This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft File: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft (raw, json) Hash identifier: NuUMKfMhCKl3dkL/pEotaebiiKrsJa+Z5OOCI6PFgUw= Subject key identifier: C3:AC:5E:CD:CA:18:FD:CD:60:02:84:73:2B:FE:8A:8B:00:74:0A:90 Authority key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4 Certificate issuer: /CN=47662f9ff6b643c467a2b434b76f825ebb66fed4 Certificate serial: 019B53AC04CED651F32DA3DCE9716133DD57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft Manifest number: 0753 Signing time: Thu 25 Dec 2025 04:02:20 +0000 Manifest this update: Thu 25 Dec 2025 04:02:20 +0000 Manifest next update: Fri 26 Dec 2025 04:02:20 +0000 Files and hashes: 1: KwW0a13v-16rO2m-BTqCxx8rpAo.roa (hash: krFsjsEBadu6bDJqG1OXIARdZJq+ewHj8q4uQfOufeM=) 2: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl (hash: Sf0uAl+CdIatzWD3RGHjuR8E0aA07JqbHjGcoXFHtxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:04:ce:d6:51:f3:2d:a3:dc:e9:71:61:33:dd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4 Validity Not Before: Dec 25 04:02:20 2025 GMT Not After : Dec 26 04:02:20 2025 GMT Subject: CN=c3ac5ecdca18fdcd600284732bfe8a8b00740a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:f7:c2:45:11:fb:ae:3c:df:96:ce:4e:e1: f0:38:93:ee:b8:15:6f:6d:94:a7:29:07:3c:e3:7f: ca:dc:f5:6e:07:88:99:c5:9e:99:0d:56:6a:12:9d: 54:52:0d:34:ac:70:6c:9c:8c:99:db:84:17:fb:6c: 26:65:a0:dd:9e:45:3c:23:cd:95:06:85:91:2e:6d: 69:63:34:07:de:f7:ac:d9:ee:b2:72:67:93:2c:29: b7:08:1f:8a:35:a3:a5:b2:35:d7:40:11:3d:c6:e9: 6d:99:52:24:50:7d:4c:ad:6a:ac:b0:61:53:18:50: fd:71:0b:a3:ea:87:3f:65:91:86:d3:82:a3:00:64: 0c:7a:7c:86:0e:4b:78:ba:d7:93:ae:63:f8:b2:8c: ea:1a:99:1e:c6:2c:d0:9a:2c:80:d9:fd:37:bd:bf: 24:48:e4:af:1f:19:a8:cb:20:24:bb:d0:7b:3a:2e: d2:4b:21:0c:51:b7:1b:b7:c9:f7:d0:e2:6b:fa:1e: 6a:f6:53:28:0c:04:01:12:f5:3c:3e:e7:87:f4:a2: af:0c:29:c0:c2:d4:2e:aa:9a:7f:9d:1e:0f:66:a5: 7a:be:e8:b4:85:99:24:73:cd:32:aa:41:cc:bf:fc: fa:cd:5d:69:66:cf:f5:5d:2f:53:e3:2c:d5:0c:8a: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AC:5E:CD:CA:18:FD:CD:60:02:84:73:2B:FE:8A:8B:00:74:0A:90 X509v3 Authority Key Identifier: keyid:47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d6:44:df:35:83:f4:28:c7:6d:73:4c:27:b5:f3:38:9d:e6: 8f:a8:35:48:73:84:c7:71:bf:df:3a:75:fb:bf:65:72:2d:55: 8d:06:94:1c:6c:eb:e4:ac:b7:ae:f9:14:0f:dd:c5:5f:bc:bc: a0:80:73:a0:3f:bf:c5:0a:50:ab:13:6e:41:0c:84:6a:da:a2: 10:7f:b2:2b:21:94:18:ca:a8:f3:3b:6e:86:b0:48:3b:c7:5a: bf:e1:07:47:10:c5:be:e9:8f:b6:e8:bf:4b:b9:3b:f7:79:d0: b4:7b:c0:d8:c5:fd:26:72:5d:49:76:4a:45:9a:6a:10:6b:7a: 80:76:b8:3e:27:b9:cd:7c:9f:ea:61:ae:e3:35:29:3b:98:84: 89:ba:d2:1e:b3:14:9b:65:17:7c:7d:8b:c5:e5:82:3f:79:2c: c9:06:87:27:d6:14:62:9f:48:16:bd:f4:eb:50:5e:4b:9c:8d: 18:e0:a9:63:7a:e6:f3:cc:95:8a:61:e2:97:57:91:da:1b:5c: a3:2d:3a:5a:bd:cc:4f:0e:9f:9f:08:f5:05:2a:c0:84:d0:8a: 65:a4:b4:3a:33:3e:59:34:f3:68:cb:35:75:1d:15:b9:21:ff: b8:90:ad:3c:3d:7a:f4:dd:2e:56:44:74:bf:5f:64:dc:3e:1d: 65:c1:32:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrATO1lHzLaPc6XFhM91XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NjYyZjlmZjZiNjQzYzQ2N2EyYjQzNGI3NmY4MjVlYmI2 NmZlZDQwHhcNMjUxMjI1MDQwMjIwWhcNMjUxMjI2MDQwMjIwWjAzMTEwLwYDVQQD EyhjM2FjNWVjZGNhMThmZGNkNjAwMjg0NzMyYmZlOGE4YjAwNzQwYTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolD3wkUR+64835bOTuHwOJPuuBVv bZSnKQc843/K3PVuB4iZxZ6ZDVZqEp1UUg00rHBsnIyZ24QX+2wmZaDdnkU8I82V BoWRLm1pYzQH3ves2e6ycmeTLCm3CB+KNaOlsjXXQBE9xultmVIkUH1MrWqssGFT GFD9cQuj6oc/ZZGG04KjAGQMenyGDkt4uteTrmP4sozqGpkexizQmiyA2f03vb8k SOSvHxmoyyAku9B7Oi7SSyEMUbcbt8n30OJr+h5q9lMoDAQBEvU8PueH9KKvDCnA wtQuqpp/nR4PZqV6vui0hZkkc80yqkHMv/z6zV1pZs/1XS9T4yzVDIrCUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOsXs3KGP3NYAKEcyv+iosAdAqQMB8GA1UdIwQY MBaAFEdmL5/2tkPEZ6K0NLdvgl67Zv7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjJZdm5fYTJROFJub3JRMHQyLUNYcnRtX3RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iNWYxNzctYmJkZC00MGNmLTg3ZTUt YjBiNGM0ZjJmZDkwLzEvUjJZdm5fYTJROFJub3JRMHQyLUNYcnRtX3RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9iNWYxNzctYmJkZC00MGNmLTg3ZTUtYjBiNGM0ZjJmZDkw LzEvUjJZdm5fYTJROFJub3JRMHQyLUNYcnRtX3RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdZE3zWD 9CjHbXNMJ7XzOJ3mj6g1SHOEx3G/3zp1+79lci1VjQaUHGzr5Ky3rvkUD93FX7y8 oIBzoD+/xQpQqxNuQQyEatqiEH+yKyGUGMqo8ztuhrBIO8dav+EHRxDFvumPtui/ S7k793nQtHvA2MX9JnJdSXZKRZpqEGt6gHa4Pie5zXyf6mGu4zUpO5iEibrSHrMU m2UXfH2LxeWCP3ksyQaHJ9YUYp9IFr3061BeS5yNGOCpY3rm88yVimHil1eR2htc oy06Wr3MTw6fnwj1BSrAhNCKZaS0OjM+WTTzaMs1dR0VuSH/uJCtPD169N0uVkR0 v19k3D4dZcEyTQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:05:35 2025 by rpki-client