This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json) Hash identifier: IhtLdCXZ79sUb4fmGG6SPM3IZL/mON3e5GEAepdJBA0= Subject key identifier: 1C:97:46:55:15:4A:43:0C:BA:F1:7F:FE:53:AE:09:A8:37:7D:B2:D7 Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1 Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1 Certificate serial: 019B0FDC136C2C589B96CAD5EF96AF67FE21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft Manifest number: 1775 Signing time: Fri 12 Dec 2025 00:00:39 +0000 Manifest this update: Fri 12 Dec 2025 00:00:39 +0000 Manifest next update: Sat 13 Dec 2025 00:00:39 +0000 Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: rqeFDUmazwuvxBGx7V4DhCVYfIo8mi2wx7FvlUNBGKw=) 2: wNy3zbz6RfIK66Qb0xMdQ6SF6cM.roa (hash: v3MSVtcDWt9OZuJfHX3SY1kCxjbyzn9ti5kRZ/GXDyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:dc:13:6c:2c:58:9b:96:ca:d5:ef:96:af:67:fe:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1 Validity Not Before: Dec 12 00:00:39 2025 GMT Not After : Dec 13 00:00:39 2025 GMT Subject: CN=1c974655154a430cbaf17ffe53ae09a8377db2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b3:fa:ab:3c:4d:49:c2:6a:48:33:cf:61:fb: 48:9c:49:33:c6:7c:50:e5:0b:e3:b8:16:e3:07:3a: 54:4e:ba:3a:2e:a7:40:5f:fe:e5:3a:b9:a8:18:9b: ba:c6:d4:0b:12:7d:1b:f3:58:5d:f4:ea:be:5d:bb: 77:3f:24:cb:85:79:48:f7:e5:f1:79:d1:02:1d:fc: 54:c8:6a:a1:aa:c8:85:e6:df:3a:3c:2e:e9:00:f3: 74:09:af:69:2d:60:19:8b:41:5f:61:fe:23:bf:35: 68:3e:7a:13:5a:ee:bd:0c:5a:d6:82:6b:a4:31:a9: f7:aa:87:a9:a5:41:e0:e4:03:b2:fa:0b:ef:c7:b5: c3:1f:f1:60:e2:01:4a:e0:83:3e:36:6d:b2:b9:b5: ed:33:e5:c7:4a:4d:3a:8d:6f:22:98:f7:29:8c:2c: d6:e3:9c:89:ed:c7:bd:05:b5:b6:d5:16:22:4c:d6: f2:c6:aa:b0:82:18:c0:a3:15:0c:c7:75:a3:59:53: 45:df:c9:d5:10:92:30:44:d7:bd:f1:8b:ad:82:b4: d3:e0:16:07:ce:a8:bf:02:b3:4c:12:b7:43:0d:74: 21:48:2f:f3:a8:eb:09:d5:6c:72:b3:1e:d3:ec:4e: 41:47:c1:82:a7:bc:cc:f5:31:e2:67:10:f3:68:61: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:97:46:55:15:4A:43:0C:BA:F1:7F:FE:53:AE:09:A8:37:7D:B2:D7 X509v3 Authority Key Identifier: keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b3:07:89:96:a0:13:0c:45:0e:16:8a:bc:a9:30:0d:97:c3: e7:23:21:e1:af:69:fb:d7:51:b8:d5:03:5d:d3:af:e7:c3:45: 62:18:61:76:d4:0f:69:e6:68:6e:d1:4e:28:ea:f9:8b:16:6a: dc:d7:77:2f:ca:0b:1f:11:c4:bf:78:78:0b:3e:fd:f7:ad:e5: 9b:96:b5:4c:de:81:bc:ee:18:4b:7e:d4:de:5d:5b:39:53:17: 57:75:f7:0a:86:cc:50:0c:60:09:ad:e1:f9:91:42:38:36:e7: 15:75:b4:f6:fa:69:8c:7d:00:a3:ac:e8:30:da:6c:f5:17:f4: 01:9f:f7:98:6f:0f:8e:8d:7c:48:19:5b:e9:61:97:63:10:8c: 34:1b:40:02:eb:f1:d7:ad:f5:e9:9f:3d:2d:38:f5:41:f8:93: 31:3b:46:ab:4e:47:65:62:ab:d2:ae:17:44:f8:29:17:47:30: a4:a6:f6:b7:32:6e:e3:80:1c:12:6a:91:57:f2:61:21:e5:c4: de:41:07:a3:01:a9:e0:25:74:af:a7:a1:0b:2d:92:89:31:ab: 9a:38:4d:22:e7:43:50:14:43:2e:93:dd:8a:b7:09:68:04:9d: 59:f2:16:72:79:e7:87:21:a4:e3:be:6a:dc:c0:24:6e:0e:04: 80:1b:da:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsP3BNsLFiblsrV75avZ/4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjUzZjliMjFkMTNlMDc4ZTNlODQ0ZDY0NWVlYTg1ODBm MWNjZTEwHhcNMjUxMjEyMDAwMDM5WhcNMjUxMjEzMDAwMDM5WjAzMTEwLwYDVQQD EygxYzk3NDY1NTE1NGE0MzBjYmFmMTdmZmU1M2FlMDlhODM3N2RiMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbP6qzxNScJqSDPPYftInEkzxnxQ 5QvjuBbjBzpUTro6LqdAX/7lOrmoGJu6xtQLEn0b81hd9Oq+Xbt3PyTLhXlI9+Xx edECHfxUyGqhqsiF5t86PC7pAPN0Ca9pLWAZi0FfYf4jvzVoPnoTWu69DFrWgmuk Man3qoeppUHg5AOy+gvvx7XDH/Fg4gFK4IM+Nm2yubXtM+XHSk06jW8imPcpjCzW 45yJ7ce9BbW21RYiTNbyxqqwghjAoxUMx3WjWVNF38nVEJIwRNe98YutgrTT4BYH zqi/ArNMErdDDXQhSC/zqOsJ1Wxysx7T7E5BR8GCp7zM9THiZxDzaGHVkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByXRlUVSkMMuvF//lOuCag3fbLXMB8GA1UdIwQY MBaAFNq1P5sh0T4Hjj6ETWRe6oWA8czhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAt NWI4YmM1OTBiMTk3LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAtNWI4YmM1OTBiMTk3 LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrMHiZag EwxFDhaKvKkwDZfD5yMh4a9p+9dRuNUDXdOv58NFYhhhdtQPaeZobtFOKOr5ixZq 3Nd3L8oLHxHEv3h4Cz79963lm5a1TN6BvO4YS37U3l1bOVMXV3X3CobMUAxgCa3h +ZFCODbnFXW09vppjH0Ao6zoMNps9Rf0AZ/3mG8Pjo18SBlb6WGXYxCMNBtAAuvx 16316Z89LTj1QfiTMTtGq05HZWKr0q4XRPgpF0cwpKb2tzJu44AcEmqRV/JhIeXE 3kEHowGp4CV0r6ehCy2SiTGrmjhNIudDUBRDLpPdircJaASdWfIWcnnnhyGk475q 3MAkbg4EgBva/A== -----END CERTIFICATE-----Generated at Fri Dec 12 03:20:10 2025 by rpki-client