This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json) Hash identifier: Ub27s5Hn2Y29oIVfBiqc1QlL4xDHd2giOBFeXcg+g5M= Subject key identifier: DE:E7:8D:E6:B6:9F:AE:7A:E4:9E:CA:F9:3E:99:25:5C:E8:32:C2:FA Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1 Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1 Certificate serial: 019AF0F5F177BE37ABA2658BE2F520316AB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: Ej5r3FECjqWrcvap9QjQO0qvGjMEgV4KQp6QCOiqnnY=) 2: wNy3zbz6RfIK66Qb0xMdQ6SF6cM.roa (hash: v3MSVtcDWt9OZuJfHX3SY1kCxjbyzn9ti5kRZ/GXDyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f1:77:be:37:ab:a2:65:8b:e2:f5:20:31:6a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1 Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=dee78de6b69fae7ae49ecaf93e99255ce832c2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:77:d9:03:2a:67:13:22:3a:49:39:2b:09:3d: 7c:31:df:98:58:96:24:1a:17:5c:21:7f:41:34:a1: f2:b9:f6:91:4e:e2:94:36:4c:ab:a5:eb:3d:e5:ba: 8a:7d:ea:96:51:48:0a:7a:47:ec:10:78:b5:20:64: 06:72:29:77:35:c9:7e:8c:1a:b1:9e:1d:d9:fc:80: ec:53:c7:20:26:2a:bf:0a:b9:16:c6:d4:bd:54:11: cf:98:12:f6:7e:9c:85:ab:4b:64:79:90:d6:85:78: 8d:75:21:8c:f6:25:13:70:0d:7f:71:f1:a6:bb:70: 9d:2e:b4:d0:e1:f3:b0:a3:e9:95:34:bc:f5:30:fb: 35:30:18:25:17:32:0e:ca:8c:34:02:56:83:06:dd: a7:b1:e0:78:1a:df:84:0d:bd:17:6f:b2:89:2b:92: 82:59:07:e7:4f:23:7c:98:63:51:f9:69:b8:e4:d2: 91:53:c5:45:4a:3e:6c:93:f2:13:ec:66:22:b9:75: 52:99:54:50:ee:20:c0:e7:5b:c0:b7:17:b6:09:4c: 97:aa:d2:f5:75:e6:91:7f:94:35:21:d6:45:c1:00: 43:4a:52:c4:bf:80:f2:9b:ce:d2:dd:a3:91:7a:2e: d3:dc:a6:56:24:fa:ac:c7:da:44:b9:97:0f:51:ff: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E7:8D:E6:B6:9F:AE:7A:E4:9E:CA:F9:3E:99:25:5C:E8:32:C2:FA X509v3 Authority Key Identifier: keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:38:4b:0b:81:ca:b2:4b:59:e4:af:26:7b:e7:2c:ff:35:cc: 67:72:c7:47:ed:bc:89:4e:eb:ea:36:95:b2:5e:d6:21:2e:05: a6:cd:cf:8e:bf:04:b8:8a:70:65:5b:b6:97:bb:93:70:83:96: f8:f8:60:cb:bd:7b:a5:84:b5:2c:1f:14:0f:3a:c3:73:7e:f7: be:fc:08:62:c5:3f:5d:92:01:8e:17:61:29:39:07:23:34:7c: af:e7:b9:24:7e:44:9f:98:57:fa:6a:30:49:ae:b9:cd:be:1f: 0d:7c:6a:ce:8f:17:e1:e2:c3:e5:75:1d:0e:30:58:75:68:9d: 77:f1:0b:e1:11:7a:7d:7c:ba:68:e4:ce:2c:66:38:4f:bd:48: 1b:12:65:4d:d6:77:e2:16:ab:4a:5d:c3:ed:1d:d6:c6:40:c2: b9:13:7b:c9:64:62:98:c5:7d:2a:98:13:a5:2c:7b:35:33:be: 16:13:15:c9:b0:3d:fe:64:be:b2:d9:8e:d0:c8:9e:28:6a:2e: f6:09:31:a1:d0:58:23:c2:f7:ff:3b:4b:b8:62:69:97:ef:26: ae:ea:f0:b1:7c:29:ef:4b:37:5e:b9:a6:cf:c6:35:7d:2f:16: de:09:86:66:62:dd:c8:86:0b:cf:90:70:30:22:da:58:bc:3b: 3a:02:97:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fF3vjeromWL4vUgMWq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjUzZjliMjFkMTNlMDc4ZTNlODQ0ZDY0NWVlYTg1ODBm MWNjZTEwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD EyhkZWU3OGRlNmI2OWZhZTdhZTQ5ZWNhZjkzZTk5MjU1Y2U4MzJjMmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3fZAypnEyI6STkrCT18Md+YWJYk GhdcIX9BNKHyufaRTuKUNkyrpes95bqKfeqWUUgKekfsEHi1IGQGcil3Ncl+jBqx nh3Z/IDsU8cgJiq/CrkWxtS9VBHPmBL2fpyFq0tkeZDWhXiNdSGM9iUTcA1/cfGm u3CdLrTQ4fOwo+mVNLz1MPs1MBglFzIOyow0AlaDBt2nseB4Gt+EDb0Xb7KJK5KC WQfnTyN8mGNR+Wm45NKRU8VFSj5sk/IT7GYiuXVSmVRQ7iDA51vAtxe2CUyXqtL1 deaRf5Q1IdZFwQBDSlLEv4Dym87S3aORei7T3KZWJPqsx9pEuZcPUf/azQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7njea2n6565J7K+T6ZJVzoMsL6MB8GA1UdIwQY MBaAFNq1P5sh0T4Hjj6ETWRe6oWA8czhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAt NWI4YmM1OTBiMTk3LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAtNWI4YmM1OTBiMTk3 LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANThLC4HK sktZ5K8me+cs/zXMZ3LHR+28iU7r6jaVsl7WIS4Fps3Pjr8EuIpwZVu2l7uTcIOW +Phgy717pYS1LB8UDzrDc373vvwIYsU/XZIBjhdhKTkHIzR8r+e5JH5En5hX+mow Sa65zb4fDXxqzo8X4eLD5XUdDjBYdWidd/EL4RF6fXy6aOTOLGY4T71IGxJlTdZ3 4harSl3D7R3WxkDCuRN7yWRimMV9KpgTpSx7NTO+FhMVybA9/mS+stmO0MieKGou 9gkxodBYI8L3/ztLuGJpl+8mrurwsXwp70s3Xrmmz8Y1fS8W3gmGZmLdyIYLz5Bw MCLaWLw7OgKXow== -----END CERTIFICATE-----Generated at Sat Dec 6 08:40:08 2025 by rpki-client