This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json) Hash identifier: 9vVM/f8rsV6NGpGN6sLe1MBqM/d91O13cqrtOnq9wS0= Subject key identifier: 06:1C:CD:0C:B5:81:86:5D:C8:02:3A:5A:F8:1A:4F:1B:7F:A7:88:A6 Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51 Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551 Certificate serial: 019B3CB4F919BDA23EE0D3747E52C7B23815 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft Manifest number: 0C1B Signing time: Sat 20 Dec 2025 17:00:51 +0000 Manifest this update: Sat 20 Dec 2025 17:00:51 +0000 Manifest next update: Sun 21 Dec 2025 17:00:51 +0000 Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: o8QYUEBXAHccn/WHeEdwt4fJ+O68pqVHSOg7o1VoqEE=) 2: akVfoe2NMwgKKix-I6Nd4k5ngMM.roa (hash: Na2cRAe6jotzXC7LjsbqIgTy4+1+OZSmFcHXYaFK5lY=) 3: uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa (hash: 0pV5mcTfxFzm13bkl5Ni2QZOplGIOcdfnivcOrYLhtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f9:19:bd:a2:3e:e0:d3:74:7e:52:c7:b2:38:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551 Validity Not Before: Dec 20 17:00:51 2025 GMT Not After : Dec 21 17:00:51 2025 GMT Subject: CN=061ccd0cb581865dc8023a5af81a4f1b7fa788a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:60:3a:a7:93:b7:03:d0:bb:b0:d0:0e:6e: d7:78:80:60:7c:a4:68:b8:97:43:74:f8:c7:c5:e2: 30:7a:38:d8:2d:47:6a:80:02:8d:f3:ab:3c:df:2c: 32:c4:86:ba:83:f2:8c:9f:aa:3c:32:be:25:66:0a: 35:85:2e:e1:df:9a:de:40:f6:cc:d9:dc:64:8e:a6: 96:f0:ef:0c:22:2a:8c:21:3e:27:b0:85:e6:42:3c: 97:c3:78:6b:75:61:b2:f2:1b:b2:62:79:5f:a8:ef: a5:8d:0c:49:26:0e:df:e7:8a:26:b4:db:37:f1:ff: ee:e5:b9:1a:c4:d4:e0:e6:2e:a0:9c:42:e6:a9:13: 7b:54:73:9f:c9:9f:95:ae:2d:43:f9:1e:a0:9e:d1: 5a:17:e3:2b:8b:6c:f3:09:35:7d:70:a4:dc:47:8b: 6b:14:f8:56:ba:f1:84:85:c7:ff:a7:2e:68:f7:89: f3:9f:eb:16:e8:4d:83:21:14:ff:cd:fb:01:d5:3b: f8:f4:05:1c:05:ad:1f:c0:21:e2:a1:70:cd:1d:d9: c3:0f:bb:17:0b:b3:a0:ab:5e:81:11:9f:a2:1d:6c: d1:1a:e1:f9:df:78:03:e1:d2:cc:3f:3d:04:3f:e5: c4:5d:30:cd:d8:28:45:59:dc:34:54:79:c4:20:90: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1C:CD:0C:B5:81:86:5D:C8:02:3A:5A:F8:1A:4F:1B:7F:A7:88:A6 X509v3 Authority Key Identifier: keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:23:1c:e4:71:7d:af:df:23:a4:6a:ce:fc:84:89:07:c7:1f: c5:56:5a:f8:2f:63:01:ee:23:7a:b8:c3:64:7f:10:4a:f2:3f: 46:b6:27:68:8b:32:2e:14:00:6b:68:80:db:5d:b3:63:5d:52: ff:9a:16:e5:07:96:ac:62:70:eb:97:1e:9e:38:ec:7d:2f:22: b8:20:f3:f5:61:a2:3d:c0:32:64:f1:be:92:91:78:51:54:26: 54:ce:85:d6:0c:41:9f:de:75:b6:dc:e3:07:50:14:1e:33:83: 36:f1:10:26:e4:f5:b6:be:86:c3:fb:78:7e:ad:20:c6:37:cb: be:84:c6:57:68:ef:48:b6:62:8b:9c:b7:a8:c5:d5:66:4c:dd: 1d:1e:c7:82:34:19:6d:59:51:bb:e7:71:e9:0c:a0:12:dc:89: 7b:73:4e:08:a7:04:4f:98:51:f1:dd:4c:42:af:c5:95:b1:d5: 8d:5e:46:b9:2e:cd:85:38:bc:a2:39:6d:63:3b:8f:88:61:d8: 2d:f9:7b:5d:52:9e:f0:32:ed:dd:59:2d:e3:d8:69:0d:79:fb: c6:d0:4b:b3:6f:93:37:e5:c8:11:0e:f4:bf:c9:24:5a:3e:2f: 59:48:07:c3:28:3b:5e:9f:e1:c8:9c:ac:63:3f:54:6a:f8:7c: 53:2f:75:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPkZvaI+4NN0flLHsjgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZWRhNGY4ZDllNDgyOTUyYTExMmIyZWY1YTRmMjM5Yjdm NjI1NTEwHhcNMjUxMjIwMTcwMDUxWhcNMjUxMjIxMTcwMDUxWjAzMTEwLwYDVQQD EygwNjFjY2QwY2I1ODE4NjVkYzgwMjNhNWFmODFhNGYxYjdmYTc4OGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGJgOqeTtwPQu7DQDm7XeIBgfKRo uJdDdPjHxeIwejjYLUdqgAKN86s83ywyxIa6g/KMn6o8Mr4lZgo1hS7h35reQPbM 2dxkjqaW8O8MIiqMIT4nsIXmQjyXw3hrdWGy8huyYnlfqO+ljQxJJg7f54omtNs3 8f/u5bkaxNTg5i6gnELmqRN7VHOfyZ+Vri1D+R6gntFaF+Mri2zzCTV9cKTcR4tr FPhWuvGEhcf/py5o94nzn+sW6E2DIRT/zfsB1Tv49AUcBa0fwCHioXDNHdnDD7sX C7Ogq16BEZ+iHWzRGuH533gD4dLMPz0EP+XEXTDN2ChFWdw0VHnEIJA5jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYczQy1gYZdyAI6WvgaTxt/p4imMB8GA1UdIwQY MBaAFNLtpPjZ5IKVKhErLvWk8jm39iVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMt YzRjZTNlODA3M2RiLzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMtYzRjZTNlODA3M2Ri LzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSMc5HF9 r98jpGrO/ISJB8cfxVZa+C9jAe4jerjDZH8QSvI/RrYnaIsyLhQAa2iA212zY11S /5oW5QeWrGJw65cenjjsfS8iuCDz9WGiPcAyZPG+kpF4UVQmVM6F1gxBn951ttzj B1AUHjODNvEQJuT1tr6Gw/t4fq0gxjfLvoTGV2jvSLZii5y3qMXVZkzdHR7HgjQZ bVlRu+dx6QygEtyJe3NOCKcET5hR8d1MQq/FlbHVjV5GuS7NhTi8ojltYzuPiGHY Lfl7XVKe8DLt3Vkt49hpDXn7xtBLs2+TN+XIEQ70v8kkWj4vWUgHwyg7Xp/hyJys Yz9Uavh8Uy91Cw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:31 2025 by rpki-client