This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft File: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft (raw, json) Hash identifier: UeYrBRxFvr6MRhk7pUECrsmVE1/HN3+RLVkW9Mfg0AU= Subject key identifier: C9:E2:F7:AB:FE:A7:D4:84:A3:94:10:43:D2:50:66:19:E1:55:31:CE Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63 Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63 Certificate serial: 019B3F7F6D2CFB2340396419035E30F99234 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft Manifest number: 144C Signing time: Sun 21 Dec 2025 06:01:14 +0000 Manifest this update: Sun 21 Dec 2025 06:01:14 +0000 Manifest next update: Mon 22 Dec 2025 06:01:14 +0000 Files and hashes: 1: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl (hash: t1mH+ddJU6FmXUTNRHKZaGgP6VKs7SyGyrKXJ8Lq2Gc=) 2: XbqqIgUuiPQ7s4i6gwADBbMAwT4.roa (hash: cRp4FxnA8UimLs+QIeRi/nTr91UWmFZBwZVHNphDdoA=) 3: jnFs14ubYigoY0h9h1_Eofh0724.roa (hash: cmLBP5v8zTmaWqQDLZqcYtnuqxPCD1kybV6k+KwkWhM=) 4: y1bjq6t2wUukz9W6C_N_eJWE5pQ.roa (hash: rbXidQhk2TpaZB/G3C+NahAJvD9lrvrxNyxSFhR0BVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:6d:2c:fb:23:40:39:64:19:03:5e:30:f9:92:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63 Validity Not Before: Dec 21 06:01:14 2025 GMT Not After : Dec 22 06:01:14 2025 GMT Subject: CN=c9e2f7abfea7d484a3941043d2506619e15531ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:57:e7:6a:c6:03:14:b6:ea:6f:1c:1d:59:89: 42:fd:c0:4d:2d:93:11:0d:9e:d7:73:33:c5:71:52: 41:1b:e1:2d:ef:12:9c:43:2a:76:0b:e4:f1:b7:6e: 85:41:03:a6:43:dd:45:8c:8d:65:bd:98:a5:63:33: bf:88:b6:cc:e9:3c:e4:f1:08:02:1a:4e:f5:dc:2a: 74:0d:e4:3b:c9:9d:20:6b:91:11:46:c3:f0:5e:5c: 08:04:fb:f4:b6:51:8a:30:d7:95:df:ca:93:bb:fa: 32:00:d6:e6:00:1d:52:20:e0:e1:3b:4b:5a:17:d3: e8:0e:35:dd:73:59:25:f5:b2:26:7e:3c:1e:0f:4c: a6:fb:fe:5b:0f:a6:27:d3:74:92:d1:75:04:a0:9d: 85:1d:91:99:66:44:fa:ce:4e:16:54:97:5c:eb:3f: 07:fb:19:4a:e0:ff:8c:da:f0:4d:89:4c:7a:8f:a4: 66:e3:46:39:80:9d:1c:5b:a4:af:a9:34:3f:14:07: 36:bf:b5:44:12:8a:6a:0d:da:51:3c:52:2b:69:25: c4:14:dc:f4:48:e7:46:0e:4b:68:d3:67:aa:f6:94: c5:d9:1f:d7:c7:68:49:c4:e8:e5:6f:7b:fc:97:0e: 67:fd:6e:aa:68:1d:ae:06:46:fe:10:de:10:cc:81: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E2:F7:AB:FE:A7:D4:84:A3:94:10:43:D2:50:66:19:E1:55:31:CE X509v3 Authority Key Identifier: keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:11:bb:9a:fb:d4:ec:2d:65:0a:db:76:65:63:51:72:4a:17: 31:52:ac:ed:6a:2b:86:cb:40:5f:1f:fb:d8:ad:79:c2:09:3b: 89:f4:c2:8a:f0:4b:85:ae:86:98:3c:30:9f:6b:9a:d9:b4:4d: 61:fc:4f:18:e9:d4:db:26:f7:d4:4a:69:17:6d:13:35:3b:77: 2f:5b:f8:7d:63:e4:ab:88:2f:4f:9f:77:b7:bf:8c:dc:be:bb: 95:82:84:dc:1a:1a:c0:94:1f:a6:75:2d:38:2c:f5:ae:1d:bf: c3:2b:62:cb:8e:f7:10:c6:f4:a1:23:25:fe:0a:25:a3:81:7d: 1b:10:75:48:0f:e4:32:af:8b:e0:d8:85:18:66:f0:36:1e:6d: 61:cf:c2:89:d2:8c:d6:f1:dd:50:17:bd:b3:83:f5:e6:41:09: 1e:79:e5:b1:d3:03:e7:36:64:b0:f7:a4:32:4d:f4:7f:63:79: 52:f9:c3:30:d5:c9:a6:61:6f:cb:d1:26:c7:8e:b4:cf:ee:44: 17:38:47:4f:cf:25:db:9b:8f:0e:76:f9:6f:5b:89:00:2a:ee: 68:cb:7a:a0:80:af:6f:e3:15:2e:84:ab:ba:a8:3d:43:da:2b: d6:37:af:77:7e:9f:f6:b1:4e:46:ba:ee:af:dc:22:9c:66:6a: 26:63:fb:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f20s+yNAOWQZA14w+ZI0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NGJkZGFmYjVkZjA5ODQxOTAyMGE4ZmJjN2E5MGIxNmUz NDFkNjMwHhcNMjUxMjIxMDYwMTE0WhcNMjUxMjIyMDYwMTE0WjAzMTEwLwYDVQQD EyhjOWUyZjdhYmZlYTdkNDg0YTM5NDEwNDNkMjUwNjYxOWUxNTUzMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFfnasYDFLbqbxwdWYlC/cBNLZMR DZ7XczPFcVJBG+Et7xKcQyp2C+Txt26FQQOmQ91FjI1lvZilYzO/iLbM6Tzk8QgC Gk713Cp0DeQ7yZ0ga5ERRsPwXlwIBPv0tlGKMNeV38qTu/oyANbmAB1SIODhO0ta F9PoDjXdc1kl9bImfjweD0ym+/5bD6Yn03SS0XUEoJ2FHZGZZkT6zk4WVJdc6z8H +xlK4P+M2vBNiUx6j6Rm40Y5gJ0cW6SvqTQ/FAc2v7VEEopqDdpRPFIraSXEFNz0 SOdGDkto02eq9pTF2R/Xx2hJxOjlb3v8lw5n/W6qaB2uBkb+EN4QzIG7jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMni96v+p9SEo5QQQ9JQZhnhVTHOMB8GA1UdIwQY MBaAFNlL3a+13wmEGQIKj7x6kLFuNB1jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZGU3NTctNzY3Mi00NzIwLThjZTEt NmUyNmI5MWY2OTEwLzEvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jZGU3NTctNzY3Mi00NzIwLThjZTEtNmUyNmI5MWY2OTEw LzEvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehG7mvvU 7C1lCtt2ZWNRckoXMVKs7WorhstAXx/72K15wgk7ifTCivBLha6GmDwwn2ua2bRN YfxPGOnU2yb31EppF20TNTt3L1v4fWPkq4gvT593t7+M3L67lYKE3BoawJQfpnUt OCz1rh2/wytiy473EMb0oSMl/golo4F9GxB1SA/kMq+L4NiFGGbwNh5tYc/CidKM 1vHdUBe9s4P15kEJHnnlsdMD5zZksPekMk30f2N5UvnDMNXJpmFvy9Emx460z+5E FzhHT88l25uPDnb5b1uJACruaMt6oICvb+MVLoSruqg9Q9or1jevd36f9rFORrru r9winGZqJmP7XA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:02:38 2025 by rpki-client