This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft File: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft (raw, json) Hash identifier: 5elHJWMkv5+8RRNpWLKiIX/2hJX8jBNgacnmc24K7P8= Subject key identifier: 4E:66:25:F6:27:DD:82:8E:71:C7:4A:86:F4:CD:A5:0D:8A:F6:2D:7E Authority key identifier: D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E Certificate issuer: /CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e Certificate serial: 019B424A1669B45429CA1DFE5F7EE2DC2647 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft Manifest number: 10B3 Signing time: Sun 21 Dec 2025 19:01:50 +0000 Manifest this update: Sun 21 Dec 2025 19:01:50 +0000 Manifest next update: Mon 22 Dec 2025 19:01:50 +0000 Files and hashes: 1: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl (hash: mFpsbPfbllixuITNGr5MFX+/FmUNC6m0vRFVe2Lc7BY=) 2: _wOAzM_uG9ZKvF1XTUYbhv67nVM.roa (hash: YsJJfaahevvQpOkAYhPhhrTQuZpLLWZxUc8rH3J04no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:16:69:b4:54:29:ca:1d:fe:5f:7e:e2:dc:26:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e Validity Not Before: Dec 21 19:01:50 2025 GMT Not After : Dec 22 19:01:50 2025 GMT Subject: CN=4e6625f627dd828e71c74a86f4cda50d8af62d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e1:a7:8a:5b:6e:eb:f2:e6:f2:17:91:0c:b2: d9:fa:b8:6a:99:01:c2:94:6d:bb:dd:ad:e9:03:a4: 9c:6d:db:5a:8f:63:bc:14:ac:e7:7a:48:f2:62:e9: 4f:bb:c5:c9:6f:2b:ce:6d:c4:1f:35:8e:9a:da:bf: 5a:b8:94:06:53:22:f4:ba:97:c3:95:17:ad:0a:17: 4f:b9:09:12:76:8d:a8:0c:6d:83:bc:85:cb:64:a8: aa:65:d3:e6:24:60:3c:48:70:83:14:6b:71:c5:41: 2e:df:ff:d9:70:df:c6:a1:07:48:6d:76:d2:f3:b4: 94:5c:2f:49:e5:94:cf:89:6c:bf:68:89:cc:7b:db: a4:fa:cc:11:ba:c8:a6:b8:d0:64:30:80:ef:5f:13: 51:cb:ee:42:fa:b2:a6:ee:1e:5f:88:f3:0e:4d:a6: 7a:be:ad:18:7d:f9:5c:d2:24:c4:5b:2e:b7:0a:37: c4:1f:f7:03:df:d1:aa:2b:a0:66:cd:4c:ec:92:19: 9d:b8:32:d9:5b:2e:ef:17:ac:0f:fd:8c:d5:05:71: 9b:e7:cc:43:12:52:b3:b3:7e:01:af:98:b9:9b:43: 9f:d3:47:7d:cf:42:0e:d9:a6:a5:af:65:00:93:06: 2f:a3:41:df:64:1a:a2:1f:d2:f5:99:93:f2:28:69: 14:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:66:25:F6:27:DD:82:8E:71:C7:4A:86:F4:CD:A5:0D:8A:F6:2D:7E X509v3 Authority Key Identifier: keyid:D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:49:18:1c:b9:ac:ac:41:38:b1:7d:5b:43:cc:3e:13:c2:db: 63:a6:94:ee:fc:7b:b1:15:c7:3b:a0:4c:0b:36:78:77:e3:bd: dc:f4:7d:35:67:fc:99:ec:7c:d1:46:3a:83:c6:6b:29:d8:45: 0e:67:61:de:cf:be:dc:fd:f6:64:87:e9:5f:62:01:2a:e4:22: d6:f4:4e:85:93:b3:1b:ff:05:1f:cb:6d:50:da:d7:c4:01:f6: 50:12:0b:b0:f4:17:ce:98:af:eb:95:e5:78:fe:71:d9:00:2f: e2:cb:23:ba:04:6b:81:01:11:76:21:44:b7:ba:28:d2:3b:bb: 9d:59:26:e4:33:a2:f7:b1:2e:6d:ea:e7:f0:25:51:9b:2f:62: 8f:4b:a0:ac:ef:4e:ef:48:ef:bd:d7:ed:69:e0:8f:cf:61:94: 02:f0:91:38:48:87:39:24:61:1c:c3:1b:03:88:1f:46:b8:2d: 3c:5c:7b:50:17:3e:a2:3d:40:58:86:a2:05:cd:2d:c2:a3:0e: 79:21:15:f7:bc:11:6b:f8:0c:8c:56:c1:d8:b1:62:6e:c7:6d: e7:15:db:c5:39:fa:c5:23:6b:2f:7c:b2:4d:39:62:d4:5b:6f: 45:d7:ac:ec:1d:05:14:13:cb:c6:44:74:e4:55:c9:a2:be:92: a8:13:63:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCShZptFQpyh3+X37i3CZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDg2ZjdmZTRlYjZkOTQ5YjgwMDdiNGU0MTk4Y2UxYzg3 ODMwMmUwHhcNMjUxMjIxMTkwMTUwWhcNMjUxMjIyMTkwMTUwWjAzMTEwLwYDVQQD Eyg0ZTY2MjVmNjI3ZGQ4MjhlNzFjNzRhODZmNGNkYTUwZDhhZjYyZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOGniltu6/Lm8heRDLLZ+rhqmQHC lG273a3pA6Scbdtaj2O8FKznekjyYulPu8XJbyvObcQfNY6a2r9auJQGUyL0upfD lRetChdPuQkSdo2oDG2DvIXLZKiqZdPmJGA8SHCDFGtxxUEu3//ZcN/GoQdIbXbS 87SUXC9J5ZTPiWy/aInMe9uk+swRusimuNBkMIDvXxNRy+5C+rKm7h5fiPMOTaZ6 vq0Yfflc0iTEWy63CjfEH/cD39GqK6BmzUzskhmduDLZWy7vF6wP/YzVBXGb58xD ElKzs34Br5i5m0Of00d9z0IO2aalr2UAkwYvo0HfZBqiH9L1mZPyKGkUhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5mJfYn3YKOccdKhvTNpQ2K9i1+MB8GA1UdIwQY MBaAFNlIb3/k622Um4AHtOQZjOHIeDAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQyZDItNjFkMi00MzRkLThlNWIt ODg2YzQxNmI5MDUxLzEvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kMDQyZDItNjFkMi00MzRkLThlNWItODg2YzQxNmI5MDUx LzEvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0kYHLms rEE4sX1bQ8w+E8LbY6aU7vx7sRXHO6BMCzZ4d+O93PR9NWf8mex80UY6g8ZrKdhF Dmdh3s++3P32ZIfpX2IBKuQi1vROhZOzG/8FH8ttUNrXxAH2UBILsPQXzpiv65Xl eP5x2QAv4ssjugRrgQERdiFEt7oo0ju7nVkm5DOi97Eubern8CVRmy9ij0ugrO9O 70jvvdftaeCPz2GUAvCROEiHOSRhHMMbA4gfRrgtPFx7UBc+oj1AWIaiBc0twqMO eSEV97wRa/gMjFbB2LFibsdt5xXbxTn6xSNrL3yyTTli1FtvRdes7B0FFBPLxkR0 5FXJor6SqBNjdg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:59:27 2025 by rpki-client