This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json) Hash identifier: CHSm5lHdT1q7VCUStu60UvksTpVB8t5OW2+5r8CluVM= Subject key identifier: CC:33:E2:33:E5:33:F2:75:86:57:34:58:5A:00:70:98:43:0E:9F:D5 Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f Certificate serial: 019B3C1091540CC8364100FCB80048E2F505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft Manifest number: 0BF2 Signing time: Sat 20 Dec 2025 14:01:17 +0000 Manifest this update: Sat 20 Dec 2025 14:01:17 +0000 Manifest next update: Sun 21 Dec 2025 14:01:17 +0000 Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=) 2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=) 3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: DIBAh2LItoRo3qIYR0/Q80/k3EhEhtzpyCqjq+DmWuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:91:54:0c:c8:36:41:00:fc:b8:00:48:e2:f5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f Validity Not Before: Dec 20 14:01:17 2025 GMT Not After : Dec 21 14:01:17 2025 GMT Subject: CN=cc33e233e533f275865734585a007098430e9fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:5e:72:f9:c3:26:45:44:92:19:48:54:44: c4:c7:cd:36:63:a1:4b:73:fe:2f:0d:20:72:d1:5d: d9:7e:5a:ed:a4:c9:16:8d:2b:d3:e2:0c:96:ed:96: 8b:d5:db:33:cb:0d:bc:bd:fe:39:55:95:c1:95:3b: 23:18:d0:34:c9:cd:c9:69:c0:1b:4a:6c:a0:51:44: fc:a9:a2:99:33:ef:12:72:29:97:0b:87:3f:31:a4: 3c:49:3f:ec:c2:3c:3a:e9:66:91:89:64:bf:f4:cd: d9:cf:6b:1a:41:e8:b4:91:7e:96:c8:e0:59:21:7c: ff:5f:82:96:d7:89:a9:dd:21:6e:f4:31:99:75:1e: 34:b7:c2:02:f1:fd:bd:78:69:8a:68:25:fe:3f:0c: 58:03:2d:f0:bf:d3:61:a2:5e:20:36:96:27:af:2b: b0:e5:32:5e:ef:4e:44:82:b9:36:69:51:8d:6b:ee: 63:95:9e:08:5b:6f:82:99:df:d9:89:2e:a4:19:19: d5:c5:13:9a:22:0e:29:6b:0e:be:8f:8a:34:d8:26: 47:48:74:0d:57:0d:7c:bd:f4:65:a1:96:0b:58:35: 18:df:1e:56:1e:53:9a:e3:23:33:c4:b7:d6:d9:a9: 2c:da:2c:30:0d:0f:8f:26:db:22:c9:93:c5:93:59: 69:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:33:E2:33:E5:33:F2:75:86:57:34:58:5A:00:70:98:43:0E:9F:D5 X509v3 Authority Key Identifier: keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a1:8d:e7:62:f2:e7:ca:06:de:3f:c9:72:26:38:8d:6b:68: 9d:f0:91:7c:61:a2:34:8b:ea:71:c6:91:cb:b9:11:50:5b:c8: 3d:5d:2c:e2:b6:79:f8:27:68:c8:05:27:86:39:aa:6e:37:43: 6a:ff:b6:be:46:0b:e0:62:df:bc:7a:27:e9:01:d0:da:70:62: 65:7a:c3:89:7e:56:a3:29:a1:5d:52:3a:b5:e3:f9:22:aa:0f: ac:7b:98:31:8d:53:5c:31:62:24:50:75:53:56:fc:56:c6:3e: 29:fd:a3:c5:8f:9f:a8:56:ac:29:0a:6e:8d:43:cf:48:ca:f2: c4:aa:03:5e:24:2f:3e:ad:88:2b:0b:3c:e8:70:e6:a1:3c:8d: 55:b8:fd:6b:6b:f1:0d:fb:44:45:2f:d6:96:72:5c:b3:f5:53: 4f:1b:7e:91:4d:ef:66:33:ce:89:6a:dd:bc:5b:17:be:94:82: 15:93:d2:87:a8:2e:a7:8f:dc:31:25:50:fc:b2:10:36:58:be: ed:6c:b5:b7:d0:2a:d7:39:f9:d1:5e:7a:72:ab:fc:6d:42:0e: cc:aa:32:5e:a2:c4:74:04:3b:45:da:9b:1c:8f:05:35:92:32: 3e:9c:1d:ca:52:8b:0f:9d:77:3d:78:6b:1e:10:c7:31:d5:26: a7:13:31:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EJFUDMg2QQD8uABI4vUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NDM0ZmQ5OGMxMWQ4ZDcyZGYzODBjYTgzZWRmNzlmY2Mw MDg1OWYwHhcNMjUxMjIwMTQwMTE3WhcNMjUxMjIxMTQwMTE3WjAzMTEwLwYDVQQD EyhjYzMzZTIzM2U1MzNmMjc1ODY1NzM0NTg1YTAwNzA5ODQzMGU5ZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFlecvnDJkVEkhlIVETEx802Y6FL c/4vDSBy0V3ZflrtpMkWjSvT4gyW7ZaL1dszyw28vf45VZXBlTsjGNA0yc3JacAb SmygUUT8qaKZM+8ScimXC4c/MaQ8ST/swjw66WaRiWS/9M3Zz2saQei0kX6WyOBZ IXz/X4KW14mp3SFu9DGZdR40t8IC8f29eGmKaCX+PwxYAy3wv9Nhol4gNpYnryuw 5TJe705Egrk2aVGNa+5jlZ4IW2+Cmd/ZiS6kGRnVxROaIg4paw6+j4o02CZHSHQN Vw18vfRloZYLWDUY3x5WHlOa4yMzxLfW2aks2iwwDQ+PJtsiyZPFk1lpgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwz4jPlM/J1hlc0WFoAcJhDDp/VMB8GA1UdIwQY MBaAFERDT9mMEdjXLfOAyoPt95/MAIWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYt MjM3YmIzMGQ3MzA1LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYtMjM3YmIzMGQ3MzA1 LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaGN52Ly 58oG3j/JciY4jWtonfCRfGGiNIvqccaRy7kRUFvIPV0s4rZ5+CdoyAUnhjmqbjdD av+2vkYL4GLfvHon6QHQ2nBiZXrDiX5WoymhXVI6teP5IqoPrHuYMY1TXDFiJFB1 U1b8VsY+Kf2jxY+fqFasKQpujUPPSMryxKoDXiQvPq2IKws86HDmoTyNVbj9a2vx DftERS/WlnJcs/VTTxt+kU3vZjPOiWrdvFsXvpSCFZPSh6gup4/cMSVQ/LIQNli+ 7Wy1t9Aq1zn50V56cqv8bUIOzKoyXqLEdAQ7RdqbHI8FNZIyPpwdylKLD513PXhr HhDHMdUmpxMxQA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:12:07 2025 by rpki-client