This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json) Hash identifier: +OWhoCm5hrZqFZMtmMgJou9TtkJHB+YLRXhxzGxZM4o= Subject key identifier: CE:72:5C:4C:EF:45:EA:A7:8B:F4:B4:B3:F5:2F:5F:CD:39:2D:6C:22 Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82 Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982 Certificate serial: 019B4DDF787C0B6DAFDFD11A07D10DFCEDF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 01:00:49 +0000 Manifest this update: Wed 24 Dec 2025 01:00:49 +0000 Manifest next update: Thu 25 Dec 2025 01:00:49 +0000 Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: oGI9B3Q1QD+oDI6sfu2td9gz/d4jBbDvrWDx8x+t4qY=) 2: Opo6TZ7VAy-hV-S-P53LcegXaxc.roa (hash: MyJ/vgGQynDRrxnXXTkth9TEVuUomwtY2khOCP3bmmU=) 3: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (hash: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:78:7c:0b:6d:af:df:d1:1a:07:d1:0d:fc:ed:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982 Validity Not Before: Dec 24 01:00:49 2025 GMT Not After : Dec 25 01:00:49 2025 GMT Subject: CN=ce725c4cef45eaa78bf4b4b3f52f5fcd392d6c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7e:75:41:c9:e7:e4:b6:14:26:f5:36:41:3d: 13:23:28:63:2c:52:a0:36:ec:2d:05:35:db:eb:17: 74:c5:e5:7f:f3:bf:4e:38:ac:54:ac:46:af:42:99: b8:df:21:8d:fa:57:66:ec:fe:c9:7f:ed:2c:e6:b2: 53:0e:b5:b5:45:00:f6:b3:9c:7a:f4:3b:7e:81:04: 14:f4:c1:af:32:c9:f8:06:1b:21:24:c4:2e:e8:27: 89:65:8f:2f:d1:aa:06:cf:4f:4e:42:27:b7:e9:eb: 02:75:f7:a1:6d:90:2e:a8:54:1a:6a:69:de:b8:db: 19:a2:ae:56:34:68:59:d2:d4:ab:8e:55:44:ba:a9: 98:78:c6:dd:ca:d5:82:e1:ab:03:2e:02:76:9e:36: 54:c6:68:c0:59:21:a5:ad:33:80:42:4f:bd:bf:63: 35:4c:bb:cb:19:0b:92:f2:6c:95:e4:be:8b:fd:6a: be:72:e8:74:ff:8e:69:03:d9:9c:d7:ad:da:3c:2d: 3f:5a:ae:10:57:d6:2b:57:a7:18:57:bf:d6:96:3e: 67:83:c4:fe:a3:5d:fa:82:e5:2b:ac:98:54:d0:84: 9d:05:20:c9:71:b0:99:26:f9:47:56:e4:a6:20:a9: 59:5e:57:33:39:97:ab:b6:3f:8a:15:6b:69:93:ae: b5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:72:5C:4C:EF:45:EA:A7:8B:F4:B4:B3:F5:2F:5F:CD:39:2D:6C:22 X509v3 Authority Key Identifier: keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:0e:96:61:ca:7f:13:f7:e1:a9:4f:75:6e:30:56:f4:a9:01: c3:8c:2f:ea:c1:d6:e9:4e:ab:2d:7d:83:a2:92:2d:bf:d9:70: 75:08:8b:08:54:15:77:97:1a:70:8a:65:2d:f7:22:7e:1c:33: 0a:3f:2e:cc:7e:24:f2:64:87:fd:1b:e1:62:b2:26:25:14:e5: 3c:a3:6c:3f:57:1b:36:2a:3c:3e:c3:00:3f:1d:1f:0b:c0:f0: 56:5b:c3:d1:58:96:88:20:39:db:2f:89:d5:8a:25:95:8f:46: 3c:03:8d:4d:13:2e:a8:77:99:d4:e8:1e:71:70:3e:b7:19:41: 4b:57:72:e3:b1:f1:31:90:95:d8:8b:c1:bb:df:8f:4b:fa:ee: fe:53:40:e9:37:a7:b8:5c:52:b1:09:59:ea:b1:43:3f:bd:89: 5e:bb:c4:06:53:46:d7:9b:93:e9:02:b8:78:34:48:87:63:09: 9a:ff:37:5c:ef:89:a8:5d:da:88:41:45:84:9b:ea:e6:14:23: 47:09:7b:a3:51:fe:48:93:b4:17:76:ad:23:00:4c:a2:0f:d5: 50:14:9b:c9:e0:2d:17:ab:c3:85:c6:a5:94:5c:84:fd:44:e3: 17:15:46:40:74:8a:8f:41:15:7d:36:ee:30:ee:8d:0f:1b:31: 7d:0d:2a:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN33h8C22v39EaB9EN/O31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NGYyMzhjNWM3NGViOWE3NWE0NmUyYmM2NzQxMWU4ZGMy MmQ5ODIwHhcNMjUxMjI0MDEwMDQ5WhcNMjUxMjI1MDEwMDQ5WjAzMTEwLwYDVQQD EyhjZTcyNWM0Y2VmNDVlYWE3OGJmNGI0YjNmNTJmNWZjZDM5MmQ2YzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn51Qcnn5LYUJvU2QT0TIyhjLFKg NuwtBTXb6xd0xeV/879OOKxUrEavQpm43yGN+ldm7P7Jf+0s5rJTDrW1RQD2s5x6 9Dt+gQQU9MGvMsn4BhshJMQu6CeJZY8v0aoGz09OQie36esCdfehbZAuqFQaamne uNsZoq5WNGhZ0tSrjlVEuqmYeMbdytWC4asDLgJ2njZUxmjAWSGlrTOAQk+9v2M1 TLvLGQuS8myV5L6L/Wq+cuh0/45pA9mc163aPC0/Wq4QV9YrV6cYV7/Wlj5ng8T+ o136guUrrJhU0ISdBSDJcbCZJvlHVuSmIKlZXlczOZertj+KFWtpk661CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5yXEzvReqni/S0s/UvX805LWwiMB8GA1UdIwQY MBaAFNlPI4xcdOuadaRuK8Z0EejcItmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEt NGJjODRjNzlmYzU4LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEtNGJjODRjNzlmYzU4 LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEA6WYcp/ E/fhqU91bjBW9KkBw4wv6sHW6U6rLX2DopItv9lwdQiLCFQVd5cacIplLfcifhwz Cj8uzH4k8mSH/RvhYrImJRTlPKNsP1cbNio8PsMAPx0fC8DwVlvD0ViWiCA52y+J 1YollY9GPAONTRMuqHeZ1OgecXA+txlBS1dy47HxMZCV2IvBu9+PS/ru/lNA6Ten uFxSsQlZ6rFDP72JXrvEBlNG15uT6QK4eDRIh2MJmv83XO+JqF3aiEFFhJvq5hQj Rwl7o1H+SJO0F3atIwBMog/VUBSbyeAtF6vDhcallFyE/UTjFxVGQHSKj0EVfTbu MO6NDxsxfQ0qWg== -----END CERTIFICATE-----Generated at Wed Dec 24 08:47:21 2025 by rpki-client