This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json) Hash identifier: Nko4VJlg0i4wnxx4u6Cqyo6uHfUjPQNebTkfu57y6kU= Subject key identifier: 13:A6:B8:A1:5A:FD:C3:84:6B:84:AF:B5:62:28:F0:AA:D3:D9:2A:53 Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0 Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0 Certificate serial: 019B5C08C01E4BB9F426BDDBB853428C791C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft Manifest number: 17A0 Signing time: Fri 26 Dec 2025 19:00:35 +0000 Manifest this update: Fri 26 Dec 2025 19:00:35 +0000 Manifest next update: Sat 27 Dec 2025 19:00:35 +0000 Files and hashes: 1: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: GKK8l0KvjV0r37lbs7AdzEuYLP05wBNRZp4/lvZ1hpc=) 2: ULHC_eqps-Zhve3ylast8DZ7_B0.roa (hash: rS2DzXzv6b1NgQdmnOKMIDSPXpweT7iIgimqwwzrLDM=) 3: VuGkSohHUfq_yXd_IRur3wQhe6Y.roa (hash: BWYBYUzZHQt0NYFkHSXMP74Q5d+hL0sst0bi6Iqm6QQ=) 4: mqcBsZguJ4u7DQyG9frvwf0EmHo.roa (hash: 0n6BWPSoOW6nqo6SiNgRiIzfLmFx0RVI3omPqv7vWao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:08:c0:1e:4b:b9:f4:26:bd:db:b8:53:42:8c:79:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0 Validity Not Before: Dec 26 19:00:35 2025 GMT Not After : Dec 27 19:00:35 2025 GMT Subject: CN=13a6b8a15afdc3846b84afb56228f0aad3d92a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:dc:96:dd:c0:07:57:9e:b8:81:fb:e9:e3: 78:2c:7b:ed:b8:81:45:26:a4:9e:32:c3:49:d0:cc: dc:04:ad:6d:b8:a4:c6:89:07:e6:1c:17:1e:81:bf: 77:ef:3b:d0:ed:c8:b5:ea:46:9b:05:02:49:e0:97: 19:d3:03:8c:38:7c:97:14:d5:ac:f6:82:31:2c:17: f4:16:78:5f:5d:fd:a2:50:2d:a9:31:67:15:0e:03: 3f:a7:10:b0:73:8a:66:c1:c5:a9:f8:be:b8:7b:41: ff:c8:3e:c2:d6:43:ff:57:2b:c6:57:3a:79:3b:c2: 47:5b:87:1e:e2:49:3b:4e:e4:25:0f:6c:c3:85:5e: e7:af:fb:a1:ff:01:ce:a0:f1:e6:ac:46:84:0e:dd: fc:08:22:90:83:bf:cb:cc:26:66:3e:27:a6:42:35: 61:5e:20:79:fe:7e:25:0a:86:9d:8f:59:f8:4b:1a: 3f:d6:3a:17:cf:dc:cc:c7:2a:e5:ba:ac:69:7c:09: c8:88:8b:46:e2:4f:19:06:32:f2:14:6d:a3:c3:71: 1c:9c:7a:b1:ab:37:63:0c:aa:0e:3d:eb:3c:b5:0b: c7:e2:ad:ec:83:9d:d8:32:5f:f9:d3:70:8c:fa:ee: af:a4:aa:99:d6:a3:14:e3:ea:34:ae:e7:8f:2b:70: 26:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A6:B8:A1:5A:FD:C3:84:6B:84:AF:B5:62:28:F0:AA:D3:D9:2A:53 X509v3 Authority Key Identifier: keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:66:20:e4:5e:3c:26:e5:9c:07:4d:3f:e1:09:e0:10:7e:e2: dd:53:67:91:22:47:89:8f:20:6f:68:85:63:4d:b9:e1:e8:9c: c4:d6:32:cb:32:9b:f9:2c:50:5e:3b:ab:8f:65:9e:52:51:9d: 87:eb:c7:b9:dc:97:81:0e:af:ed:72:05:b8:c8:29:de:f1:f1: cd:54:20:4e:70:7f:65:ef:d2:48:b7:f3:36:30:97:93:dc:09: 17:ea:26:99:1f:dc:01:ac:25:a5:31:e7:a8:71:0b:38:6e:87: c9:58:c4:b6:a0:18:86:61:47:6e:bd:e8:87:4f:f4:26:9d:63: 64:60:59:26:d8:80:f3:51:3c:15:df:ef:a7:5e:19:99:ac:a0: 7f:04:8c:2c:d3:39:c5:a3:e5:36:32:d8:3f:fa:26:41:5d:72: 1a:6a:02:6b:c9:99:aa:83:24:48:6f:b5:df:86:fc:d0:90:30: aa:f8:9d:84:2f:3c:83:7f:f0:05:4c:ff:2e:33:04:c8:25:ab: 5d:79:5f:86:76:02:f6:3d:b0:29:40:76:f8:19:78:40:d2:cd: 89:a9:74:bb:59:8b:ae:85:2a:98:03:59:88:5b:da:bc:93:0d: 48:6e:63:de:35:a7:8e:87:fd:d9:00:ef:c6:34:c6:fc:1a:82: 30:5f:db:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCMAeS7n0Jr3buFNCjHkcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1 ZjE0YzAwHhcNMjUxMjI2MTkwMDM1WhcNMjUxMjI3MTkwMDM1WjAzMTEwLwYDVQQD EygxM2E2YjhhMTVhZmRjMzg0NmI4NGFmYjU2MjI4ZjBhYWQzZDkyYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qnclt3AB1eeuIH76eN4LHvtuIFF JqSeMsNJ0MzcBK1tuKTGiQfmHBcegb937zvQ7ci16kabBQJJ4JcZ0wOMOHyXFNWs 9oIxLBf0FnhfXf2iUC2pMWcVDgM/pxCwc4pmwcWp+L64e0H/yD7C1kP/VyvGVzp5 O8JHW4ce4kk7TuQlD2zDhV7nr/uh/wHOoPHmrEaEDt38CCKQg7/LzCZmPiemQjVh XiB5/n4lCoadj1n4Sxo/1joXz9zMxyrluqxpfAnIiItG4k8ZBjLyFG2jw3EcnHqx qzdjDKoOPes8tQvH4q3sg53YMl/503CM+u6vpKqZ1qMU4+o0ruePK3AmEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOmuKFa/cOEa4SvtWIo8KrT2SpTMB8GA1UdIwQY MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt ZjVlYzQwM2ZkYWNmLzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWYg5F48 JuWcB00/4QngEH7i3VNnkSJHiY8gb2iFY0254eicxNYyyzKb+SxQXjurj2WeUlGd h+vHudyXgQ6v7XIFuMgp3vHxzVQgTnB/Ze/SSLfzNjCXk9wJF+ommR/cAawlpTHn qHELOG6HyVjEtqAYhmFHbr3oh0/0Jp1jZGBZJtiA81E8Fd/vp14ZmaygfwSMLNM5 xaPlNjLYP/omQV1yGmoCa8mZqoMkSG+134b80JAwqvidhC88g3/wBUz/LjMEyCWr XXlfhnYC9j2wKUB2+Bl4QNLNial0u1mLroUqmANZiFvavJMNSG5j3jWnjof92QDv xjTG/BqCMF/blA== -----END CERTIFICATE-----Generated at Sat Dec 27 00:14:43 2025 by rpki-client