This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft File: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json) Hash identifier: Rk42JQgALHog2Dsg4wndvGzOwOXtmoIHTTaBWcXNi0E= Subject key identifier: 7E:0F:0E:42:22:13:A9:5E:83:77:45:63:B2:E5:3F:06:11:5F:0E:2B Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed Certificate serial: 019B20CFBEDB883B9A761C2D22B291488A06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft Manifest number: 08AA Signing time: Mon 15 Dec 2025 07:00:44 +0000 Manifest this update: Mon 15 Dec 2025 07:00:44 +0000 Manifest next update: Tue 16 Dec 2025 07:00:44 +0000 Files and hashes: 1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: Aoxh2E690SlBw8csnjf43J9+pNfxB1rUyrtl9hT/H88=) 2: HNrCdJFr8Rfx0QNo8n5aDjy6J1M.roa (hash: gUK0hPbdwoGfL6nF9RbnOReZ1s6L9tQ32o9aBdmxdu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:be:db:88:3b:9a:76:1c:2d:22:b2:91:48:8a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed Validity Not Before: Dec 15 07:00:44 2025 GMT Not After : Dec 16 07:00:44 2025 GMT Subject: CN=7e0f0e422213a95e83774563b2e53f06115f0e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:71:bd:89:8e:8e:ad:33:39:27:ec:52:cc: f9:34:a2:33:48:bb:d5:86:17:22:cd:d4:6e:04:06: 32:46:f7:31:30:ec:2d:15:83:24:ca:ed:ac:7b:6b: 26:e8:99:78:46:70:60:6a:36:ce:1c:97:c2:50:43: 2f:bb:1b:00:5c:2f:aa:c0:5b:71:0a:06:1a:50:d5: 59:f1:45:70:3f:1c:f2:30:49:69:81:82:3e:5f:88: 8d:5f:f6:57:64:9b:06:d6:62:e7:1b:58:6c:8b:65: ee:95:aa:12:f1:ec:a2:fe:31:74:d6:aa:6b:37:31: 01:e3:2b:51:7e:73:85:05:9a:42:83:aa:cf:55:75: a7:8a:fd:4a:cb:b0:b4:dc:8c:08:9b:49:36:03:c4: da:db:67:60:f9:31:cf:9a:53:56:62:22:3b:4a:22: 09:2a:83:44:81:4d:7c:ff:9a:af:a6:cc:1f:e9:d2: b2:43:76:b1:e2:2b:73:85:93:40:82:53:86:df:bf: 67:57:26:17:aa:b1:5f:e6:bb:2e:7b:c9:0f:56:b1: fe:c5:68:91:7a:df:05:79:2e:e5:c0:89:4d:1d:2d: 1d:88:fd:fa:17:42:9e:94:ca:e3:35:ce:25:eb:a2: d2:07:2a:ed:07:68:2f:6d:fe:ec:21:65:21:d9:df: 54:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0F:0E:42:22:13:A9:5E:83:77:45:63:B2:E5:3F:06:11:5F:0E:2B X509v3 Authority Key Identifier: keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f9:c1:70:3e:b6:24:7b:72:13:d7:a9:22:ba:97:3c:2d:90: aa:2d:85:a6:6c:6b:3a:82:bb:e6:c9:63:74:9a:b3:c3:29:7b: b2:64:e4:0c:85:8a:b5:4b:06:be:0a:96:8b:45:21:9e:6a:5b: 75:9f:53:b4:c2:7f:0c:47:6a:7c:26:db:47:1c:75:4a:84:62: 94:72:90:3f:ee:55:eb:c0:a0:68:26:83:34:26:d9:17:69:8d: 92:2e:b9:3c:c3:f0:23:59:38:4d:e9:45:47:35:fe:85:96:ac: 61:ca:92:ac:db:31:fd:fe:5c:d6:c0:ff:20:c7:af:ca:a1:af: 43:e8:e6:dc:db:e6:19:32:35:b9:30:2c:d9:b7:ff:36:14:1e: a0:45:94:1e:a2:8c:bd:c6:93:40:a4:66:2f:6a:01:55:cb:ef: 05:23:4e:f2:1d:a2:a0:52:1a:17:49:76:77:80:4c:ea:ec:7b: b8:6b:66:28:81:34:fe:df:09:22:26:18:e7:53:27:98:bf:f2: af:54:7f:62:4b:62:54:5f:2a:c5:95:cf:34:e0:49:a2:85:1c: 86:13:93:10:13:0e:88:07:96:9d:11:2f:62:36:c8:4c:c2:3b: 53:99:5d:fb:76:66:72:72:ab:ba:78:07:0a:3d:92:b3:32:44: fc:21:ea:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz77biDuadhwtIrKRSIoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMGQ5NGVlNjNjNzBhNzMzNjYzYmJjNGI1YjU3NmRlNjA3 ZTE5ZWQwHhcNMjUxMjE1MDcwMDQ0WhcNMjUxMjE2MDcwMDQ0WjAzMTEwLwYDVQQD Eyg3ZTBmMGU0MjIyMTNhOTVlODM3NzQ1NjNiMmU1M2YwNjExNWYwZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueFxvYmOjq0zOSfsUsz5NKIzSLvV hhcizdRuBAYyRvcxMOwtFYMkyu2se2sm6Jl4RnBgajbOHJfCUEMvuxsAXC+qwFtx CgYaUNVZ8UVwPxzyMElpgYI+X4iNX/ZXZJsG1mLnG1hsi2XulaoS8eyi/jF01qpr NzEB4ytRfnOFBZpCg6rPVXWniv1Ky7C03IwIm0k2A8Ta22dg+THPmlNWYiI7SiIJ KoNEgU18/5qvpswf6dKyQ3ax4itzhZNAglOG379nVyYXqrFf5rsue8kPVrH+xWiR et8FeS7lwIlNHS0diP36F0KelMrjNc4l66LSByrtB2gvbf7sIWUh2d9U3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4PDkIiE6leg3dFY7LlPwYRXw4rMB8GA1UdIwQY MBaAFA8NlO5jxwpzNmO7xLW1dt5gfhntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWIt OTJkNDE4ZThkOWE1LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWItOTJkNDE4ZThkOWE1 LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvnBcD62 JHtyE9epIrqXPC2Qqi2FpmxrOoK75sljdJqzwyl7smTkDIWKtUsGvgqWi0Uhnmpb dZ9TtMJ/DEdqfCbbRxx1SoRilHKQP+5V68CgaCaDNCbZF2mNki65PMPwI1k4TelF RzX+hZasYcqSrNsx/f5c1sD/IMevyqGvQ+jm3NvmGTI1uTAs2bf/NhQeoEWUHqKM vcaTQKRmL2oBVcvvBSNO8h2ioFIaF0l2d4BM6ux7uGtmKIE0/t8JIiYY51MnmL/y r1R/YktiVF8qxZXPNOBJooUchhOTEBMOiAeWnREvYjbITMI7U5ld+3ZmcnKrungH Cj2SszJE/CHqOg== -----END CERTIFICATE-----Generated at Mon Dec 15 15:31:43 2025 by rpki-client