This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json) Hash identifier: gU6zctX0GqBWptocjpoIwrK273uNkQ+ZI0OWgiBzsiM= Subject key identifier: B6:B8:AB:44:5F:60:9E:E7:A2:E3:81:E5:F3:60:03:23:61:4D:40:F0 Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af Certificate serial: 019B31C3866507A1EB1CCB611C44E4617FAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft Manifest number: 1273 Signing time: Thu 18 Dec 2025 14:00:56 +0000 Manifest this update: Thu 18 Dec 2025 14:00:56 +0000 Manifest next update: Fri 19 Dec 2025 14:00:56 +0000 Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: svU8lMRa55RNg58OuiNvtT3m2NZhMkWTqaZIDGEc4CI=) 2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=) 3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:86:65:07:a1:eb:1c:cb:61:1c:44:e4:61:7f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af Validity Not Before: Dec 18 14:00:56 2025 GMT Not After : Dec 19 14:00:56 2025 GMT Subject: CN=b6b8ab445f609ee7a2e381e5f3600323614d40f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f3:c1:4a:16:b8:87:ba:43:d9:3a:92:e6:08: 0d:3a:96:df:54:95:bf:7f:df:16:66:29:33:de:2e: 46:0f:7c:5a:33:26:34:91:b1:4a:02:4f:65:9f:f0: 19:1e:87:ac:46:fb:20:db:2a:58:73:c6:b6:61:bf: 1a:52:ad:06:2a:7e:a9:69:98:df:aa:dd:34:15:19: d3:c8:3d:10:fe:41:1c:38:7d:23:08:54:fa:76:c1: 81:09:b0:57:4f:eb:aa:cc:35:6e:9a:cf:0d:9b:da: 51:ee:39:8e:49:a4:3c:cd:c4:fc:48:07:ad:16:03: e4:8d:b5:bd:ec:64:24:09:a3:1f:fe:ed:68:01:95: de:45:33:23:2e:e4:9c:ca:af:90:d0:8f:2f:4d:1f: b9:eb:bc:25:16:d2:2f:05:c7:19:42:d8:d6:ac:26: 09:c5:c7:7d:5d:75:8c:f7:01:36:1c:43:25:75:2e: 9f:54:7c:47:75:76:9f:28:74:65:73:3a:45:7b:d0: f6:fa:09:44:2f:82:57:24:63:c9:7e:00:d6:76:a9: 0e:ed:b9:ba:a6:0a:de:7c:c6:8d:f3:e1:b0:b7:30: 78:90:a8:54:a6:ba:c9:23:36:36:cb:45:8a:fa:8f: d4:93:34:c6:93:89:0e:95:03:6d:44:95:bc:f7:4a: 3b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B8:AB:44:5F:60:9E:E7:A2:E3:81:E5:F3:60:03:23:61:4D:40:F0 X509v3 Authority Key Identifier: keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ab:ad:db:83:6c:69:aa:43:ab:55:f7:4b:54:bf:e4:e0:73: 46:6a:a1:ab:48:a1:f1:e3:9b:54:23:27:10:72:ba:e8:ac:ca: 90:5f:fb:36:4e:b3:be:aa:44:53:3e:a1:52:a6:1c:b1:1c:03: c8:92:56:89:84:fd:c1:3c:c4:45:b7:2a:a8:a9:fd:e7:cb:0d: 92:f0:28:8c:44:99:1c:d6:45:fc:ab:51:95:e9:65:ac:13:aa: d1:60:d8:a3:f7:8b:a3:6c:f0:8b:09:9a:e5:c1:cf:49:e3:29: 3a:d6:30:1c:7a:c0:4f:43:56:fd:9b:e4:5e:28:f5:e9:0a:c5: 99:d0:1c:af:31:da:1e:14:05:39:1d:c1:f6:e8:db:a6:bc:e3: 78:23:8a:4b:f6:94:1d:56:db:01:92:39:b3:3e:b7:88:5e:da: d1:61:e0:b6:1d:7b:62:90:90:0b:90:18:21:b2:16:c4:e8:17: a1:6e:24:e9:e0:28:68:e1:99:61:35:9a:44:b8:ef:0e:00:48: b6:02:b0:bb:e6:fb:b7:04:76:c7:c3:92:42:08:82:4a:ac:96: dc:ef:9b:93:ed:bb:b3:3d:eb:51:d1:51:f8:e4:0e:9d:16:f2: 8c:b8:62:92:38:93:98:5d:f9:a7:b6:ff:a5:31:70:e4:17:d2: 07:b7:58:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw4ZlB6HrHMthHETkYX+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3 MDc2YWYwHhcNMjUxMjE4MTQwMDU2WhcNMjUxMjE5MTQwMDU2WjAzMTEwLwYDVQQD EyhiNmI4YWI0NDVmNjA5ZWU3YTJlMzgxZTVmMzYwMDMyMzYxNGQ0MGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfPBSha4h7pD2TqS5ggNOpbfVJW/ f98WZikz3i5GD3xaMyY0kbFKAk9ln/AZHoesRvsg2ypYc8a2Yb8aUq0GKn6paZjf qt00FRnTyD0Q/kEcOH0jCFT6dsGBCbBXT+uqzDVums8Nm9pR7jmOSaQ8zcT8SAet FgPkjbW97GQkCaMf/u1oAZXeRTMjLuScyq+Q0I8vTR+567wlFtIvBccZQtjWrCYJ xcd9XXWM9wE2HEMldS6fVHxHdXafKHRlczpFe9D2+glEL4JXJGPJfgDWdqkO7bm6 pgrefMaN8+GwtzB4kKhUprrJIzY2y0WK+o/UkzTGk4kOlQNtRJW890o79wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLa4q0RfYJ7nouOB5fNgAyNhTUDwMB8GA1UdIwQY MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt ZTBhYTg2ZDI1MGUzLzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKut24Ns aapDq1X3S1S/5OBzRmqhq0ih8eObVCMnEHK66KzKkF/7Nk6zvqpEUz6hUqYcsRwD yJJWiYT9wTzERbcqqKn958sNkvAojESZHNZF/KtRlellrBOq0WDYo/eLo2zwiwma 5cHPSeMpOtYwHHrAT0NW/ZvkXij16QrFmdAcrzHaHhQFOR3B9ujbprzjeCOKS/aU HVbbAZI5sz63iF7a0WHgth17YpCQC5AYIbIWxOgXoW4k6eAoaOGZYTWaRLjvDgBI tgKwu+b7twR2x8OSQgiCSqyW3O+bk+27sz3rUdFR+OQOnRbyjLhikjiTmF35p7b/ pTFw5BfSB7dY5Q== -----END CERTIFICATE-----Generated at Thu Dec 18 22:04:28 2025 by rpki-client