This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json) Hash identifier: k8KXGtlJNaQGBbF8wSOF5E5tZ5cv3cwIhO742aPf/+4= Subject key identifier: 24:89:7A:82:C2:F5:47:65:FF:FC:CB:98:30:DF:6D:5E:AC:54:91:D2 Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 019B2EC23CA9423FA6FD04ED2150CA5484D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft Manifest number: 0AA4 Signing time: Thu 18 Dec 2025 00:00:39 +0000 Manifest this update: Thu 18 Dec 2025 00:00:39 +0000 Manifest next update: Fri 19 Dec 2025 00:00:39 +0000 Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: uZOuju3c0QH+K+qfTk1Wu5Mjg3PPRyH7Zu36SG6ioGw=) 2: 6UnLf-WfoW9sr8JO9S3jMv6qGIA.roa (hash: 2bd+YNQSpktsNSy1cZJWllJsfSQnRwhxzclMAXA57Ro=) 3: 87iBXWDpSIwRDGkwc7K8UhWgGyI.roa (hash: GnB7PMQFypZjuArzdsmg92AtM/uSLFw3faYH5HVQkIw=) 4: C9ZicXvmxm567EBbHhNa__2fy_I.roa (hash: spPgfi0xUOfFyLJbLIvDF9/eSBXOXpmeRtI5V43B54I=) 5: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=) 6: GxPqJ9WQ-DKd_9ctcg8-12jFGZ0.roa (hash: KATN8CFnbRX1tzVerM2G5h88BqUwwD5kvjL2DX0FIcw=) 7: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=) 8: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=) 9: gr1d5o3sHGA3VWu-8KVK6b7UyM4.roa (hash: GHLuG9O5AVwW61aYh11UvqNMmcEewfjv/mRXgyvZ4yg=) 10: nPeZE7NjK8v1X9W6OWWQV8CL9dk.roa (hash: i5DQUMA7TTXDg8w9uPAc9gbe3ID2PYonRIJFljEMgcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:3c:a9:42:3f:a6:fd:04:ed:21:50:ca:54:84:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Dec 18 00:00:39 2025 GMT Not After : Dec 19 00:00:39 2025 GMT Subject: CN=24897a82c2f54765fffccb9830df6d5eac5491d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:3a:e9:10:57:74:ed:3b:5e:42:e9:c2:e1: 4c:36:68:d0:df:e3:87:39:0b:62:38:35:5c:e1:9d: 07:66:f8:b3:b7:e6:3d:49:e3:85:f7:8f:29:d8:e8: 3a:1b:90:3e:da:33:56:13:b6:5b:e3:ae:ff:ce:7a: fb:6e:9a:35:1d:53:b5:1b:cd:51:69:08:e2:2f:00: 39:fd:47:83:1f:74:2f:11:25:b3:f9:fb:8a:24:26: 57:d0:bc:9b:1d:d8:06:a6:bf:8b:42:cb:5f:08:ed: a0:6e:fa:11:97:df:32:1c:54:f0:d4:91:d3:61:4e: 54:91:c8:45:31:8a:64:30:43:36:5f:50:d8:83:17: 13:9a:44:c6:22:41:ae:b7:ad:e6:47:84:ac:c5:23: 98:33:3d:fe:7a:b4:a9:7f:7b:bf:d6:ec:ea:36:8f: 12:9d:25:0c:fa:5a:5e:91:e4:b5:b9:0b:d6:04:57: 5b:58:f2:04:1d:39:9a:5f:04:e0:b7:a7:68:e1:ad: 4a:31:dd:1b:67:66:9c:2f:aa:a6:a1:4e:74:b6:0e: a7:86:e2:ef:a6:72:eb:9d:56:7e:50:f9:1d:5f:04: 7c:fe:13:b1:73:95:0b:2f:cd:44:f9:5a:0e:4c:db: 3b:d7:f4:ae:c2:6a:7a:31:26:e1:f4:ec:18:d1:fd: 9d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:89:7A:82:C2:F5:47:65:FF:FC:CB:98:30:DF:6D:5E:AC:54:91:D2 X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d0:4c:eb:59:c0:68:ec:ed:65:58:f1:15:da:42:76:3c:58: 33:47:85:8f:24:e4:66:f3:ed:5a:30:6f:b5:47:5f:b5:79:52: f6:ea:88:68:a7:fc:7e:21:89:c0:ae:b2:b3:63:e2:f8:8f:e9: 28:26:73:6a:e0:cb:97:24:99:72:09:bd:3f:bb:f5:f1:30:70: 41:d4:64:c6:14:6a:0b:36:71:f6:d9:eb:16:c9:38:e6:fc:98: af:51:07:7a:5e:08:5f:77:62:c4:a6:df:7f:d2:08:c6:fd:96: ac:de:5e:06:ee:d3:18:b7:93:36:b3:de:f9:ab:f2:ee:f5:3d: 05:36:c0:d2:db:23:43:23:dd:d6:be:cd:71:4f:53:f6:fe:e3: 08:2c:ef:6c:31:7f:77:3e:ec:7d:f2:57:ed:7f:fb:24:7f:15: 26:ea:c1:e4:f5:ee:66:4b:59:66:28:9c:23:1c:36:24:92:6f: 44:49:f1:a6:d4:8d:cc:1e:37:80:ab:ff:fd:fb:bf:d8:85:9a: 99:aa:61:f7:d3:1a:28:89:70:95:c5:b8:03:d6:78:81:6d:ed: 75:2c:06:67:7f:77:c0:34:e8:16:4c:60:8c:b7:56:4e:64:0a: 33:bc:41:33:80:35:04:77:57:b3:b1:1b:bb:41:23:1e:d9:6a: 5b:83:40:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwjypQj+m/QTtIVDKVITYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjUxMjE4MDAwMDM5WhcNMjUxMjE5MDAwMDM5WjAzMTEwLwYDVQQD EygyNDg5N2E4MmMyZjU0NzY1ZmZmY2NiOTgzMGRmNmQ1ZWFjNTQ5MWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3Q66RBXdO07XkLpwuFMNmjQ3+OH OQtiODVc4Z0HZvizt+Y9SeOF948p2Og6G5A+2jNWE7Zb467/znr7bpo1HVO1G81R aQjiLwA5/UeDH3QvESWz+fuKJCZX0LybHdgGpr+LQstfCO2gbvoRl98yHFTw1JHT YU5UkchFMYpkMEM2X1DYgxcTmkTGIkGut63mR4SsxSOYMz3+erSpf3u/1uzqNo8S nSUM+lpekeS1uQvWBFdbWPIEHTmaXwTgt6do4a1KMd0bZ2acL6qmoU50tg6nhuLv pnLrnVZ+UPkdXwR8/hOxc5ULL81E+VoOTNs71/Suwmp6MSbh9OwY0f2dPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSJeoLC9Udl//zLmDDfbV6sVJHSMB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtBM61nA aOztZVjxFdpCdjxYM0eFjyTkZvPtWjBvtUdftXlS9uqIaKf8fiGJwK6ys2Pi+I/p KCZzauDLlySZcgm9P7v18TBwQdRkxhRqCzZx9tnrFsk45vyYr1EHel4IX3dixKbf f9IIxv2WrN5eBu7TGLeTNrPe+avy7vU9BTbA0tsjQyPd1r7NcU9T9v7jCCzvbDF/ dz7sffJX7X/7JH8VJurB5PXuZktZZiicIxw2JJJvREnxptSNzB43gKv//fu/2IWa maph99MaKIlwlcW4A9Z4gW3tdSwGZ393wDToFkxgjLdWTmQKM7xBM4A1BHdXs7Eb u0EjHtlqW4NA/A== -----END CERTIFICATE-----Generated at Thu Dec 18 09:30:26 2025 by rpki-client