This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json) Hash identifier: w3I7QhGuXpAIABiD73lKhUJX4P5np4SEDzl+c0Ll/Mc= Subject key identifier: 20:AC:14:0A:FE:D7:8A:2F:C5:66:F0:B9:C7:4D:41:95:87:3F:1C:CF Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19 Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319 Certificate serial: 019B2C9D6C3022934B66B0ED6F08E928D7E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft Manifest number: 0CBD Signing time: Wed 17 Dec 2025 14:01:12 +0000 Manifest this update: Wed 17 Dec 2025 14:01:12 +0000 Manifest next update: Thu 18 Dec 2025 14:01:12 +0000 Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: mDt76BMEj5GkFNb95Qk9s+esQ37+/m98rQgQx5jTaRo=) 2: 9QEKfiqhzH-bmQh5b6rMdNbStYc.roa (hash: MpYTZwjsTnNyFZWB4RSLKA3k60L/jvvVARMaXOoFY4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:6c:30:22:93:4b:66:b0:ed:6f:08:e9:28:d7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319 Validity Not Before: Dec 17 14:01:12 2025 GMT Not After : Dec 18 14:01:12 2025 GMT Subject: CN=20ac140afed78a2fc566f0b9c74d4195873f1ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:20:28:37:19:6c:8b:26:b8:03:bd:6a:8c: cb:45:bb:46:50:e2:bc:3c:df:d2:67:13:5f:61:72: 45:64:b1:4d:71:41:64:30:57:7c:4b:45:23:fa:50: 8c:2f:b9:1a:c0:fc:21:15:1c:5b:25:ef:e9:b9:54: 79:78:1b:df:a9:4e:1c:a4:dd:15:2a:1c:c4:6e:62: 76:cc:72:9d:5e:e8:96:17:5f:9f:11:a4:f1:d4:2a: eb:65:0d:a1:51:9c:d7:9a:0b:45:fe:5e:8e:d6:93: 22:f1:0c:ad:6c:a7:df:54:03:7d:5b:ff:a4:00:fa: 6c:cd:0c:31:ce:d1:64:94:b2:eb:c8:1d:f4:2f:10: 6a:16:8b:df:bd:2e:54:86:06:54:b8:fc:2a:f5:76: 32:55:6e:3a:f2:ce:77:5c:fa:b5:7f:fc:06:72:67: 60:51:24:13:2b:73:94:3b:96:13:03:81:8a:bd:c3: d8:4c:4b:8e:a5:b2:a4:a4:f5:0c:56:b5:2b:ed:50: 75:e7:d7:80:59:d7:24:ae:33:51:3d:f8:b1:95:93: dd:bc:0b:3f:84:14:88:27:1c:fd:5f:99:ec:98:25: 23:c0:6d:c9:eb:e3:17:69:86:34:b5:ae:b8:b4:c5: 5f:22:34:71:9d:1c:81:06:69:1a:7f:3e:4d:69:47: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AC:14:0A:FE:D7:8A:2F:C5:66:F0:B9:C7:4D:41:95:87:3F:1C:CF X509v3 Authority Key Identifier: keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4d:8f:ae:5f:99:f6:08:ac:e7:da:b3:a6:c2:e6:2e:95:93: 5f:ce:5f:7a:2a:0a:1c:a4:1d:b2:44:2f:62:eb:b0:5d:cd:98: b3:81:3a:09:8d:78:62:bf:e9:7f:7d:58:11:1d:90:b9:4e:41: 8d:e3:76:1a:41:49:fc:6f:7f:36:d2:6e:ea:40:da:d1:24:bc: 40:03:e2:00:8a:78:79:b6:21:7f:e8:1e:7e:4a:d9:47:b7:a9: aa:24:e2:f8:a8:f4:da:df:9e:58:b5:87:d1:d6:63:3f:f5:3f: b5:0e:ad:b0:c9:28:84:06:ca:bf:36:40:13:ee:68:60:16:d4: 4f:cb:d4:8a:2d:33:2e:a1:e2:f2:4f:24:e6:96:5d:7d:2b:78: e1:d5:df:56:00:59:b8:13:b8:f1:85:6e:a6:71:92:93:bf:dd: 7e:7f:f6:90:87:1e:b5:6e:b9:74:d0:3d:21:26:1d:cd:4a:05: 41:1e:e9:06:1d:20:c0:58:ce:6a:7a:79:ae:48:fc:4d:ad:b3: ac:e9:97:f9:44:5c:27:55:c8:5c:2d:ec:40:28:1b:a1:64:6f: a3:49:d5:9e:13:7b:39:55:ea:2d:98:e0:00:6a:95:10:b0:28: 76:9d:9d:85:a5:b6:8b:34:fe:1e:1d:7d:be:a7:0d:b4:3b:f6: a8:f7:45:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnWwwIpNLZrDtbwjpKNfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDljYWJhM2Q0MzE1NjA3ZjRhNmQ2MjdlY2UxZWNlYThj YmMzMTkwHhcNMjUxMjE3MTQwMTEyWhcNMjUxMjE4MTQwMTEyWjAzMTEwLwYDVQQD EygyMGFjMTQwYWZlZDc4YTJmYzU2NmYwYjljNzRkNDE5NTg3M2YxY2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu28gKDcZbIsmuAO9aozLRbtGUOK8 PN/SZxNfYXJFZLFNcUFkMFd8S0Uj+lCML7kawPwhFRxbJe/puVR5eBvfqU4cpN0V KhzEbmJ2zHKdXuiWF1+fEaTx1CrrZQ2hUZzXmgtF/l6O1pMi8QytbKffVAN9W/+k APpszQwxztFklLLryB30LxBqFovfvS5UhgZUuPwq9XYyVW468s53XPq1f/wGcmdg USQTK3OUO5YTA4GKvcPYTEuOpbKkpPUMVrUr7VB159eAWdckrjNRPfixlZPdvAs/ hBSIJxz9X5nsmCUjwG3J6+MXaYY0ta64tMVfIjRxnRyBBmkafz5NaUczuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCsFAr+14ovxWbwucdNQZWHPxzPMB8GA1UdIwQY MBaAFNlJyro9QxVgf0ptYn7OHs6oy8MZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMt MWE5ZGYzOGY1OTAxLzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMtMWE5ZGYzOGY1OTAx LzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdk2Prl+Z 9gis59qzpsLmLpWTX85feioKHKQdskQvYuuwXc2Ys4E6CY14Yr/pf31YER2QuU5B jeN2GkFJ/G9/NtJu6kDa0SS8QAPiAIp4ebYhf+gefkrZR7epqiTi+Kj02t+eWLWH 0dZjP/U/tQ6tsMkohAbKvzZAE+5oYBbUT8vUii0zLqHi8k8k5pZdfSt44dXfVgBZ uBO48YVupnGSk7/dfn/2kIcetW65dNA9ISYdzUoFQR7pBh0gwFjOanp5rkj8Ta2z rOmX+URcJ1XIXC3sQCgboWRvo0nVnhN7OVXqLZjgAGqVELAodp2dhaW2izT+Hh19 vqcNtDv2qPdF9w== -----END CERTIFICATE-----Generated at Wed Dec 17 18:34:08 2025 by rpki-client