This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json) Hash identifier: OwdYIBQWK0KlaVvx66iNcSh4YGD5nuZLa9Yr2hDN8tY= Subject key identifier: B0:C9:20:85:46:8D:20:B9:0F:D6:59:8F:99:CE:C5:FB:3D:4E:2E:B7 Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19 Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319 Certificate serial: 019AF0BF8C5656D5FD911DD27ADFB0C28044 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft Manifest number: 0C9E Signing time: Fri 05 Dec 2025 23:01:16 +0000 Manifest this update: Fri 05 Dec 2025 23:01:16 +0000 Manifest next update: Sat 06 Dec 2025 23:01:16 +0000 Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: LY8XbOinCf+qv3aeMQia8qQBECWTY6FrNVAMp5sW6Ls=) 2: 9QEKfiqhzH-bmQh5b6rMdNbStYc.roa (hash: MpYTZwjsTnNyFZWB4RSLKA3k60L/jvvVARMaXOoFY4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8c:56:56:d5:fd:91:1d:d2:7a:df:b0:c2:80:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319 Validity Not Before: Dec 5 23:01:16 2025 GMT Not After : Dec 6 23:01:16 2025 GMT Subject: CN=b0c92085468d20b90fd6598f99cec5fb3d4e2eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:2b:86:52:89:5c:3d:5a:b0:62:3c:e0:73: 26:f8:78:81:a1:83:b9:9f:b6:0d:a8:a8:ea:a4:fc: cc:5a:0f:55:ff:dc:09:7b:8e:99:3f:b2:5f:66:ac: 2f:0b:5f:56:c8:fa:52:b6:fa:16:88:4a:1e:5f:17: 23:09:6b:30:37:bf:31:d6:40:77:57:b9:10:1d:ae: ce:5c:c9:38:2e:2b:33:74:b1:31:63:a2:a3:40:2b: 52:6b:42:37:75:9c:ee:c2:6b:78:a6:95:06:36:8c: fc:fc:76:5b:ad:1f:5e:54:44:b7:7a:e2:79:fc:cc: dc:13:4b:9a:de:05:fb:79:a5:49:5c:54:a7:1b:7c: af:e9:a2:80:35:1d:5f:c6:4f:ca:2e:c2:25:b6:29: 81:6e:6f:af:40:19:d9:02:54:42:d5:26:ad:20:17: bf:83:6e:f0:7d:f3:a0:2d:c4:0d:c5:3d:24:fa:c2: fc:81:ce:25:59:9e:79:56:97:e6:48:f2:80:cb:5b: c6:d5:14:57:3f:ee:fa:04:25:49:4e:21:07:50:78: c6:5e:49:d7:67:8b:21:1d:17:ec:09:40:e2:3e:ab: a6:57:a2:fc:e7:fb:d2:d8:3b:b6:28:c4:b1:4d:38: 9b:b7:09:87:14:07:5d:d5:a0:a2:68:6e:65:bf:33: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C9:20:85:46:8D:20:B9:0F:D6:59:8F:99:CE:C5:FB:3D:4E:2E:B7 X509v3 Authority Key Identifier: keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b5:e9:a5:b5:87:f7:ab:09:93:f6:a3:e1:8e:04:e6:5d:a7: a9:38:c0:08:bc:73:4b:44:aa:75:3f:3b:76:a6:dc:0d:e6:22: 6f:fc:e5:9f:75:4d:84:e5:a9:7e:68:3b:c7:2a:04:42:4d:e5: 9b:eb:9e:3d:d4:ea:00:f1:b8:c0:4d:1a:3e:2d:6f:33:b3:af: 7a:20:91:6c:3c:b7:06:57:d7:ea:08:1c:09:8b:a1:cd:41:7b: 5b:88:12:47:00:76:93:e8:ec:e3:49:f9:ca:e0:eb:21:bc:ea: 53:e3:e6:93:c9:1e:48:ea:c9:c1:ae:0b:60:8c:ca:67:80:25: 65:32:02:57:5b:bb:fb:3d:53:69:6c:fe:3c:a7:16:96:d7:a2: 59:cd:53:46:71:97:81:b2:37:25:2d:2b:c6:6f:1d:f6:8e:e7: d0:df:ce:76:f5:2b:40:f2:ca:a0:76:31:d0:2e:07:5f:49:06: 1c:ab:53:78:b2:43:0e:5a:b5:7e:2f:34:da:33:02:82:1c:29: 9e:3c:46:a1:84:5e:49:d0:5f:54:3b:70:8b:ae:b5:82:70:af: 9f:e6:00:50:ab:03:66:33:9d:f8:16:2b:99:e7:42:7e:1f:29: fc:8d:3a:5b:3d:f1:6e:4c:2a:1f:81:08:2a:1d:32:c7:09:29: 5f:eb:1a:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4xWVtX9kR3Set+wwoBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDljYWJhM2Q0MzE1NjA3ZjRhNmQ2MjdlY2UxZWNlYThj YmMzMTkwHhcNMjUxMjA1MjMwMTE2WhcNMjUxMjA2MjMwMTE2WjAzMTEwLwYDVQQD EyhiMGM5MjA4NTQ2OGQyMGI5MGZkNjU5OGY5OWNlYzVmYjNkNGUyZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FsrhlKJXD1asGI84HMm+HiBoYO5 n7YNqKjqpPzMWg9V/9wJe46ZP7JfZqwvC19WyPpStvoWiEoeXxcjCWswN78x1kB3 V7kQHa7OXMk4LiszdLExY6KjQCtSa0I3dZzuwmt4ppUGNoz8/HZbrR9eVES3euJ5 /MzcE0ua3gX7eaVJXFSnG3yv6aKANR1fxk/KLsIltimBbm+vQBnZAlRC1SatIBe/ g27wffOgLcQNxT0k+sL8gc4lWZ55VpfmSPKAy1vG1RRXP+76BCVJTiEHUHjGXknX Z4shHRfsCUDiPqumV6L85/vS2Du2KMSxTTibtwmHFAdd1aCiaG5lvzOWSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDJIIVGjSC5D9ZZj5nOxfs9Ti63MB8GA1UdIwQY MBaAFNlJyro9QxVgf0ptYn7OHs6oy8MZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMt MWE5ZGYzOGY1OTAxLzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMtMWE5ZGYzOGY1OTAx LzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7XppbWH 96sJk/aj4Y4E5l2nqTjACLxzS0SqdT87dqbcDeYib/zln3VNhOWpfmg7xyoEQk3l m+uePdTqAPG4wE0aPi1vM7OveiCRbDy3BlfX6ggcCYuhzUF7W4gSRwB2k+js40n5 yuDrIbzqU+Pmk8keSOrJwa4LYIzKZ4AlZTICV1u7+z1TaWz+PKcWlteiWc1TRnGX gbI3JS0rxm8d9o7n0N/OdvUrQPLKoHYx0C4HX0kGHKtTeLJDDlq1fi802jMCghwp njxGoYReSdBfVDtwi661gnCvn+YAUKsDZjOd+BYrmedCfh8p/I06Wz3xbkwqH4EI Kh0yxwkpX+sa4A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:03 2025 by rpki-client