This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json) Hash identifier: BzD8XuVpsJ7ZPhCB2tkPPUiwGhDgbU/1qoP1R3WzcaA= Subject key identifier: EE:87:62:4D:A5:1D:EE:61:AE:D0:32:6B:13:FA:F9:38:13:5B:C0:D2 Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1 Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1 Certificate serial: 019B16BA250589F8DE5522B4347969C13EBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft Manifest number: A5 Signing time: Sat 13 Dec 2025 08:00:56 +0000 Manifest this update: Sat 13 Dec 2025 08:00:56 +0000 Manifest next update: Sun 14 Dec 2025 08:00:56 +0000 Files and hashes: 1: WThbGtz2IYxf1vTJRB2TjqMIzOc.roa (hash: TWCX9/z5Z1T4Mu8aWwo0GmQbY2mW+ddMS23z8G75JSQ=) 2: XEzXLFWCK81H0mYYJL-WVNmtqGo.roa (hash: qICBsdU+J42/dQHA/dNncrV4zPltBFGJMDpu4ZuboZc=) 3: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: bkmSl3ioBJ+joxc8lRBSYauEZqzkDiVTnZ2sKOXVKuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:ba:25:05:89:f8:de:55:22:b4:34:79:69:c1:3e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1 Validity Not Before: Dec 13 08:00:56 2025 GMT Not After : Dec 14 08:00:56 2025 GMT Subject: CN=ee87624da51dee61aed0326b13faf938135bc0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:a7:38:bf:97:45:c7:e4:d5:a4:32:02:0b: d1:19:78:a9:52:a3:2f:41:bd:55:ca:e2:55:ea:1c: 35:15:09:b7:da:98:ca:ae:6d:f3:a4:7a:09:79:ee: c4:60:99:b8:70:3b:2c:51:7a:af:e9:d8:88:66:9a: 98:ee:4f:b7:b6:09:bf:ff:4c:43:86:74:13:a0:14: bf:1d:1a:2f:ce:28:58:9d:0a:14:63:02:67:31:cf: bb:47:47:9f:46:7c:ff:d9:7c:72:62:5b:30:d5:f5: b7:25:cc:a4:06:ae:f2:20:7e:18:df:d6:05:a8:78: 8e:72:9a:5c:ae:e7:58:b8:e6:e2:fd:82:7d:a6:04: 9a:96:08:83:b0:81:b5:a5:10:87:82:c3:2b:d5:ee: 43:14:94:11:e2:6c:a8:52:07:e4:bc:27:f3:1b:e6: 08:58:97:75:84:ec:99:ec:a7:34:90:98:8f:d8:15: 79:08:e7:f8:0c:0c:b3:75:3a:d7:0d:4e:27:36:48: e4:6f:f5:db:b1:ac:cf:4d:4a:16:ef:a0:f7:5b:2b: dd:10:32:04:8b:07:64:f9:64:97:dc:c7:b6:5c:81: 05:34:e6:c6:15:6f:be:ef:52:09:11:93:ab:c7:13: ed:9c:61:ed:bb:d1:bb:3e:4a:35:ab:22:9c:2f:65: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:87:62:4D:A5:1D:EE:61:AE:D0:32:6B:13:FA:F9:38:13:5B:C0:D2 X509v3 Authority Key Identifier: keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a5:ca:e4:4d:5b:92:e1:81:b7:12:f3:e8:09:be:00:69:c7: 37:6c:c6:57:b0:0c:02:e7:f5:21:9b:ad:59:03:a8:55:85:9c: 15:20:51:c0:c1:dd:a9:19:07:9b:2f:f7:85:75:36:c6:f2:90: 3d:db:cb:96:6e:fd:5c:b9:78:36:fc:e5:be:56:7d:df:cc:f7: df:00:40:43:62:fd:6b:f5:23:2c:00:c0:d0:15:07:64:8d:44: 78:16:13:5f:a8:d1:51:b4:e4:d9:9d:b9:7e:a9:00:ea:fe:e9: b5:37:6a:ac:a5:e0:ff:9b:c5:5c:d3:d4:fb:7f:bf:8f:95:26: b5:f5:38:04:5c:74:e2:fc:e8:6f:c7:fd:c6:15:a2:6d:c2:af: 19:3e:a5:44:32:05:59:af:80:ed:3f:37:7e:3a:4e:b1:40:2c: 4d:d1:11:99:11:02:c6:ff:cf:11:70:42:2e:80:22:a6:64:ea: c7:f6:86:9c:20:bd:ff:50:71:c3:aa:81:08:59:96:06:91:7e: af:06:5c:f5:c9:13:71:a1:fb:ee:9c:41:b9:06:52:59:a0:e9: d4:a4:a0:3a:39:93:90:6d:c1:dd:54:5f:47:b5:b3:de:8e:de: 7d:b4:66:d2:68:74:fe:ac:74:a0:a4:4f:74:3e:fb:f4:d3:ac: cb:4c:52:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWuiUFifjeVSK0NHlpwT6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYmQ4M2Y1Mjc1YmQwOWU4ZDMzYjQyOTg4MWViMmY5NmI2 ZDlkZTEwHhcNMjUxMjEzMDgwMDU2WhcNMjUxMjE0MDgwMDU2WjAzMTEwLwYDVQQD EyhlZTg3NjI0ZGE1MWRlZTYxYWVkMDMyNmIxM2ZhZjkzODEzNWJjMGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOunOL+XRcfk1aQyAgvRGXipUqMv Qb1VyuJV6hw1FQm32pjKrm3zpHoJee7EYJm4cDssUXqv6diIZpqY7k+3tgm//0xD hnQToBS/HRovzihYnQoUYwJnMc+7R0efRnz/2XxyYlsw1fW3JcykBq7yIH4Y39YF qHiOcppcrudYuObi/YJ9pgSalgiDsIG1pRCHgsMr1e5DFJQR4myoUgfkvCfzG+YI WJd1hOyZ7Kc0kJiP2BV5COf4DAyzdTrXDU4nNkjkb/XbsazPTUoW76D3WyvdEDIE iwdk+WSX3Me2XIEFNObGFW++71IJEZOrxxPtnGHtu9G7Pko1qyKcL2WDPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6HYk2lHe5hrtAyaxP6+TgTW8DSMB8GA1UdIwQY MBaAFHK9g/UnW9CejTO0KYgesvlrbZ3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMt MDA1ODc3ZGE4MDI2LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMtMDA1ODc3ZGE4MDI2 LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqXK5E1b kuGBtxLz6Am+AGnHN2zGV7AMAuf1IZutWQOoVYWcFSBRwMHdqRkHmy/3hXU2xvKQ PdvLlm79XLl4NvzlvlZ938z33wBAQ2L9a/UjLADA0BUHZI1EeBYTX6jRUbTk2Z25 fqkA6v7ptTdqrKXg/5vFXNPU+3+/j5UmtfU4BFx04vzob8f9xhWibcKvGT6lRDIF Wa+A7T83fjpOsUAsTdERmRECxv/PEXBCLoAipmTqx/aGnCC9/1Bxw6qBCFmWBpF+ rwZc9ckTcaH77pxBuQZSWaDp1KSgOjmTkG3B3VRfR7Wz3o7efbRm0mh0/qx0oKRP dD779NOsy0xSZw== -----END CERTIFICATE-----Generated at Sat Dec 13 15:02:48 2025 by rpki-client