:53: 51:59:d7:79:21:36:b6:58:61:3e:ea:42:a0:0b:e1: 15:62:e6:9e:50:e1:65:da:2e:c1:ab:4b:4b:89:8b: 8b:96:65:fd:32:53:0c:64:06:68:9d:bb:ee:cd:d0: dc:1f:a5:20:bc:81:c2:66:6a:1e:a7:ca:22:a3:e4: 36:fc:8b:e6:f5:b8:dd:70:9e:58:44:65:8d:c8:9c: 68:e4:f5:49:71:01:89:3b:56:0a:ac:f0:a0:ac:8e: cb:c5:3c:1b:3b:3e:54:e4:f6:36:b8:a9:e4:04:bb: 5d:c8:d8:3c:12:d8:45:bf:ca:f6:ef:55:02:44:65: ef:52:3e:51:12:22:7b:1d:b1:f4:9c:26:e8:0f:ab: 19:83:12:1f:4b:5d:49:85:96:47:8e:3a:6c:56:79: 08:e7:60:e2:c6:dd:33:96:fd:5a:1f:12:60:72:a9: 78:e2:d9:35:85:7e:ae:19:fc:63:0f:e0:30:a8:45: 8c:49:f5:66:bd:76:71:37:42:57:7d:b2:be:45:94: bd:59:c3:71:5b:24:fe:59:69:b1:82:26:40:22:bf: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E0:84:B8:AC:B9:9D:AB:EB:99:71:DD:51:D4:73:7B:E2:AE:80:8D X509v3 Authority Key Identifier: keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e8:e6:29:22:70:d8:0e:00:80:20:64:2e:70:9b:4c:ab:d3: e4:93:42:43:c5:3d:e7:b1:1d:53:98:cf:b2:64:7d:66:e2:8e: 5f:95:b8:e6:ee:b1:da:22:12:fe:1a:79:ac:33:9c:e4:aa:8f: 90:40:06:09:e5:f2:61:e5:b0:b6:f3:45:5f:89:33:e1:29:62: cc:fc:3a:a2:9a:ec:08:37:fa:06:93:45:96:74:72:53:e8:95: 58:6d:fc:44:de:38:4c:3c:a9:6e:36:bb:4f:fa:45:09:d6:a3: cd:1d:b9:4c:e3:10:7d:c7:74:ec:0e:9a:b2:10:0c:82:aa:dd: 9e:9b:70:14:56:06:4f:59:88:56:62:98:46:a7:26:01:af:41: 54:de:01:c7:1c:e2:fd:fb:0f:aa:5c:5a:2e:37:45:46:de:d6: 93:20:83:2c:56:80:79:3c:90:b3:96:8e:ee:1e:6f:32:2a:ef: 24:d5:40:34:7b:b5:3c:aa:f9:1b:11:a1:48:fe:09:16:e3:9c: 4c:2f:ac:b6:25:71:ed:ae:6d:6b:ff:f6:f8:bc:ef:f2:87:2f: 8b:78:96:6b:86:95:9e:08:4c:27:70:dc:ad:b3:a3:4c:ca:ad: 58:de:5e:ae:23:00:5b:8d:c5:a2:36:89:07:1e:d6:49:a4:f8: 6b:73:45:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqMJvyfhnOOQ18AIZ3FsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Njg0YTdlYmY5ZGUyOTQ4MzFhMmMwM2UxYjVhMDEyNDIw YWNkOTcwHhcNMjUxMjEzMTcwMTExWhcNMjUxMjE0MTcwMTExWjAzMTEwLwYDVQQD Eyg1YWUwODRiOGFjYjk5ZGFiZWI5OTcxZGQ1MWQ0NzM3YmUyYWU4MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuThQi6fcEfIYuPA//zPC0qL7xd/n BGFLdcH3iEZvH9bshuWmqQb95N0Q61NRWdd5ITa2WGE+6kKgC+EVYuaeUOFl2i7B q0tLiYuLlmX9MlMMZAZonbvuzdDcH6UgvIHCZmoep8oio+Q2/Ivm9bjdcJ5YRGWN yJxo5PVJcQGJO1YKrPCgrI7LxTwbOz5U5PY2uKnkBLtdyNg8EthFv8r271UCRGXv Uj5REiJ7HbH0nCboD6sZgxIfS11JhZZHjjpsVnkI52Dixt0zlv1aHxJgcql44tk1 hX6uGfxjD+AwqEWMSfVmvXZxN0JXfbK+RZS9WcNxWyT+WWmxgiZAIr9BGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrghLisuZ2r65lx3VHUc3viroCNMB8GA1UdIwQY MBaAFEdoSn6/neKUgxosA+G1oBJCCs2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUt YjI2ZjcwZTAzZDc2LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUtYjI2ZjcwZTAzZDc2 LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+jmKSJw 2A4AgCBkLnCbTKvT5JNCQ8U957EdU5jPsmR9ZuKOX5W45u6x2iIS/hp5rDOc5KqP kEAGCeXyYeWwtvNFX4kz4SlizPw6oprsCDf6BpNFlnRyU+iVWG38RN44TDypbja7 T/pFCdajzR25TOMQfcd07A6ashAMgqrdnptwFFYGT1mIVmKYRqcmAa9BVN4Bxxzi /fsPqlxaLjdFRt7WkyCDLFaAeTyQs5aO7h5vMirvJNVANHu1PKr5GxGhSP4JFuOc TC+stiVx7a5ta//2+Lzv8ocvi3iWa4aVnghMJ3DcrbOjTMqtWN5eriMAW43FojaJ Bx7WSaT4a3NFQQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:01:01 2025 by rpki-client