This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json) Hash identifier: vueyGZBln5SepZZ309VFB7vtDmR1FDrd9BxzsfA1ZvA= Subject key identifier: 6F:EE:52:69:A6:B8:DE:44:FA:12:2F:69:46:10:04:CC:E0:70:6C:F1 Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af Certificate serial: 019B1A96EFD896617EC751F3D3C1FC1F4087 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft Manifest number: 1267 Signing time: Sun 14 Dec 2025 02:00:57 +0000 Manifest this update: Sun 14 Dec 2025 02:00:57 +0000 Manifest next update: Mon 15 Dec 2025 02:00:57 +0000 Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: USgxAwe8rSaJM5Sordga/q2yUWNnk2kCMEC2VVIegbM=) 2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=) 3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:96:ef:d8:96:61:7e:c7:51:f3:d3:c1:fc:1f:40:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af Validity Not Before: Dec 14 02:00:57 2025 GMT Not After : Dec 15 02:00:57 2025 GMT Subject: CN=6fee5269a6b8de44fa122f69461004cce0706cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:a2:28:33:1f:25:f5:e4:0c:7a:e2:4e:f7: a0:ed:ea:84:67:05:cb:2b:6b:a4:33:e5:0d:af:b7: 78:02:a7:2b:91:50:8a:1b:2f:8f:5a:38:5d:36:2d: a9:43:50:75:38:24:78:ec:7e:b4:5a:7d:73:f3:16: 0a:71:41:dd:fd:38:0d:f5:0c:fb:b5:d4:42:22:b0: a2:5e:fa:8e:e9:7f:6e:a3:98:c5:2b:56:16:7a:d8: 04:e8:40:09:ae:80:6f:0b:51:c0:0c:a2:7a:11:c7: 46:e1:f9:0c:a5:bb:f8:5f:22:c5:99:11:42:05:ee: d6:7a:7a:4f:7b:4a:b4:2e:43:73:8e:56:0f:dc:cc: 25:4e:85:a1:f9:85:11:36:3a:dc:04:fb:ca:03:32: 22:f4:f0:a4:09:07:a7:47:46:4e:7d:09:47:61:4b: 6d:36:0b:58:80:90:db:96:4c:f6:42:7f:12:5e:21: dc:04:ea:1d:b5:5a:99:6e:ad:e4:e1:fd:bb:b3:13: af:5e:6f:53:08:15:93:48:e2:3c:90:f9:c6:6a:c7: 5a:a0:81:9c:14:20:d6:04:c7:1a:22:3c:0f:82:c4: a7:e5:22:5e:9e:da:7f:10:74:1c:75:a5:28:b1:1b: dc:ab:af:4b:49:f5:88:f7:1e:bf:db:57:5b:af:a6: 39:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EE:52:69:A6:B8:DE:44:FA:12:2F:69:46:10:04:CC:E0:70:6C:F1 X509v3 Authority Key Identifier: keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:33:8a:77:97:8f:b2:b2:c0:bf:9b:67:b0:48:4f:d3:f2:a3: d5:b2:96:f9:39:37:6c:52:7b:6e:82:59:0a:a4:aa:4f:27:c4: db:f5:42:82:c8:57:e4:cd:40:4e:11:27:ed:21:3c:eb:32:89: 39:c9:e2:a0:f7:78:88:3b:80:e0:bc:a4:77:88:20:2a:e6:a2: df:d0:92:20:a5:4c:67:1e:e8:a3:7d:bf:f3:03:54:07:d9:55: 0c:59:28:85:bc:ab:c9:dd:28:9a:06:7d:d2:f8:f5:52:13:e4: 25:5a:2c:86:68:22:9c:ec:08:c4:51:b5:4f:06:ef:37:71:c4: 8b:28:7c:70:e5:54:38:99:c5:6e:ff:8b:73:92:a9:f3:85:74: f1:68:c1:07:c4:65:67:14:db:50:b7:ba:a3:d2:68:f7:8d:df: 39:62:11:ca:2c:21:6a:84:de:5b:5f:7f:0b:9a:e3:76:8d:7a: 20:6d:26:99:17:90:82:2f:bb:3a:77:a2:53:97:c4:8a:cb:df: a5:04:d8:f7:6d:d7:9f:0b:31:db:aa:88:54:ec:ce:1f:8b:af: 7d:40:d0:0c:8c:12:fa:f8:b3:60:da:4a:d5:c5:2a:fa:13:3b: 27:5e:32:a7:11:bd:02:3c:e5:c6:ce:a6:fa:60:01:58:57:1e: 97:67:29:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsalu/YlmF+x1Hz08H8H0CHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3 MDc2YWYwHhcNMjUxMjE0MDIwMDU3WhcNMjUxMjE1MDIwMDU3WjAzMTEwLwYDVQQD Eyg2ZmVlNTI2OWE2YjhkZTQ0ZmExMjJmNjk0NjEwMDRjY2UwNzA2Y2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOGiKDMfJfXkDHriTveg7eqEZwXL K2ukM+UNr7d4AqcrkVCKGy+PWjhdNi2pQ1B1OCR47H60Wn1z8xYKcUHd/TgN9Qz7 tdRCIrCiXvqO6X9uo5jFK1YWetgE6EAJroBvC1HADKJ6EcdG4fkMpbv4XyLFmRFC Be7WenpPe0q0LkNzjlYP3MwlToWh+YURNjrcBPvKAzIi9PCkCQenR0ZOfQlHYUtt NgtYgJDblkz2Qn8SXiHcBOodtVqZbq3k4f27sxOvXm9TCBWTSOI8kPnGasdaoIGc FCDWBMcaIjwPgsSn5SJentp/EHQcdaUosRvcq69LSfWI9x6/21dbr6Y5fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/uUmmmuN5E+hIvaUYQBMzgcGzxMB8GA1UdIwQY MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt ZTBhYTg2ZDI1MGUzLzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDOKd5eP srLAv5tnsEhP0/Kj1bKW+Tk3bFJ7boJZCqSqTyfE2/VCgshX5M1AThEn7SE86zKJ OcnioPd4iDuA4Lykd4ggKuai39CSIKVMZx7oo32/8wNUB9lVDFkohbyryd0omgZ9 0vj1UhPkJVoshmginOwIxFG1TwbvN3HEiyh8cOVUOJnFbv+Lc5Kp84V08WjBB8Rl ZxTbULe6o9Jo943fOWIRyiwhaoTeW19/C5rjdo16IG0mmReQgi+7OneiU5fEisvf pQTY923Xnwsx26qIVOzOH4uvfUDQDIwS+vizYNpK1cUq+hM7J14ypxG9Ajzlxs6m +mABWFcel2cp/w== -----END CERTIFICATE-----Generated at Sun Dec 14 08:41:50 2025 by rpki-client