This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft File: 2eeOhm6SBNAab1LTn9hP8JALIdQ.mft (raw, json) Hash identifier: bU4OnIs5IOxmsKDc+zvgGVQjCpVNxzw4hRCjxfIJLL4= Subject key identifier: 83:F4:91:A3:5D:BB:F3:4B:EB:FA:4E:BB:8F:F4:55:A1:E7:EE:40:32 Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4 Certificate issuer: /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4 Certificate serial: 019B35D74E3DA798FB3898F944C85F1F5D54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft Manifest number: 0547 Signing time: Fri 19 Dec 2025 09:01:01 +0000 Manifest this update: Fri 19 Dec 2025 09:01:01 +0000 Manifest next update: Sat 20 Dec 2025 09:01:01 +0000 Files and hashes: 1: 2eeOhm6SBNAab1LTn9hP8JALIdQ.crl (hash: D/RfcwK6uYalqYF6vyOZV4Y7zG/GfxRSOkTyMOftfzs=) 2: Gf3jvBMOfhZBwSB5ikn6Zc8VBOc.roa (hash: PrqqFSWCyQw4MMIVoDAAQwK7/JGtuyLc3nwPf6LWd0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:4e:3d:a7:98:fb:38:98:f9:44:c8:5f:1f:5d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4 Validity Not Before: Dec 19 09:01:01 2025 GMT Not After : Dec 20 09:01:01 2025 GMT Subject: CN=83f491a35dbbf34bebfa4ebb8ff455a1e7ee4032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a1:13:c5:f6:80:12:00:77:10:18:dc:bf:02: 3e:7c:6b:55:26:a6:a3:60:e7:e5:0c:fe:6d:49:f6: 9e:f0:6e:9a:64:fe:b5:70:7d:67:5b:c8:9b:bc:41: f9:e5:53:9d:05:41:16:7a:ed:cd:42:04:11:b6:43: 2d:7a:cf:24:07:d2:80:85:3f:ef:35:c7:b8:4f:b1: a9:d6:3b:0f:5e:2b:58:a4:f8:30:f6:08:44:00:8d: ef:c1:4e:a5:2d:47:57:9e:73:07:fd:23:25:b7:e2: 2d:77:0f:77:5b:d7:5d:ec:36:14:52:c0:c9:59:49: 16:0e:60:8b:a0:e8:5d:ed:a0:60:c5:cc:c0:1e:cf: e6:99:49:0b:b4:c2:1c:b4:59:88:0f:7b:5f:51:92: c9:e2:94:d7:67:26:ba:ed:ea:1f:96:7d:ea:c5:43: 12:59:f7:82:5a:c9:f6:ed:b4:9d:66:ad:91:77:a4: a2:73:b4:3d:0a:d4:ef:76:9b:2f:35:e7:ff:56:f5: e5:c9:53:e4:5d:71:99:51:0c:3f:6d:d6:80:b8:eb: c3:fb:35:60:07:98:63:2e:92:54:f7:ef:4f:fe:d6: 29:e4:a8:5d:f9:23:b6:a9:96:18:40:87:08:bd:fb: d9:51:d8:f8:eb:49:ab:84:28:20:40:0f:27:45:88: 07:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F4:91:A3:5D:BB:F3:4B:EB:FA:4E:BB:8F:F4:55:A1:E7:EE:40:32 X509v3 Authority Key Identifier: keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:90:85:5a:e8:92:05:32:1b:bb:c7:3f:64:bc:e3:2d:4b:da: a4:66:28:9b:e1:de:42:01:b3:a3:0c:e3:5e:fd:19:73:31:ec: cb:7b:fc:4f:32:8e:71:96:c8:1d:04:a5:80:1d:f1:24:fd:bf: d2:42:84:56:14:c8:36:ac:d6:98:40:bd:b5:59:5d:41:9c:1e: aa:30:76:6d:51:8b:c7:0f:00:88:1a:98:ef:7f:10:11:3e:2d: 6f:41:61:9e:1d:97:59:10:80:bd:85:5c:5c:e7:a3:02:01:79: b7:78:ce:18:99:94:bd:cb:5d:9e:7a:ed:4c:5c:95:fd:71:81: fa:25:e4:e8:8e:b8:09:34:bc:07:0b:bd:40:7c:07:63:88:16: 79:ec:d0:65:27:eb:3e:30:f3:ea:7b:70:87:87:0c:57:c7:38: b2:4c:3c:b8:ea:df:70:f6:ca:b6:ec:bf:98:cb:86:2b:1c:d9: d4:d0:42:99:6b:70:0a:4c:f2:3d:61:f6:41:f1:5a:a0:68:6f: 8b:43:10:e5:a7:c2:9f:3c:c6:0b:5f:38:40:fb:8a:49:70:49: 4e:db:1d:f4:dc:3c:3e:07:ed:80:25:94:ef:8e:76:aa:9b:fb: f0:84:36:be:3f:55:54:3a:13:28:23:4e:17:c1:3a:cf:21:bd: 7f:f9:0e:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11049p5j7OJj5RMhfH11UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZTc4ZTg2NmU5MjA0ZDAxYTZmNTJkMzlmZDg0ZmYwOTAw YjIxZDQwHhcNMjUxMjE5MDkwMTAxWhcNMjUxMjIwMDkwMTAxWjAzMTEwLwYDVQQD Eyg4M2Y0OTFhMzVkYmJmMzRiZWJmYTRlYmI4ZmY0NTVhMWU3ZWU0MDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06ETxfaAEgB3EBjcvwI+fGtVJqaj YOflDP5tSfae8G6aZP61cH1nW8ibvEH55VOdBUEWeu3NQgQRtkMtes8kB9KAhT/v Nce4T7Gp1jsPXitYpPgw9ghEAI3vwU6lLUdXnnMH/SMlt+Itdw93W9dd7DYUUsDJ WUkWDmCLoOhd7aBgxczAHs/mmUkLtMIctFmID3tfUZLJ4pTXZya67eofln3qxUMS WfeCWsn27bSdZq2Rd6Sic7Q9CtTvdpsvNef/VvXlyVPkXXGZUQw/bdaAuOvD+zVg B5hjLpJU9+9P/tYp5Khd+SO2qZYYQIcIvfvZUdj460mrhCggQA8nRYgHvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP0kaNdu/NL6/pOu4/0VaHn7kAyMB8GA1UdIwQY MBaAFNnnjoZukgTQGm9S05/YT/CQCyHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVlT2htNlNCTkFhYjFMVG45aFA4SkFMSWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8zMjkxNWItOWVhMS00YzY0LThmZjEt ZDc2ZDY2MjdmYjJlLzEvMmVlT2htNlNCTkFhYjFMVG45aFA4SkFMSWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8zMjkxNWItOWVhMS00YzY0LThmZjEtZDc2ZDY2MjdmYjJl LzEvMmVlT2htNlNCTkFhYjFMVG45aFA4SkFMSWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5CFWuiS BTIbu8c/ZLzjLUvapGYom+HeQgGzowzjXv0ZczHsy3v8TzKOcZbIHQSlgB3xJP2/ 0kKEVhTINqzWmEC9tVldQZweqjB2bVGLxw8AiBqY738QET4tb0Fhnh2XWRCAvYVc XOejAgF5t3jOGJmUvctdnnrtTFyV/XGB+iXk6I64CTS8Bwu9QHwHY4gWeezQZSfr PjDz6ntwh4cMV8c4skw8uOrfcPbKtuy/mMuGKxzZ1NBCmWtwCkzyPWH2QfFaoGhv i0MQ5afCnzzGC184QPuKSXBJTtsd9Nw8PgftgCWU7452qpv78IQ2vj9VVDoTKCNO F8E6zyG9f/kOjw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:26:22 2025 by rpki-client