This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json) Hash identifier: ez2wB6XstVDkFAccx+9KQ+qCmg5wy21xYtGpnZ2nu54= Subject key identifier: 42:6F:CB:ED:28:D3:EB:7D:AB:EB:64:B7:57:36:4D:68:CE:91:23:1F Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9 Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9 Certificate serial: 019B5FE624DA1C5BF499DD93FA442449BEFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft Manifest number: 14DD Signing time: Sat 27 Dec 2025 13:01:16 +0000 Manifest this update: Sat 27 Dec 2025 13:01:16 +0000 Manifest next update: Sun 28 Dec 2025 13:01:16 +0000 Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: Lz9HlwDFMKLLw7Z35bPZoEI1wNu7999mQMbnTDHsm4I=) 2: ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa (hash: xFEzrUJlVVBWEtFecNObcV0TMloS/XizxOFPtUYtswE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:e6:24:da:1c:5b:f4:99:dd:93:fa:44:24:49:be:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9 Validity Not Before: Dec 27 13:01:16 2025 GMT Not After : Dec 28 13:01:16 2025 GMT Subject: CN=426fcbed28d3eb7dabeb64b757364d68ce91231f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:dd:55:50:dd:07:16:af:11:95:ba:77:07: b2:89:c4:07:7d:31:61:97:e4:49:98:d1:41:ba:d0: fd:ae:d9:c5:e6:3f:7e:30:1f:a8:45:df:bc:2f:08: a8:d9:03:de:33:d8:46:87:fa:3c:8b:c2:e2:7e:13: 89:f3:56:e2:36:1e:ce:03:56:3b:73:25:59:f0:3a: 0c:62:20:20:8a:72:b7:e8:fd:e7:da:6c:d5:d3:7d: a6:a7:29:a2:6d:bd:c6:9f:4d:bf:ab:b9:0a:20:f0: a4:ca:93:8e:65:70:7e:1f:ef:b4:cb:8d:29:fd:b8: 62:ab:27:57:dc:5d:b6:07:06:95:31:ef:0b:80:e5: ec:c3:b7:aa:e0:b3:1a:9e:ec:48:c7:da:23:9b:7e: b6:09:dd:dd:ea:36:1b:b5:2d:b7:b0:0f:ec:1d:33: 31:e8:9c:b9:c8:e1:91:76:99:41:f5:df:04:c9:1c: 17:da:90:22:4d:1d:d4:d5:5e:4d:07:e7:4a:85:f3: a4:d8:59:2a:83:b6:21:05:ba:30:ba:81:2f:31:9b: 47:1c:4b:b0:3c:f2:96:19:da:98:26:64:7e:f4:14: fe:f4:cd:5c:55:db:3a:cb:a5:69:ab:c4:8b:e8:c5: 63:f7:72:53:9d:81:c6:6f:1f:b4:fe:d0:8b:f2:f5: 03:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:CB:ED:28:D3:EB:7D:AB:EB:64:B7:57:36:4D:68:CE:91:23:1F X509v3 Authority Key Identifier: keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:28:00:bd:60:eb:ed:b4:b7:74:5e:e4:81:2f:51:e1:d5:92: e6:c5:31:b5:d4:10:fb:d4:aa:04:4d:fe:dd:be:5b:1e:d0:11: 7d:27:6b:5c:3f:d0:d1:f1:6f:f0:5d:9f:e7:0b:c5:2c:15:b0: 88:0f:ac:96:cc:a6:90:2e:27:bc:d8:f1:15:be:4c:f0:15:4c: 11:09:1a:66:bb:d8:3a:7f:98:4f:cf:9f:ab:ae:b0:8a:89:57: fe:b9:09:e0:e9:5f:b3:b3:38:fd:d3:86:c8:84:c9:e0:6d:1e: 09:18:f3:f1:2e:da:ae:70:d1:0a:22:e4:c0:80:fe:ca:82:28: b6:33:0c:da:ea:1f:64:c6:bf:81:3a:25:37:e5:6e:68:b9:17: 06:58:1a:0c:9e:09:ed:e2:bb:4f:26:4e:06:e2:af:77:d0:81: ec:4b:0d:e1:8e:bf:b1:fb:b2:a1:44:6c:36:8c:a2:c2:fe:d3: df:b0:69:38:74:9f:0e:af:64:22:bf:fc:2a:c0:5f:f5:f0:c6: dd:9f:96:1f:59:d0:15:7f:35:e1:22:7f:c0:17:ad:7f:9f:1b: 1d:8c:9c:b1:01:38:b7:42:dd:5d:ce:48:26:75:0e:da:83:cd: f5:d7:73:94:9d:db:9b:fd:5b:ba:e9:f2:d0:7e:9f:60:72:a2: 5b:8d:e6:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtf5iTaHFv0md2T+kQkSb79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDI4NGI5NDMyNWY1MDYwZjhhMGU4N2MxYmUyODI3Nzg4 ZjE4ZjkwHhcNMjUxMjI3MTMwMTE2WhcNMjUxMjI4MTMwMTE2WjAzMTEwLwYDVQQD Eyg0MjZmY2JlZDI4ZDNlYjdkYWJlYjY0Yjc1NzM2NGQ2OGNlOTEyMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxvdVVDdBxavEZW6dweyicQHfTFh l+RJmNFButD9rtnF5j9+MB+oRd+8Lwio2QPeM9hGh/o8i8LifhOJ81biNh7OA1Y7 cyVZ8DoMYiAginK36P3n2mzV032mpymibb3Gn02/q7kKIPCkypOOZXB+H++0y40p /bhiqydX3F22BwaVMe8LgOXsw7eq4LManuxIx9ojm362Cd3d6jYbtS23sA/sHTMx 6Jy5yOGRdplB9d8EyRwX2pAiTR3U1V5NB+dKhfOk2Fkqg7YhBbowuoEvMZtHHEuw PPKWGdqYJmR+9BT+9M1cVds6y6Vpq8SL6MVj93JTnYHGbx+0/tCL8vUD/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJvy+0o0+t9q+tkt1c2TWjOkSMfMB8GA1UdIwQY MBaAFNlChLlDJfUGD4oOh8G+KCd4jxj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQt OTVkNTk0NjVlOWE4LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQtOTVkNTk0NjVlOWE4 LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCgAvWDr 7bS3dF7kgS9R4dWS5sUxtdQQ+9SqBE3+3b5bHtARfSdrXD/Q0fFv8F2f5wvFLBWw iA+slsymkC4nvNjxFb5M8BVMEQkaZrvYOn+YT8+fq66wiolX/rkJ4Olfs7M4/dOG yITJ4G0eCRjz8S7arnDRCiLkwID+yoIotjMM2uofZMa/gTolN+VuaLkXBlgaDJ4J 7eK7TyZOBuKvd9CB7EsN4Y6/sfuyoURsNoyiwv7T37BpOHSfDq9kIr/8KsBf9fDG 3Z+WH1nQFX814SJ/wBetf58bHYycsQE4t0LdXc5IJnUO2oPN9ddzlJ3bm/1buuny 0H6fYHKiW43mBg== -----END CERTIFICATE-----Generated at Sat Dec 27 14:25:54 2025 by rpki-client