This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json) Hash identifier: enrgLE2RQi3OUInGMyBzVwgO2RZGH3ph2J4Pjfzr4Xo= Subject key identifier: 3D:4C:B5:88:58:25:0F:D1:79:03:94:63:E4:DB:6C:B9:3B:3D:25:DE Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18 Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818 Certificate serial: 019B4B83926D4728CD7121F167DFD68C8487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft Manifest number: 01FD Signing time: Tue 23 Dec 2025 14:01:12 +0000 Manifest this update: Tue 23 Dec 2025 14:01:12 +0000 Manifest next update: Wed 24 Dec 2025 14:01:12 +0000 Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: ZBc5bk/Fy0G3eiNxGc5E9clh+t4X1HX1aReCHDol+js=) 2: 5hUwO1deIxtsaDVJppuYNB_xPhA.roa (hash: cZ6SshMBGBGCASxx2lUXi7wQmA74gXz633wC/Vk5q0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:92:6d:47:28:cd:71:21:f1:67:df:d6:8c:84:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818 Validity Not Before: Dec 23 14:01:12 2025 GMT Not After : Dec 24 14:01:12 2025 GMT Subject: CN=3d4cb58858250fd179039463e4db6cb93b3d25de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:74:ab:23:38:c6:b8:2e:94:58:9d:9b:a2: 39:fd:29:fd:32:3a:0e:dd:d7:66:53:91:84:7b:dc: aa:d5:61:ee:36:33:10:40:54:08:f5:32:8b:a1:7b: 57:14:eb:bb:f1:f8:bf:77:ea:ac:b2:f9:22:da:0f: 6c:45:81:37:75:6d:3e:33:98:34:6c:4b:fc:8c:64: b2:01:86:a6:0e:a9:db:19:78:3b:07:36:2b:7f:c8: 8a:a0:e3:7f:02:dc:2c:94:66:51:da:4c:a3:f9:3b: df:d9:bb:4c:1d:19:4b:fb:1d:00:28:59:f5:31:4e: 06:35:d5:32:a9:12:d3:dd:54:ad:8c:14:d7:c6:f5: 23:17:4c:13:3a:ac:55:10:b9:7b:0e:2a:27:fa:47: 42:e5:6f:3b:d8:30:14:69:ed:50:92:f9:30:50:5a: e2:5d:cf:aa:78:f9:c0:97:79:6e:34:1e:ed:f0:1c: 16:87:80:63:73:21:de:f0:55:71:68:0d:61:3e:87: fc:d3:54:17:a2:40:86:3e:f7:75:40:30:fc:85:f2: 9f:36:e5:cd:36:e0:e6:e7:8d:2c:26:9b:8e:22:0b: 00:a3:e6:89:38:30:81:0f:40:42:35:70:b8:8b:94: 37:8a:30:a5:e0:0e:c9:10:f5:49:9b:cb:4e:f0:af: b9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4C:B5:88:58:25:0F:D1:79:03:94:63:E4:DB:6C:B9:3B:3D:25:DE X509v3 Authority Key Identifier: keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f8:fa:e3:4a:f9:a4:4b:1d:64:8d:74:06:15:07:df:17:19: 2a:ea:e2:0a:2c:b5:e8:5c:59:d0:a3:e7:44:48:9b:71:b4:f8: e8:54:a7:da:06:a6:23:c1:ae:9c:7d:8b:8d:ba:10:4f:9a:54: da:7b:c3:5b:ce:7f:50:52:48:db:c8:e5:61:44:09:23:79:ef: 1e:6e:8a:c3:26:d0:1f:1b:6d:d2:74:95:50:dc:67:12:24:6e: 9e:3a:73:a5:5e:cc:ab:f6:7f:58:c1:5b:4f:45:70:eb:33:5d: ef:e3:18:2e:64:c6:31:28:aa:c8:fc:f2:13:98:39:87:a9:08: 1e:26:e5:e2:22:96:77:9b:70:fc:00:e1:ae:7c:16:ae:ff:19: b1:9c:2c:06:21:0f:f0:2a:9b:ef:87:18:05:02:15:23:25:1e: 87:71:6b:81:5a:c8:e1:bd:54:38:58:69:fe:4e:29:bc:2e:00: 97:7c:0c:3e:f1:c6:7a:c7:11:7b:49:97:72:b9:1d:59:fb:90: 80:07:d1:fa:1e:08:10:2a:75:b0:6e:e6:4f:40:69:31:09:2a: 11:af:77:ee:40:c7:0a:f1:4e:11:37:a5:e9:e2:43:40:e9:6b: 62:69:9b:6c:a0:cd:07:25:87:4c:eb:ce:37:57:a0:1d:90:1b: 7e:e9:d7:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg5JtRyjNcSHxZ9/WjISHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhY2UyOGYyMmM2ZTdlNDQ0YmIwYTdlNTJhMTUzM2I4MGRl ZTc4MTgwHhcNMjUxMjIzMTQwMTEyWhcNMjUxMjI0MTQwMTEyWjAzMTEwLwYDVQQD EygzZDRjYjU4ODU4MjUwZmQxNzkwMzk0NjNlNGRiNmNiOTNiM2QyNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V10qyM4xrgulFidm6I5/Sn9MjoO 3ddmU5GEe9yq1WHuNjMQQFQI9TKLoXtXFOu78fi/d+qssvki2g9sRYE3dW0+M5g0 bEv8jGSyAYamDqnbGXg7BzYrf8iKoON/AtwslGZR2kyj+Tvf2btMHRlL+x0AKFn1 MU4GNdUyqRLT3VStjBTXxvUjF0wTOqxVELl7Dion+kdC5W872DAUae1QkvkwUFri Xc+qePnAl3luNB7t8BwWh4BjcyHe8FVxaA1hPof801QXokCGPvd1QDD8hfKfNuXN NuDm540sJpuOIgsAo+aJODCBD0BCNXC4i5Q3ijCl4A7JEPVJm8tO8K+5WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1MtYhYJQ/ReQOUY+TbbLk7PSXeMB8GA1UdIwQY MBaAFNrOKPIsbn5ES7Cn5SoVM7gN7ngYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1Zjct NzVjOWIyNDc4ZTNlLzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1ZjctNzVjOWIyNDc4ZTNl LzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvj640r5 pEsdZI10BhUH3xcZKuriCiy16FxZ0KPnREibcbT46FSn2gamI8GunH2LjboQT5pU 2nvDW85/UFJI28jlYUQJI3nvHm6KwybQHxtt0nSVUNxnEiRunjpzpV7Mq/Z/WMFb T0Vw6zNd7+MYLmTGMSiqyPzyE5g5h6kIHibl4iKWd5tw/ADhrnwWrv8ZsZwsBiEP 8Cqb74cYBQIVIyUeh3FrgVrI4b1UOFhp/k4pvC4Al3wMPvHGescRe0mXcrkdWfuQ gAfR+h4IECp1sG7mT0BpMQkqEa937kDHCvFOETel6eJDQOlrYmmbbKDNByWHTOvO N1egHZAbfunXQQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:27:11 2025 by rpki-client