This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft File: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft (raw, json) Hash identifier: Vn+dBwZuH7kDM+pDuK3o9zxiOhT16Dz9mxtv2jq0Qkw= Subject key identifier: 8E:35:B2:3F:5D:80:14:99:ED:C5:70:1F:0D:D9:66:95:E6:DE:8E:A1 Authority key identifier: DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F Certificate issuer: /CN=dae57631f60adb13f0ae368671ce0f8742f5977f Certificate serial: 019AF1646CF0A63A9B1A1A1DCF96DEBEAF49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl (hash: cqXe1n4vpi1bXd9qxZ+ao9h/EOuqUG8vcR7fGimYU0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6c:f0:a6:3a:9b:1a:1a:1d:cf:96:de:be:af:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dae57631f60adb13f0ae368671ce0f8742f5977f Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=8e35b23f5d801499edc5701f0dd96695e6de8ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f7:4c:d9:23:7a:5e:6e:2b:3a:dd:cf:be:5a: 12:49:a5:fa:8e:3c:27:59:3f:77:7c:9e:2d:48:92: eb:47:03:25:43:9e:09:98:30:e0:a4:d9:34:82:18: 61:15:b7:b5:cb:97:b3:b2:b8:a4:17:fe:84:78:e3: 93:af:9f:ff:52:28:43:85:35:e0:8e:c9:7d:a4:30: 51:2c:0b:c2:84:f1:81:e9:0a:33:14:80:df:84:0c: c7:ed:f8:77:d0:de:5b:23:0d:98:8b:81:33:91:71: fb:75:15:cb:30:0a:80:4e:0c:61:d9:0a:da:a2:b7: fe:ff:9e:fc:af:75:e8:b8:3e:17:fe:51:8a:70:45: 8e:25:81:96:e0:70:ad:1c:b5:fb:af:0e:d7:3a:ad: 17:62:45:c5:be:da:94:1a:ef:95:f3:70:3b:cf:14: 62:98:bd:5a:b0:ec:c0:e1:fe:82:10:82:fa:a8:2c: 45:72:ab:1f:66:75:85:84:11:55:36:58:35:85:94: a2:5c:3a:78:57:64:36:96:02:cc:4d:68:1f:10:53: 48:8c:29:33:36:82:c2:50:65:42:c5:84:61:8b:b0: 08:f6:23:91:55:1d:4f:bc:65:e2:29:bb:a1:48:34: 99:b4:1b:8e:80:d7:62:5a:0c:52:55:a4:f2:69:d3: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:35:B2:3F:5D:80:14:99:ED:C5:70:1F:0D:D9:66:95:E6:DE:8E:A1 X509v3 Authority Key Identifier: keyid:DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fd:6a:59:29:86:ac:7f:55:01:49:0a:05:7d:27:14:4c:85: b2:7e:88:ea:ef:cd:df:91:36:cf:c8:34:ef:ea:1a:3b:67:e2: 4c:5c:1a:03:4e:c9:09:53:be:b0:18:d4:29:ef:10:0c:a4:a3: 2a:e0:e7:0b:e3:33:5c:c0:88:93:2c:35:17:49:07:cd:e4:30: ca:d7:85:06:ca:38:3d:26:b4:3f:68:d1:69:a6:a1:65:bc:ca: 1f:0d:28:ff:80:39:5e:bc:35:3a:e0:61:39:7d:d5:9d:ca:8d: 14:f2:22:51:c7:51:82:4c:21:a2:07:8f:01:75:1b:b5:bd:4c: c0:4b:eb:35:67:b4:26:00:f6:38:ff:f0:07:4f:15:b9:87:fa: f7:0b:c6:dc:13:26:ac:4b:81:5b:a8:84:1f:3d:a1:c2:f0:16: 1d:b5:66:ce:3b:8f:41:93:0c:f5:64:66:3f:38:9e:00:ed:85: 98:e3:3e:68:d8:a0:ac:64:1f:c5:ea:5c:58:c6:5a:9f:1c:11: dd:63:0d:20:ab:6a:5b:50:cb:d6:48:cc:9d:53:1c:bb:fd:2a: 18:d8:e0:28:30:04:16:46:c4:22:68:33:c6:23:f2:bb:55:4d: b5:fc:44:b8:df:2d:1a:c6:96:9c:23:47:c6:36:96:e4:a5:25: 8d:41:f4:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGzwpjqbGhodz5bevq9JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZTU3NjMxZjYwYWRiMTNmMGFlMzY4NjcxY2UwZjg3NDJm NTk3N2YwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD Eyg4ZTM1YjIzZjVkODAxNDk5ZWRjNTcwMWYwZGQ5NjY5NWU2ZGU4ZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/dM2SN6Xm4rOt3PvloSSaX6jjwn WT93fJ4tSJLrRwMlQ54JmDDgpNk0ghhhFbe1y5ezsrikF/6EeOOTr5//UihDhTXg jsl9pDBRLAvChPGB6QozFIDfhAzH7fh30N5bIw2Yi4EzkXH7dRXLMAqATgxh2Qra orf+/578r3XouD4X/lGKcEWOJYGW4HCtHLX7rw7XOq0XYkXFvtqUGu+V83A7zxRi mL1asOzA4f6CEIL6qCxFcqsfZnWFhBFVNlg1hZSiXDp4V2Q2lgLMTWgfEFNIjCkz NoLCUGVCxYRhi7AI9iORVR1PvGXiKbuhSDSZtBuOgNdiWgxSVaTyadNRywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI41sj9dgBSZ7cVwHw3ZZpXm3o6hMB8GA1UdIwQY MBaAFNrldjH2CtsT8K42hnHOD4dC9Zd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnVWMk1mWUsyeFB3cmphR2NjNFBoMEwxbDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTgyNWEtNWJiNi00MzI3LTlhMGEt NDM5ZjM2ZTE2NTNhLzEvMnVWMk1mWUsyeFB3cmphR2NjNFBoMEwxbDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wZTgyNWEtNWJiNi00MzI3LTlhMGEtNDM5ZjM2ZTE2NTNh LzEvMnVWMk1mWUsyeFB3cmphR2NjNFBoMEwxbDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/1qWSmG rH9VAUkKBX0nFEyFsn6I6u/N35E2z8g07+oaO2fiTFwaA07JCVO+sBjUKe8QDKSj KuDnC+MzXMCIkyw1F0kHzeQwyteFBso4PSa0P2jRaaahZbzKHw0o/4A5Xrw1OuBh OX3VncqNFPIiUcdRgkwhogePAXUbtb1MwEvrNWe0JgD2OP/wB08VuYf69wvG3BMm rEuBW6iEHz2hwvAWHbVmzjuPQZMM9WRmPzieAO2FmOM+aNigrGQfxepcWMZanxwR 3WMNIKtqW1DL1kjMnVMcu/0qGNjgKDAEFkbEImgzxiPyu1VNtfxEuN8tGsaWnCNH xjaW5KUljUH0BQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:02 2025 by rpki-client