This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json) Hash identifier: tWTdq6h9xTQ1tbrT2rilMfk2IZ6bZmPdRmBauIu0QIk= Subject key identifier: 6D:6D:9A:2D:A8:2D:50:4B:2E:D4:63:C2:F0:8B:72:A9:F1:DD:98:76 Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 019AEF07AF3248ADB90952CF7974FE5F1EDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft Manifest number: 0A83 Signing time: Fri 05 Dec 2025 15:00:49 +0000 Manifest this update: Fri 05 Dec 2025 15:00:49 +0000 Manifest next update: Sat 06 Dec 2025 15:00:49 +0000 Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: rz9QwhbDdYosXZC3jVusqvYI4DOnAQ/KIDRKzGFRSUY=) 2: 6UnLf-WfoW9sr8JO9S3jMv6qGIA.roa (hash: 2bd+YNQSpktsNSy1cZJWllJsfSQnRwhxzclMAXA57Ro=) 3: 87iBXWDpSIwRDGkwc7K8UhWgGyI.roa (hash: GnB7PMQFypZjuArzdsmg92AtM/uSLFw3faYH5HVQkIw=) 4: C9ZicXvmxm567EBbHhNa__2fy_I.roa (hash: spPgfi0xUOfFyLJbLIvDF9/eSBXOXpmeRtI5V43B54I=) 5: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=) 6: GxPqJ9WQ-DKd_9ctcg8-12jFGZ0.roa (hash: KATN8CFnbRX1tzVerM2G5h88BqUwwD5kvjL2DX0FIcw=) 7: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=) 8: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=) 9: gr1d5o3sHGA3VWu-8KVK6b7UyM4.roa (hash: GHLuG9O5AVwW61aYh11UvqNMmcEewfjv/mRXgyvZ4yg=) 10: nPeZE7NjK8v1X9W6OWWQV8CL9dk.roa (hash: i5DQUMA7TTXDg8w9uPAc9gbe3ID2PYonRIJFljEMgcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:07:af:32:48:ad:b9:09:52:cf:79:74:fe:5f:1e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Dec 5 15:00:49 2025 GMT Not After : Dec 6 15:00:49 2025 GMT Subject: CN=6d6d9a2da82d504b2ed463c2f08b72a9f1dd9876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:f2:76:44:61:da:35:5a:ad:8d:fa:1e:b2: 35:62:f7:4f:8c:31:ce:24:da:b5:d0:02:4b:3e:c5: 15:c6:31:6c:3f:a7:cd:8b:b1:a6:ab:6f:ca:6b:ed: 4c:fc:17:76:22:ad:ee:91:23:c9:ef:fe:35:df:bb: f7:3b:12:2a:f8:0c:38:c6:b3:e7:44:0e:bd:cc:c0: 2c:fc:c4:62:14:bf:08:2c:15:b6:21:db:50:c4:98: 75:a0:82:3d:2b:a7:9f:43:f3:fd:d3:9b:fb:e8:e3: 27:14:88:73:17:63:e9:72:e9:f4:87:ad:54:4c:ac: c2:5a:e6:cd:3e:30:69:66:54:37:f0:b0:24:77:c1: 1b:2e:13:8c:46:98:34:1c:ef:19:43:1e:fe:09:a9: 87:e8:a7:25:21:3e:d5:a7:9f:f4:d6:68:5b:cc:da: 50:a7:6a:85:b8:4a:df:4d:21:73:ea:42:ab:04:df: 49:8d:c6:d8:33:8a:20:34:7a:53:0b:55:80:45:96: 78:93:49:43:98:fe:a9:6f:d2:65:a6:a0:2d:c1:3a: ac:3e:5b:a8:1c:37:c7:af:a9:6d:bb:28:07:b0:29: 40:b5:45:11:f6:8a:7c:8e:f8:fe:f3:ea:92:f6:56: b2:0a:48:73:af:0a:04:9d:59:22:c4:1d:af:56:2c: 59:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6D:9A:2D:A8:2D:50:4B:2E:D4:63:C2:F0:8B:72:A9:F1:DD:98:76 X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b0:ef:1b:0b:f7:b0:71:dd:72:a2:69:08:07:63:79:ce:64: a8:5f:c5:61:ca:ed:f3:9a:93:fe:df:bf:00:04:73:8f:b7:44: 38:cf:30:a6:80:a0:1a:9f:03:f5:87:5b:bd:0b:46:7c:5b:36: f4:11:bf:15:5d:37:7c:33:95:3a:fe:06:dc:ec:6a:ec:f6:96: 9e:a4:69:67:e1:16:13:e5:3d:a2:66:b1:52:7e:88:98:d8:2f: 83:e0:68:40:31:66:e4:b7:43:2e:12:fd:c0:65:be:d7:0b:5c: 0a:87:c3:ae:71:b9:37:3e:af:75:e9:3f:dd:76:44:48:63:f8: 54:1e:84:4f:df:99:b1:41:14:dc:e8:62:8f:a6:68:92:af:68: cd:1f:63:78:e1:40:aa:16:eb:ef:ae:d6:cd:87:ce:85:ac:4c: bd:99:71:52:27:b2:11:b2:2b:1a:82:ba:b9:ac:7c:77:c9:d6: 4e:84:88:e3:59:23:df:d8:05:48:fc:27:47:6d:cf:60:6f:da: 5a:d5:e2:96:8d:f7:99:96:ab:4a:28:40:9e:51:9c:f8:f0:e9: f5:ea:3a:c2:dc:53:e6:99:a5:47:d2:0e:b9:6c:2c:2c:fd:89: a4:f8:55:80:10:dc:39:73:f3:92:bb:43:cb:e9:60:76:19:fc: 27:dd:35:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvB68ySK25CVLPeXT+Xx7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjUxMjA1MTUwMDQ5WhcNMjUxMjA2MTUwMDQ5WjAzMTEwLwYDVQQD Eyg2ZDZkOWEyZGE4MmQ1MDRiMmVkNDYzYzJmMDhiNzJhOWYxZGQ5ODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4jydkRh2jVarY36HrI1YvdPjDHO JNq10AJLPsUVxjFsP6fNi7Gmq2/Ka+1M/Bd2Iq3ukSPJ7/4137v3OxIq+Aw4xrPn RA69zMAs/MRiFL8ILBW2IdtQxJh1oII9K6efQ/P905v76OMnFIhzF2Ppcun0h61U TKzCWubNPjBpZlQ38LAkd8EbLhOMRpg0HO8ZQx7+CamH6KclIT7Vp5/01mhbzNpQ p2qFuErfTSFz6kKrBN9JjcbYM4ogNHpTC1WARZZ4k0lDmP6pb9JlpqAtwTqsPluo HDfHr6ltuygHsClAtUUR9op8jvj+8+qS9layCkhzrwoEnVkixB2vVixZ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1tmi2oLVBLLtRjwvCLcqnx3Zh2MB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbDvGwv3 sHHdcqJpCAdjec5kqF/FYcrt85qT/t+/AARzj7dEOM8wpoCgGp8D9YdbvQtGfFs2 9BG/FV03fDOVOv4G3Oxq7PaWnqRpZ+EWE+U9omaxUn6ImNgvg+BoQDFm5LdDLhL9 wGW+1wtcCofDrnG5Nz6vdek/3XZESGP4VB6ET9+ZsUEU3Ohij6Zokq9ozR9jeOFA qhbr767WzYfOhaxMvZlxUieyEbIrGoK6uax8d8nWToSI41kj39gFSPwnR23PYG/a WtXilo33mZarSihAnlGc+PDp9eo6wtxT5pmlR9IOuWwsLP2JpPhVgBDcOXPzkrtD y+lgdhn8J9014Q== -----END CERTIFICATE-----Generated at Fri Dec 5 16:37:14 2025 by rpki-client