This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json) Hash identifier: mCtrmQY+Kx2yGglfbwkV19d0jg0owPsIkqGI9pYi+Ls= Subject key identifier: 86:8B:70:3F:28:8A:50:5D:AE:E0:FB:17:92:F3:05:AA:C9:EF:41:7C Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 019B329F0792BE495812B36974C0FED7AF9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft Manifest number: 0AA6 Signing time: Thu 18 Dec 2025 18:00:41 +0000 Manifest this update: Thu 18 Dec 2025 18:00:41 +0000 Manifest next update: Fri 19 Dec 2025 18:00:41 +0000 Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: tZ08eqA6BwRL64oShtUnraw46f7vtXVcTRgwqzrDF3I=) 2: 6UnLf-WfoW9sr8JO9S3jMv6qGIA.roa (hash: 2bd+YNQSpktsNSy1cZJWllJsfSQnRwhxzclMAXA57Ro=) 3: 87iBXWDpSIwRDGkwc7K8UhWgGyI.roa (hash: GnB7PMQFypZjuArzdsmg92AtM/uSLFw3faYH5HVQkIw=) 4: C9ZicXvmxm567EBbHhNa__2fy_I.roa (hash: spPgfi0xUOfFyLJbLIvDF9/eSBXOXpmeRtI5V43B54I=) 5: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=) 6: GxPqJ9WQ-DKd_9ctcg8-12jFGZ0.roa (hash: KATN8CFnbRX1tzVerM2G5h88BqUwwD5kvjL2DX0FIcw=) 7: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=) 8: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=) 9: gr1d5o3sHGA3VWu-8KVK6b7UyM4.roa (hash: GHLuG9O5AVwW61aYh11UvqNMmcEewfjv/mRXgyvZ4yg=) 10: nPeZE7NjK8v1X9W6OWWQV8CL9dk.roa (hash: i5DQUMA7TTXDg8w9uPAc9gbe3ID2PYonRIJFljEMgcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9f:07:92:be:49:58:12:b3:69:74:c0:fe:d7:af:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Dec 18 18:00:41 2025 GMT Not After : Dec 19 18:00:41 2025 GMT Subject: CN=868b703f288a505daee0fb1792f305aac9ef417c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:88:a9:08:2f:a9:b1:2d:8e:bb:03:25:d0: 99:85:94:c2:be:d8:14:d7:a0:de:93:ec:6a:ee:65: 65:f9:48:f8:cc:c1:76:42:d4:80:aa:0c:af:0c:71: db:6f:1d:d4:07:27:07:18:55:41:d3:ec:42:73:3c: 44:db:b4:60:af:72:ab:cc:ad:50:b3:92:b3:83:fa: af:3a:36:e1:9b:a9:62:e1:6c:fc:3c:87:3f:01:57: 43:e8:5a:ee:23:4d:27:4c:9e:e7:07:fe:ea:95:5e: 17:c8:11:b1:81:f9:c5:dc:44:d7:ec:6c:16:1f:4c: de:a9:37:c3:d6:4e:9a:72:fe:a7:0a:15:aa:28:a8: f8:b8:9c:de:50:13:42:5d:3f:5d:0d:eb:4b:b6:4a: af:b6:e7:84:51:af:b4:93:31:47:73:73:4b:ff:cf: 1b:1f:d2:2d:41:f3:2e:7e:86:cc:3f:b0:c9:14:56: 43:ea:19:0a:f8:ca:d7:70:28:10:32:f6:7b:ae:ab: 08:36:13:c7:eb:01:61:0d:7b:1a:8e:e1:7c:a2:c8: 04:4e:ad:92:ff:4d:6d:36:4b:c5:ed:2d:1a:fb:14: fb:1f:b3:b3:05:fd:8d:f5:57:05:b4:5f:f2:1d:84: 48:50:3c:5a:8b:ab:da:36:53:59:e0:d4:da:8b:8d: a3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8B:70:3F:28:8A:50:5D:AE:E0:FB:17:92:F3:05:AA:C9:EF:41:7C X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2b:7c:56:28:01:5b:8c:e2:08:64:98:a9:f5:42:34:fa:98: 3b:fd:eb:9e:12:9a:dc:ac:37:4a:43:47:0d:0b:79:db:d6:d2: 9e:0d:7e:22:a9:31:1a:d5:46:59:6c:19:5e:4e:8c:91:54:67: 30:8c:88:e2:f0:7e:d9:e9:39:2f:43:45:d7:88:0f:64:65:e3: ed:d5:81:4c:f9:27:ad:8c:56:f8:c8:75:59:1c:72:8b:32:49: 3a:b3:23:39:90:92:70:24:a4:65:12:7f:fd:a4:e1:50:b8:87: 50:45:32:7c:61:f3:8d:58:ee:5a:6b:b1:49:2d:ed:29:44:47: 92:71:28:c2:f1:d4:c4:69:9e:67:5a:70:12:a9:92:53:21:5d: 4d:dd:96:58:8c:83:b4:cc:72:22:2f:9a:00:a7:3c:9c:3e:74: 14:07:45:86:a6:f1:73:e5:3d:2a:e0:71:dd:81:10:63:24:ab: c1:fb:06:3e:26:ae:87:ae:fc:24:a3:9a:86:af:06:2b:c3:7d: 2f:f7:f3:43:1a:74:67:b8:74:d7:ed:ce:fd:c7:40:57:3d:eb: 4a:46:d9:4d:89:15:5d:f7:c6:62:88:e6:28:35:13:8b:d4:a4: 39:f4:77:7a:fe:52:22:cc:a7:58:bb:00:68:43:2c:2d:e1:3f: 91:b4:92:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynweSvklYErNpdMD+16+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjUxMjE4MTgwMDQxWhcNMjUxMjE5MTgwMDQxWjAzMTEwLwYDVQQD Eyg4NjhiNzAzZjI4OGE1MDVkYWVlMGZiMTc5MmYzMDVhYWM5ZWY0MTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApimIqQgvqbEtjrsDJdCZhZTCvtgU 16Dek+xq7mVl+Uj4zMF2QtSAqgyvDHHbbx3UBycHGFVB0+xCczxE27Rgr3KrzK1Q s5Kzg/qvOjbhm6li4Wz8PIc/AVdD6FruI00nTJ7nB/7qlV4XyBGxgfnF3ETX7GwW H0zeqTfD1k6acv6nChWqKKj4uJzeUBNCXT9dDetLtkqvtueEUa+0kzFHc3NL/88b H9ItQfMufobMP7DJFFZD6hkK+MrXcCgQMvZ7rqsINhPH6wFhDXsajuF8osgETq2S /01tNkvF7S0a+xT7H7OzBf2N9VcFtF/yHYRIUDxai6vaNlNZ4NTai42jlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaLcD8oilBdruD7F5LzBarJ70F8MB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyt8VigB W4ziCGSYqfVCNPqYO/3rnhKa3Kw3SkNHDQt529bSng1+IqkxGtVGWWwZXk6MkVRn MIyI4vB+2ek5L0NF14gPZGXj7dWBTPknrYxW+Mh1WRxyizJJOrMjOZCScCSkZRJ/ /aThULiHUEUyfGHzjVjuWmuxSS3tKURHknEowvHUxGmeZ1pwEqmSUyFdTd2WWIyD tMxyIi+aAKc8nD50FAdFhqbxc+U9KuBx3YEQYySrwfsGPiauh678JKOahq8GK8N9 L/fzQxp0Z7h01+3O/cdAVz3rSkbZTYkVXffGYojmKDUTi9SkOfR3ev5SIsynWLsA aEMsLeE/kbSSCA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:45:20 2025 by rpki-client