This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json) Hash identifier: pFv1c4Gy+IwHTise3iv/DZbsRsxLp1toBtJ5VGov80U= Subject key identifier: 11:C0:E8:96:4C:B3:9B:60:AE:1E:F8:CE:4E:0C:83:5E:52:BB:0C:81 Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81 Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981 Certificate serial: 019B4EBBDB11B200A99ECEBD5AC90B5195BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 05:01:32 +0000 Manifest this update: Wed 24 Dec 2025 05:01:32 +0000 Manifest next update: Thu 25 Dec 2025 05:01:32 +0000 Files and hashes: 1: RqpmvtEuocHrmP7Ze69kHKJjV2o.roa (hash: VpfnBez6Qe55xKI1hHxTR48bK27mTUWeo89TggdAg0Q=) 2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: YkYvdlwaCh4M3+mxrvIG4OzkyawchJSl9AkGB6r2KBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:db:11:b2:00:a9:9e:ce:bd:5a:c9:0b:51:95:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981 Validity Not Before: Dec 24 05:01:32 2025 GMT Not After : Dec 25 05:01:32 2025 GMT Subject: CN=11c0e8964cb39b60ae1ef8ce4e0c835e52bb0c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0e:7c:74:79:0d:23:63:5b:f3:a8:be:1f:63: e3:07:bc:00:af:6f:a1:34:1a:8c:b9:ae:bf:11:1c: bd:3d:64:b9:17:c1:91:f3:54:90:78:d9:bb:68:ad: 73:2f:cf:87:1e:3a:ba:5f:c8:a2:62:51:de:11:a3: 40:46:0c:3e:fb:6e:55:ec:cc:f0:42:8e:2c:61:91: 81:71:16:f0:81:94:2d:13:18:75:0a:aa:f9:2b:05: ff:3a:c9:ab:f9:1a:fc:47:b0:2b:2b:8a:b5:95:6a: 89:cd:b2:c0:c3:d6:09:58:3a:f4:76:bf:dd:e8:74: 45:8c:c1:54:c0:0d:89:a1:10:18:6f:6a:64:a6:56: d3:76:d2:7c:d8:2a:16:52:4a:91:a2:af:bf:fa:6e: c7:53:b0:07:2b:9f:ac:cc:9d:d5:8f:b4:48:07:b6: 2d:74:9f:80:88:db:1f:d4:f8:67:be:56:12:a4:2f: 0a:78:01:9a:2c:ba:d2:0d:b7:64:9e:44:22:3a:86: f7:68:03:65:80:c2:5e:ca:60:7f:b9:d9:96:46:8e: 6b:cf:aa:7f:bc:d3:fa:23:5f:41:fb:03:46:c5:f1: b3:7e:ea:8c:7b:db:74:fd:de:64:cd:0b:ef:50:83: ee:ac:a5:11:43:92:6e:50:2f:01:b6:56:30:51:ca: 8e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C0:E8:96:4C:B3:9B:60:AE:1E:F8:CE:4E:0C:83:5E:52:BB:0C:81 X509v3 Authority Key Identifier: keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:87:4f:03:a9:88:96:11:b5:cf:77:ea:de:c4:9f:a8:bd:46: 81:b2:54:d3:95:2d:26:5d:cd:17:40:63:82:eb:f4:ad:ac:cf: 44:bf:7b:de:3e:da:2a:b1:74:c9:8b:a8:30:35:55:2e:a0:81: 73:f0:87:f6:df:b9:e8:aa:f3:53:ce:81:7e:c9:99:84:03:d2: c8:23:4f:db:a5:e3:0a:5e:6f:4b:96:2a:91:51:bc:e1:2b:a4: b8:64:67:d6:8d:35:c5:c7:20:10:92:0c:9d:c8:fe:7b:00:c8: 54:21:aa:96:d0:ba:0f:c2:f8:84:d6:8c:5a:7b:1c:d8:6e:35: 93:05:8f:59:fe:5f:94:66:b8:70:2d:e4:c1:b4:fe:db:17:44: 00:ac:dd:1a:cb:7e:c2:7a:72:79:7d:fa:b5:6a:56:c9:8e:6f: 42:79:be:ce:7b:b5:b8:57:93:e2:2a:3d:5b:b5:b4:37:ab:3e: 12:64:b6:ac:44:85:b1:d1:67:a0:b4:e2:4b:46:8d:c9:23:3e: 33:2a:fa:ec:ff:41:6d:f0:8b:b9:08:b9:55:cb:fa:83:0c:a8: d1:b1:88:fd:2f:b7:31:28:ff:c1:78:c4:00:11:f8:7c:7c:d2: d5:ea:ea:e5:9f:94:3a:2c:7f:bc:cb:bf:bd:a5:04:e2:5f:61: 6e:f5:5c:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu9sRsgCpns69WskLUZW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Njk1Yjk4ZTA4YTM3OGJmMGRjOTQ0ZDJmMWE2MGExZjY5 NTQ5ODEwHhcNMjUxMjI0MDUwMTMyWhcNMjUxMjI1MDUwMTMyWjAzMTEwLwYDVQQD EygxMWMwZTg5NjRjYjM5YjYwYWUxZWY4Y2U0ZTBjODM1ZTUyYmIwYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A58dHkNI2Nb86i+H2PjB7wAr2+h NBqMua6/ERy9PWS5F8GR81SQeNm7aK1zL8+HHjq6X8iiYlHeEaNARgw++25V7Mzw Qo4sYZGBcRbwgZQtExh1Cqr5KwX/Osmr+Rr8R7ArK4q1lWqJzbLAw9YJWDr0dr/d 6HRFjMFUwA2JoRAYb2pkplbTdtJ82CoWUkqRoq+/+m7HU7AHK5+szJ3Vj7RIB7Yt dJ+AiNsf1PhnvlYSpC8KeAGaLLrSDbdknkQiOob3aANlgMJeymB/udmWRo5rz6p/ vNP6I19B+wNGxfGzfuqMe9t0/d5kzQvvUIPurKURQ5JuUC8BtlYwUcqObwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHA6JZMs5tgrh74zk4Mg15SuwyBMB8GA1UdIwQY MBaAFLdpW5jgijeL8NyUTS8aYKH2lUmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MWU5YWEtODVlZC00ODUwLWI0NmIt Njg4NWFhODdjNGZkLzEvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84MWU5YWEtODVlZC00ODUwLWI0NmItNjg4NWFhODdjNGZk LzEvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYdPA6mI lhG1z3fq3sSfqL1GgbJU05UtJl3NF0Bjguv0razPRL973j7aKrF0yYuoMDVVLqCB c/CH9t+56KrzU86BfsmZhAPSyCNP26XjCl5vS5YqkVG84SukuGRn1o01xccgEJIM ncj+ewDIVCGqltC6D8L4hNaMWnsc2G41kwWPWf5flGa4cC3kwbT+2xdEAKzdGst+ wnpyeX36tWpWyY5vQnm+znu1uFeT4io9W7W0N6s+EmS2rESFsdFnoLTiS0aNySM+ Myr67P9BbfCLuQi5Vcv6gwyo0bGI/S+3MSj/wXjEABH4fHzS1erq5Z+UOix/vMu/ vaUE4l9hbvVcTA== -----END CERTIFICATE-----Generated at Wed Dec 24 12:33:47 2025 by rpki-client