This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft File: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json) Hash identifier: gYRGXBkwx6cDO6EKUoVTVmq8hlXG82aMlrnfhiX4P9Y= Subject key identifier: E1:CA:31:60:8D:E1:08:4A:59:B2:16:E8:01:7A:08:96:42:46:35:F9 Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed Certificate serial: 019B191660C1DDE0EF9C832578B2B52D5B68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft Manifest number: 08A6 Signing time: Sat 13 Dec 2025 19:00:55 +0000 Manifest this update: Sat 13 Dec 2025 19:00:55 +0000 Manifest next update: Sun 14 Dec 2025 19:00:55 +0000 Files and hashes: 1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: Af+r/wgk+qxyUIGfHcx4F+V4HoUCSRqU/dokvUKdmtc=) 2: HNrCdJFr8Rfx0QNo8n5aDjy6J1M.roa (hash: gUK0hPbdwoGfL6nF9RbnOReZ1s6L9tQ32o9aBdmxdu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:60:c1:dd:e0:ef:9c:83:25:78:b2:b5:2d:5b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed Validity Not Before: Dec 13 19:00:55 2025 GMT Not After : Dec 14 19:00:55 2025 GMT Subject: CN=e1ca31608de1084a59b216e8017a0896424635f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:35:fa:c2:0a:87:97:0f:00:04:31:93:df: 1f:79:bc:78:4a:7f:6a:57:49:2b:76:bd:07:4f:c7: 6b:f1:35:c4:42:14:39:30:2d:a3:4c:86:35:b0:80: 0e:7b:69:68:97:f8:a0:52:8a:3f:da:85:69:aa:58: 70:e5:55:24:ac:dd:db:f1:37:44:7f:7d:b9:d0:2e: b5:b0:11:6f:86:ce:04:23:f1:29:d1:55:ca:e3:8b: 83:68:fb:44:cd:08:ad:4b:ec:48:b7:f7:30:f3:1a: 80:ff:a3:fd:bc:34:94:00:96:6b:85:ae:a4:76:10: 56:80:bb:ed:38:8c:e4:77:6d:8b:2b:6b:b4:a0:24: e7:72:5f:b1:f0:be:cd:eb:e1:af:82:85:6f:01:d3: ec:69:13:3f:34:75:54:24:d7:46:6f:c2:d5:1b:58: 63:a5:00:8b:95:c2:a2:ef:fa:6f:5d:19:1f:f9:0f: fa:f9:c1:a2:86:68:32:7d:a6:ca:af:6b:b4:bd:5e: 5d:f1:25:4f:e7:9b:fd:7f:31:dc:45:1d:65:70:62: 8b:4a:13:67:23:77:55:cf:23:5a:d7:a1:b6:4f:a9: 31:b2:88:09:7c:29:6d:3c:44:16:af:b0:78:e4:20: 10:80:26:72:fa:51:d8:09:6b:ad:da:b8:0f:05:f7: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CA:31:60:8D:E1:08:4A:59:B2:16:E8:01:7A:08:96:42:46:35:F9 X509v3 Authority Key Identifier: keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:02:99:ca:23:b7:ed:36:ec:12:83:da:fe:20:31:e9:ef:69: 91:45:31:4d:65:f1:05:52:56:a0:23:92:ff:db:91:7b:bb:dd: 30:fd:3f:8a:8e:8f:6e:eb:f3:8c:dd:84:ce:8b:ee:78:26:f8: cd:88:ba:ea:f0:77:82:06:96:ea:33:4d:df:88:8e:ac:35:21: 89:63:ac:64:3e:ed:92:60:74:1a:75:88:2d:f3:6a:28:07:e1: 93:2b:73:7b:ae:3f:22:3b:c3:f3:e8:04:c7:a9:f0:4b:f6:e9: e9:98:bf:0f:8b:9c:26:88:a9:a3:c6:08:3c:d4:d0:02:9b:99: 10:1c:2b:a5:30:7f:24:56:68:02:24:85:30:a3:ca:6f:ec:af: 5e:09:3c:0d:27:41:72:c3:1c:06:df:7d:bc:4f:16:70:77:6e: ee:62:3e:65:f0:b6:59:41:38:1f:fe:82:63:2f:d8:a4:92:4f: 30:f1:21:1c:07:7a:c7:5f:ff:e3:df:18:b7:17:3f:2f:35:3b: 34:53:4a:32:d1:41:48:11:2b:26:8e:8d:89:3f:15:c1:80:a3: ee:26:4b:da:55:08:28:c1:b9:5f:f6:cc:21:b2:2d:dd:b8:d8: 62:0f:0a:bf:c3:7f:6e:5d:d6:33:2a:b4:1e:e8:5c:91:a7:74: fb:fe:8b:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFmDB3eDvnIMleLK1LVtoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMGQ5NGVlNjNjNzBhNzMzNjYzYmJjNGI1YjU3NmRlNjA3 ZTE5ZWQwHhcNMjUxMjEzMTkwMDU1WhcNMjUxMjE0MTkwMDU1WjAzMTEwLwYDVQQD EyhlMWNhMzE2MDhkZTEwODRhNTliMjE2ZTgwMTdhMDg5NjQyNDYzNWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzc1+sIKh5cPAAQxk98febx4Sn9q V0krdr0HT8dr8TXEQhQ5MC2jTIY1sIAOe2lol/igUoo/2oVpqlhw5VUkrN3b8TdE f3250C61sBFvhs4EI/Ep0VXK44uDaPtEzQitS+xIt/cw8xqA/6P9vDSUAJZrha6k dhBWgLvtOIzkd22LK2u0oCTncl+x8L7N6+GvgoVvAdPsaRM/NHVUJNdGb8LVG1hj pQCLlcKi7/pvXRkf+Q/6+cGihmgyfabKr2u0vV5d8SVP55v9fzHcRR1lcGKLShNn I3dVzyNa16G2T6kxsogJfCltPEQWr7B45CAQgCZy+lHYCWut2rgPBfcNEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHKMWCN4QhKWbIW6AF6CJZCRjX5MB8GA1UdIwQY MBaAFA8NlO5jxwpzNmO7xLW1dt5gfhntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWIt OTJkNDE4ZThkOWE1LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWItOTJkNDE4ZThkOWE1 LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawKZyiO3 7TbsEoPa/iAx6e9pkUUxTWXxBVJWoCOS/9uRe7vdMP0/io6PbuvzjN2EzovueCb4 zYi66vB3ggaW6jNN34iOrDUhiWOsZD7tkmB0GnWILfNqKAfhkytze64/IjvD8+gE x6nwS/bp6Zi/D4ucJoipo8YIPNTQApuZEBwrpTB/JFZoAiSFMKPKb+yvXgk8DSdB csMcBt99vE8WcHdu7mI+ZfC2WUE4H/6CYy/YpJJPMPEhHAd6x1//498Ytxc/LzU7 NFNKMtFBSBErJo6NiT8VwYCj7iZL2lUIKMG5X/bMIbIt3bjYYg8Kv8N/bl3WMyq0 Huhckad0+/6LIQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:01:49 2025 by rpki-client