This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json) Hash identifier: o2QCKeBpN5NiS3oULwUYhTWWqm077/+TPm8U+CMmKqQ= Subject key identifier: 9D:F6:91:DC:BC:9D:68:1E:1A:1E:DC:79:E2:D9:64:23:50:D9:F3:E2 Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7 Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7 Certificate serial: 019AF20990FA5A41A4794E3DF411817FD106 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft Manifest number: 0F3C Signing time: Sat 06 Dec 2025 05:01:44 +0000 Manifest this update: Sat 06 Dec 2025 05:01:44 +0000 Manifest next update: Sun 07 Dec 2025 05:01:44 +0000 Files and hashes: 1: H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (hash: MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=) 2: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: 27qXKAacWeviTaV2Sx228mNSs9oqKP1J79Df/7V5kMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:90:fa:5a:41:a4:79:4e:3d:f4:11:81:7f:d1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7 Validity Not Before: Dec 6 05:01:44 2025 GMT Not After : Dec 7 05:01:44 2025 GMT Subject: CN=9df691dcbc9d681e1a1edc79e2d9642350d9f3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:67:e7:70:2e:73:4b:be:e3:38:8b:48:58: c8:d3:36:46:b1:6d:97:7b:92:77:1d:b2:de:5e:3e: 26:51:a1:5f:d1:70:76:af:94:26:16:25:29:7d:78: 47:34:0d:0f:6a:3b:d2:99:9a:ed:a3:07:6a:5d:53: 9e:e6:d1:66:94:1f:43:66:cf:6a:4a:0e:c9:f2:cc: 9c:d5:15:4b:e8:63:65:b0:78:05:bf:0c:a1:bd:f5: 41:38:c6:f0:b1:30:4a:dd:85:17:ca:94:a5:12:0f: 51:e8:ad:23:74:f6:df:64:71:8f:c7:9c:be:5f:3f: 8c:40:9f:15:dc:a9:b9:ec:d2:0f:68:d1:82:1b:ce: af:ac:31:25:cb:16:aa:66:b4:ea:2d:4c:aa:2e:c2: ce:d2:e6:e2:74:2b:2c:7a:09:86:e4:ba:4d:f8:07: f9:2a:ae:86:29:0b:ce:ad:0e:32:d1:29:a6:b3:9a: 3d:b3:be:6e:5f:2c:82:97:78:ac:b8:7c:f6:65:db: c9:eb:67:4d:e0:59:08:34:35:26:83:c9:17:df:2f: 25:1d:06:46:af:e5:a8:3d:14:d0:e5:2c:94:38:ce: 3c:cc:8a:c5:cc:4d:e2:29:46:6a:64:11:23:f4:e7: 4a:9e:87:56:4d:02:13:f0:e6:51:d9:a6:3d:55:15: 11:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F6:91:DC:BC:9D:68:1E:1A:1E:DC:79:E2:D9:64:23:50:D9:F3:E2 X509v3 Authority Key Identifier: keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d2:3f:7f:18:28:c1:04:80:3e:fe:ac:fd:f3:3b:f0:60:f7: 6a:59:db:11:25:42:07:59:57:2b:3d:94:ba:e7:b7:41:75:73: 99:7c:87:b0:64:23:0a:ca:ec:97:b9:8c:87:60:1e:18:af:51: bd:40:c3:80:ca:11:88:34:d3:c9:c3:6d:2f:d7:3f:89:05:dd: a8:d0:46:0c:2d:fb:06:3b:8d:16:68:c5:4c:b8:6a:e5:49:04: 84:74:c5:59:56:ee:0c:b6:f7:a2:0c:e7:bf:1c:91:da:88:81: 1d:b6:0e:50:7b:98:90:98:35:78:49:60:d8:f7:b2:1e:16:1d: 04:f7:93:26:b1:da:5b:19:aa:f6:11:88:a5:f0:31:50:54:60: fa:52:a5:f2:bf:f7:07:52:b7:47:00:75:bf:c2:c3:70:bc:14: 8b:d8:ba:d1:2c:37:7c:7f:31:96:91:15:79:f5:6a:13:42:07: 80:20:91:d3:38:04:3a:6c:65:73:40:31:d7:c9:e3:1c:f9:21: 65:8b:63:47:b4:98:3d:2d:10:fd:31:2c:72:5b:39:9a:5a:85: 76:78:6a:01:34:d8:9d:97:76:17:98:eb:5f:5a:c1:50:4a:80: 8e:7e:2f:ea:87:34:6b:f8:cd:41:75:fc:0d:66:f5:93:5a:28: 18:14:f9:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZD6WkGkeU499BGBf9EGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NjMzNDYxOWIxNDk0NWRmYmMwNjRkNGFlMWY1NzZiMGUx ZGVjYTcwHhcNMjUxMjA2MDUwMTQ0WhcNMjUxMjA3MDUwMTQ0WjAzMTEwLwYDVQQD Eyg5ZGY2OTFkY2JjOWQ2ODFlMWExZWRjNzllMmQ5NjQyMzUwZDlmM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IBn53Auc0u+4ziLSFjI0zZGsW2X e5J3HbLeXj4mUaFf0XB2r5QmFiUpfXhHNA0PajvSmZrtowdqXVOe5tFmlB9DZs9q Sg7J8syc1RVL6GNlsHgFvwyhvfVBOMbwsTBK3YUXypSlEg9R6K0jdPbfZHGPx5y+ Xz+MQJ8V3Km57NIPaNGCG86vrDElyxaqZrTqLUyqLsLO0ubidCssegmG5LpN+Af5 Kq6GKQvOrQ4y0Smms5o9s75uXyyCl3isuHz2ZdvJ62dN4FkINDUmg8kX3y8lHQZG r+WoPRTQ5SyUOM48zIrFzE3iKUZqZBEj9OdKnodWTQIT8OZR2aY9VRURfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ32kdy8nWgeGh7ceeLZZCNQ2fPiMB8GA1UdIwQY MBaAFEdjNGGbFJRd+8Bk1K4fV2sOHeynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDct ZGJmY2QxMWMzMzAzLzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDctZGJmY2QxMWMzMzAz LzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9I/fxgo wQSAPv6s/fM78GD3alnbESVCB1lXKz2Uuue3QXVzmXyHsGQjCsrsl7mMh2AeGK9R vUDDgMoRiDTTycNtL9c/iQXdqNBGDC37BjuNFmjFTLhq5UkEhHTFWVbuDLb3ogzn vxyR2oiBHbYOUHuYkJg1eElg2PeyHhYdBPeTJrHaWxmq9hGIpfAxUFRg+lKl8r/3 B1K3RwB1v8LDcLwUi9i60Sw3fH8xlpEVefVqE0IHgCCR0zgEOmxlc0Ax18njHPkh ZYtjR7SYPS0Q/TEscls5mlqFdnhqATTYnZd2F5jrX1rBUEqAjn4v6oc0a/jNQXX8 DWb1k1ooGBT5pw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:20 2025 by rpki-client