This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json) Hash identifier: mhs3Usftex/21IWEuKInjw9nJ37ckPglU3hWICpFWIo= Subject key identifier: 29:43:95:2E:18:C6:30:1B:E6:EA:86:DF:6D:0C:FE:A0:77:91:96:D8 Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47 Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347 Certificate serial: 019B51BDD8C99BAFBE14ADDC1B4037D857B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 19:02:34 +0000 Manifest this update: Wed 24 Dec 2025 19:02:34 +0000 Manifest next update: Thu 25 Dec 2025 19:02:34 +0000 Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=) 2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: oWh6pwsTUjQUU+Ay6lZ+qxGzTFQEDlFwcCW/UtvfDME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:d8:c9:9b:af:be:14:ad:dc:1b:40:37:d8:57:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347 Validity Not Before: Dec 24 19:02:34 2025 GMT Not After : Dec 25 19:02:34 2025 GMT Subject: CN=2943952e18c6301be6ea86df6d0cfea0779196d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:e5:2e:cc:73:f5:d7:38:3b:e9:e4:e1:03: 79:67:d5:f7:e0:ea:6e:0b:a3:9d:fb:38:d1:15:8b: 73:89:6f:53:15:3f:bc:6c:57:96:7d:04:00:33:d6: 13:6f:14:6e:83:cf:ac:37:c0:57:5e:64:b1:82:4b: 23:cf:9b:32:33:44:d7:38:e2:40:13:e4:fb:c2:08: 05:6c:d5:07:26:d5:c0:82:bf:67:80:6f:0c:62:79: 5c:a4:3b:21:03:49:59:1d:25:41:d6:ca:f3:83:33: 8e:e0:f2:5c:51:fe:bb:0e:47:4e:85:77:e0:09:0d: 70:96:c2:d7:d7:77:2f:0c:1f:32:f2:22:ee:12:ec: f2:69:1e:71:62:be:80:e7:03:28:a1:48:53:a0:56: 6b:42:22:a8:49:31:4d:9a:87:e0:58:43:56:a7:73: 17:3d:31:b2:68:85:40:ac:4f:8d:48:e4:9f:67:6c: d1:a0:f5:5d:b0:19:1d:59:cb:2d:7c:ba:5f:df:17: 74:a7:d7:c4:1b:0d:92:4c:b8:cf:e1:96:7f:f1:e5: a5:59:79:9a:90:1a:1d:44:58:2b:2c:34:5a:24:dc: 2d:43:2c:c0:7b:85:56:26:c3:24:20:4c:c3:2d:c4: 4d:67:84:1d:aa:d6:e3:e5:84:20:a1:25:14:07:d3: 24:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:43:95:2E:18:C6:30:1B:E6:EA:86:DF:6D:0C:FE:A0:77:91:96:D8 X509v3 Authority Key Identifier: keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:20:4a:31:0a:c2:61:62:3b:48:ee:b3:25:1c:99:2e:e3:1b: 6e:f9:b1:6b:7a:92:16:ad:c4:c7:07:14:9d:1b:5c:7e:f8:f5: df:65:d9:d4:36:d7:e6:e8:04:83:a6:65:6e:94:ad:49:b6:4d: 37:37:83:fe:f5:0d:87:19:71:d2:f2:5e:88:9a:47:5d:31:82: 81:c5:f2:54:6a:de:74:c6:9d:dc:8c:a8:95:ed:44:d4:13:db: 1a:89:09:4a:10:10:74:f0:b7:89:a2:a1:d7:19:05:c8:20:6b: 84:70:51:71:50:37:f4:32:44:0b:29:3b:65:96:46:a5:ec:21: 4d:b5:8f:66:28:9c:75:83:09:98:52:f7:3d:ca:6b:19:8b:4a: fc:56:bf:14:e3:6e:cd:5e:e4:60:77:d9:ff:a8:91:36:f0:f1: 28:8b:10:24:f7:97:2f:02:44:6a:7e:ae:ce:9c:a8:f3:c8:b2: e1:15:58:7c:02:49:3b:e7:5c:75:2a:43:cc:64:d8:0a:6d:12: b3:a6:c7:d0:56:e3:13:f0:f4:18:01:2c:3e:a0:46:dc:79:41: b8:d4:7d:51:d9:7d:f0:e4:fb:18:df:62:12:05:d4:63:15:d0: eb:c4:d1:14:25:f3:cd:96:59:19:b7:14:0b:7a:31:9f:3d:af: 92:c5:31:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvdjJm6++FK3cG0A32FezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZTcwZWY2ZmViODEzZWQ5ZGJiOTY3ZDA1MTNjZjIwNDNk M2EzNDcwHhcNMjUxMjI0MTkwMjM0WhcNMjUxMjI1MTkwMjM0WjAzMTEwLwYDVQQD EygyOTQzOTUyZTE4YzYzMDFiZTZlYTg2ZGY2ZDBjZmVhMDc3OTE5NmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudPlLsxz9dc4O+nk4QN5Z9X34Opu C6Od+zjRFYtziW9TFT+8bFeWfQQAM9YTbxRug8+sN8BXXmSxgksjz5syM0TXOOJA E+T7wggFbNUHJtXAgr9ngG8MYnlcpDshA0lZHSVB1srzgzOO4PJcUf67DkdOhXfg CQ1wlsLX13cvDB8y8iLuEuzyaR5xYr6A5wMooUhToFZrQiKoSTFNmofgWENWp3MX PTGyaIVArE+NSOSfZ2zRoPVdsBkdWcstfLpf3xd0p9fEGw2STLjP4ZZ/8eWlWXma kBodRFgrLDRaJNwtQyzAe4VWJsMkIEzDLcRNZ4Qdqtbj5YQgoSUUB9MkvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClDlS4YxjAb5uqG320M/qB3kZbYMB8GA1UdIwQY MBaAFNrnDvb+uBPtnbuWfQUTzyBD06NHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDIt ZWFiNDBiZTQ4Y2MxLzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDItZWFiNDBiZTQ4Y2Mx LzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSBKMQrC YWI7SO6zJRyZLuMbbvmxa3qSFq3ExwcUnRtcfvj132XZ1DbX5ugEg6ZlbpStSbZN NzeD/vUNhxlx0vJeiJpHXTGCgcXyVGredMad3Iyole1E1BPbGokJShAQdPC3iaKh 1xkFyCBrhHBRcVA39DJECyk7ZZZGpewhTbWPZiicdYMJmFL3PcprGYtK/Fa/FONu zV7kYHfZ/6iRNvDxKIsQJPeXLwJEan6uzpyo88iy4RVYfAJJO+dcdSpDzGTYCm0S s6bH0FbjE/D0GAEsPqBG3HlBuNR9Udl98OT7GN9iEgXUYxXQ68TRFCXzzZZZGbcU C3oxnz2vksUxPg== -----END CERTIFICATE-----Generated at Wed Dec 24 21:54:01 2025 by rpki-client