This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft File: c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json) Hash identifier: TM/Tl0ZsbmdE4BFxhw+W37Xun4aT6EZjU79ooL6z/qg= Subject key identifier: F1:A2:06:99:3E:7A:52:12:3A:C5:A1:3C:99:95:A2:62:E9:7B:F1:E8 Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76 Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76 Certificate serial: 019B3B346629482429390D24DE0EBFDA05DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft Manifest number: 0980 Signing time: Sat 20 Dec 2025 10:00:48 +0000 Manifest this update: Sat 20 Dec 2025 10:00:48 +0000 Manifest next update: Sun 21 Dec 2025 10:00:48 +0000 Files and hashes: 1: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: UQTkcVHCJ3dFJRfbl64Au3HsE05YRcEKxph7eF2gxfw=) 2: zxcUujcSrD8SI1LnYGJEIzlJLRs.roa (hash: 9DpZ6fCwMNxgzvUI8W4qG2/5GfqMuaNy171SPmB26NM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:66:29:48:24:29:39:0d:24:de:0e:bf:da:05:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76 Validity Not Before: Dec 20 10:00:48 2025 GMT Not After : Dec 21 10:00:48 2025 GMT Subject: CN=f1a206993e7a52123ac5a13c9995a262e97bf1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7c:a8:12:24:54:cf:3b:64:80:16:08:d0:46: 3c:2b:ba:92:5b:22:f4:d7:c8:ea:2f:b7:0e:21:f0: dd:56:65:a1:aa:ca:ed:56:08:6d:49:8e:1e:f7:7d: 5d:4e:1b:79:8d:a0:6a:bf:cb:81:bf:1a:34:8d:a3: b5:24:6a:b6:13:fc:66:47:3a:76:cf:97:86:d3:a9: e5:d3:06:55:03:52:f0:7f:cf:fa:f6:46:c7:15:98: 0f:cf:d1:65:13:19:2f:48:e5:a2:d1:cd:d0:01:d7: 49:b1:ce:df:7c:5d:7d:b4:d9:19:b7:69:28:12:63: 90:f8:9c:c5:06:f4:24:45:59:cd:bf:4c:5b:66:69: 4e:25:a4:7c:14:0f:77:10:a8:9c:9d:12:e3:22:73: c5:6a:4c:af:69:61:d8:18:fb:5a:08:25:87:a1:7e: e4:46:47:58:e9:59:a7:56:60:b6:0d:2d:e5:6c:6a: ee:fe:d0:fb:4f:90:99:df:70:1b:cc:55:64:30:79: 28:54:b2:9b:b5:13:67:5b:3a:26:a7:55:81:65:12: 6c:ef:44:67:45:05:c1:e4:b0:e9:2b:e0:df:d7:c3: 12:39:31:bb:6a:53:36:d7:06:ae:9c:0f:30:60:7a: 45:7b:99:1d:32:18:f9:31:fc:cc:b1:7b:a6:9f:09: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A2:06:99:3E:7A:52:12:3A:C5:A1:3C:99:95:A2:62:E9:7B:F1:E8 X509v3 Authority Key Identifier: keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c0:84:ad:fa:ad:03:a0:00:65:e4:d6:a5:de:53:30:a6:6d: 55:60:02:f9:f7:a1:00:db:57:1f:20:f1:e7:fc:60:6c:a9:f0: 05:6b:92:1d:4f:b1:8e:b5:66:9f:f0:1b:cb:30:82:7e:0a:f8: 54:e8:66:9d:28:0a:82:04:1e:f9:4a:14:bd:9f:9b:db:ef:e9: 8a:8c:85:6a:d0:76:06:4c:ce:cb:1b:9d:0b:cc:af:45:0e:5c: 7a:3c:fc:d4:a7:08:41:16:ad:d4:33:0e:40:0b:8b:10:10:94: bd:9a:97:47:72:11:eb:23:cf:11:1d:96:67:da:b6:af:a0:41: e3:e9:dc:68:34:e3:f0:af:c9:15:f4:69:29:24:c9:26:93:86: 1f:93:86:fc:dd:79:11:11:c7:44:90:59:c6:76:78:20:e9:7b: 9c:f4:e5:65:e9:6b:36:e9:73:a1:d8:dd:37:b4:a4:90:1a:f9: 41:e6:45:82:54:49:e5:d9:ca:9f:24:ef:fc:c1:af:7d:c5:fc: 39:6a:3e:26:62:58:ac:d8:4b:a4:90:3c:73:79:24:bf:9c:b1: 2f:56:1d:fe:84:a3:71:9e:e7:30:fe:a8:18:09:3e:16:4f:26: bb:b1:fe:b3:d5:68:1d:f6:f5:7e:d9:7b:2f:4d:a8:e5:99:66: 92:ad:05:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NGYpSCQpOQ0k3g6/2gXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjdjNDkwNDQ3ZjUwNDVjMDIzNjdkYjhkMjFiNGUwODc0 OWZhNzYwHhcNMjUxMjIwMTAwMDQ4WhcNMjUxMjIxMTAwMDQ4WjAzMTEwLwYDVQQD EyhmMWEyMDY5OTNlN2E1MjEyM2FjNWExM2M5OTk1YTI2MmU5N2JmMWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HyoEiRUzztkgBYI0EY8K7qSWyL0 18jqL7cOIfDdVmWhqsrtVghtSY4e931dTht5jaBqv8uBvxo0jaO1JGq2E/xmRzp2 z5eG06nl0wZVA1Lwf8/69kbHFZgPz9FlExkvSOWi0c3QAddJsc7ffF19tNkZt2ko EmOQ+JzFBvQkRVnNv0xbZmlOJaR8FA93EKicnRLjInPFakyvaWHYGPtaCCWHoX7k RkdY6VmnVmC2DS3lbGru/tD7T5CZ33AbzFVkMHkoVLKbtRNnWzomp1WBZRJs70Rn RQXB5LDpK+Df18MSOTG7alM21waunA8wYHpFe5kdMhj5MfzMsXumnwlzaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGiBpk+elISOsWhPJmVomLpe/HoMB8GA1UdIwQY MBaAFHNnxJBEf1BFwCNn240htOCHSfp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82MjU4NGEtNDdjZS00YWE4LTg5OTIt NWJhNzU2ZTc4ODY5LzEvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82MjU4NGEtNDdjZS00YWE4LTg5OTItNWJhNzU2ZTc4ODY5 LzEvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8CErfqt A6AAZeTWpd5TMKZtVWAC+fehANtXHyDx5/xgbKnwBWuSHU+xjrVmn/AbyzCCfgr4 VOhmnSgKggQe+UoUvZ+b2+/pioyFatB2BkzOyxudC8yvRQ5cejz81KcIQRat1DMO QAuLEBCUvZqXR3IR6yPPER2WZ9q2r6BB4+ncaDTj8K/JFfRpKSTJJpOGH5OG/N15 ERHHRJBZxnZ4IOl7nPTlZelrNulzodjdN7SkkBr5QeZFglRJ5dnKnyTv/MGvfcX8 OWo+JmJYrNhLpJA8c3kkv5yxL1Yd/oSjcZ7nMP6oGAk+Fk8mu7H+s9VoHfb1ftl7 L02o5Zlmkq0FeA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:04:11 2025 by rpki-client