This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json) Hash identifier: tzPIuAKPauJE4l4l37LsgwLFchKQ/+zhVFWEParQ25c= Subject key identifier: 99:4E:A5:30:7F:C2:90:36:E7:69:27:90:1A:14:3D:2E:89:91:77:7F Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f Certificate serial: 019B07EC6296A74B0BDB3B3C2BC01BF895B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft Manifest number: 0BD7 Signing time: Wed 10 Dec 2025 11:01:30 +0000 Manifest this update: Wed 10 Dec 2025 11:01:30 +0000 Manifest next update: Thu 11 Dec 2025 11:01:30 +0000 Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=) 2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=) 3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: ZVn/eVy/8nuTZEipX5HfNnfJkrgdvreqQRHrz7/2ACc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ec:62:96:a7:4b:0b:db:3b:3c:2b:c0:1b:f8:95:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f Validity Not Before: Dec 10 11:01:30 2025 GMT Not After : Dec 11 11:01:30 2025 GMT Subject: CN=994ea5307fc29036e76927901a143d2e8991777f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c8:f7:26:3a:a7:42:2c:2f:7b:7b:c9:3e:b7: 4e:44:3e:05:e8:a1:2a:f2:a9:e8:17:d3:93:d6:c4: 03:e7:6e:06:cb:f4:69:fe:dc:57:a2:d0:d6:3c:77: f3:71:83:dd:97:46:d7:0e:dd:36:af:9c:60:70:e3: ac:29:82:1c:fb:12:76:cf:4e:94:34:f8:07:06:2e: b0:66:44:45:cd:a9:4e:9e:62:3a:1d:8e:8a:33:bf: 8d:8f:f5:24:72:f8:fd:72:d0:5d:40:d0:05:5f:03: 4f:4e:19:bb:ef:32:65:7b:b6:12:cf:7b:30:62:5a: 30:0c:34:38:47:9a:63:64:d3:2c:8f:08:de:ec:1f: 58:17:d5:15:81:35:bc:59:fd:b3:a6:8a:ab:2c:e9: 03:d5:51:1a:d9:9e:14:7e:87:22:39:8c:bf:16:27: fe:2b:a3:d9:4a:2b:a1:fe:a8:1c:9c:0e:1e:4f:23: 21:fc:fa:db:c9:57:de:89:5f:05:a1:cd:2c:c5:28: 19:54:dc:b8:63:48:44:f8:fe:78:37:8e:02:e5:ac: 77:64:70:f5:12:a5:9f:f8:4a:d9:52:1a:f6:d3:a5: 2e:3d:fa:d5:0a:69:e3:8b:3f:5f:35:b8:b6:33:8e: 4a:51:4a:fb:14:42:42:3b:83:e6:31:83:6e:13:f9: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4E:A5:30:7F:C2:90:36:E7:69:27:90:1A:14:3D:2E:89:91:77:7F X509v3 Authority Key Identifier: keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2c:7e:8a:f0:ce:58:3a:c9:c0:cd:60:ef:31:06:f8:0a:82: 27:dc:a0:71:c6:0c:c7:be:3e:98:77:9a:5c:00:a7:14:c0:6b: 8a:48:6e:2c:e9:51:12:60:ce:e2:59:a8:c9:63:f4:df:c5:84: 60:9e:94:ef:b2:35:65:8a:f9:3f:37:15:cf:9e:ab:b4:9a:e9: 1e:ad:79:63:80:33:2a:e6:4a:a4:eb:c0:79:56:a7:88:71:36: a1:01:5d:4d:d0:4f:53:93:79:ab:5d:13:7b:9f:23:65:dd:f4: d9:55:46:13:38:78:e1:7d:17:fa:cd:e9:9c:63:21:4c:e4:10: ef:0d:75:87:12:ab:63:1c:bd:15:9b:f5:14:4f:6e:08:f0:26: c4:d6:67:4c:54:68:d8:15:44:f0:1e:17:09:e3:87:5d:ba:ec: b4:ca:37:78:91:58:27:bc:11:ca:57:06:11:83:8a:9a:6b:1a: e5:ff:5a:5d:56:d9:a7:01:12:2c:27:ab:0d:ca:90:64:41:37: 66:fd:ef:e7:01:31:f3:23:76:19:52:b4:d6:9b:e5:ca:3f:0f: e9:44:c0:a0:de:71:fc:eb:c8:7f:86:7e:9d:b4:ad:a4:52:dc: 8b:1e:80:06:2a:e3:9f:5d:c1:cc:88:a9:85:d1:a8:f4:bd:b7: bd:2f:62:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH7GKWp0sL2zs8K8Ab+JW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NDM0ZmQ5OGMxMWQ4ZDcyZGYzODBjYTgzZWRmNzlmY2Mw MDg1OWYwHhcNMjUxMjEwMTEwMTMwWhcNMjUxMjExMTEwMTMwWjAzMTEwLwYDVQQD Eyg5OTRlYTUzMDdmYzI5MDM2ZTc2OTI3OTAxYTE0M2QyZTg5OTE3NzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mj3JjqnQiwve3vJPrdORD4F6KEq 8qnoF9OT1sQD524Gy/Rp/txXotDWPHfzcYPdl0bXDt02r5xgcOOsKYIc+xJ2z06U NPgHBi6wZkRFzalOnmI6HY6KM7+Nj/Ukcvj9ctBdQNAFXwNPThm77zJle7YSz3sw YlowDDQ4R5pjZNMsjwje7B9YF9UVgTW8Wf2zpoqrLOkD1VEa2Z4UfociOYy/Fif+ K6PZSiuh/qgcnA4eTyMh/PrbyVfeiV8Foc0sxSgZVNy4Y0hE+P54N44C5ax3ZHD1 EqWf+ErZUhr206UuPfrVCmnjiz9fNbi2M45KUUr7FEJCO4PmMYNuE/nd0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlOpTB/wpA252knkBoUPS6JkXd/MB8GA1UdIwQY MBaAFERDT9mMEdjXLfOAyoPt95/MAIWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYt MjM3YmIzMGQ3MzA1LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYtMjM3YmIzMGQ3MzA1 LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSx+ivDO WDrJwM1g7zEG+AqCJ9ygccYMx74+mHeaXACnFMBrikhuLOlREmDO4lmoyWP038WE YJ6U77I1ZYr5PzcVz56rtJrpHq15Y4AzKuZKpOvAeVaniHE2oQFdTdBPU5N5q10T e58jZd302VVGEzh44X0X+s3pnGMhTOQQ7w11hxKrYxy9FZv1FE9uCPAmxNZnTFRo 2BVE8B4XCeOHXbrstMo3eJFYJ7wRylcGEYOKmmsa5f9aXVbZpwESLCerDcqQZEE3 Zv3v5wEx8yN2GVK01pvlyj8P6UTAoN5x/OvIf4Z+nbStpFLcix6ABirjn13BzIip hdGo9L23vS9ifw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:27:00 2025 by rpki-client