This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json) Hash identifier: Y6WF6USOnPkjfk3+JTgQOYI8XTOVqntWgSvW0+eMcYc= Subject key identifier: 4C:15:F4:1F:55:53:B2:DB:0E:CB:3B:2E:8D:72:04:53:43:6A:C3:3C Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 019B3A58903AA386CD4AFEB3E87AB46D0301 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft Manifest number: 0AAA Signing time: Sat 20 Dec 2025 06:00:41 +0000 Manifest this update: Sat 20 Dec 2025 06:00:41 +0000 Manifest next update: Sun 21 Dec 2025 06:00:41 +0000 Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: FyNmM/HiQrqdAMSVfYEKii8A3AjctNl4gQwljPQyUgU=) 2: 6UnLf-WfoW9sr8JO9S3jMv6qGIA.roa (hash: 2bd+YNQSpktsNSy1cZJWllJsfSQnRwhxzclMAXA57Ro=) 3: 87iBXWDpSIwRDGkwc7K8UhWgGyI.roa (hash: GnB7PMQFypZjuArzdsmg92AtM/uSLFw3faYH5HVQkIw=) 4: C9ZicXvmxm567EBbHhNa__2fy_I.roa (hash: spPgfi0xUOfFyLJbLIvDF9/eSBXOXpmeRtI5V43B54I=) 5: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=) 6: GxPqJ9WQ-DKd_9ctcg8-12jFGZ0.roa (hash: KATN8CFnbRX1tzVerM2G5h88BqUwwD5kvjL2DX0FIcw=) 7: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=) 8: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=) 9: gr1d5o3sHGA3VWu-8KVK6b7UyM4.roa (hash: GHLuG9O5AVwW61aYh11UvqNMmcEewfjv/mRXgyvZ4yg=) 10: nPeZE7NjK8v1X9W6OWWQV8CL9dk.roa (hash: i5DQUMA7TTXDg8w9uPAc9gbe3ID2PYonRIJFljEMgcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:90:3a:a3:86:cd:4a:fe:b3:e8:7a:b4:6d:03:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Dec 20 06:00:41 2025 GMT Not After : Dec 21 06:00:41 2025 GMT Subject: CN=4c15f41f5553b2db0ecb3b2e8d720453436ac33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:f5:0e:01:ae:32:53:ce:94:54:37:83:83: 74:2c:57:87:8e:c5:82:66:d8:74:4d:09:36:1a:52: f6:13:b0:35:c3:a4:c0:76:7f:1d:24:1c:5b:69:81: c0:fd:84:06:14:94:4f:43:7b:72:8f:cb:e6:d2:7b: 6c:ea:98:99:25:e0:9c:89:31:3d:53:a9:ac:d6:79: 8a:bc:77:fd:2b:8a:3a:2f:ec:8c:2f:84:c5:58:f7: 41:6c:40:de:4b:31:dc:fc:47:e0:a9:b2:5c:29:10: 5c:40:c5:4a:8d:3e:f8:cf:e2:62:0e:aa:37:6c:66: b0:70:f7:40:bb:ab:3d:da:4b:1a:02:ac:39:3c:85: c5:46:7e:31:2d:c5:b7:7b:80:1e:85:a4:9b:0f:41: dc:22:45:46:d2:ab:08:de:a0:99:fb:e8:92:fe:cf: 6d:49:f1:9c:a9:c2:fb:14:af:88:5d:63:39:b1:f2: 35:85:f1:05:8d:fa:cb:b1:88:ba:e1:10:94:77:e9: cd:6b:19:bc:0d:ee:0a:f2:cf:02:4f:e0:bf:8c:9d: 58:e5:d6:d1:3d:1f:c8:62:aa:e4:8e:af:39:f8:46: d9:0f:ed:31:cd:03:2e:7e:73:2c:cc:22:49:d6:78: 13:fa:78:8b:3c:54:04:7a:6e:54:ce:66:78:a0:7b: 51:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:15:F4:1F:55:53:B2:DB:0E:CB:3B:2E:8D:72:04:53:43:6A:C3:3C X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:39:8d:0b:43:c8:7d:79:c1:d4:b9:31:88:34:95:8d:6f:72: 2e:7d:6a:66:33:b1:02:31:cb:d2:ed:85:ab:61:af:78:da:a6: 56:7e:7a:e6:0d:2f:8f:3a:ec:2e:f3:63:35:21:48:31:04:b0: eb:f2:64:2c:55:37:8b:e5:08:e3:5e:f9:6f:33:6f:28:27:00: 9e:8f:bf:2e:f6:8f:66:18:2a:9f:87:9c:9b:12:df:aa:d7:aa: 3f:0e:f4:e2:08:63:ac:bd:43:f7:99:e6:dc:ec:e2:99:57:31: 51:27:c0:80:11:d9:e2:8f:b9:ae:c0:ae:98:cd:fb:03:30:b3: 67:c5:0c:70:bd:ad:6c:e9:7e:d1:eb:8c:78:44:db:85:e9:3c: 0c:91:7c:b5:53:db:4b:f6:55:ef:47:c1:97:8b:4b:ce:36:4f: 1f:50:f6:29:90:90:65:c0:c7:9d:30:2c:10:1e:ca:32:fa:8c: f1:cb:38:ad:93:69:d4:c3:f0:7b:41:03:d3:9c:86:63:55:6f: ff:6b:de:22:ea:8c:34:62:40:a5:9f:9d:57:17:25:e5:48:4e: f7:39:06:ba:c0:3b:89:30:00:9d:c4:57:5e:88:c3:32:5e:14: a8:d3:a6:e0:1c:a2:e7:3e:5c:68:65:23:b5:e6:38:e2:51:6e: 37:8b:ad:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WJA6o4bNSv6z6Hq0bQMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjUxMjIwMDYwMDQxWhcNMjUxMjIxMDYwMDQxWjAzMTEwLwYDVQQD Eyg0YzE1ZjQxZjU1NTNiMmRiMGVjYjNiMmU4ZDcyMDQ1MzQzNmFjMzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcD1DgGuMlPOlFQ3g4N0LFeHjsWC Zth0TQk2GlL2E7A1w6TAdn8dJBxbaYHA/YQGFJRPQ3tyj8vm0nts6piZJeCciTE9 U6ms1nmKvHf9K4o6L+yML4TFWPdBbEDeSzHc/EfgqbJcKRBcQMVKjT74z+JiDqo3 bGawcPdAu6s92ksaAqw5PIXFRn4xLcW3e4AehaSbD0HcIkVG0qsI3qCZ++iS/s9t SfGcqcL7FK+IXWM5sfI1hfEFjfrLsYi64RCUd+nNaxm8De4K8s8CT+C/jJ1Y5dbR PR/IYqrkjq85+EbZD+0xzQMufnMszCJJ1ngT+niLPFQEem5UzmZ4oHtRqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwV9B9VU7LbDss7Lo1yBFNDasM8MB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTmNC0PI fXnB1LkxiDSVjW9yLn1qZjOxAjHL0u2Fq2GveNqmVn565g0vjzrsLvNjNSFIMQSw 6/JkLFU3i+UI4175bzNvKCcAno+/LvaPZhgqn4ecmxLfqteqPw704ghjrL1D95nm 3OzimVcxUSfAgBHZ4o+5rsCumM37AzCzZ8UMcL2tbOl+0euMeETbhek8DJF8tVPb S/ZV70fBl4tLzjZPH1D2KZCQZcDHnTAsEB7KMvqM8cs4rZNp1MPwe0ED05yGY1Vv /2veIuqMNGJApZ+dVxcl5UhO9zkGusA7iTAAncRXXojDMl4UqNOm4Byi5z5caGUj teY44lFuN4utRA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:00:20 2025 by rpki-client