This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft File: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft (raw, json) Hash identifier: 0etg0zdtOCh45mJo87C4dV9QCkha3gTfMNL4p1KCJIE= Subject key identifier: D1:CB:EF:E7:EB:DD:3F:8D:84:8A:4B:B4:79:2E:4F:8B:C6:6A:B9:38 Authority key identifier: D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E Certificate issuer: /CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e Certificate serial: 019AF12E5549946A4E1C4301DAECE7BF03FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft Manifest number: 1089 Signing time: Sat 06 Dec 2025 01:02:16 +0000 Manifest this update: Sat 06 Dec 2025 01:02:16 +0000 Manifest next update: Sun 07 Dec 2025 01:02:16 +0000 Files and hashes: 1: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl (hash: LO8nQUA+tAGAWPqVgZY456PoTd/ZdE1qezeODh2DyQU=) 2: _wOAzM_uG9ZKvF1XTUYbhv67nVM.roa (hash: YsJJfaahevvQpOkAYhPhhrTQuZpLLWZxUc8rH3J04no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:55:49:94:6a:4e:1c:43:01:da:ec:e7:bf:03:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e Validity Not Before: Dec 6 01:02:16 2025 GMT Not After : Dec 7 01:02:16 2025 GMT Subject: CN=d1cbefe7ebdd3f8d848a4bb4792e4f8bc66ab938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e4:0d:d4:dc:4d:c0:ae:c1:7b:83:1a:2b:d3: 73:f9:ed:ea:b6:d8:95:09:34:ff:e6:08:83:b9:9c: eb:39:98:72:8a:4e:e9:08:4e:eb:cd:39:84:aa:5b: d4:c0:05:f0:07:54:a4:09:ed:bb:bf:0a:45:20:fe: dd:0e:5c:94:c5:a2:8d:b6:0a:56:27:55:de:17:7d: 4d:fa:3d:64:b1:f9:b7:9f:32:20:04:7a:a3:8a:7e: 36:74:36:2a:c9:e7:1a:c6:37:f7:95:3d:2e:73:b8: f5:0c:6f:24:88:38:85:55:cc:28:12:90:d5:e6:9f: 8c:85:6c:50:5a:66:6a:27:f7:8f:fa:31:a5:88:86: 9a:cf:0b:ab:b0:68:a5:9d:71:4e:42:23:79:6d:8a: f2:85:a0:26:d9:c5:31:e7:5d:d8:1d:bd:00:51:65: c9:0e:45:1b:27:af:71:e7:41:b9:c1:89:2f:55:e2: d0:0b:ca:ab:56:7f:46:1b:52:2b:58:b9:5d:b3:07: c3:5e:01:a0:0a:01:bf:08:3b:9e:46:22:77:b4:5a: 86:ee:ac:c1:ba:47:87:02:ff:25:5f:33:3a:f0:ed: 70:f3:d9:5f:58:7b:e2:6b:fa:2a:61:2b:3b:17:53: c0:99:1f:54:f2:30:7d:0d:e8:73:20:2a:64:91:ed: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CB:EF:E7:EB:DD:3F:8D:84:8A:4B:B4:79:2E:4F:8B:C6:6A:B9:38 X509v3 Authority Key Identifier: keyid:D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:3c:af:de:c3:51:25:7e:08:ad:14:fe:ac:e8:de:33:9a:7d: 04:9e:ec:13:53:51:42:7e:b5:40:c9:91:f8:66:d3:6d:60:a1: 3d:3e:e7:88:00:14:f6:cc:30:73:a5:b2:3e:23:f9:09:ae:71: 56:ec:52:71:df:4c:f4:67:39:fd:19:da:c7:04:8a:79:2a:14: 0e:7b:17:b4:75:47:5c:a6:98:c8:99:78:ec:a3:16:ef:9c:e9: 69:3b:47:31:82:08:bd:c9:a7:b6:59:5e:8c:52:59:08:25:01: 53:10:84:ca:58:ab:5e:77:dc:b4:94:2c:51:f3:ff:c3:6a:28: 6e:88:44:3c:7f:7b:3b:21:d9:8b:85:30:a6:58:39:64:f3:2c: 40:41:d2:88:7c:7a:dd:82:37:f0:31:ff:fe:7f:01:c3:c8:d3: f1:2a:00:1d:11:92:62:59:bb:e8:14:4f:10:a0:08:83:e2:92: 79:cc:91:a5:08:db:ed:5c:fd:1b:8f:16:17:55:ae:ed:28:8c: 16:75:c0:52:bd:1f:33:b1:f5:20:f0:40:56:4c:fe:5f:a3:ee: 1b:aa:4a:c7:cc:0e:67:cb:45:50:cb:47:bd:f3:21:42:9e:00: 17:f3:57:0d:ff:b0:f5:bc:7d:34:a2:41:bb:03:02:ad:bb:b6: 26:5b:39:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlVJlGpOHEMB2uznvwP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDg2ZjdmZTRlYjZkOTQ5YjgwMDdiNGU0MTk4Y2UxYzg3 ODMwMmUwHhcNMjUxMjA2MDEwMjE2WhcNMjUxMjA3MDEwMjE2WjAzMTEwLwYDVQQD EyhkMWNiZWZlN2ViZGQzZjhkODQ4YTRiYjQ3OTJlNGY4YmM2NmFiOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOQN1NxNwK7Be4MaK9Nz+e3qttiV CTT/5giDuZzrOZhyik7pCE7rzTmEqlvUwAXwB1SkCe27vwpFIP7dDlyUxaKNtgpW J1XeF31N+j1ksfm3nzIgBHqjin42dDYqyecaxjf3lT0uc7j1DG8kiDiFVcwoEpDV 5p+MhWxQWmZqJ/eP+jGliIaazwursGilnXFOQiN5bYryhaAm2cUx513YHb0AUWXJ DkUbJ69x50G5wYkvVeLQC8qrVn9GG1IrWLldswfDXgGgCgG/CDueRiJ3tFqG7qzB ukeHAv8lXzM68O1w89lfWHvia/oqYSs7F1PAmR9U8jB9DehzICpkke3nWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHL7+fr3T+NhIpLtHkuT4vGark4MB8GA1UdIwQY MBaAFNlIb3/k622Um4AHtOQZjOHIeDAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQyZDItNjFkMi00MzRkLThlNWIt ODg2YzQxNmI5MDUxLzEvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kMDQyZDItNjFkMi00MzRkLThlNWItODg2YzQxNmI5MDUx LzEvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDyv3sNR JX4IrRT+rOjeM5p9BJ7sE1NRQn61QMmR+GbTbWChPT7niAAU9swwc6WyPiP5Ca5x VuxScd9M9Gc5/RnaxwSKeSoUDnsXtHVHXKaYyJl47KMW75zpaTtHMYIIvcmntlle jFJZCCUBUxCEylirXnfctJQsUfP/w2oobohEPH97OyHZi4Uwplg5ZPMsQEHSiHx6 3YI38DH//n8Bw8jT8SoAHRGSYlm76BRPEKAIg+KSecyRpQjb7Vz9G48WF1Wu7SiM FnXAUr0fM7H1IPBAVkz+X6PuG6pKx8wOZ8tFUMtHvfMhQp4AF/NXDf+w9bx9NKJB uwMCrbu2Jls59Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:52 2025 by rpki-client