This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft File: my2tSBy6VIO6qw16DM3BregyrRY.mft (raw, json) Hash identifier: xWPZdUgC2R/FwMJabKIytIARKbguqSP/skLdNXsp6ks= Subject key identifier: F1:98:40:30:0A:85:03:C6:3A:B8:B4:B3:0B:0D:82:36:02:21:9B:18 Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16 Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16 Certificate serial: 019B3C7E735A04806E83CE90EB09DEEF9D1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft Manifest number: 0923 Signing time: Sat 20 Dec 2025 16:01:18 +0000 Manifest this update: Sat 20 Dec 2025 16:01:18 +0000 Manifest next update: Sun 21 Dec 2025 16:01:18 +0000 Files and hashes: 1: iUGe5ciIVDZ_vtvHcYAi2dKEvOs.roa (hash: GD3GHNZKL4fdpgdi7l7xwFI/fIJOKFQjsdvcNA8UW4E=) 2: my2tSBy6VIO6qw16DM3BregyrRY.crl (hash: qRGvi7Cyqw9i6N5hxPr3PYlO0hpx598tUOxW6yyAmzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:73:5a:04:80:6e:83:ce:90:eb:09:de:ef:9d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16 Validity Not Before: Dec 20 16:01:18 2025 GMT Not After : Dec 21 16:01:18 2025 GMT Subject: CN=f19840300a8503c63ab8b4b30b0d823602219b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:12:8c:54:32:22:46:5b:44:96:b7:c4:ce:92: fb:f1:de:d4:a6:ea:b9:b8:1c:c9:59:4c:14:0a:c3: 8f:b6:2c:9e:5d:10:9a:10:5a:6c:77:a0:f5:6f:20: 96:7f:76:06:70:79:0b:e7:9c:45:52:25:af:07:8d: 9f:aa:2e:45:24:66:41:a5:29:ca:60:87:4d:15:f3: 20:f2:55:3e:4c:a4:44:70:1b:f1:51:67:67:cc:0f: bd:58:d1:d3:da:18:b6:e1:2c:a5:03:05:15:29:0b: 0d:b2:12:79:25:3d:e5:4f:cc:f1:9d:98:a7:9b:67: 06:76:3c:8d:02:86:3f:72:a8:45:21:7b:8d:19:6f: 0e:92:ca:5c:fe:43:2e:08:19:f9:7c:75:27:2a:75: 1c:3d:db:4e:79:4f:dd:20:6f:13:11:8a:ea:48:2a: 76:e7:f3:40:95:24:d8:f2:a5:5c:5b:45:67:02:62: 01:8b:df:78:20:73:80:79:97:8c:01:6f:14:23:65: f6:90:35:3b:0c:60:69:ba:90:64:ab:56:97:f5:50: d5:61:11:2a:42:6b:dd:da:6f:3a:bb:8a:bc:38:ff: e1:4a:a5:80:2f:8e:f9:fb:77:43:6f:69:59:1e:e7: bf:c3:d6:9e:95:86:b8:a5:46:19:45:5c:63:6f:8e: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:98:40:30:0A:85:03:C6:3A:B8:B4:B3:0B:0D:82:36:02:21:9B:18 X509v3 Authority Key Identifier: keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6f:e4:05:ec:18:53:b4:24:09:47:15:e0:cc:24:9e:6c:81: 8f:7c:cd:1b:9c:cf:20:6f:ea:62:70:e2:c2:c8:d3:89:66:90: ba:09:3d:1a:f3:23:89:f9:17:b4:12:82:8f:84:11:de:fe:f4: f4:35:ba:09:f7:3c:9d:c8:aa:72:01:68:34:00:35:bd:a9:ba: 4f:e4:ab:b3:1d:21:aa:a0:e7:ca:99:a6:e0:50:98:67:ea:95: 47:f1:90:8e:7a:44:d8:12:ac:4f:e0:d9:c4:78:91:ed:89:49: 20:ad:50:c4:5b:78:a6:9e:ad:65:95:79:26:01:74:44:54:8f: 16:e2:0a:0c:93:b0:22:e6:3c:61:42:12:06:90:42:5a:4c:ef: 95:5e:04:39:ab:a4:da:84:1b:32:d3:be:5b:b0:eb:82:15:13: 2a:e2:38:fa:67:26:66:e1:e4:91:da:80:5d:8a:ce:06:a3:02: f0:3e:81:5a:1d:93:6e:7c:c1:19:35:80:19:b3:96:5a:83:d8: f4:18:cf:23:c4:c7:01:e6:7d:78:49:36:e2:7a:3b:1c:03:35: ab:29:a1:8f:6d:c0:e4:b5:49:fa:6c:b7:55:0a:3c:1d:c6:ae: f7:7a:7c:87:ce:98:12:dd:85:3b:34:a4:fc:9d:c0:f1:16:a7: 21:8d:c3:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fnNaBIBug86Q6wne750bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMmRhZDQ4MWNiYTU0ODNiYWFiMGQ3YTBjY2RjMWFkZTgz MmFkMTYwHhcNMjUxMjIwMTYwMTE4WhcNMjUxMjIxMTYwMTE4WjAzMTEwLwYDVQQD EyhmMTk4NDAzMDBhODUwM2M2M2FiOGI0YjMwYjBkODIzNjAyMjE5YjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BKMVDIiRltElrfEzpL78d7Upuq5 uBzJWUwUCsOPtiyeXRCaEFpsd6D1byCWf3YGcHkL55xFUiWvB42fqi5FJGZBpSnK YIdNFfMg8lU+TKREcBvxUWdnzA+9WNHT2hi24SylAwUVKQsNshJ5JT3lT8zxnZin m2cGdjyNAoY/cqhFIXuNGW8Okspc/kMuCBn5fHUnKnUcPdtOeU/dIG8TEYrqSCp2 5/NAlSTY8qVcW0VnAmIBi994IHOAeZeMAW8UI2X2kDU7DGBpupBkq1aX9VDVYREq Qmvd2m86u4q8OP/hSqWAL475+3dDb2lZHue/w9aelYa4pUYZRVxjb47eFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGYQDAKhQPGOri0swsNgjYCIZsYMB8GA1UdIwQY MBaAFJstrUgculSDuqsNegzNwa3oMq0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NGJhYjgtODliNy00ZjY4LWFmYzMt ODVhMmFlYjA3OThkLzEvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82NGJhYjgtODliNy00ZjY4LWFmYzMtODVhMmFlYjA3OThk LzEvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2/kBewY U7QkCUcV4MwknmyBj3zNG5zPIG/qYnDiwsjTiWaQugk9GvMjifkXtBKCj4QR3v70 9DW6Cfc8nciqcgFoNAA1vam6T+Srsx0hqqDnypmm4FCYZ+qVR/GQjnpE2BKsT+DZ xHiR7YlJIK1QxFt4pp6tZZV5JgF0RFSPFuIKDJOwIuY8YUISBpBCWkzvlV4EOauk 2oQbMtO+W7DrghUTKuI4+mcmZuHkkdqAXYrOBqMC8D6BWh2TbnzBGTWAGbOWWoPY 9BjPI8THAeZ9eEk24no7HAM1qymhj23A5LVJ+my3VQo8Hcau93p8h86YEt2FOzSk /J3A8RanIY3DRQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:29 2025 by rpki-client