This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json) Hash identifier: 40MYqF2SIc6SL1I8GzDZs5SCMVSlTKjWoqtGjggUgyc= Subject key identifier: 46:B7:1D:F6:74:2E:8F:B6:61:9F:6F:A7:64:4A:7E:48:05:DE:E2:7E Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Certificate serial: 019AF61CBFA33DFDFC0C6BEF6E5814A3BC9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft Manifest number: 1774 Signing time: Sun 07 Dec 2025 00:01:10 +0000 Manifest this update: Sun 07 Dec 2025 00:01:10 +0000 Manifest next update: Mon 08 Dec 2025 00:01:10 +0000 Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=) 2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: SZjWOTQWEx0BB6eapjz8t/s67ZsGKwF7CPTmLtu3VK4=) 3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=) 4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=) 5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=) 6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=) 7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=) 8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:bf:a3:3d:fd:fc:0c:6b:ef:6e:58:14:a3:bc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Validity Not Before: Dec 7 00:01:10 2025 GMT Not After : Dec 8 00:01:10 2025 GMT Subject: CN=46b71df6742e8fb6619f6fa7644a7e4805dee27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:18:7b:f6:ac:32:e4:30:17:fb:4e:79:3c: bb:22:a2:13:78:c6:62:a1:5b:d8:5a:4e:8e:e0:92: c6:57:02:44:95:51:75:b9:4b:8a:ea:76:66:48:3d: fc:8e:e3:c4:d0:74:86:9e:09:d0:d6:88:2b:66:d7: b8:cb:eb:3a:4e:d3:c7:f2:ad:c1:c6:06:15:30:66: 2e:32:01:32:5d:fc:63:b5:23:b1:2d:9d:05:61:72: c5:98:95:78:44:50:3c:d8:0c:63:5c:3c:46:0c:d6: f7:8c:ee:35:5a:df:6d:8e:93:3a:e0:13:1b:73:48: 20:43:28:a7:86:a7:5e:d3:b2:c4:a2:5b:d5:1a:1e: 0d:75:54:53:0e:22:d5:ab:2c:82:09:48:61:08:fd: f0:55:c1:3c:95:79:25:ac:eb:a2:bf:00:fb:d8:3f: b2:09:3b:94:78:cc:5a:04:56:ad:af:8a:c5:48:f1: 89:62:e3:61:64:55:03:76:7d:43:40:9b:d0:52:bf: d6:74:5f:a3:93:86:d1:81:72:e6:ed:c4:b4:82:8b: 9e:bd:c6:88:b8:99:3d:e5:be:3e:97:ae:e7:5f:20: 17:95:c1:38:b9:91:79:87:ea:74:e8:64:c0:af:67: f4:c7:fb:26:ef:da:46:6e:f9:87:00:67:2b:3c:45: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B7:1D:F6:74:2E:8F:B6:61:9F:6F:A7:64:4A:7E:48:05:DE:E2:7E X509v3 Authority Key Identifier: keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:cc:2c:29:a5:3f:31:d8:42:b0:42:f5:cc:0a:10:f0:71:50: c3:10:e8:02:ec:9c:71:ed:c1:f7:a5:d0:d3:c5:d6:2c:eb:ed: 97:8e:81:66:b5:9a:d1:e1:23:69:02:7b:d4:d8:62:b3:4a:2b: ee:7b:33:f0:61:11:ce:9e:0e:fd:d5:3f:f5:47:f3:3b:bc:c8: 9e:79:d8:e4:46:eb:3d:ba:77:f4:bc:f8:25:15:48:63:76:c8: 02:1b:08:43:e0:4d:b7:04:58:ef:62:17:e9:35:55:82:af:c0: 3c:08:da:58:46:b5:be:7c:f2:f3:31:08:30:0f:e1:34:4e:f0: e4:d9:31:cc:ce:40:db:f1:aa:ef:09:52:8c:f7:05:1b:8a:e8: 18:8e:9d:af:f0:c7:56:9f:88:11:2f:c0:72:db:b3:f0:e9:fd: 26:1f:4a:e3:bc:6c:ee:8c:32:d5:24:9f:ef:53:18:93:52:84: 89:c6:81:f8:8d:6d:35:4b:fd:20:f1:94:fb:ce:b7:de:61:f7: 4b:a1:9b:25:8a:89:6a:b5:27:36:0e:d2:f4:4a:91:cd:ea:6f: 9b:d0:fc:c4:b5:38:3f:b3:fa:f2:ce:12:3f:2e:44:18:7d:a1: d2:64:93:ea:0b:45:7b:f1:02:28:08:bf:1b:e7:49:01:3f:45: 17:d7:ef:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HL+jPf38DGvvblgUo7yfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk YmQ3MjUwHhcNMjUxMjA3MDAwMTEwWhcNMjUxMjA4MDAwMTEwWjAzMTEwLwYDVQQD Eyg0NmI3MWRmNjc0MmU4ZmI2NjE5ZjZmYTc2NDRhN2U0ODA1ZGVlMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxEYe/asMuQwF/tOeTy7IqITeMZi oVvYWk6O4JLGVwJElVF1uUuK6nZmSD38juPE0HSGngnQ1ogrZte4y+s6TtPH8q3B xgYVMGYuMgEyXfxjtSOxLZ0FYXLFmJV4RFA82AxjXDxGDNb3jO41Wt9tjpM64BMb c0ggQyinhqde07LEolvVGh4NdVRTDiLVqyyCCUhhCP3wVcE8lXklrOuivwD72D+y CTuUeMxaBFatr4rFSPGJYuNhZFUDdn1DQJvQUr/WdF+jk4bRgXLm7cS0gouevcaI uJk95b4+l67nXyAXlcE4uZF5h+p06GTAr2f0x/sm79pGbvmHAGcrPEUoPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEa3HfZ0Lo+2YZ9vp2RKfkgF3uJ+MB8GA1UdIwQY MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et NmJhMGEwY2UwMWVkLzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcwsKaU/ MdhCsEL1zAoQ8HFQwxDoAuycce3B96XQ08XWLOvtl46BZrWa0eEjaQJ71Nhis0or 7nsz8GERzp4O/dU/9UfzO7zInnnY5EbrPbp39Lz4JRVIY3bIAhsIQ+BNtwRY72IX 6TVVgq/APAjaWEa1vnzy8zEIMA/hNE7w5NkxzM5A2/Gq7wlSjPcFG4roGI6dr/DH Vp+IES/Actuz8On9Jh9K47xs7owy1SSf71MYk1KEicaB+I1tNUv9IPGU+8633mH3 S6GbJYqJarUnNg7S9EqRzepvm9D8xLU4P7P68s4SPy5EGH2h0mST6gtFe/ECKAi/ G+dJAT9FF9fvQQ== -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:06 2025 by rpki-client