This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft File: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft (raw, json) Hash identifier: hVU56qr4HMmTmjCDhXmzfvXGvg82w1EatPNdvM0A6aU= Subject key identifier: AC:FC:B4:12:12:0C:57:9B:B1:55:5C:7D:18:D5:CA:A6:E2:E8:98:68 Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63 Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63 Certificate serial: 019AF0519BE9A31F53ADF383ED26D8E038FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft Manifest number: 1423 Signing time: Fri 05 Dec 2025 21:01:11 +0000 Manifest this update: Fri 05 Dec 2025 21:01:11 +0000 Manifest next update: Sat 06 Dec 2025 21:01:11 +0000 Files and hashes: 1: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl (hash: eBxmyiRtBRZXSrByXayWK3INn9pvm74vXpd8csmkbto=) 2: XbqqIgUuiPQ7s4i6gwADBbMAwT4.roa (hash: cRp4FxnA8UimLs+QIeRi/nTr91UWmFZBwZVHNphDdoA=) 3: jnFs14ubYigoY0h9h1_Eofh0724.roa (hash: cmLBP5v8zTmaWqQDLZqcYtnuqxPCD1kybV6k+KwkWhM=) 4: y1bjq6t2wUukz9W6C_N_eJWE5pQ.roa (hash: rbXidQhk2TpaZB/G3C+NahAJvD9lrvrxNyxSFhR0BVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:9b:e9:a3:1f:53:ad:f3:83:ed:26:d8:e0:38:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63 Validity Not Before: Dec 5 21:01:11 2025 GMT Not After : Dec 6 21:01:11 2025 GMT Subject: CN=acfcb412120c579bb1555c7d18d5caa6e2e89868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b4:1a:0f:aa:6c:91:34:e1:72:ed:82:ac:44: 3a:77:7c:f9:92:5a:32:c7:04:de:22:df:b0:47:7b: 55:72:c0:79:65:06:ae:2a:87:f4:b3:d2:9c:32:3e: 11:e6:07:dd:e8:48:89:89:9d:d5:a3:d6:25:63:4d: ad:20:26:63:8c:8e:24:94:e1:7f:e0:5a:b9:63:47: eb:94:e5:bd:d6:38:e9:fa:7d:e6:1f:f4:c0:5a:a3: 16:d1:77:16:da:41:29:a5:ab:28:b8:71:d3:9b:d3: 87:6e:a7:e1:a6:bd:49:63:ef:72:59:bc:3e:d9:87: a7:ad:32:65:cb:54:51:71:9e:c7:59:22:c2:10:bb: a0:9b:3c:42:66:30:7d:42:14:26:9d:39:60:0a:ed: a5:1f:4e:5c:96:c0:1e:2f:5c:cf:4b:bf:58:87:e2: 09:f1:b5:fe:7b:af:27:f1:c3:8e:9f:5d:e4:da:6b: 98:e2:b9:f2:d0:37:1f:f2:02:4c:c6:24:29:37:97: 9a:d0:87:95:ec:c2:26:94:34:45:e0:11:37:9a:e2: 8f:f1:43:a9:dc:ca:3e:dd:eb:3c:ff:90:ec:a1:25: 33:b8:96:07:0c:1d:98:d0:b5:73:bb:4a:89:2b:ec: de:d6:7b:7c:90:72:c4:5e:4d:28:f5:77:61:71:cc: 2f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FC:B4:12:12:0C:57:9B:B1:55:5C:7D:18:D5:CA:A6:E2:E8:98:68 X509v3 Authority Key Identifier: keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:bf:4d:f4:7a:73:83:de:e0:ff:3f:6f:05:40:22:cc:44:aa: ad:3a:a9:11:bb:b0:bf:f5:85:77:d4:74:98:3c:05:35:e5:20: e8:e4:70:d1:99:be:2a:de:01:05:fb:69:c1:8b:00:22:c4:f5: 25:30:c6:22:f3:c7:c0:a4:7e:62:e3:99:9e:06:bc:e1:37:b1: 30:46:5e:4c:4e:a4:ad:15:85:3e:9c:38:d7:fb:f5:af:48:f8: aa:5d:8a:c4:1a:30:de:a5:e7:94:e6:8b:6e:4b:5b:d3:15:4b: 53:d2:8e:80:72:ce:63:b6:0c:24:cc:25:87:d0:ed:f6:a4:3d: eb:1e:df:a3:a6:11:94:12:a7:b1:c5:af:41:6c:2e:d9:f2:74: 22:7c:fb:f6:c7:8c:c0:81:12:3f:76:4f:e8:9b:4b:a2:42:50: 40:5c:5d:fe:d5:7d:5a:65:c8:09:b4:eb:c6:43:ca:ff:f4:a0: d2:f8:2d:72:d7:80:06:5a:30:31:8b:b0:be:1a:89:0a:91:17: 00:f3:9d:32:92:fb:67:56:3b:ac:47:31:92:f2:8d:14:f2:45: ea:30:09:27:64:a1:f9:19:16:fd:39:f4:89:84:57:53:ff:ca: c8:f4:69:ba:88:81:d8:7c:e5:51:d8:2f:cb:45:81:f8:0b:81: d2:87:33:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUZvpox9TrfOD7SbY4Dj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NGJkZGFmYjVkZjA5ODQxOTAyMGE4ZmJjN2E5MGIxNmUz NDFkNjMwHhcNMjUxMjA1MjEwMTExWhcNMjUxMjA2MjEwMTExWjAzMTEwLwYDVQQD EyhhY2ZjYjQxMjEyMGM1NzliYjE1NTVjN2QxOGQ1Y2FhNmUyZTg5ODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7QaD6pskTThcu2CrEQ6d3z5kloy xwTeIt+wR3tVcsB5ZQauKof0s9KcMj4R5gfd6EiJiZ3Vo9YlY02tICZjjI4klOF/ 4Fq5Y0frlOW91jjp+n3mH/TAWqMW0XcW2kEppasouHHTm9OHbqfhpr1JY+9yWbw+ 2YenrTJly1RRcZ7HWSLCELugmzxCZjB9QhQmnTlgCu2lH05clsAeL1zPS79Yh+IJ 8bX+e68n8cOOn13k2muY4rny0Dcf8gJMxiQpN5ea0IeV7MImlDRF4BE3muKP8UOp 3Mo+3es8/5DsoSUzuJYHDB2Y0LVzu0qJK+ze1nt8kHLEXk0o9Xdhccwv/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKz8tBISDFebsVVcfRjVyqbi6JhoMB8GA1UdIwQY MBaAFNlL3a+13wmEGQIKj7x6kLFuNB1jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZGU3NTctNzY3Mi00NzIwLThjZTEt NmUyNmI5MWY2OTEwLzEvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jZGU3NTctNzY3Mi00NzIwLThjZTEtNmUyNmI5MWY2OTEw LzEvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtL9N9Hpz g97g/z9vBUAizESqrTqpEbuwv/WFd9R0mDwFNeUg6ORw0Zm+Kt4BBftpwYsAIsT1 JTDGIvPHwKR+YuOZnga84TexMEZeTE6krRWFPpw41/v1r0j4ql2KxBow3qXnlOaL bktb0xVLU9KOgHLOY7YMJMwlh9Dt9qQ96x7fo6YRlBKnscWvQWwu2fJ0Inz79seM wIESP3ZP6JtLokJQQFxd/tV9WmXICbTrxkPK//Sg0vgtcteABlowMYuwvhqJCpEX APOdMpL7Z1Y7rEcxkvKNFPJF6jAJJ2Sh+RkW/Tn0iYRXU//KyPRpuoiB2HzlUdgv y0WB+AuB0oczTA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:13 2025 by rpki-client