This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json) Hash identifier: ZeT0OGVqKr2Q+wYCny1sf5dISikeldXzA79G3SxUKpw= Subject key identifier: 2C:2F:67:8C:3E:F3:F4:AA:46:93:4B:5F:F0:EE:9A:DF:69:3B:EC:56 Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f Certificate serial: 019AF65331DE16261ADF126C6F6F77C020A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 01:00:38 +0000 Manifest this update: Sun 07 Dec 2025 01:00:38 +0000 Manifest next update: Mon 08 Dec 2025 01:00:38 +0000 Files and hashes: 1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=) 2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: GLehHs+SEMrFuHRmAGdIm5Khs4SYeFvv9r9+1v0B8BA=) 3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:31:de:16:26:1a:df:12:6c:6f:6f:77:c0:20:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f Validity Not Before: Dec 7 01:00:38 2025 GMT Not After : Dec 8 01:00:38 2025 GMT Subject: CN=2c2f678c3ef3f4aa46934b5ff0ee9adf693bec56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dd:9d:69:5c:57:5b:16:86:29:ce:d4:93:1a: e4:92:bf:1d:05:f4:78:aa:98:75:0b:e2:75:66:03: f0:86:49:c8:d9:6c:b7:7d:d7:d6:25:e5:5b:0c:ac: a8:4c:c8:e7:58:c6:5b:84:76:26:42:0c:a5:af:7f: 5f:a3:d6:bd:c4:14:8f:1f:7a:9d:ba:ca:a9:22:16: aa:e9:64:cd:f8:13:95:dc:71:8a:90:e4:d4:87:4d: df:e2:e0:6a:38:03:ae:43:a5:11:f6:78:cb:83:0a: ab:8a:f9:8b:ac:ad:f1:88:80:98:f6:5f:ea:e6:8f: 5b:61:63:d0:45:a4:89:01:cf:f1:ab:c2:5a:1c:53: bb:20:70:d2:26:36:72:bc:a5:53:d7:3b:01:bd:e0: 27:2a:84:8f:02:07:2f:a4:08:1d:34:66:14:66:f7: aa:6f:ca:54:7e:15:68:d2:ca:e2:0c:59:75:bf:77: 65:4d:6f:2a:21:84:15:73:ba:85:2b:f6:cd:85:58: 8a:c3:63:88:06:3e:04:8d:da:e2:a3:96:cc:8f:ab: 09:13:ef:66:d2:37:60:63:2e:c4:b2:e1:d5:68:a1: 92:d1:22:99:c2:10:ca:9e:db:e3:c1:f5:e0:c8:9e: b8:58:ba:71:4a:98:ce:dc:62:49:29:a8:9f:8a:b1: 27:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2F:67:8C:3E:F3:F4:AA:46:93:4B:5F:F0:EE:9A:DF:69:3B:EC:56 X509v3 Authority Key Identifier: keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b2:05:82:62:27:4e:73:b1:29:a7:e8:0f:a2:29:4e:fc:da: 2c:d7:09:36:f3:37:b4:3a:3a:92:fc:0a:85:6b:f2:a7:82:dd: 0d:66:b5:cd:53:36:a4:8f:a3:97:cd:f3:ff:d6:75:38:33:60: c6:ad:7a:43:3c:00:d0:69:1e:96:b5:32:7e:fd:36:00:77:2b: ea:5f:ce:43:d5:3c:19:57:26:af:4c:60:a7:7d:39:1d:d8:d6: 50:9b:fc:85:07:66:9f:4c:7b:1a:ee:69:bf:77:e1:35:81:7c: 56:30:f0:e3:b7:cf:aa:fc:0e:99:7d:77:f3:9b:c4:4f:39:86: 48:18:23:a0:e2:70:ac:a9:7b:e2:f7:32:bc:14:df:75:74:c4: 48:83:b6:5a:30:20:ed:34:b6:8e:6f:26:b2:c2:49:a9:1d:85: 0e:cc:39:11:d0:30:79:66:d8:b0:f2:8f:68:ef:78:34:e6:4e: d2:04:e7:eb:07:89:c6:8e:63:06:ee:ad:c7:ad:0f:ba:5a:4e: 07:d8:ca:fd:57:65:53:43:eb:9a:0a:da:b5:1a:38:14:81:48: 2c:fb:ec:c7:18:b9:bc:56:7f:13:51:c1:5f:2f:0a:40:9e:66: 56:a6:fa:02:36:92:c0:3e:10:51:b6:e7:44:64:da:4d:7d:35: 3f:46:ef:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2UzHeFiYa3xJsb293wCCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNjFkZjcxZjk3NDYxYzZiM2I0NTQ4ZmRjZmVjZDc3YjY3 OTAzMGYwHhcNMjUxMjA3MDEwMDM4WhcNMjUxMjA4MDEwMDM4WjAzMTEwLwYDVQQD EygyYzJmNjc4YzNlZjNmNGFhNDY5MzRiNWZmMGVlOWFkZjY5M2JlYzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl92daVxXWxaGKc7Ukxrkkr8dBfR4 qph1C+J1ZgPwhknI2Wy3fdfWJeVbDKyoTMjnWMZbhHYmQgylr39fo9a9xBSPH3qd usqpIhaq6WTN+BOV3HGKkOTUh03f4uBqOAOuQ6UR9njLgwqrivmLrK3xiICY9l/q 5o9bYWPQRaSJAc/xq8JaHFO7IHDSJjZyvKVT1zsBveAnKoSPAgcvpAgdNGYUZveq b8pUfhVo0sriDFl1v3dlTW8qIYQVc7qFK/bNhViKw2OIBj4Ejdrio5bMj6sJE+9m 0jdgYy7EsuHVaKGS0SKZwhDKntvjwfXgyJ64WLpxSpjO3GJJKaifirEn9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwvZ4w+8/SqRpNLX/Dumt9pO+xWMB8GA1UdIwQY MBaAFLth33H5dGHGs7RUj9z+zXe2eQMPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTJIZmNmbDBZY2F6dEZTUDNQN05kN1o1QXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mNTJjZWEtM2Y0MS00ODJiLThjZTgt MmUyNTQ4MzEwZGYzLzEvdTJIZmNmbDBZY2F6dEZTUDNQN05kN1o1QXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mNTJjZWEtM2Y0MS00ODJiLThjZTgtMmUyNTQ4MzEwZGYz LzEvdTJIZmNmbDBZY2F6dEZTUDNQN05kN1o1QXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELIFgmIn TnOxKafoD6IpTvzaLNcJNvM3tDo6kvwKhWvyp4LdDWa1zVM2pI+jl83z/9Z1ODNg xq16QzwA0GkelrUyfv02AHcr6l/OQ9U8GVcmr0xgp305HdjWUJv8hQdmn0x7Gu5p v3fhNYF8VjDw47fPqvwOmX1385vETzmGSBgjoOJwrKl74vcyvBTfdXTESIO2WjAg 7TS2jm8mssJJqR2FDsw5EdAweWbYsPKPaO94NOZO0gTn6weJxo5jBu6tx60PulpO B9jK/VdlU0PrmgratRo4FIFILPvsxxi5vFZ/E1HBXy8KQJ5mVqb6AjaSwD4QUbbn RGTaTX01P0bvvg== -----END CERTIFICATE-----Generated at Sun Dec 7 07:27:25 2025 by rpki-client