This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft File: uT2pHx9TY0JyxZEQh85my602FKM.mft (raw, json) Hash identifier: lSpIDDEj07IlwrVMD0+xtnwkEzMgIq9jv+4z8DDcrSE= Subject key identifier: EE:02:22:8E:59:48:95:72:77:17:63:57:FD:21:6C:BD:F3:FF:FD:CD Authority key identifier: B9:3D:A9:1F:1F:53:63:42:72:C5:91:10:87:CE:66:CB:AD:36:14:A3 Certificate issuer: /CN=b93da91f1f53634272c5911087ce66cbad3614a3 Certificate serial: 019AF509AD27D0E60B0C1E951EB106A336A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft Manifest number: 0901 Signing time: Sat 06 Dec 2025 19:00:43 +0000 Manifest this update: Sat 06 Dec 2025 19:00:43 +0000 Manifest next update: Sun 07 Dec 2025 19:00:43 +0000 Files and hashes: 1: 0386LGj4Sidbyca8KneFkNR54TI.roa (hash: jcV5FqK/anJpS83+3AC/ntYQGRcWnZsS3JRi5ZH9EXg=) 2: uT2pHx9TY0JyxZEQh85my602FKM.crl (hash: OYMzoanA8ItH/Wk42XOI4U54GPLavDxcW/wbycspazk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ad:27:d0:e6:0b:0c:1e:95:1e:b1:06:a3:36:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93da91f1f53634272c5911087ce66cbad3614a3 Validity Not Before: Dec 6 19:00:43 2025 GMT Not After : Dec 7 19:00:43 2025 GMT Subject: CN=ee02228e5948957277176357fd216cbdf3fffdcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:af:4b:ea:c0:1f:a9:01:5d:3a:1d:ef:06: a2:17:2a:b7:4c:6c:a8:80:c5:21:50:b1:fb:31:c6: 4f:f2:4c:83:91:68:dd:92:30:df:60:26:c2:c5:19: d1:1a:9f:47:7d:e8:8e:cb:3c:e4:69:85:c0:9a:39: d2:93:d1:de:52:ff:3f:0e:4c:db:e3:e1:07:d1:c2: b4:dd:9f:c6:53:64:58:7b:46:47:92:ee:c0:e5:5b: 86:c6:6b:a1:a8:42:fd:5f:31:6d:1b:09:70:d7:66: 26:60:23:3f:66:8a:9b:0e:d4:72:34:39:41:f8:bd: ee:b1:dc:a6:51:d7:92:dc:26:2d:5f:85:3a:d2:3c: 88:1f:d5:36:1f:74:48:31:a2:09:65:be:1c:a8:59: 80:5e:71:a3:0a:75:74:38:09:be:04:ab:1b:1a:e6: 57:ef:30:e1:17:f9:91:6d:ad:0f:80:99:4f:d3:30: 3a:2d:35:c4:24:cf:70:52:f2:96:db:c7:38:6b:64: 87:21:87:76:c5:83:d5:08:79:4a:27:49:b4:ee:22: 9b:4e:0b:71:d4:a8:dc:46:55:3e:8c:50:33:6f:10: 2c:ad:43:89:90:4e:c8:44:59:51:73:e5:6d:9a:3f: cb:ba:04:a6:c8:5a:66:31:51:e0:9e:9b:17:ad:31: 86:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:02:22:8E:59:48:95:72:77:17:63:57:FD:21:6C:BD:F3:FF:FD:CD X509v3 Authority Key Identifier: keyid:B9:3D:A9:1F:1F:53:63:42:72:C5:91:10:87:CE:66:CB:AD:36:14:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b0:02:9f:22:4c:e5:71:07:c1:d6:3e:bf:a5:16:d4:49:b6: 5d:0b:4e:e4:3b:34:e3:40:37:bc:f5:9b:fc:28:17:a9:bd:d4: 13:7f:89:7d:87:41:08:c1:dc:e2:60:e8:c3:72:c5:10:f1:c1: 16:51:48:bd:e4:46:64:ee:6b:4b:12:a0:d8:5a:ce:22:d4:b2: b7:d0:11:9b:c0:e4:d7:1d:ff:04:40:8b:3e:a5:ac:18:1b:f9: a5:ce:1c:a0:7f:f9:7f:6f:05:94:3e:70:24:fa:fb:20:51:21: 11:81:f9:a6:cd:c4:83:1d:e7:d6:6f:40:87:e6:e5:70:82:30: 9d:8c:b1:09:81:2b:b8:91:1e:b3:0a:f2:64:37:9c:bd:86:6c: d4:81:21:e7:e8:00:bd:b6:97:c5:4c:81:86:59:ef:a9:3a:72: aa:a1:5a:3a:b6:70:6b:f6:37:d1:ff:e3:8e:27:a6:6b:28:65: 20:e1:b0:e9:22:7e:b7:dc:86:44:a3:fe:0a:fd:a4:e1:ef:45: b0:e0:17:d0:ac:c4:5d:66:fc:a2:4b:bf:b1:05:2b:bb:59:13: 6b:28:1b:3e:7e:57:f9:1d:99:08:b1:62:9e:ae:c8:56:b2:a2: c2:f3:a2:41:c7:d1:6e:67:98:ba:47:38:1a:7a:c1:bd:a9:b4: 6a:47:78:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ca0n0OYLDB6VHrEGozanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2RhOTFmMWY1MzYzNDI3MmM1OTExMDg3Y2U2NmNiYWQz NjE0YTMwHhcNMjUxMjA2MTkwMDQzWhcNMjUxMjA3MTkwMDQzWjAzMTEwLwYDVQQD EyhlZTAyMjI4ZTU5NDg5NTcyNzcxNzYzNTdmZDIxNmNiZGYzZmZmZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzGvS+rAH6kBXTod7waiFyq3TGyo gMUhULH7McZP8kyDkWjdkjDfYCbCxRnRGp9HfeiOyzzkaYXAmjnSk9HeUv8/Dkzb 4+EH0cK03Z/GU2RYe0ZHku7A5VuGxmuhqEL9XzFtGwlw12YmYCM/ZoqbDtRyNDlB +L3usdymUdeS3CYtX4U60jyIH9U2H3RIMaIJZb4cqFmAXnGjCnV0OAm+BKsbGuZX 7zDhF/mRba0PgJlP0zA6LTXEJM9wUvKW28c4a2SHIYd2xYPVCHlKJ0m07iKbTgtx 1KjcRlU+jFAzbxAsrUOJkE7IRFlRc+Vtmj/LugSmyFpmMVHgnpsXrTGGEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4CIo5ZSJVydxdjV/0hbL3z//3NMB8GA1UdIwQY MBaAFLk9qR8fU2NCcsWREIfOZsutNhSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVQycEh4OVRZMEp5eFpFUWg4NW15NjAyRktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jYTQ0NzEtMzRkMC00ODE2LTgxZDEt OGJmNWIxZWQxMjA5LzEvdVQycEh4OVRZMEp5eFpFUWg4NW15NjAyRktNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jYTQ0NzEtMzRkMC00ODE2LTgxZDEtOGJmNWIxZWQxMjA5 LzEvdVQycEh4OVRZMEp5eFpFUWg4NW15NjAyRktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrACnyJM 5XEHwdY+v6UW1Em2XQtO5Ds040A3vPWb/CgXqb3UE3+JfYdBCMHc4mDow3LFEPHB FlFIveRGZO5rSxKg2FrOItSyt9ARm8Dk1x3/BECLPqWsGBv5pc4coH/5f28FlD5w JPr7IFEhEYH5ps3Egx3n1m9Ah+blcIIwnYyxCYEruJEeswryZDecvYZs1IEh5+gA vbaXxUyBhlnvqTpyqqFaOrZwa/Y30f/jjiemayhlIOGw6SJ+t9yGRKP+Cv2k4e9F sOAX0KzEXWb8oku/sQUru1kTaygbPn5X+R2ZCLFinq7IVrKiwvOiQcfRbmeYukc4 GnrBvam0akd4Lw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:22 2025 by rpki-client