This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json) Hash identifier: aRTPnal2vp8jDW+3gbSYyn5SPoSWGoqgzfgOmNFU+Nc= Subject key identifier: 0B:91:6E:15:E9:1E:F2:B2:47:2B:08:30:25:30:F4:57:0A:DE:85:79 Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9 Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9 Certificate serial: 019B5DF7BF6E03DB91A32E54F891B823EAC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft Manifest number: 14DC Signing time: Sat 27 Dec 2025 04:01:16 +0000 Manifest this update: Sat 27 Dec 2025 04:01:16 +0000 Manifest next update: Sun 28 Dec 2025 04:01:16 +0000 Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: jv9cyXgz40h3kLFn3aEKyCe5Qinxorv+okBhHLjCI/I=) 2: ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa (hash: xFEzrUJlVVBWEtFecNObcV0TMloS/XizxOFPtUYtswE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:bf:6e:03:db:91:a3:2e:54:f8:91:b8:23:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9 Validity Not Before: Dec 27 04:01:16 2025 GMT Not After : Dec 28 04:01:16 2025 GMT Subject: CN=0b916e15e91ef2b2472b08302530f4570ade8579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:c0:f8:db:4f:7c:3e:22:19:99:92:ec:3b: a4:e2:c6:25:83:76:72:b2:d5:ee:ae:bb:9e:5f:f1: eb:0d:ac:7f:4e:7b:b1:de:2b:5d:28:70:db:ef:f9: 95:23:20:16:0c:e8:5f:91:52:24:13:a5:04:4e:05: c3:ed:a1:66:67:3d:7b:0d:6f:97:1d:6a:de:7c:3e: 27:36:12:80:64:f1:ae:5a:ed:d4:ff:b2:eb:a9:3a: ec:42:04:6b:b3:4b:5b:d7:08:55:ec:ff:f2:44:cc: 34:1c:0f:e6:5a:01:7e:e8:27:ee:d5:9d:50:f4:6e: bf:e1:f2:ad:99:29:16:30:6e:a3:2a:cb:69:87:2a: 68:04:8c:16:f6:c9:f5:15:cd:5a:4a:9c:56:06:9f: 9a:5a:19:22:7c:d8:84:35:04:5e:c1:0b:81:dd:66: 56:02:2b:75:7a:02:20:e7:bb:38:f0:0e:ee:03:a5: 54:69:64:47:5b:6b:00:9b:67:49:f4:b4:d2:82:f9: f7:c2:8d:4e:0a:af:e0:c7:1c:ee:1c:99:ef:17:09: ca:04:35:48:6b:fd:6d:1c:27:83:0c:5b:3f:7f:a3: ec:de:b7:19:f5:bc:a7:12:06:f3:bf:9a:da:fd:e1: 08:2e:49:4d:e8:bd:13:8b:b6:3f:41:49:77:cf:af: 91:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:91:6E:15:E9:1E:F2:B2:47:2B:08:30:25:30:F4:57:0A:DE:85:79 X509v3 Authority Key Identifier: keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a9:a8:38:ec:70:bd:e6:e9:20:e8:80:74:7f:51:ee:72:05: 76:0b:53:a6:a7:b0:11:c9:74:69:eb:19:ee:cd:b1:b7:77:a7: d1:93:6f:6d:f5:bb:a8:7b:6a:9d:da:93:d8:52:87:2a:f7:61: 26:eb:ec:52:fd:e8:38:00:a6:e0:a0:8e:2d:e6:eb:c2:02:cd: 0a:da:d3:43:c6:b0:dc:df:5f:e0:44:47:0b:01:54:bd:13:31: 90:84:20:ee:c0:04:c9:b4:ea:22:cd:d4:bf:69:e8:75:5b:a6: b2:30:33:31:4d:7f:cb:8f:78:45:c6:86:a6:0b:c0:a1:a6:a2: 05:9f:4e:bc:90:d2:bd:7c:48:73:fc:16:2b:de:8b:86:20:ea: 8e:55:9a:58:b9:52:2d:77:1b:db:0f:6f:e1:3c:06:dc:b4:7a: 77:05:60:fc:b6:35:87:d7:c8:4e:f1:d2:cf:c6:28:8b:ae:32: dd:f2:13:5c:fe:bd:94:26:2f:2a:2f:2b:29:d6:4c:17:6f:d6: 36:df:da:8a:39:21:97:d5:aa:2c:e0:05:59:f8:7f:86:d0:85: 1d:07:1d:b8:a2:46:dd:ce:6f:e5:bc:8c:13:2d:73:99:dd:91: f0:bf:5d:47:d0:e6:31:4d:4f:79:6b:2d:a4:3d:53:f8:56:b1: df:d2:33:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd979uA9uRoy5U+JG4I+rAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDI4NGI5NDMyNWY1MDYwZjhhMGU4N2MxYmUyODI3Nzg4 ZjE4ZjkwHhcNMjUxMjI3MDQwMTE2WhcNMjUxMjI4MDQwMTE2WjAzMTEwLwYDVQQD EygwYjkxNmUxNWU5MWVmMmIyNDcyYjA4MzAyNTMwZjQ1NzBhZGU4NTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0nA+NtPfD4iGZmS7Duk4sYlg3Zy stXurrueX/HrDax/Tnux3itdKHDb7/mVIyAWDOhfkVIkE6UETgXD7aFmZz17DW+X HWrefD4nNhKAZPGuWu3U/7LrqTrsQgRrs0tb1whV7P/yRMw0HA/mWgF+6Cfu1Z1Q 9G6/4fKtmSkWMG6jKstphypoBIwW9sn1Fc1aSpxWBp+aWhkifNiENQRewQuB3WZW Ait1egIg57s48A7uA6VUaWRHW2sAm2dJ9LTSgvn3wo1OCq/gxxzuHJnvFwnKBDVI a/1tHCeDDFs/f6Ps3rcZ9bynEgbzv5ra/eEILklN6L0Ti7Y/QUl3z6+RFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuRbhXpHvKyRysIMCUw9FcK3oV5MB8GA1UdIwQY MBaAFNlChLlDJfUGD4oOh8G+KCd4jxj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQt OTVkNTk0NjVlOWE4LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQtOTVkNTk0NjVlOWE4 LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6moOOxw vebpIOiAdH9R7nIFdgtTpqewEcl0aesZ7s2xt3en0ZNvbfW7qHtqndqT2FKHKvdh JuvsUv3oOACm4KCOLebrwgLNCtrTQ8aw3N9f4ERHCwFUvRMxkIQg7sAEybTqIs3U v2nodVumsjAzMU1/y494RcaGpgvAoaaiBZ9OvJDSvXxIc/wWK96LhiDqjlWaWLlS LXcb2w9v4TwG3LR6dwVg/LY1h9fITvHSz8Yoi64y3fITXP69lCYvKi8rKdZMF2/W Nt/aijkhl9WqLOAFWfh/htCFHQcduKJG3c5v5byMEy1zmd2R8L9dR9DmMU1PeWst pD1T+Fax39Iz0g== -----END CERTIFICATE-----Generated at Sat Dec 27 12:34:41 2025 by rpki-client