This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json) Hash identifier: nvcIlW763HU0mRiB7+4MIBwiqoswdiurfgFYrQHDsK4= Subject key identifier: A6:61:F9:AE:B7:97:61:C3:47:F0:E3:08:71:FE:BA:DB:93:8C:68:54 Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb Certificate serial: 019AF16477D8DB4C51341BE7BCD09B1B81D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: FUIXeQlzPJUeS+Mc3Rtr3t6j6R9o7oj+DiEZWXlsW8M=) 2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:77:d8:db:4c:51:34:1b:e7:bc:d0:9b:1b:81:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=a661f9aeb79761c347f0e30871febadb938c6854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:e5:30:77:e7:6a:a2:da:26:44:9e:80:a8: 2f:55:e7:ce:66:92:fc:37:dc:b5:ee:4a:e4:4b:59: 04:04:3a:dc:79:ec:40:fc:71:11:3f:5d:57:09:43: 66:28:a1:d1:0e:c4:07:22:f7:0c:92:56:23:8b:f5: 50:00:cf:89:ca:de:26:ec:5a:da:81:9f:a4:19:ea: c2:fc:b9:cb:e8:53:62:ed:2c:71:59:b1:1d:7b:dc: a7:45:a6:3f:a1:4e:46:ff:d2:ff:0c:4f:c8:32:8d: 95:12:23:64:e7:ff:a4:bd:84:c4:66:2f:ef:52:a0: 36:8a:23:16:be:53:e5:91:ab:a8:8f:9a:8a:2e:d3: f4:e6:2c:c4:5b:f3:d8:51:d8:59:80:2e:a5:0d:ee: 9a:d0:30:83:c9:8c:02:cc:5f:0d:46:f0:9a:a7:72: dc:44:bf:47:1d:6d:65:72:60:4d:a2:58:21:37:a1: 96:83:63:8f:1d:25:b5:f6:a2:4e:53:47:13:ad:a5: c2:76:ee:af:ad:74:91:5a:c3:bf:a4:a4:54:ef:ff: a3:78:67:0f:18:e2:77:b5:a1:05:13:37:a3:ef:76: 81:01:33:f0:2b:5b:99:d1:90:05:f7:ac:cd:e1:ff: a3:57:84:8f:bd:e6:1e:a2:1a:f9:f0:fc:6b:88:6f: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:61:F9:AE:B7:97:61:C3:47:F0:E3:08:71:FE:BA:DB:93:8C:68:54 X509v3 Authority Key Identifier: keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:29:d3:64:c7:a5:33:bf:15:5c:d7:e7:e6:14:67:3a:33:63: ea:e3:89:8f:38:d6:2a:4c:b7:1e:b8:4f:59:6f:16:e3:e7:f1: 8c:59:37:35:9f:e1:95:be:28:ad:3e:99:92:9b:ed:3b:8d:94: 32:2c:01:bd:fb:12:b6:af:15:77:99:68:dd:49:3a:07:55:81: bd:23:cb:31:2f:98:57:79:9e:ce:5e:af:5e:42:78:cb:1a:f3: 5e:a0:16:80:1b:ce:01:aa:04:1f:c8:78:e8:a9:fe:74:94:8e: fd:46:72:e1:1f:28:9d:05:62:26:fb:a8:76:5a:58:7e:59:a0: ce:26:25:33:79:8d:6f:f7:04:e0:1a:4b:68:3b:e5:4f:ee:3e: 50:3b:42:e2:9e:4b:cb:65:f9:3c:42:d1:fd:8f:35:69:b6:4a: 76:ef:5c:ef:0e:f8:3d:ec:48:e6:57:39:d0:ef:ce:df:2c:c6: af:fa:66:1d:a0:82:18:82:48:d2:d4:a7:33:c5:27:ae:31:ca: 3f:d5:be:80:cc:fc:32:76:40:9b:c0:4a:b3:31:2d:01:26:55: 79:a2:e0:a4:c0:cd:8b:65:7c:41:a5:47:d5:22:06:1c:70:51: ea:7d:f7:ad:04:b0:fd:49:a0:11:c7:04:b7:17:d7:b3:32:2b: 2c:21:25:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHfY20xRNBvnvNCbG4HYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNjUyNWRlNGFhNmQwY2ExYWU3YmQ4ZWUxZTM1YmZkMjY5 NjQ5YmIwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD EyhhNjYxZjlhZWI3OTc2MWMzNDdmMGUzMDg3MWZlYmFkYjkzOGM2ODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxflMHfnaqLaJkSegKgvVefOZpL8 N9y17krkS1kEBDrceexA/HERP11XCUNmKKHRDsQHIvcMklYji/VQAM+Jyt4m7Fra gZ+kGerC/LnL6FNi7SxxWbEde9ynRaY/oU5G/9L/DE/IMo2VEiNk5/+kvYTEZi/v UqA2iiMWvlPlkauoj5qKLtP05izEW/PYUdhZgC6lDe6a0DCDyYwCzF8NRvCap3Lc RL9HHW1lcmBNolghN6GWg2OPHSW19qJOU0cTraXCdu6vrXSRWsO/pKRU7/+jeGcP GOJ3taEFEzej73aBATPwK1uZ0ZAF96zN4f+jV4SPveYeohr58PxriG+bnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZh+a63l2HDR/DjCHH+utuTjGhUMB8GA1UdIwQY MBaAFNplJd5KptDKGue9juHjW/0mlkm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYt ZWVkZjc2MDc3ZjA5LzEvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYtZWVkZjc2MDc3ZjA5 LzEvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISnTZMel M78VXNfn5hRnOjNj6uOJjzjWKky3HrhPWW8W4+fxjFk3NZ/hlb4orT6ZkpvtO42U MiwBvfsStq8Vd5lo3Uk6B1WBvSPLMS+YV3mezl6vXkJ4yxrzXqAWgBvOAaoEH8h4 6Kn+dJSO/UZy4R8onQViJvuodlpYflmgziYlM3mNb/cE4BpLaDvlT+4+UDtC4p5L y2X5PELR/Y81abZKdu9c7w74PexI5lc50O/O3yzGr/pmHaCCGIJI0tSnM8UnrjHK P9W+gMz8MnZAm8BKszEtASZVeaLgpMDNi2V8QaVH1SIGHHBR6n33rQSw/UmgEccE txfXszIrLCElgg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:36 2025 by rpki-client