This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft File: 2BFKkiBvChn3M52guJZpxKX-Urk.mft (raw, json) Hash identifier: tSHBAZGPHSrD7gDa1+kCax+19lvBeWuz1PPgam1KKDg= Subject key identifier: C5:7E:84:5F:B5:D6:83:FD:D1:BF:2B:C9:11:A5:52:AA:D6:B2:73:C7 Authority key identifier: D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9 Certificate issuer: /CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9 Certificate serial: 019AFB79BA45AF1539ABE372438CA498F417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft Manifest number: 0148 Signing time: Mon 08 Dec 2025 01:00:49 +0000 Manifest this update: Mon 08 Dec 2025 01:00:49 +0000 Manifest next update: Tue 09 Dec 2025 01:00:49 +0000 Files and hashes: 1: 2BFKkiBvChn3M52guJZpxKX-Urk.crl (hash: ceJgSmUYI+SjX4xmcU7GbO+CVKF5g4xanl2f8eaK8h8=) 2: G9oTd4bBpmlm3pZMn3YyyXAVIyI.roa (hash: XC2pyO3ZNZCKadVf4J0EDWPKrfSqScmOhmM8oMNNkCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:79:ba:45:af:15:39:ab:e3:72:43:8c:a4:98:f4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9 Validity Not Before: Dec 8 01:00:49 2025 GMT Not After : Dec 9 01:00:49 2025 GMT Subject: CN=c57e845fb5d683fdd1bf2bc911a552aad6b273c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8d:d1:9a:1c:19:f4:a6:d5:36:5a:d3:62:20: 21:b9:6d:95:92:62:f2:83:9e:6a:dc:ef:4d:29:a4: 34:a3:98:43:6f:41:70:8a:c8:86:20:2c:d0:d4:2f: a5:90:8d:95:b5:11:48:ad:a1:5f:5d:f4:a7:c9:4b: 79:ec:07:c1:75:c2:71:d0:d7:e7:53:13:7c:04:b7: 9d:f7:df:96:9d:2a:1e:64:ad:ee:f1:29:86:fe:f8: 67:4c:c7:6f:a6:6f:77:a8:f7:ac:62:29:4e:fe:47: 14:ed:a8:25:c6:5b:af:69:81:5b:af:32:69:23:e4: c8:c6:4b:03:9f:e5:ed:b2:a9:06:03:b5:d0:5e:80: 6a:4a:36:d8:26:94:86:ae:76:5c:48:b7:4a:92:7b: 7b:d2:d6:ef:53:b4:15:90:ea:0d:c2:4f:39:16:e1: 27:e8:13:34:df:dd:f6:d9:c4:1a:61:c7:2e:83:89: fe:5b:5b:dd:e3:b7:31:73:a3:cc:10:3a:94:02:b7: 21:88:90:cd:4c:ce:fe:e8:be:9a:4c:01:f9:4f:c5: 3f:ee:ce:83:05:79:6a:5e:b2:5b:cd:56:3d:9f:d7: 6a:c5:92:12:ef:5d:8b:13:67:77:7b:cd:68:a1:07: 36:0f:b1:25:3d:35:a6:cf:37:b0:11:2b:60:28:57: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7E:84:5F:B5:D6:83:FD:D1:BF:2B:C9:11:A5:52:AA:D6:B2:73:C7 X509v3 Authority Key Identifier: keyid:D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:22:9b:78:cc:6b:60:dd:48:bd:f9:31:08:d6:20:41:be:31: 96:ba:1a:11:4f:55:30:ca:f2:82:c1:28:4d:d3:44:cf:4a:08: 58:84:db:16:29:8a:63:b4:71:7b:fb:8a:d2:4f:8e:a7:76:6b: e1:3e:a1:ac:ae:68:1b:38:4c:12:be:92:de:94:41:82:09:22: ac:eb:6f:1e:88:d3:ff:4e:a7:e2:52:34:e7:1f:3f:a4:f8:a9: a8:bc:d9:02:a0:45:4f:e3:90:57:46:f8:19:3b:55:68:2c:91: e0:5e:5b:9c:c4:a2:4c:e6:ec:da:f7:86:d1:1f:de:19:33:e0: 3c:64:eb:68:d7:9b:a3:34:d2:c5:4d:31:39:13:3e:34:e5:c2: c0:a3:cc:de:76:28:12:13:24:26:b2:7d:e3:44:18:2e:15:fb: 35:71:d0:23:70:c7:c4:6d:40:1f:b6:2e:2b:3e:73:60:61:6a: 2c:ae:13:0c:7d:6d:8e:e6:c7:34:e3:a7:01:55:50:46:87:29: 90:e6:75:34:5a:ba:99:86:8e:60:9c:3e:26:88:79:2e:f0:0c: 75:4b:63:2f:d7:15:7a:17:03:7b:55:0a:b9:80:7e:d0:7a:1a: 1a:31:ad:1c:db:ab:3d:16:c8:1d:60:54:12:cc:b4:29:cf:83: 12:b3:a3:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7ebpFrxU5q+NyQ4ykmPQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MTE0YTkyMjA2ZjBhMTlmNzMzOWRhMGI4OTY2OWM0YTVm ZTUyYjkwHhcNMjUxMjA4MDEwMDQ5WhcNMjUxMjA5MDEwMDQ5WjAzMTEwLwYDVQQD EyhjNTdlODQ1ZmI1ZDY4M2ZkZDFiZjJiYzkxMWE1NTJhYWQ2YjI3M2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY3RmhwZ9KbVNlrTYiAhuW2VkmLy g55q3O9NKaQ0o5hDb0FwisiGICzQ1C+lkI2VtRFIraFfXfSnyUt57AfBdcJx0Nfn UxN8BLed99+WnSoeZK3u8SmG/vhnTMdvpm93qPesYilO/kcU7aglxluvaYFbrzJp I+TIxksDn+XtsqkGA7XQXoBqSjbYJpSGrnZcSLdKknt70tbvU7QVkOoNwk85FuEn 6BM039322cQaYccug4n+W1vd47cxc6PMEDqUArchiJDNTM7+6L6aTAH5T8U/7s6D BXlqXrJbzVY9n9dqxZIS712LE2d3e81ooQc2D7ElPTWmzzewEStgKFd3TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMV+hF+11oP90b8ryRGlUqrWsnPHMB8GA1UdIwQY MBaAFNgRSpIgbwoZ9zOdoLiWacSl/lK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJGS2tpQnZDaG4zTTUyZ3VKWnB4S1gtVXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mZGFjZTktODIxMi00Y2UxLWE5OTkt NTIwOGQ5ODU0MzY0LzEvMkJGS2tpQnZDaG4zTTUyZ3VKWnB4S1gtVXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mZGFjZTktODIxMi00Y2UxLWE5OTktNTIwOGQ5ODU0MzY0 LzEvMkJGS2tpQnZDaG4zTTUyZ3VKWnB4S1gtVXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyKbeMxr YN1IvfkxCNYgQb4xlroaEU9VMMrygsEoTdNEz0oIWITbFimKY7Rxe/uK0k+Op3Zr 4T6hrK5oGzhMEr6S3pRBggkirOtvHojT/06n4lI05x8/pPipqLzZAqBFT+OQV0b4 GTtVaCyR4F5bnMSiTObs2veG0R/eGTPgPGTraNebozTSxU0xORM+NOXCwKPM3nYo EhMkJrJ940QYLhX7NXHQI3DHxG1AH7YuKz5zYGFqLK4TDH1tjubHNOOnAVVQRocp kOZ1NFq6mYaOYJw+Joh5LvAMdUtjL9cVehcDe1UKuYB+0HoaGjGtHNurPRbIHWBU Esy0Kc+DErOjdA== -----END CERTIFICATE-----Generated at Mon Dec 8 09:15:18 2025 by rpki-client