This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft File: u2MubMSrZyETUbUpP4Fdfl8JOr0.mft (raw, json) Hash identifier: bI3Mcp1VtSR5WcasaTNePTQkn7/EzC09ebX0F2IM6TM= Subject key identifier: 17:B9:75:15:1B:3B:01:0E:1F:D4:84:A2:7F:B2:1E:0C:60:1D:C4:EC Authority key identifier: BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD Certificate issuer: /CN=bb632e6cc4ab67211351b5293f815d7e5f093abd Certificate serial: 019B28C0468478ADCFBFDA96DF1EE46077E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft Manifest number: 046C Signing time: Tue 16 Dec 2025 20:00:48 +0000 Manifest this update: Tue 16 Dec 2025 20:00:48 +0000 Manifest next update: Wed 17 Dec 2025 20:00:48 +0000 Files and hashes: 1: u2MubMSrZyETUbUpP4Fdfl8JOr0.crl (hash: y1A92MpgKn8qje3KDhMTmadlD8CIH1XXIimcxa7a6Rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:46:84:78:ad:cf:bf:da:96:df:1e:e4:60:77:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb632e6cc4ab67211351b5293f815d7e5f093abd Validity Not Before: Dec 16 20:00:48 2025 GMT Not After : Dec 17 20:00:48 2025 GMT Subject: CN=17b975151b3b010e1fd484a27fb21e0c601dc4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c1:f5:6f:a3:e8:fd:e0:52:d9:92:1f:90:dc: 1f:44:83:84:57:cd:70:44:d3:d0:a8:c2:29:28:e8: 57:33:a0:df:f8:5f:d0:8e:08:db:c9:52:09:2f:56: e8:7d:5c:1e:10:0f:c2:5e:27:62:c9:03:19:fd:ee: 34:9e:bd:92:e1:1c:32:d2:99:c3:44:a5:10:e6:f0: 69:6e:ab:89:21:1d:06:1f:06:dc:0f:bd:90:09:35: a9:76:33:59:09:70:62:3d:00:1f:24:55:dd:3c:a2: d8:6c:a3:51:0d:d8:c3:c6:07:ad:65:c9:09:74:a1: de:ce:0b:02:89:0e:18:64:24:66:62:ba:1b:c5:24: c3:37:55:eb:6a:b6:33:c5:32:3c:fc:60:21:f8:f8: d5:2e:43:e1:1e:a6:2c:f3:1b:fe:51:63:10:4f:1d: c6:78:34:ba:ad:60:f3:79:01:a2:64:93:95:01:d0: 9d:44:a2:66:10:2e:93:cd:9d:c5:6a:7b:ae:7f:5e: ec:f5:2f:e9:98:26:04:10:80:e3:90:3f:0b:ab:6c: d6:2b:a7:e9:69:4e:6b:e6:49:25:cc:a7:a7:22:2e: 2a:69:f7:26:3d:31:c2:17:e1:48:70:61:1c:1d:ac: 34:a4:d6:c7:d8:f7:e1:66:2b:a4:af:10:1c:ad:e8: 08:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B9:75:15:1B:3B:01:0E:1F:D4:84:A2:7F:B2:1E:0C:60:1D:C4:EC X509v3 Authority Key Identifier: keyid:BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:df:84:fb:cf:35:bc:90:db:58:fd:aa:77:d4:43:f9:2f:8d: 3b:74:6e:b8:40:d4:cb:0e:e3:91:86:9c:2c:a1:4d:26:c8:62: 65:b7:fe:02:21:77:ed:4c:9d:0d:49:07:2b:2b:d4:db:70:ff: 61:df:e0:ee:9b:75:54:ca:fa:39:f8:a3:94:ce:35:09:1f:19: f5:44:15:89:e0:fe:b0:2d:73:0f:1a:ad:60:f4:b5:81:b5:c6: 57:4d:34:6d:fa:9f:19:49:c1:17:cc:c3:fc:88:fb:f8:81:e0: cb:39:b8:4f:6f:43:05:22:14:bf:a3:f0:a2:52:03:71:2c:21: df:97:d5:be:38:fe:16:cd:c8:3c:ce:cf:3a:f8:32:65:73:32: c0:6a:de:c3:6a:5a:7e:05:8a:89:0d:79:ff:62:d6:af:f2:ea: fc:8d:98:c3:73:26:56:fd:02:6c:43:de:69:16:f0:b6:14:5e: cc:db:85:95:06:69:f2:19:b4:05:e1:35:f0:2e:ea:52:11:4b: 05:42:05:42:a7:3d:7a:b5:1a:8d:91:17:4d:17:b4:fb:a2:ae: ef:6d:88:4b:bb:83:9f:bb:8b:f8:f4:ff:35:94:41:4c:9a:cc: 57:d6:05:32:52:c5:22:1d:ff:1a:d8:fd:38:d1:1a:77:d9:f7: 8a:a2:12:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowEaEeK3Pv9qW3x7kYHfhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNjMyZTZjYzRhYjY3MjExMzUxYjUyOTNmODE1ZDdlNWYw OTNhYmQwHhcNMjUxMjE2MjAwMDQ4WhcNMjUxMjE3MjAwMDQ4WjAzMTEwLwYDVQQD EygxN2I5NzUxNTFiM2IwMTBlMWZkNDg0YTI3ZmIyMWUwYzYwMWRjNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cH1b6Po/eBS2ZIfkNwfRIOEV81w RNPQqMIpKOhXM6Df+F/QjgjbyVIJL1bofVweEA/CXidiyQMZ/e40nr2S4Rwy0pnD RKUQ5vBpbquJIR0GHwbcD72QCTWpdjNZCXBiPQAfJFXdPKLYbKNRDdjDxgetZckJ dKHezgsCiQ4YZCRmYrobxSTDN1XrarYzxTI8/GAh+PjVLkPhHqYs8xv+UWMQTx3G eDS6rWDzeQGiZJOVAdCdRKJmEC6TzZ3Fanuuf17s9S/pmCYEEIDjkD8Lq2zWK6fp aU5r5kklzKenIi4qafcmPTHCF+FIcGEcHaw0pNbH2PfhZiukrxAcregIpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe5dRUbOwEOH9SEon+yHgxgHcTsMB8GA1UdIwQY MBaAFLtjLmzEq2chE1G1KT+BXX5fCTq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTJNdWJNU3JaeUVUVWJVcFA0RmRmbDhKT3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMTM4NGMtNGI1Yy00MmM3LWEzY2Qt ZmI4YWQyZGIxZjIwLzEvdTJNdWJNU3JaeUVUVWJVcFA0RmRmbDhKT3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iMTM4NGMtNGI1Yy00MmM3LWEzY2QtZmI4YWQyZGIxZjIw LzEvdTJNdWJNU3JaeUVUVWJVcFA0RmRmbDhKT3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9+E+881 vJDbWP2qd9RD+S+NO3RuuEDUyw7jkYacLKFNJshiZbf+AiF37UydDUkHKyvU23D/ Yd/g7pt1VMr6OfijlM41CR8Z9UQVieD+sC1zDxqtYPS1gbXGV000bfqfGUnBF8zD /Ij7+IHgyzm4T29DBSIUv6PwolIDcSwh35fVvjj+Fs3IPM7POvgyZXMywGrew2pa fgWKiQ15/2LWr/Lq/I2Yw3MmVv0CbEPeaRbwthRezNuFlQZp8hm0BeE18C7qUhFL BUIFQqc9erUajZEXTRe0+6Ku722IS7uDn7uL+PT/NZRBTJrMV9YFMlLFIh3/Gtj9 ONEad9n3iqISCA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:33:03 2025 by rpki-client