This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json) Hash identifier: MpptaXfao3inV6el9hkjLRiyv9zh4KGfnVQua2ZwTrQ= Subject key identifier: A1:70:6D:38:F6:55:22:55:CF:05:CE:26:83:6B:B2:9B:96:F2:FD:B3 Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0 Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0 Certificate serial: 019B29D346E615B6873FE4186006B2C01DB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft Manifest number: 1786 Signing time: Wed 17 Dec 2025 01:01:10 +0000 Manifest this update: Wed 17 Dec 2025 01:01:10 +0000 Manifest next update: Thu 18 Dec 2025 01:01:10 +0000 Files and hashes: 1: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: sCf/P6ggXQ7Qbt5LAsxnKpEYc8JXLKWsrxTzRLYmGm0=) 2: ULHC_eqps-Zhve3ylast8DZ7_B0.roa (hash: rS2DzXzv6b1NgQdmnOKMIDSPXpweT7iIgimqwwzrLDM=) 3: VuGkSohHUfq_yXd_IRur3wQhe6Y.roa (hash: BWYBYUzZHQt0NYFkHSXMP74Q5d+hL0sst0bi6Iqm6QQ=) 4: mqcBsZguJ4u7DQyG9frvwf0EmHo.roa (hash: 0n6BWPSoOW6nqo6SiNgRiIzfLmFx0RVI3omPqv7vWao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:d3:46:e6:15:b6:87:3f:e4:18:60:06:b2:c0:1d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0 Validity Not Before: Dec 17 01:01:10 2025 GMT Not After : Dec 18 01:01:10 2025 GMT Subject: CN=a1706d38f6552255cf05ce26836bb29b96f2fdb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:32:fa:75:5a:56:8d:66:6c:2d:1c:49:fc: d5:41:c3:58:68:4b:8b:24:93:99:7e:51:08:2e:21: 0f:9c:88:0a:74:f6:37:f9:57:77:3a:7c:38:fe:d4: 6a:b7:4a:92:1d:89:7b:78:69:e2:d1:cc:bc:2d:3e: 1d:9f:3a:12:8c:dd:f9:11:63:f3:4a:c6:4f:65:d6: f1:c9:1b:73:5a:ce:b2:a8:d6:89:e2:0b:98:78:a6: 58:0d:e2:86:b7:4a:e0:cd:e1:b7:ae:0e:60:31:31: 2d:46:0c:03:8e:eb:95:b0:47:50:60:4d:aa:03:3a: 93:73:5d:49:6a:75:1c:25:67:44:79:9f:b9:d9:38: b2:08:f7:50:2a:98:d8:88:d4:c1:96:6b:72:b0:38: 2a:86:48:51:64:b6:19:01:68:67:97:65:79:99:a4: 87:05:24:fa:f7:b4:3e:9b:34:99:65:58:e0:69:32: 30:19:64:93:64:21:62:b0:09:33:ab:c6:98:f9:d1: 50:b5:39:38:71:e7:15:ca:f6:75:89:e6:15:7f:f9: c1:c5:47:69:42:9b:df:62:45:26:fe:ef:75:1e:3a: 77:27:9a:c0:a5:fb:d4:e9:8c:71:01:9a:68:48:0d: 18:b9:9f:3f:a9:3d:0a:e2:2b:be:fb:f9:2d:e6:a4: 3c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:70:6D:38:F6:55:22:55:CF:05:CE:26:83:6B:B2:9B:96:F2:FD:B3 X509v3 Authority Key Identifier: keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d8:5a:4f:96:92:32:4e:a8:16:86:23:e7:05:ef:cc:7c:e7: 46:5e:5c:b9:70:e1:d0:c0:2c:2e:7f:f1:34:90:84:5f:0c:07: af:8a:17:c5:02:fa:ec:7c:80:ff:3b:89:b4:b3:2b:b8:0c:59: c4:21:7a:8f:aa:36:9a:9e:20:96:40:f4:5b:e6:47:04:5e:a5: 88:a3:03:32:aa:32:7e:b5:6d:0b:8a:23:cf:de:f5:26:10:65: 8e:42:ef:4e:f2:f5:91:d1:6c:3c:ea:55:3c:48:7a:b1:69:29: 18:e9:93:44:43:69:aa:69:42:83:0c:3d:b9:65:03:94:18:07: b9:07:a9:f7:00:b1:c1:4d:0f:13:70:e0:99:ce:ed:ff:74:f8: fd:78:87:2d:e6:eb:98:74:a1:50:1c:0a:7b:ab:d5:ac:5f:77: c4:cf:a7:fe:47:65:3c:c4:4b:fd:5b:6b:9e:39:b5:b4:41:a0: 57:b2:8a:e7:d6:ea:be:6a:ec:76:45:2e:6d:81:27:4f:8c:11: ac:d4:33:00:32:bb:8e:63:1f:93:df:c4:9b:0f:71:e1:f7:8c: db:74:50:b4:94:b8:fc:49:9c:ed:8c:ef:73:7c:90:4d:e7:66: e4:9c:81:d4:d6:92:be:6b:75:26:2b:ba:ae:aa:c7:32:44:95: 34:36:51:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsp00bmFbaHP+QYYAaywB2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1 ZjE0YzAwHhcNMjUxMjE3MDEwMTEwWhcNMjUxMjE4MDEwMTEwWjAzMTEwLwYDVQQD EyhhMTcwNmQzOGY2NTUyMjU1Y2YwNWNlMjY4MzZiYjI5Yjk2ZjJmZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuEy+nVaVo1mbC0cSfzVQcNYaEuL JJOZflEILiEPnIgKdPY3+Vd3Onw4/tRqt0qSHYl7eGni0cy8LT4dnzoSjN35EWPz SsZPZdbxyRtzWs6yqNaJ4guYeKZYDeKGt0rgzeG3rg5gMTEtRgwDjuuVsEdQYE2q AzqTc11JanUcJWdEeZ+52TiyCPdQKpjYiNTBlmtysDgqhkhRZLYZAWhnl2V5maSH BST697Q+mzSZZVjgaTIwGWSTZCFisAkzq8aY+dFQtTk4cecVyvZ1ieYVf/nBxUdp QpvfYkUm/u91Hjp3J5rApfvU6YxxAZpoSA0YuZ8/qT0K4iu++/kt5qQ8zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFwbTj2VSJVzwXOJoNrspuW8v2zMB8GA1UdIwQY MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt ZjVlYzQwM2ZkYWNmLzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9haT5aS Mk6oFoYj5wXvzHznRl5cuXDh0MAsLn/xNJCEXwwHr4oXxQL67HyA/zuJtLMruAxZ xCF6j6o2mp4glkD0W+ZHBF6liKMDMqoyfrVtC4ojz971JhBljkLvTvL1kdFsPOpV PEh6sWkpGOmTRENpqmlCgww9uWUDlBgHuQep9wCxwU0PE3Dgmc7t/3T4/XiHLebr mHShUBwKe6vVrF93xM+n/kdlPMRL/Vtrnjm1tEGgV7KK59bqvmrsdkUubYEnT4wR rNQzADK7jmMfk9/Emw9x4feM23RQtJS4/Emc7Yzvc3yQTedm5JyB1NaSvmt1Jiu6 rqrHMkSVNDZRWQ== -----END CERTIFICATE-----Generated at Wed Dec 17 09:45:46 2025 by rpki-client