This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json) Hash identifier: tMIhNXzdtfGfUMV+wKbZwjUg+Al6s62BF2ESCWt78uc= Subject key identifier: 3A:64:31:CC:C4:7C:1C:8C:CB:B9:76:97:3B:DE:82:FC:BA:02:19:25 Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47 Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347 Certificate serial: 019B32D725D91335071512102F5D6523FC2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 19:01:59 +0000 Manifest this update: Thu 18 Dec 2025 19:01:59 +0000 Manifest next update: Fri 19 Dec 2025 19:01:59 +0000 Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=) 2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: qP8+qpJLSdtTkN8ZQephLkQ4y0sNf1z6lV0jXDkxebA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:25:d9:13:35:07:15:12:10:2f:5d:65:23:fc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347 Validity Not Before: Dec 18 19:01:59 2025 GMT Not After : Dec 19 19:01:59 2025 GMT Subject: CN=3a6431ccc47c1c8ccbb976973bde82fcba021925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:70:b3:9d:74:d7:c3:de:5d:87:c3:95:62:96: f4:32:f4:25:b4:30:c4:b9:d1:0d:f4:a4:d7:7f:f8: 83:80:77:20:65:96:df:c1:af:7b:02:12:a0:67:74: cf:ff:41:40:18:5e:25:fd:a1:0d:ba:cd:39:e9:f7: 79:96:03:ef:0f:6d:91:b2:8a:ef:03:17:e9:37:bf: fc:71:19:80:b0:de:7b:15:7e:f7:3d:ec:ad:39:e9: 78:50:b5:71:ef:95:28:88:96:e6:c9:45:62:76:e0: c1:9a:26:94:96:87:ea:44:f0:43:f4:c3:a4:ef:c9: 4f:64:6f:f2:c2:98:37:1c:8e:1f:65:c4:f6:f1:0d: de:74:1b:db:4a:2f:61:e3:da:da:cb:41:3b:f3:c2: 3b:13:c8:01:3d:5e:2f:d1:9d:be:b6:31:6e:ae:65: 4d:95:d1:6d:c4:9a:e9:cb:32:92:a5:37:30:40:34: 40:e0:52:cb:7f:db:40:b3:93:e1:ee:f6:d2:d9:cf: f9:f2:4f:1c:6d:ae:0f:70:6c:7f:39:29:7f:11:4b: 1f:4a:ab:45:67:d2:fa:10:d6:f6:fb:d1:29:e4:4a: 39:68:e1:1c:2e:5c:7e:db:12:d2:a0:35:d4:69:c5: 63:6a:71:ae:0e:2b:69:13:97:80:4f:6e:31:3f:44: 99:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:64:31:CC:C4:7C:1C:8C:CB:B9:76:97:3B:DE:82:FC:BA:02:19:25 X509v3 Authority Key Identifier: keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:94:ab:62:70:0f:f3:4c:28:11:00:3c:89:c8:08:5e:59:77: af:43:2f:c2:ed:35:b1:4a:3f:09:5b:b0:36:a5:a8:1a:04:6c: 96:9e:b7:07:b1:4b:99:fb:14:3e:f3:43:d5:86:c1:02:d6:16: 26:a1:a6:b1:1d:31:e5:06:3e:67:77:5b:60:52:f2:01:df:10: 82:96:9c:05:d3:ad:a2:d0:d6:04:de:dd:a6:78:25:1f:2f:29: 6d:84:98:29:7f:a3:70:28:f2:64:5c:73:83:c5:38:0b:e8:7a: b9:8a:81:22:50:e2:c9:06:71:83:2a:a9:f3:03:e6:63:cc:b2: de:8f:25:61:76:fd:22:57:af:93:46:9b:c2:09:24:1c:97:4f: 5c:8d:29:41:b9:4b:4b:b5:9b:68:59:90:15:40:a9:32:9a:f2: 46:a5:2a:13:fe:6d:36:cd:47:91:76:6b:a1:a2:16:f9:b6:a2: 77:ca:c4:bc:0a:70:e9:d9:ec:e4:6d:6b:7d:57:f0:65:8d:aa: c1:4f:d2:3d:02:13:a6:82:01:1b:ad:28:5d:f5:66:b1:4b:85: 72:d8:b5:5c:fd:52:1d:14:e3:11:98:12:a1:8a:01:0b:fd:04: d9:c6:a6:3b:d8:3a:92:01:e8:32:88:48:07:04:28:48:a1:0a: af:89:6c:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1yXZEzUHFRIQL11lI/wrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZTcwZWY2ZmViODEzZWQ5ZGJiOTY3ZDA1MTNjZjIwNDNk M2EzNDcwHhcNMjUxMjE4MTkwMTU5WhcNMjUxMjE5MTkwMTU5WjAzMTEwLwYDVQQD EygzYTY0MzFjY2M0N2MxYzhjY2JiOTc2OTczYmRlODJmY2JhMDIxOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynCznXTXw95dh8OVYpb0MvQltDDE udEN9KTXf/iDgHcgZZbfwa97AhKgZ3TP/0FAGF4l/aENus056fd5lgPvD22Rsorv AxfpN7/8cRmAsN57FX73PeytOel4ULVx75UoiJbmyUViduDBmiaUlofqRPBD9MOk 78lPZG/ywpg3HI4fZcT28Q3edBvbSi9h49ray0E788I7E8gBPV4v0Z2+tjFurmVN ldFtxJrpyzKSpTcwQDRA4FLLf9tAs5Ph7vbS2c/58k8cba4PcGx/OSl/EUsfSqtF Z9L6ENb2+9Ep5Eo5aOEcLlx+2xLSoDXUacVjanGuDitpE5eAT24xP0SZbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpkMczEfByMy7l2lzvegvy6AhklMB8GA1UdIwQY MBaAFNrnDvb+uBPtnbuWfQUTzyBD06NHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDIt ZWFiNDBiZTQ4Y2MxLzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDItZWFiNDBiZTQ4Y2Mx LzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZSrYnAP 80woEQA8icgIXll3r0Mvwu01sUo/CVuwNqWoGgRslp63B7FLmfsUPvND1YbBAtYW JqGmsR0x5QY+Z3dbYFLyAd8QgpacBdOtotDWBN7dpnglHy8pbYSYKX+jcCjyZFxz g8U4C+h6uYqBIlDiyQZxgyqp8wPmY8yy3o8lYXb9Ilevk0abwgkkHJdPXI0pQblL S7WbaFmQFUCpMpryRqUqE/5tNs1HkXZroaIW+baid8rEvApw6dns5G1rfVfwZY2q wU/SPQITpoIBG60oXfVmsUuFcti1XP1SHRTjEZgSoYoBC/0E2camO9g6kgHoMohI BwQoSKEKr4lsUA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:19 2025 by rpki-client