This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json) Hash identifier: kiiF9xcPFos9AH10yKck1g6R1U9PEXlqa2yCH9V3VS8= Subject key identifier: 75:46:16:67:5E:0E:C4:CB:B8:50:B1:BD:D5:E4:62:C5:CA:69:15:F7 Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 019AF2E430C88584FBD2800BB57FF5FEB548 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft Manifest number: 0A85 Signing time: Sat 06 Dec 2025 09:00:32 +0000 Manifest this update: Sat 06 Dec 2025 09:00:32 +0000 Manifest next update: Sun 07 Dec 2025 09:00:32 +0000 Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: DjDVkhR+iF0ZJGFuUB4hROFlKyLUmGG9l6LEXGSf5Kc=) 2: 6UnLf-WfoW9sr8JO9S3jMv6qGIA.roa (hash: 2bd+YNQSpktsNSy1cZJWllJsfSQnRwhxzclMAXA57Ro=) 3: 87iBXWDpSIwRDGkwc7K8UhWgGyI.roa (hash: GnB7PMQFypZjuArzdsmg92AtM/uSLFw3faYH5HVQkIw=) 4: C9ZicXvmxm567EBbHhNa__2fy_I.roa (hash: spPgfi0xUOfFyLJbLIvDF9/eSBXOXpmeRtI5V43B54I=) 5: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=) 6: GxPqJ9WQ-DKd_9ctcg8-12jFGZ0.roa (hash: KATN8CFnbRX1tzVerM2G5h88BqUwwD5kvjL2DX0FIcw=) 7: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=) 8: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=) 9: gr1d5o3sHGA3VWu-8KVK6b7UyM4.roa (hash: GHLuG9O5AVwW61aYh11UvqNMmcEewfjv/mRXgyvZ4yg=) 10: nPeZE7NjK8v1X9W6OWWQV8CL9dk.roa (hash: i5DQUMA7TTXDg8w9uPAc9gbe3ID2PYonRIJFljEMgcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:30:c8:85:84:fb:d2:80:0b:b5:7f:f5:fe:b5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Dec 6 09:00:32 2025 GMT Not After : Dec 7 09:00:32 2025 GMT Subject: CN=754616675e0ec4cbb850b1bdd5e462c5ca6915f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:3d:e3:c5:30:33:0d:d0:a7:bc:c6:b3:bc: c5:e7:ad:90:1b:51:e9:87:dc:cd:c5:d2:52:af:48: 2c:41:68:5f:d0:9f:ed:5c:a2:d4:f2:e2:b5:b4:49: e2:d7:8b:fe:3c:62:6f:08:d7:b9:b3:fc:00:35:84: e0:83:31:8e:c1:15:3c:0d:26:20:80:1e:ae:ff:eb: 5f:5c:c7:5f:5b:fa:6c:fd:f8:29:ea:08:d6:54:b9: 42:99:0f:d7:3c:c9:8d:4e:35:b1:99:51:0d:36:b3: 4d:6e:d8:ed:b9:b8:4c:26:67:e3:32:fe:26:b9:13: 08:3b:18:18:60:07:cb:3b:2d:f2:9a:98:f6:ba:b4: 93:e9:eb:64:23:99:0e:f9:c8:c7:40:b3:ae:4a:10: 32:44:38:9d:ac:75:85:c3:25:56:69:d6:69:5e:e2: 96:5c:8b:12:d6:7e:f7:18:42:85:24:f0:7c:f4:38: 13:3e:c5:4b:1e:2e:28:3f:9d:96:0f:3e:e0:4f:a4: 8a:c9:28:7d:53:0e:6b:0a:60:90:c9:5b:aa:cc:e6: 5c:f2:98:1c:63:3e:86:af:e1:d5:b7:86:ee:c1:01: ce:7c:15:6e:d8:cb:0e:f2:c8:d5:69:e7:51:47:8c: ab:68:33:3c:34:ea:13:8a:0f:d5:e0:20:fa:33:62: 3c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:46:16:67:5E:0E:C4:CB:B8:50:B1:BD:D5:E4:62:C5:CA:69:15:F7 X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d9:ad:6f:bc:b4:22:d9:d9:63:91:ad:5e:c1:bc:ea:00:85: 72:62:4e:19:5d:ae:48:01:af:83:36:ba:ce:48:49:c2:d3:15: cf:64:92:d2:a6:70:50:cc:a2:a4:ee:68:87:70:92:fa:1e:6a: 01:84:12:5b:bd:d9:23:f7:45:f8:3d:60:2d:21:64:02:00:31: 57:78:e7:27:d0:17:03:6e:de:4d:a6:b9:3b:23:03:61:38:07: f1:e1:a3:7e:a7:08:50:3f:52:eb:ad:70:3f:4e:1e:f8:0b:44: 68:cc:97:9c:cd:fc:76:1a:ea:4d:3c:de:ee:7d:6e:c5:a6:41: 0d:7e:2a:cb:8c:38:ac:d2:f7:f0:5d:90:91:a1:d7:dd:cb:f6: fc:c8:5d:de:db:1e:7f:0b:4e:32:8b:70:ba:41:ed:76:71:11: 5a:23:52:cc:5d:c1:69:ac:75:ca:79:4c:2e:b4:48:75:f2:34: e8:53:fa:96:76:55:2c:46:7d:ae:70:8f:7a:56:68:8b:44:cb: fc:67:af:b4:e2:14:77:3b:7c:7c:64:8e:0e:9f:13:39:17:5a: 9d:35:80:6f:3d:15:d4:2f:e2:03:91:71:dd:4a:d5:01:5c:ba: ab:2f:bb:db:58:20:b8:68:b0:f5:52:d9:fc:c2:2c:17:3d:d2: 9f:87:58:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DDIhYT70oALtX/1/rVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjUxMjA2MDkwMDMyWhcNMjUxMjA3MDkwMDMyWjAzMTEwLwYDVQQD Eyg3NTQ2MTY2NzVlMGVjNGNiYjg1MGIxYmRkNWU0NjJjNWNhNjkxNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrM948UwMw3Qp7zGs7zF562QG1Hp h9zNxdJSr0gsQWhf0J/tXKLU8uK1tEni14v+PGJvCNe5s/wANYTggzGOwRU8DSYg gB6u/+tfXMdfW/ps/fgp6gjWVLlCmQ/XPMmNTjWxmVENNrNNbtjtubhMJmfjMv4m uRMIOxgYYAfLOy3ympj2urST6etkI5kO+cjHQLOuShAyRDidrHWFwyVWadZpXuKW XIsS1n73GEKFJPB89DgTPsVLHi4oP52WDz7gT6SKySh9Uw5rCmCQyVuqzOZc8pgc Yz6Gr+HVt4buwQHOfBVu2MsO8sjVaedRR4yraDM8NOoTig/V4CD6M2I8NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVGFmdeDsTLuFCxvdXkYsXKaRX3MB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdmtb7y0 ItnZY5GtXsG86gCFcmJOGV2uSAGvgza6zkhJwtMVz2SS0qZwUMyipO5oh3CS+h5q AYQSW73ZI/dF+D1gLSFkAgAxV3jnJ9AXA27eTaa5OyMDYTgH8eGjfqcIUD9S661w P04e+AtEaMyXnM38dhrqTTze7n1uxaZBDX4qy4w4rNL38F2QkaHX3cv2/Mhd3tse fwtOMotwukHtdnERWiNSzF3Baax1ynlMLrRIdfI06FP6lnZVLEZ9rnCPelZoi0TL /GevtOIUdzt8fGSODp8TORdanTWAbz0V1C/iA5Fx3UrVAVy6qy+721gguGiw9VLZ /MIsFz3Sn4dYGA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:55 2025 by rpki-client