This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json) Hash identifier: wxqQxrnhCdrN5/2fMq7u5qmGm9zfsDvgfSYsRgVEDF8= Subject key identifier: 16:A7:87:B1:07:E7:BF:EE:19:CB:14:5F:E8:A7:BB:88:6D:AC:B5:65 Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82 Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982 Certificate serial: 019B405C47239F458961F880903EC4A6DC3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 10:02:27 +0000 Manifest this update: Sun 21 Dec 2025 10:02:27 +0000 Manifest next update: Mon 22 Dec 2025 10:02:27 +0000 Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: cdEO05x+pmsbn3rQ4cUMnoqphSQbcqxA0a90qqM+Wp0=) 2: Opo6TZ7VAy-hV-S-P53LcegXaxc.roa (hash: MyJ/vgGQynDRrxnXXTkth9TEVuUomwtY2khOCP3bmmU=) 3: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (hash: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:47:23:9f:45:89:61:f8:80:90:3e:c4:a6:dc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982 Validity Not Before: Dec 21 10:02:27 2025 GMT Not After : Dec 22 10:02:27 2025 GMT Subject: CN=16a787b107e7bfee19cb145fe8a7bb886dacb565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:76:06:d7:9e:91:cf:f7:a6:47:44:7b:07:fb: 30:c4:1f:29:ee:f7:c0:9c:f2:6a:f6:ee:2b:c3:48: b7:a3:73:f4:5c:f1:2f:49:11:8c:5b:a1:ca:03:0b: 7b:cd:c1:8e:60:92:36:41:bf:a8:50:22:ab:ee:89: 7c:9b:bd:3e:d8:73:44:3e:c0:58:91:45:f4:15:45: 0c:20:57:d1:22:5f:a1:1f:76:5f:a8:62:4a:aa:ea: 6c:c4:ab:34:60:b5:31:4f:21:8b:4c:27:1a:54:8e: 27:b6:d1:16:b4:a8:51:93:92:e7:0e:8b:73:96:b0: ad:98:36:61:e4:6d:c5:85:b4:ae:55:af:0a:ec:22: f7:c4:19:8e:e6:df:02:b2:1d:82:44:2c:98:3b:9b: 46:44:ad:b0:03:14:34:65:1b:2d:35:fb:eb:31:45: b2:37:5d:cc:08:5c:e9:12:e0:46:1e:3f:ab:bc:f5: b8:43:9b:cc:4f:d8:c0:7c:10:d0:a5:4a:01:66:e5: 2a:05:0d:6f:9b:e4:33:91:88:03:7a:84:37:fb:cb: 5d:01:3f:3b:8d:15:f1:e3:53:3e:dc:7b:4b:b1:af: cf:d2:d4:2c:0c:ad:98:f2:22:d4:ba:e2:77:fb:3b: 5b:cd:8b:cd:21:4d:a1:0c:49:86:47:68:91:b1:53: e5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A7:87:B1:07:E7:BF:EE:19:CB:14:5F:E8:A7:BB:88:6D:AC:B5:65 X509v3 Authority Key Identifier: keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:39:bc:34:06:bd:a4:78:a3:0c:ab:c2:b1:f2:37:06:b3:ec: 02:4f:57:e2:b2:01:1f:02:42:1d:f5:e9:24:89:93:75:69:38: 3e:c7:cd:8e:1b:92:7d:ae:34:d6:78:ee:55:f1:dd:3d:f1:70: 77:02:04:e1:f8:07:aa:b8:bf:32:b8:4b:34:ba:eb:2f:8d:a4: 42:dc:22:e7:6a:07:a1:a1:cc:48:e0:93:1c:eb:72:bc:48:e0: 4c:f1:d4:98:80:46:3a:44:a7:94:cb:16:67:ac:8b:e0:83:46: af:09:de:eb:e9:5f:6e:f7:a7:1f:dc:f9:25:a9:d7:d2:bd:db: 47:e9:47:a6:37:46:2b:d9:87:c4:03:46:82:13:0d:42:ca:e8: db:52:2c:a9:83:33:eb:65:c1:62:ac:a9:56:d4:e4:11:59:73: b6:c8:13:ad:46:8a:3a:f6:a8:82:2b:32:a8:8f:3f:99:54:3d: 57:9a:6c:84:68:e6:97:39:2a:bb:70:74:cc:b0:49:97:3f:f6: 4f:a3:e0:2f:91:fd:00:b3:64:18:d7:65:32:8b:70:a1:02:26: 41:78:42:2c:9a:ff:e3:26:5e:4f:d5:3e:ea:86:4f:28:fb:2b: 66:c0:94:16:98:00:81:dd:16:d4:9a:d7:33:7b:7e:0b:30:67: b2:5b:e9:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXEcjn0WJYfiAkD7Eptw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NGYyMzhjNWM3NGViOWE3NWE0NmUyYmM2NzQxMWU4ZGMy MmQ5ODIwHhcNMjUxMjIxMTAwMjI3WhcNMjUxMjIyMTAwMjI3WjAzMTEwLwYDVQQD EygxNmE3ODdiMTA3ZTdiZmVlMTljYjE0NWZlOGE3YmI4ODZkYWNiNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HYG156Rz/emR0R7B/swxB8p7vfA nPJq9u4rw0i3o3P0XPEvSRGMW6HKAwt7zcGOYJI2Qb+oUCKr7ol8m70+2HNEPsBY kUX0FUUMIFfRIl+hH3ZfqGJKqupsxKs0YLUxTyGLTCcaVI4nttEWtKhRk5LnDotz lrCtmDZh5G3FhbSuVa8K7CL3xBmO5t8Csh2CRCyYO5tGRK2wAxQ0ZRstNfvrMUWy N13MCFzpEuBGHj+rvPW4Q5vMT9jAfBDQpUoBZuUqBQ1vm+QzkYgDeoQ3+8tdAT87 jRXx41M+3HtLsa/P0tQsDK2Y8iLUuuJ3+ztbzYvNIU2hDEmGR2iRsVPlTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBanh7EH57/uGcsUX+inu4htrLVlMB8GA1UdIwQY MBaAFNlPI4xcdOuadaRuK8Z0EejcItmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEt NGJjODRjNzlmYzU4LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEtNGJjODRjNzlmYzU4 LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDm8NAa9 pHijDKvCsfI3BrPsAk9X4rIBHwJCHfXpJImTdWk4PsfNjhuSfa401njuVfHdPfFw dwIE4fgHqri/MrhLNLrrL42kQtwi52oHoaHMSOCTHOtyvEjgTPHUmIBGOkSnlMsW Z6yL4INGrwne6+lfbvenH9z5JanX0r3bR+lHpjdGK9mHxANGghMNQsro21IsqYMz 62XBYqypVtTkEVlztsgTrUaKOvaogisyqI8/mVQ9V5pshGjmlzkqu3B0zLBJlz/2 T6PgL5H9ALNkGNdlMotwoQImQXhCLJr/4yZeT9U+6oZPKPsrZsCUFpgAgd0W1JrX M3t+CzBnslvpaA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:27 2025 by rpki-client