This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json) Hash identifier: 2ySEeIKh2FXlltAwmche7uR5nc1YGEVp5aKbG56yRz8= Subject key identifier: 4A:9D:AA:5F:35:B0:96:6B:78:F6:38:AF:21:AA:62:D8:65:0C:92:39 Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26 Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26 Certificate serial: 019AF163E17F13BAD2BEDAFA6047E9EBBDAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft Manifest number: 11D2 Signing time: Sat 06 Dec 2025 02:00:46 +0000 Manifest this update: Sat 06 Dec 2025 02:00:46 +0000 Manifest next update: Sun 07 Dec 2025 02:00:46 +0000 Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: GEyx0WpBoPMJxBarZSFXHR12SFP4qobVYBnBiTJISeo=) 2: vmvMz7iYINXEEkk8q3hTcUEqEpc.roa (hash: cIoty3QgZcrRdlAsEyLTb5L8GB5LiEjn7CzAwFabxRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e1:7f:13:ba:d2:be:da:fa:60:47:e9:eb:bd:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26 Validity Not Before: Dec 6 02:00:46 2025 GMT Not After : Dec 7 02:00:46 2025 GMT Subject: CN=4a9daa5f35b0966b78f638af21aa62d8650c9239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:7e:c7:5f:f9:20:56:57:40:92:ec:d9:54: 72:50:72:9f:1f:33:6c:18:0b:72:64:cf:20:3b:ed: 91:4c:8e:ac:27:b2:48:60:f5:0b:23:11:e1:bf:31: 92:c7:8e:54:5d:2f:03:d2:cd:5f:d0:3c:9d:29:8a: 1a:d6:86:a9:d1:ca:16:3c:2b:75:22:d3:95:b0:43: 51:58:6c:a4:ed:31:31:1d:fc:21:6f:29:ed:5b:f5: 21:9f:92:77:7d:33:54:65:5a:6b:2f:a1:2b:6b:a3: 85:1f:01:87:9e:e9:c4:87:89:34:de:31:1e:bf:a5: 07:ce:be:83:88:09:af:ea:d8:3d:cd:5f:9c:27:1c: ef:f2:a0:de:96:8b:c4:58:02:91:02:b8:46:2c:dd: e3:b7:3b:53:a0:9f:ec:a3:8f:f0:b5:bf:08:d5:32: 20:40:57:8f:3a:93:a5:b7:d4:7e:f0:44:de:1f:9d: 5c:14:0f:9b:6d:4f:ee:92:92:a3:4e:73:cf:4b:a9: 75:d0:7b:9e:10:74:7e:b7:8f:99:cf:ae:1b:c3:f5: d4:6a:51:a6:53:ad:3d:72:85:95:e5:3a:20:9f:72: 08:a1:75:7a:47:a3:68:d1:a9:c3:11:ad:74:4b:01: 86:57:67:34:93:40:31:3f:ff:04:17:0e:58:65:50: 94:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9D:AA:5F:35:B0:96:6B:78:F6:38:AF:21:AA:62:D8:65:0C:92:39 X509v3 Authority Key Identifier: keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1c:4b:9f:d8:a9:f1:7f:51:a6:3d:2a:c9:0a:4c:9f:5e:73: 39:57:05:12:c6:c2:dc:c8:25:35:dd:b8:23:8e:52:c4:02:43: 81:6e:5a:6c:36:fb:be:97:1a:48:f7:a8:a1:1b:28:6b:76:ce: 22:ef:e0:f6:8c:0b:91:cb:da:2c:5f:90:b1:80:3a:2d:93:9f: af:a8:2c:87:d5:79:f9:84:e2:08:0a:19:34:e5:79:3c:fd:0b: b4:f9:6f:19:dc:df:74:37:64:b6:86:9f:91:33:15:33:58:a9: 04:49:9e:34:3b:78:da:94:fe:1d:9e:51:2e:73:2b:45:e2:62: da:b9:57:9b:dd:3a:0c:3e:bb:6d:48:56:54:38:79:7a:50:2c: 8a:81:ff:53:31:40:6d:5e:f1:0d:82:f6:99:39:b5:4c:71:60: 9e:d6:dc:22:8f:b0:2f:ec:90:11:53:8f:7a:bd:5c:98:74:db: b2:a7:94:f0:05:a1:f7:2c:21:f2:77:19:b4:f6:ad:2f:aa:51: 87:80:21:f8:79:ad:33:55:72:8c:f2:79:52:6b:5f:8f:e7:27: 87:40:fa:52:0a:a1:40:de:15:a2:fe:bc:77:b5:f6:57:32:bb: 56:24:fb:ef:ca:be:39:82:b7:f0:3d:05:85:1c:a3:6a:9d:98: 0a:4e:8d:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+F/E7rSvtr6YEfp672sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZTZiZGZlNDI3ODAwOGY3MTZkNGQ3YjBiOWY5MmY3ZTAz NmViMjYwHhcNMjUxMjA2MDIwMDQ2WhcNMjUxMjA3MDIwMDQ2WjAzMTEwLwYDVQQD Eyg0YTlkYWE1ZjM1YjA5NjZiNzhmNjM4YWYyMWFhNjJkODY1MGM5MjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQZ+x1/5IFZXQJLs2VRyUHKfHzNs GAtyZM8gO+2RTI6sJ7JIYPULIxHhvzGSx45UXS8D0s1f0DydKYoa1oap0coWPCt1 ItOVsENRWGyk7TExHfwhbyntW/Uhn5J3fTNUZVprL6Era6OFHwGHnunEh4k03jEe v6UHzr6DiAmv6tg9zV+cJxzv8qDelovEWAKRArhGLN3jtztToJ/so4/wtb8I1TIg QFePOpOlt9R+8ETeH51cFA+bbU/ukpKjTnPPS6l10HueEHR+t4+Zz64bw/XUalGm U609coWV5Togn3IIoXV6R6No0anDEa10SwGGV2c0k0AxP/8EFw5YZVCUzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqdql81sJZrePY4ryGqYthlDJI5MB8GA1UdIwQY MBaAFNrmvf5CeACPcW1NewufkvfgNusmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnVhOV9rSjRBSTl4YlUxN0M1LVM5LUEyNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84MGQwODctNDcwMC00ZTg1LWE3ODMt YmYyNGU3NzViMmJjLzEvMnVhOV9rSjRBSTl4YlUxN0M1LVM5LUEyNnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84MGQwODctNDcwMC00ZTg1LWE3ODMtYmYyNGU3NzViMmJj LzEvMnVhOV9rSjRBSTl4YlUxN0M1LVM5LUEyNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRxLn9ip 8X9Rpj0qyQpMn15zOVcFEsbC3MglNd24I45SxAJDgW5abDb7vpcaSPeooRsoa3bO Iu/g9owLkcvaLF+QsYA6LZOfr6gsh9V5+YTiCAoZNOV5PP0LtPlvGdzfdDdktoaf kTMVM1ipBEmeNDt42pT+HZ5RLnMrReJi2rlXm906DD67bUhWVDh5elAsioH/UzFA bV7xDYL2mTm1THFgntbcIo+wL+yQEVOPer1cmHTbsqeU8AWh9ywh8ncZtPatL6pR h4Ah+HmtM1VyjPJ5Umtfj+cnh0D6UgqhQN4Vov68d7X2VzK7ViT778q+OYK38D0F hRyjap2YCk6NZg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:53 2025 by rpki-client