This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json) Hash identifier: 3U0hV4IvWojDhRR3qHsAuloToIwNtw/OJSFNs4Pq7U8= Subject key identifier: 04:65:22:64:D0:11:C8:77:34:75:95:BC:96:D9:46:C9:4F:45:9A:65 Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af Certificate serial: 019AF20914FDD1A1B6F5F5CD593CB86B5143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft Manifest number: 1252 Signing time: Sat 06 Dec 2025 05:01:12 +0000 Manifest this update: Sat 06 Dec 2025 05:01:12 +0000 Manifest next update: Sun 07 Dec 2025 05:01:12 +0000 Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: jl+LyEADqWW30JZvX0F8y9cSZdzjgjSiWY94QHGZFkc=) 2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=) 3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:14:fd:d1:a1:b6:f5:f5:cd:59:3c:b8:6b:51:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af Validity Not Before: Dec 6 05:01:12 2025 GMT Not After : Dec 7 05:01:12 2025 GMT Subject: CN=04652264d011c877347595bc96d946c94f459a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:57:8c:5d:d2:c2:7d:36:16:9d:f5:17:d2: a5:9e:88:e1:42:c3:72:d8:3a:d2:fd:ab:7f:fc:04: 8e:3b:af:bf:e1:9b:e2:2c:44:fb:91:54:a1:a7:4a: cc:35:ba:e2:f8:46:90:0e:9b:18:a0:6a:a9:80:56: ce:0b:fd:ce:b2:a9:d1:13:07:91:49:59:86:66:71: a7:a4:da:00:9b:33:95:85:f6:e2:6f:6d:a0:46:dc: d2:f5:39:34:b0:3b:d0:5b:7d:7e:9e:3e:5d:d1:87: b8:da:24:d2:c3:75:74:f0:ec:c7:61:25:ac:25:3b: de:59:a8:e0:2b:01:19:40:64:92:a0:d9:9b:d5:00: 29:15:4e:08:69:04:f7:ae:bf:c9:84:1e:a3:d6:76: da:d0:2f:3c:ce:73:cb:33:ad:42:df:d8:86:c8:ab: ef:0f:8c:80:61:ea:c8:9f:14:ba:dd:3b:f8:05:36: 2e:85:10:ae:f1:01:91:76:07:71:ad:bf:38:ab:d2: 29:dd:af:fe:32:ac:11:06:c5:92:37:42:5a:b2:3f: b5:53:ca:48:19:1e:89:e6:dc:e5:e8:d5:10:d8:91: 1f:ae:d9:3d:f2:f8:f3:8d:56:9c:28:75:e2:35:b0: 40:e8:e6:09:eb:46:b0:cb:3b:b7:de:7b:46:72:28: f4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:65:22:64:D0:11:C8:77:34:75:95:BC:96:D9:46:C9:4F:45:9A:65 X509v3 Authority Key Identifier: keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:02:3c:8b:f3:1e:de:b7:8e:82:10:1b:80:8a:60:71:d9:4a: e1:4d:0e:5f:ff:0a:6e:7a:f3:37:bb:36:e3:dd:02:99:42:c8: 1f:fb:19:4d:0d:7d:f8:4e:57:ed:6f:07:4c:15:92:77:bf:f3: de:ee:d5:09:9a:d5:ce:74:cb:bd:ce:1d:1e:7f:59:c0:bb:6a: b8:af:e8:cb:aa:77:be:b3:b0:d7:08:db:e1:d9:f4:62:68:3f: a9:92:39:6f:46:e4:29:6a:54:cc:bc:8e:cc:b0:a4:fe:3c:5b: 2e:3f:a6:26:4a:fc:52:79:f0:19:56:6e:ed:0a:ef:25:98:07: 88:63:ad:d7:f0:7e:c5:d7:f7:71:23:73:8d:f7:12:5e:68:e5: 7a:e2:d8:ac:68:ac:1c:9c:c0:08:3a:e2:c0:ef:00:25:0c:33: 5e:cf:58:9c:35:6e:60:02:d5:94:f6:37:6a:08:49:c4:96:d7: 22:8c:68:25:cc:53:92:f1:1a:69:18:4d:4d:d6:ca:89:ee:44: 56:0f:87:4a:84:e0:71:90:cb:92:a8:56:13:b7:5b:1a:39:dc: c8:8f:37:03:0e:ae:d6:4a:f0:03:6a:17:e2:30:92:77:f4:c9: ca:0d:20:52:8e:0a:ab:61:4e:8c:65:ab:a9:84:c9:d8:f2:28: a1:92:8e:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRT90aG29fXNWTy4a1FDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3 MDc2YWYwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD EygwNDY1MjI2NGQwMTFjODc3MzQ3NTk1YmM5NmQ5NDZjOTRmNDU5YTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyZXjF3Swn02Fp31F9KlnojhQsNy 2DrS/at//ASOO6+/4ZviLET7kVShp0rMNbri+EaQDpsYoGqpgFbOC/3OsqnREweR SVmGZnGnpNoAmzOVhfbib22gRtzS9Tk0sDvQW31+nj5d0Ye42iTSw3V08OzHYSWs JTveWajgKwEZQGSSoNmb1QApFU4IaQT3rr/JhB6j1nba0C88znPLM61C39iGyKvv D4yAYerInxS63Tv4BTYuhRCu8QGRdgdxrb84q9Ip3a/+MqwRBsWSN0Jasj+1U8pI GR6J5tzl6NUQ2JEfrtk98vjzjVacKHXiNbBA6OYJ60awyzu33ntGcij06QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARlImTQEch3NHWVvJbZRslPRZplMB8GA1UdIwQY MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt ZTBhYTg2ZDI1MGUzLzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgI8i/Me 3reOghAbgIpgcdlK4U0OX/8KbnrzN7s2490CmULIH/sZTQ19+E5X7W8HTBWSd7/z 3u7VCZrVznTLvc4dHn9ZwLtquK/oy6p3vrOw1wjb4dn0Ymg/qZI5b0bkKWpUzLyO zLCk/jxbLj+mJkr8UnnwGVZu7QrvJZgHiGOt1/B+xdf3cSNzjfcSXmjleuLYrGis HJzACDriwO8AJQwzXs9YnDVuYALVlPY3aghJxJbXIoxoJcxTkvEaaRhNTdbKie5E Vg+HSoTgcZDLkqhWE7dbGjncyI83Aw6u1krwA2oX4jCSd/TJyg0gUo4Kq2FOjGWr qYTJ2PIooZKO3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:22:57 2025 by rpki-client