This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json) Hash identifier: k0TncV7sjLtuKf5wWw5UHXDj5MBcz/ZyTaZmqMD5S9U= Subject key identifier: A2:DA:61:F0:A0:76:2C:BC:FE:B1:58:C4:2C:11:77:3B:DB:DF:8D:A7 Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7 Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7 Certificate serial: 019B3B6BF9C85E8EA1890A84723611D40AA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft Manifest number: 0F62 Signing time: Sat 20 Dec 2025 11:01:30 +0000 Manifest this update: Sat 20 Dec 2025 11:01:30 +0000 Manifest next update: Sun 21 Dec 2025 11:01:30 +0000 Files and hashes: 1: H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (hash: MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=) 2: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: K0cjcU+rLk8zQGcS32qMJvNBpF4HpHdpAlvKY8QNDPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:f9:c8:5e:8e:a1:89:0a:84:72:36:11:d4:0a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7 Validity Not Before: Dec 20 11:01:30 2025 GMT Not After : Dec 21 11:01:30 2025 GMT Subject: CN=a2da61f0a0762cbcfeb158c42c11773bdbdf8da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:7e:f2:41:c3:34:09:b0:b8:55:ce:bb:ca: 2b:95:9d:97:f4:30:08:d1:0e:3d:1f:58:3d:ce:2f: 24:33:7d:27:3a:6d:a9:5a:b3:cf:f2:73:ab:66:13: 58:ce:f3:e4:66:98:3d:68:3b:40:66:d8:af:12:a1: 61:31:a3:bb:ce:e9:c7:56:e3:ba:8c:77:f2:57:3f: 2a:c2:04:2b:0c:fa:e2:aa:51:96:b9:24:14:97:6f: a5:f2:03:39:64:19:41:fd:91:1d:63:53:b5:9e:5a: a3:5b:fb:ab:16:40:13:87:22:03:72:02:bc:1e:d0: e9:84:05:29:49:d9:76:18:3c:0c:a7:ea:63:34:c8: ba:64:3b:1d:8c:ad:d1:8f:13:68:fd:b7:cc:3e:55: 44:d0:e3:b6:39:e2:de:df:91:e0:dc:22:ec:38:84: d2:fb:4f:8b:4b:17:60:85:31:74:43:97:82:a0:01: 49:af:88:ff:68:76:10:7b:3b:f4:30:e8:8a:1c:ec: 90:98:d2:35:43:e5:5c:be:f7:06:80:6e:1f:34:1c: a8:c6:35:5e:a8:d7:bc:22:04:65:4a:36:74:cc:97: bc:42:90:6a:d5:11:6e:c0:65:2c:53:d4:09:e2:47: a2:86:b8:cb:bb:01:e1:2d:dd:14:83:fb:a3:52:92: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DA:61:F0:A0:76:2C:BC:FE:B1:58:C4:2C:11:77:3B:DB:DF:8D:A7 X509v3 Authority Key Identifier: keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4a:b7:b8:14:d7:d6:33:94:9d:d4:28:64:5a:64:eb:f7:27: ea:dc:21:0d:93:9d:5d:72:77:de:1c:9e:d6:70:7a:03:d4:6e: 2f:68:19:1c:7d:6f:0a:83:45:95:2c:41:eb:39:1d:d0:67:f3: 82:12:40:ff:22:46:1c:a1:ce:76:7d:88:d0:f2:f0:24:59:8f: ac:26:f8:10:1e:73:fe:e1:6d:86:85:08:7b:c7:e6:f4:95:6d: 8a:f1:22:fa:2e:6b:52:63:f0:bb:a1:31:d4:98:7e:4e:60:9b: 70:9c:9c:5d:6c:1b:3c:09:ab:e0:ea:19:26:f6:8b:d8:0d:5f: 55:c9:96:0e:f1:8b:ed:c2:b9:ea:0f:f0:79:3c:bd:ea:22:5f: 9d:80:29:c9:ec:9d:86:9a:92:78:20:15:e1:ae:cb:5b:c8:16: 4e:89:32:f3:71:a7:40:b8:1d:12:fe:7b:56:48:0e:34:8a:2e: 63:24:a7:97:f1:da:aa:f4:c7:d3:b9:3d:39:27:5b:05:dd:70: 49:05:d5:c4:d9:ba:68:da:f9:7f:d1:cb:6e:ae:eb:e9:b0:a0: c0:92:9d:98:7d:fd:02:4d:b1:4b:2a:c3:8e:5b:c6:08:e5:a3: 93:50:1b:76:d8:60:1a:0e:a8:b0:26:88:82:64:ad:aa:e1:d7: 49:f5:8a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a/nIXo6hiQqEcjYR1AqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NjMzNDYxOWIxNDk0NWRmYmMwNjRkNGFlMWY1NzZiMGUx ZGVjYTcwHhcNMjUxMjIwMTEwMTMwWhcNMjUxMjIxMTEwMTMwWjAzMTEwLwYDVQQD EyhhMmRhNjFmMGEwNzYyY2JjZmViMTU4YzQyYzExNzczYmRiZGY4ZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2N+8kHDNAmwuFXOu8orlZ2X9DAI 0Q49H1g9zi8kM30nOm2pWrPP8nOrZhNYzvPkZpg9aDtAZtivEqFhMaO7zunHVuO6 jHfyVz8qwgQrDPriqlGWuSQUl2+l8gM5ZBlB/ZEdY1O1nlqjW/urFkAThyIDcgK8 HtDphAUpSdl2GDwMp+pjNMi6ZDsdjK3RjxNo/bfMPlVE0OO2OeLe35Hg3CLsOITS +0+LSxdghTF0Q5eCoAFJr4j/aHYQezv0MOiKHOyQmNI1Q+VcvvcGgG4fNByoxjVe qNe8IgRlSjZ0zJe8QpBq1RFuwGUsU9QJ4keihrjLuwHhLd0Ug/ujUpIoPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLaYfCgdiy8/rFYxCwRdzvb342nMB8GA1UdIwQY MBaAFEdjNGGbFJRd+8Bk1K4fV2sOHeynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDct ZGJmY2QxMWMzMzAzLzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDctZGJmY2QxMWMzMzAz LzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEq3uBTX 1jOUndQoZFpk6/cn6twhDZOdXXJ33hye1nB6A9RuL2gZHH1vCoNFlSxB6zkd0Gfz ghJA/yJGHKHOdn2I0PLwJFmPrCb4EB5z/uFthoUIe8fm9JVtivEi+i5rUmPwu6Ex 1Jh+TmCbcJycXWwbPAmr4OoZJvaL2A1fVcmWDvGL7cK56g/weTy96iJfnYApyeyd hpqSeCAV4a7LW8gWToky83GnQLgdEv57VkgONIouYySnl/HaqvTH07k9OSdbBd1w SQXVxNm6aNr5f9HLbq7r6bCgwJKdmH39Ak2xSyrDjlvGCOWjk1AbdthgGg6osCaI gmStquHXSfWKfA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:08:49 2025 by rpki-client