This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft File: 2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json) Hash identifier: mrAlnqHICITpdThxqFrVINrb0fjdEvESKSITCibVZFA= Subject key identifier: BA:AC:C9:C5:A4:45:9D:26:0A:96:0C:45:83:10:96:F2:2E:7A:59:CE Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10 Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410 Certificate serial: 019B38A1D03FEEDD84F367623791FAEB68C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft Manifest number: 0DF1 Signing time: Fri 19 Dec 2025 22:01:27 +0000 Manifest this update: Fri 19 Dec 2025 22:01:27 +0000 Manifest next update: Sat 20 Dec 2025 22:01:27 +0000 Files and hashes: 1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: QgrjFYX9PgZMIBkZD6ixBSnjsjnZ0q6MLyM7QvKKzio=) 2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=) 3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:d0:3f:ee:dd:84:f3:67:62:37:91:fa:eb:68:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410 Validity Not Before: Dec 19 22:01:27 2025 GMT Not After : Dec 20 22:01:27 2025 GMT Subject: CN=baacc9c5a4459d260a960c45831096f22e7a59ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:78:f3:49:aa:25:cb:83:7e:7b:66:43:6d:b5: 7d:af:2b:27:4b:92:0b:09:17:bd:c7:1e:85:33:53: 07:51:0a:9b:7c:a5:aa:a5:d4:9c:85:67:24:4d:57: 76:b0:77:b7:d4:fa:64:2c:5a:54:12:a6:4f:5d:66: d8:4c:8a:e3:36:8b:91:1c:17:07:21:ad:21:41:86: ff:69:c6:89:94:e8:0e:ab:03:f8:81:f0:50:4e:10: 06:98:7a:7b:9b:26:ad:eb:e1:1d:67:03:a1:79:31: 9f:ab:6c:93:db:17:d2:54:81:9e:11:30:ed:4e:6a: 40:7c:46:61:bc:f0:4f:f4:9a:e8:80:24:42:1f:8b: 72:c8:b3:b1:79:ba:d3:28:f7:51:0a:3d:bc:7e:fe: b2:a3:20:4a:62:fa:b7:9e:b2:7a:65:78:5e:94:b1: 24:99:36:32:df:c8:61:fb:85:39:db:fc:4d:c3:b9: 28:df:b0:31:4d:b2:f1:d5:44:5f:95:87:06:de:3e: 08:f2:b6:5f:10:db:ac:45:f5:ba:14:ca:8b:45:68: 98:a5:97:9b:a8:9b:17:37:af:58:b1:1c:b0:1b:07: 2a:61:8a:07:a8:2a:78:9b:1a:c1:12:ac:92:34:5c: 6c:27:0d:27:c7:e5:c0:5c:9b:f6:bf:28:d1:47:0d: a4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AC:C9:C5:A4:45:9D:26:0A:96:0C:45:83:10:96:F2:2E:7A:59:CE X509v3 Authority Key Identifier: keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ad:90:f4:2b:7a:cd:30:10:c9:42:22:33:3d:93:8f:5b:a7: 7a:fc:66:98:67:3b:6e:bf:26:3b:b1:69:c3:7b:d5:3c:5f:77: c7:ea:4a:d2:b2:23:74:49:c0:5f:36:df:a2:18:78:69:4c:e2: 46:de:1c:34:04:9d:77:13:e7:ff:9b:a0:d1:d4:8a:72:53:bf: ea:f3:f3:0e:a7:8a:97:f9:4c:8d:93:46:5d:2c:28:e8:eb:3c: 35:7a:08:da:84:8c:c9:71:46:b8:91:29:f8:f3:d0:ed:c6:d0: e1:db:05:19:68:3d:39:95:d3:f7:72:0a:49:71:24:f2:5d:51: 54:cd:ef:0b:f6:d1:79:50:c2:49:14:10:80:0f:62:6c:2e:da: f9:34:8e:b0:91:8f:45:63:02:eb:69:ea:7b:e0:90:03:d1:10: 73:87:fd:a5:4d:cd:7c:36:57:54:b1:6b:3f:fa:2a:f2:a3:21: 91:e7:4f:99:fc:72:d8:8b:79:a4:b5:cc:3e:7b:7a:2d:1e:44: 00:5a:73:0a:18:d1:64:9a:f5:a3:b2:cb:1b:91:ae:27:af:e4: 69:62:62:73:23:9d:8f:da:76:ba:09:65:2b:24:85:93:78:b5: 6f:31:fd:be:88:5d:80:82:7a:dd:9b:b6:19:ac:59:f7:62:72: b8:3c:de:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4odA/7t2E82diN5H662jEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDdiMjgxMzQ4YWJkYWMyNGMyYmQxNmRhMDY3NzVjYTc1 NWY0MTAwHhcNMjUxMjE5MjIwMTI3WhcNMjUxMjIwMjIwMTI3WjAzMTEwLwYDVQQD EyhiYWFjYzljNWE0NDU5ZDI2MGE5NjBjNDU4MzEwOTZmMjJlN2E1OWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXjzSaoly4N+e2ZDbbV9rysnS5IL CRe9xx6FM1MHUQqbfKWqpdSchWckTVd2sHe31PpkLFpUEqZPXWbYTIrjNouRHBcH Ia0hQYb/acaJlOgOqwP4gfBQThAGmHp7myat6+EdZwOheTGfq2yT2xfSVIGeETDt TmpAfEZhvPBP9JrogCRCH4tyyLOxebrTKPdRCj28fv6yoyBKYvq3nrJ6ZXhelLEk mTYy38hh+4U52/xNw7ko37AxTbLx1URflYcG3j4I8rZfENusRfW6FMqLRWiYpZeb qJsXN69YsRywGwcqYYoHqCp4mxrBEqySNFxsJw0nx+XAXJv2vyjRRw2kAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqsycWkRZ0mCpYMRYMQlvIuelnOMB8GA1UdIwQY MBaAFNlHsoE0ir2sJMK9FtoGd1ynVfQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYt NjZhYzBkYmE1YmYyLzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYtNjZhYzBkYmE1YmYy LzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIq2Q9Ct6 zTAQyUIiMz2Tj1unevxmmGc7br8mO7Fpw3vVPF93x+pK0rIjdEnAXzbfohh4aUzi Rt4cNASddxPn/5ug0dSKclO/6vPzDqeKl/lMjZNGXSwo6Os8NXoI2oSMyXFGuJEp +PPQ7cbQ4dsFGWg9OZXT93IKSXEk8l1RVM3vC/bReVDCSRQQgA9ibC7a+TSOsJGP RWMC62nqe+CQA9EQc4f9pU3NfDZXVLFrP/oq8qMhkedPmfxy2It5pLXMPnt6LR5E AFpzChjRZJr1o7LLG5GuJ6/kaWJicyOdj9p2ugllKySFk3i1bzH9vohdgIJ63Zu2 GaxZ92JyuDzeqg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:22:20 2025 by rpki-client