This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json) Hash identifier: VwMgSN6Yv0M29b143riOIlnkZ2fQs5Hpcy/ZsLz6NME= Subject key identifier: C8:4F:BA:70:6E:09:67:F8:E5:6A:2A:81:08:D5:AA:D8:A4:EB:EB:A6 Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9 Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9 Certificate serial: 019AF1D24381189C8F936A23DAD8061FB892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft Manifest number: 14A4 Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: fvP2rS1iGwnFE/MVTQeoA5y+x3JffMz74v6J0Ld0ais=) 2: ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa (hash: xFEzrUJlVVBWEtFecNObcV0TMloS/XizxOFPtUYtswE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:43:81:18:9c:8f:93:6a:23:da:d8:06:1f:b8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9 Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=c84fba706e0967f8e56a2a8108d5aad8a4ebeba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:21:a4:9c:7f:ca:ad:2e:8f:f7:8a:84:67:1f: de:48:95:95:ca:e0:33:cb:f4:12:3a:a4:10:83:9c: 1d:31:03:b1:72:80:89:02:bf:bb:ac:aa:45:ce:fc: 4d:a5:91:0f:b0:27:ea:a8:c9:ea:a3:38:36:a7:e1: 8f:ec:fd:86:62:a4:c1:ad:a6:36:d1:af:32:52:6b: 2a:81:29:91:fd:55:7c:04:d1:29:63:fb:69:1d:39: af:f6:70:c7:52:db:b9:a9:02:1c:d4:36:03:19:70: 15:f4:63:bb:66:f8:a2:b8:fe:69:e2:dd:85:cd:c0: 74:8f:89:5b:c4:d3:28:fc:76:e9:19:7a:71:4f:ce: d3:4b:96:2c:b0:7d:c4:3f:35:ce:9c:eb:19:c4:a2: e7:3c:95:ba:f5:53:ab:3b:e7:88:f7:dd:2d:a2:53: 42:dc:9e:91:33:26:cb:9e:1e:7f:ea:07:66:01:04: cb:d5:82:c3:d7:73:48:51:20:d8:58:17:2f:a8:24: 19:00:fd:b0:cd:ad:0f:a7:d1:d5:89:52:cc:86:1a: 18:78:63:ef:4f:4b:df:48:fc:d7:f8:d2:36:1c:ef: cd:2c:11:64:5e:87:90:f5:5d:9b:e6:65:31:51:f0: 75:29:3b:f0:e5:19:58:f0:f2:ac:1c:c0:c8:df:b3: 34:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4F:BA:70:6E:09:67:F8:E5:6A:2A:81:08:D5:AA:D8:A4:EB:EB:A6 X509v3 Authority Key Identifier: keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:be:2e:25:4a:a0:f1:05:06:47:94:bd:42:a4:32:4e:7e:e0: a4:2f:b4:a7:7a:8e:b2:da:63:71:ff:80:59:73:5e:0e:06:71: 36:ab:27:c4:d8:ae:d9:65:96:93:c2:c8:d6:12:e6:b4:41:d0: 79:31:99:e2:45:0d:cf:04:65:90:72:fe:21:92:a9:bf:f8:72: f6:b4:b6:93:9b:aa:ee:36:cb:7c:48:e0:98:5b:a9:7c:5d:96: 9e:22:18:11:82:fe:cc:7f:f5:21:9c:fa:a9:4a:6c:0b:b2:f0: c2:d0:c6:c8:11:0a:c5:0b:d0:dd:8e:33:52:e4:57:2d:95:39: db:30:c4:e9:7a:09:62:b3:37:c5:7c:57:e6:03:0f:6c:3c:28: 06:2f:fe:4d:5a:a0:9e:0b:c9:c7:8a:16:dc:1e:b1:2c:3d:df: c6:21:aa:ba:df:72:8a:53:32:43:6b:0f:cc:45:eb:01:b6:38: 41:87:4b:33:64:de:4c:3c:88:fb:30:c4:8f:02:fc:35:94:33: 37:17:1d:01:47:54:67:e4:90:21:ff:7d:6f:81:ea:c3:03:88: ee:c4:2d:94:a3:93:1d:db:3a:b1:96:01:da:51:09:da:5a:21: 70:9d:f7:c5:40:3a:88:c4:1b:a2:9a:b4:09:6a:ce:c7:32:aa: bb:94:f6:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kOBGJyPk2oj2tgGH7iSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDI4NGI5NDMyNWY1MDYwZjhhMGU4N2MxYmUyODI3Nzg4 ZjE4ZjkwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD EyhjODRmYmE3MDZlMDk2N2Y4ZTU2YTJhODEwOGQ1YWFkOGE0ZWJlYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSGknH/KrS6P94qEZx/eSJWVyuAz y/QSOqQQg5wdMQOxcoCJAr+7rKpFzvxNpZEPsCfqqMnqozg2p+GP7P2GYqTBraY2 0a8yUmsqgSmR/VV8BNEpY/tpHTmv9nDHUtu5qQIc1DYDGXAV9GO7ZviiuP5p4t2F zcB0j4lbxNMo/HbpGXpxT87TS5YssH3EPzXOnOsZxKLnPJW69VOrO+eI990tolNC 3J6RMybLnh5/6gdmAQTL1YLD13NIUSDYWBcvqCQZAP2wza0Pp9HViVLMhhoYeGPv T0vfSPzX+NI2HO/NLBFkXoeQ9V2b5mUxUfB1KTvw5RlY8PKsHMDI37M0jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhPunBuCWf45WoqgQjVqtik6+umMB8GA1UdIwQY MBaAFNlChLlDJfUGD4oOh8G+KCd4jxj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQt OTVkNTk0NjVlOWE4LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQtOTVkNTk0NjVlOWE4 LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkr4uJUqg 8QUGR5S9QqQyTn7gpC+0p3qOstpjcf+AWXNeDgZxNqsnxNiu2WWWk8LI1hLmtEHQ eTGZ4kUNzwRlkHL+IZKpv/hy9rS2k5uq7jbLfEjgmFupfF2WniIYEYL+zH/1IZz6 qUpsC7LwwtDGyBEKxQvQ3Y4zUuRXLZU52zDE6XoJYrM3xXxX5gMPbDwoBi/+TVqg ngvJx4oW3B6xLD3fxiGqut9yilMyQ2sPzEXrAbY4QYdLM2TeTDyI+zDEjwL8NZQz NxcdAUdUZ+SQIf99b4HqwwOI7sQtlKOTHds6sZYB2lEJ2lohcJ33xUA6iMQbopq0 CWrOxzKqu5T2EQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:11 2025 by rpki-client