This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json) Hash identifier: 5iHuLEYLmr7U2LuFUr7DZP9P0DO6Wv0nMrIwZ4umJhw= Subject key identifier: 8C:11:E7:2A:13:7E:FC:8C:24:EE:94:C0:23:B1:4A:DD:7B:E8:B4:BC Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47 Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347 Certificate serial: 019AF509D3B116719DD0A841DEBC93FBAC11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 19:00:53 +0000 Manifest this update: Sat 06 Dec 2025 19:00:53 +0000 Manifest next update: Sun 07 Dec 2025 19:00:53 +0000 Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=) 2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: GLcL0kKKHUsVKd4rVPEViuafpFYy4p5yYlyalgH/VGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:d3:b1:16:71:9d:d0:a8:41:de:bc:93:fb:ac:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347 Validity Not Before: Dec 6 19:00:53 2025 GMT Not After : Dec 7 19:00:53 2025 GMT Subject: CN=8c11e72a137efc8c24ee94c023b14add7be8b4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:cd:ca:8d:c6:a4:f0:3a:dd:cb:14:41:67: 08:1d:8c:59:cd:91:df:49:83:4e:a2:50:05:2f:2e: e8:07:b3:c4:2a:ef:e1:77:25:dd:d9:07:64:fc:dc: 7d:05:6e:30:05:93:05:2a:be:f8:56:f5:f6:17:e5: 55:2e:4d:78:81:3c:9e:f6:70:db:86:96:00:2c:06: fb:86:5c:2d:c4:83:6a:9b:27:cb:f3:49:26:ee:bf: a7:0b:64:6b:e1:08:78:06:a1:8f:8d:25:67:d5:a1: 7f:d9:62:1c:1d:69:62:2b:ec:e5:aa:83:34:83:73: 7f:c8:03:05:cd:ea:e5:de:70:d7:1e:8a:b7:0a:a4: f2:51:e3:27:87:4f:2a:a9:1d:5d:5f:4a:32:e2:20: 72:55:da:d5:22:df:be:c2:1b:fb:1c:fc:54:2b:66: 20:b2:d1:e2:9a:eb:2c:95:12:2d:1a:9a:24:08:c8: eb:8f:53:e8:9f:b7:19:d4:c1:00:92:a3:e4:97:05: 6d:96:00:5b:38:e7:59:e7:8f:c0:d8:35:7d:8f:26: d6:d2:b3:46:14:85:49:a2:de:14:6f:5a:c1:be:b4: 2c:63:4c:cf:45:03:cd:a3:8a:8a:cb:63:6a:7b:5f: e6:23:02:8b:ac:b1:0b:e0:41:e5:49:2d:5d:01:dc: 06:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:11:E7:2A:13:7E:FC:8C:24:EE:94:C0:23:B1:4A:DD:7B:E8:B4:BC X509v3 Authority Key Identifier: keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e6:cb:d2:f3:72:ee:7c:ed:9a:ca:6b:f7:6e:e2:88:95:62: 6b:60:35:25:26:71:f3:29:7a:33:4d:6c:f5:3a:aa:a5:ee:d2: 92:1d:52:83:82:6b:a0:69:0d:28:f7:a5:a6:cf:13:5f:7f:12: 8b:df:a4:3f:63:22:a9:56:3c:55:54:d5:61:d6:6b:15:47:60: a7:35:61:af:16:40:15:3a:3c:0e:b1:8a:c5:5c:d8:bb:55:45: 70:a7:b1:49:48:7c:74:bd:90:63:ef:d7:c8:10:f2:7a:a7:e8: 2b:ab:49:b1:a1:5d:92:f3:68:f5:ef:5f:61:41:9d:e4:d9:ca: 01:a7:52:e3:8f:f4:dc:b4:2d:60:64:a8:2b:39:17:02:7a:c6: dd:77:6a:56:95:cb:14:39:2d:be:a6:c0:e8:a0:e0:81:4b:a0: ff:48:41:7e:7b:56:fb:fb:09:e4:48:7e:a9:87:c4:fb:fd:42: ae:f4:be:b6:6b:ca:af:56:9b:75:c5:9a:81:ff:da:39:9d:22: 1f:0e:37:e6:da:e6:df:f4:dc:49:e7:d6:75:eb:fe:61:9a:97: 12:6b:b8:e8:63:57:9c:1b:e2:9d:1f:24:75:96:46:61:ff:dc: 62:1c:1d:63:61:86:cd:6e:01:1e:a8:c3:b2:24:21:93:f9:25: 34:ae:30:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CdOxFnGd0KhB3ryT+6wRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZTcwZWY2ZmViODEzZWQ5ZGJiOTY3ZDA1MTNjZjIwNDNk M2EzNDcwHhcNMjUxMjA2MTkwMDUzWhcNMjUxMjA3MTkwMDUzWjAzMTEwLwYDVQQD Eyg4YzExZTcyYTEzN2VmYzhjMjRlZTk0YzAyM2IxNGFkZDdiZThiNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUXNyo3GpPA63csUQWcIHYxZzZHf SYNOolAFLy7oB7PEKu/hdyXd2Qdk/Nx9BW4wBZMFKr74VvX2F+VVLk14gTye9nDb hpYALAb7hlwtxINqmyfL80km7r+nC2Rr4Qh4BqGPjSVn1aF/2WIcHWliK+zlqoM0 g3N/yAMFzerl3nDXHoq3CqTyUeMnh08qqR1dX0oy4iByVdrVIt++whv7HPxUK2Yg stHimusslRItGpokCMjrj1Pon7cZ1MEAkqPklwVtlgBbOOdZ54/A2DV9jybW0rNG FIVJot4Ub1rBvrQsY0zPRQPNo4qKy2Nqe1/mIwKLrLEL4EHlSS1dAdwGBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwR5yoTfvyMJO6UwCOxSt176LS8MB8GA1UdIwQY MBaAFNrnDvb+uBPtnbuWfQUTzyBD06NHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDIt ZWFiNDBiZTQ4Y2MxLzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDItZWFiNDBiZTQ4Y2Mx LzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhubL0vNy 7nztmspr927iiJVia2A1JSZx8yl6M01s9Tqqpe7Skh1Sg4JroGkNKPelps8TX38S i9+kP2MiqVY8VVTVYdZrFUdgpzVhrxZAFTo8DrGKxVzYu1VFcKexSUh8dL2QY+/X yBDyeqfoK6tJsaFdkvNo9e9fYUGd5NnKAadS44/03LQtYGSoKzkXAnrG3XdqVpXL FDktvqbA6KDggUug/0hBfntW+/sJ5Eh+qYfE+/1CrvS+tmvKr1abdcWagf/aOZ0i Hw435trm3/TcSefWdev+YZqXEmu46GNXnBvinR8kdZZGYf/cYhwdY2GGzW4BHqjD siQhk/klNK4w9w== -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:45 2025 by rpki-client