This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json) Hash identifier: Rk0UK6MkWfCATN7ErD99hkxeCXnQBTYWW0AUD/iFIU0= Subject key identifier: F0:09:07:C4:6A:8D:F4:00:8F:E5:3B:3B:4F:0B:B4:97:EC:12:10:B2 Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af Certificate serial: 019B397D25DCB643AA944A4F921ED6E0CEA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft Manifest number: 1277 Signing time: Sat 20 Dec 2025 02:01:01 +0000 Manifest this update: Sat 20 Dec 2025 02:01:01 +0000 Manifest next update: Sun 21 Dec 2025 02:01:01 +0000 Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: S8sObE5yduM/ttQV2phL6bMLI+s7MgG7c8SGHNLsvws=) 2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=) 3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:25:dc:b6:43:aa:94:4a:4f:92:1e:d6:e0:ce:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af Validity Not Before: Dec 20 02:01:01 2025 GMT Not After : Dec 21 02:01:01 2025 GMT Subject: CN=f00907c46a8df4008fe53b3b4f0bb497ec1210b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:39:26:52:96:39:c7:1a:6d:c8:f7:d4:6e: 3a:da:33:c5:fd:8a:58:60:7e:81:81:1f:e2:d5:e9: 53:3c:1d:26:c0:f0:01:0e:6d:90:46:a9:d7:6e:13: 49:b1:73:1e:c5:8a:5d:3f:98:1e:4d:57:0c:79:de: 14:9f:96:ea:df:70:75:2a:d8:56:33:2d:76:42:1c: a4:6c:93:89:7f:58:40:b3:a0:e9:6a:68:11:52:7a: 00:f7:07:cb:d2:99:1e:45:d7:62:a5:55:f1:2b:70: 58:5e:fd:e2:1d:dd:a7:bf:d5:6a:4e:c8:86:1d:5c: 7f:4d:9e:5f:e0:f6:c3:82:98:e6:22:6a:72:34:af: 6a:ae:24:49:fe:43:7b:44:66:68:c8:c5:10:bc:06: 6f:ab:d8:c6:34:44:27:45:03:79:b6:89:b4:92:b8: 9f:a2:26:c0:2d:15:2d:74:c5:23:f7:d0:e3:51:f5: a0:b8:1d:fa:b3:bd:1b:4d:b3:5d:04:32:71:51:e6: 2f:40:6b:c8:d3:14:97:ad:20:5b:1b:5a:4d:61:4d: 81:02:e9:7c:8e:ee:f7:b7:9f:a0:3f:c4:63:c4:07: 2c:6f:96:a3:27:0a:f9:49:48:bd:59:58:bf:57:99: b8:22:f8:25:91:7f:aa:9f:ea:e7:58:4a:a2:c9:35: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:09:07:C4:6A:8D:F4:00:8F:E5:3B:3B:4F:0B:B4:97:EC:12:10:B2 X509v3 Authority Key Identifier: keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fe:ee:07:e8:ec:ec:5f:28:63:2b:b1:43:07:9f:9e:bd:df: 0d:78:ec:2c:0c:19:0e:bf:08:3c:8c:87:44:7b:8f:0a:ab:09: a8:63:0f:fd:4e:95:3d:49:e5:b6:f8:81:5c:15:f5:f9:90:38: 84:63:a9:6c:0d:e9:db:ed:0c:e1:17:38:75:3d:d2:cd:69:a1: e6:3d:4f:32:de:48:b2:b5:9e:63:16:65:c0:e7:88:eb:56:58: 35:0b:d3:3f:78:76:42:f9:cc:92:6d:9b:27:44:04:31:ea:8c: d3:7a:74:9e:0c:18:be:0f:88:9f:20:fc:35:77:10:dc:ac:77: d3:18:8a:ed:7e:af:22:f5:c4:36:68:96:f6:56:24:62:15:53: e7:4e:25:37:9a:36:13:8a:24:9c:cd:ca:26:22:70:8a:11:0c: d9:89:78:d7:8e:c3:bf:f7:89:fe:e8:35:80:1e:2e:3c:cf:2d: d6:4f:d0:84:e7:8a:05:32:52:c7:83:bf:58:21:63:eb:40:40: 99:aa:16:43:df:83:98:2b:00:f5:d8:27:91:e0:38:23:16:14: fc:61:c4:90:1c:34:04:a7:c6:4a:8e:13:e4:a5:70:75:c6:d2: e9:ad:a0:1c:63:e0:9a:51:fb:9d:03:a9:fa:7f:a7:db:19:ac: c9:5c:0f:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fSXctkOqlEpPkh7W4M6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3 MDc2YWYwHhcNMjUxMjIwMDIwMTAxWhcNMjUxMjIxMDIwMTAxWjAzMTEwLwYDVQQD EyhmMDA5MDdjNDZhOGRmNDAwOGZlNTNiM2I0ZjBiYjQ5N2VjMTIxMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlU5JlKWOccabcj31G462jPF/YpY YH6BgR/i1elTPB0mwPABDm2QRqnXbhNJsXMexYpdP5geTVcMed4Un5bq33B1KthW My12QhykbJOJf1hAs6DpamgRUnoA9wfL0pkeRddipVXxK3BYXv3iHd2nv9VqTsiG HVx/TZ5f4PbDgpjmImpyNK9qriRJ/kN7RGZoyMUQvAZvq9jGNEQnRQN5tom0krif oibALRUtdMUj99DjUfWguB36s70bTbNdBDJxUeYvQGvI0xSXrSBbG1pNYU2BAul8 ju73t5+gP8RjxAcsb5ajJwr5SUi9WVi/V5m4IvglkX+qn+rnWEqiyTVkvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAJB8RqjfQAj+U7O08LtJfsEhCyMB8GA1UdIwQY MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt ZTBhYTg2ZDI1MGUzLzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJP7uB+js 7F8oYyuxQwefnr3fDXjsLAwZDr8IPIyHRHuPCqsJqGMP/U6VPUnltviBXBX1+ZA4 hGOpbA3p2+0M4Rc4dT3SzWmh5j1PMt5IsrWeYxZlwOeI61ZYNQvTP3h2QvnMkm2b J0QEMeqM03p0ngwYvg+InyD8NXcQ3Kx30xiK7X6vIvXENmiW9lYkYhVT504lN5o2 E4oknM3KJiJwihEM2Yl4147Dv/eJ/ug1gB4uPM8t1k/QhOeKBTJSx4O/WCFj60BA maoWQ9+DmCsA9dgnkeA4IxYU/GHEkBw0BKfGSo4T5KVwdcbS6a2gHGPgmlH7nQOp +n+n2xmsyVwP4Q== -----END CERTIFICATE-----Generated at Sat Dec 20 03:53:07 2025 by rpki-client