This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft File: 2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json) Hash identifier: 304VnooLG3Xr52+LrgDUeBE5Tlem6S1lYk0bijimuM0= Subject key identifier: 36:7D:F8:B3:F7:3C:58:6E:89:7D:9C:59:A6:E9:D2:0D:69:50:11:2D Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Certificate serial: 019B3CEC38BF9490125A388C3C3B9199C86F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft Manifest number: 01AF Signing time: Sat 20 Dec 2025 18:01:12 +0000 Manifest this update: Sat 20 Dec 2025 18:01:12 +0000 Manifest next update: Sun 21 Dec 2025 18:01:12 +0000 Files and hashes: 1: 1-zN68RzDUkQSvJXNS8dincbUleI.roa (hash: fE4oeSoLwqVmRgDbSnTQc1QLzjzal3yIn5BqU7p0EaA=) 2: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: p2vaPz2jFZdEH1Ry8uPi2hIR7F/R6yhV4m1H494ocCc=) 3: YZaUjQlCbflfEUbT2gpPLo1ny_U.roa (hash: +SwgIn7dK0HQ0r746yPpM+Y8qQkIQQdi0ZZhu/E+a8Q=) 4: fYh0q4RbsUeD03dj0rwHGm4y498.roa (hash: jid4JrHLpAnwUEs/6cvvjiWubSMoSPBicHqzkJH71lY=) 5: jazd_sDkuEJsPouRMKWYSplW4JA.roa (hash: lJqelurOOYzLhv1ncckBta0UihDNfRX5VVhF47Vr6lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:38:bf:94:90:12:5a:38:8c:3c:3b:91:99:c8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Validity Not Before: Dec 20 18:01:12 2025 GMT Not After : Dec 21 18:01:12 2025 GMT Subject: CN=367df8b3f73c586e897d9c59a6e9d20d6950112d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:51:34:34:c2:32:3c:f3:dd:8f:fb:3f:f0: 22:ed:9f:a1:08:63:56:e9:3d:b5:52:75:dc:d2:83: 9b:71:91:70:7a:0d:fe:f5:e5:1b:bb:6c:2d:0a:ca: 2c:9f:2e:2e:5c:ba:61:78:9e:f5:ff:a7:1f:6f:50: 12:c4:79:d9:c1:d8:21:cc:f0:a4:ca:76:92:f0:56: 62:ee:78:97:4c:6b:c3:e1:21:83:08:88:ed:a4:05: 70:23:9e:c4:cb:30:38:cc:12:8e:71:a7:db:2b:0a: 80:aa:21:aa:c9:3b:c0:4a:b9:4a:b5:13:6a:4c:c3: 36:00:02:37:fa:78:6e:13:7b:8b:d6:11:f8:ce:13: af:76:8e:98:5e:ab:1b:e3:0d:cd:d6:fd:26:04:fc: 0d:00:4f:c8:7b:60:36:72:3f:bf:00:17:a5:d1:de: 69:62:ee:5f:31:11:79:27:db:91:0a:59:c7:96:13: 2f:01:18:ef:69:03:73:1a:1e:a1:6e:a1:80:91:af: 37:fe:ae:30:ff:1c:67:c8:22:ac:fd:1b:e5:f8:22: 3f:d5:9e:8e:12:93:bc:81:1b:cf:26:bf:a5:2e:7f: 12:8e:22:9b:f1:5a:47:40:4f:54:19:c8:f8:48:c5: 2a:58:0c:db:f5:4f:32:c0:4d:9d:43:00:d6:17:df: 7c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7D:F8:B3:F7:3C:58:6E:89:7D:9C:59:A6:E9:D2:0D:69:50:11:2D X509v3 Authority Key Identifier: keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f6:19:21:bd:4c:55:6d:a3:03:54:da:09:9f:89:cf:71:5d: c3:71:a7:d9:0f:b8:58:8f:83:28:27:36:bd:6c:f3:29:f0:48: 32:3e:4b:61:f8:69:9d:1a:ee:82:1d:27:8c:4c:b6:df:08:a7: 1a:50:67:fe:fd:5f:c0:b7:61:94:c9:6f:4b:f1:64:89:fd:3f: 84:c6:4a:f9:a0:8a:64:be:bf:9a:6f:0b:7a:53:8e:d6:b4:62: 75:b2:6a:7d:43:0f:8f:79:ce:cb:e6:67:00:84:75:1d:08:1b: bc:7a:7a:b0:6c:c0:57:32:0d:47:38:5a:7a:28:89:3d:71:ec: ce:0c:9c:50:40:f9:7e:46:80:ef:d0:07:24:bf:27:d5:55:5a: cb:1a:86:99:c5:e5:e1:51:40:95:9f:e3:d6:f6:c4:12:44:82: f8:b1:b3:2f:a0:ba:ae:d0:95:31:d4:c7:2a:d6:d2:64:06:46: d0:b2:88:3d:cc:24:d7:87:65:86:26:4c:60:a1:cb:53:cc:7a: 98:fe:ca:30:c7:a6:4b:75:f9:83:6f:24:4d:83:0b:c4:10:cd: 9b:9c:5c:78:70:ca:a8:48:76:e6:11:57:0a:13:99:ee:3b:3f: fe:99:91:22:0e:ff:76:8f:10:c3:29:88:45:3d:66:11:ff:02: 84:e5:0d:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Di/lJASWjiMPDuRmchvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDQ2OGYzY2MzZjM4NmYyNmU2MjgxYjdmYThiMGMzYmIy MzZhMDYwHhcNMjUxMjIwMTgwMTEyWhcNMjUxMjIxMTgwMTEyWjAzMTEwLwYDVQQD EygzNjdkZjhiM2Y3M2M1ODZlODk3ZDljNTlhNmU5ZDIwZDY5NTAxMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquRRNDTCMjzz3Y/7P/Ai7Z+hCGNW 6T21UnXc0oObcZFweg3+9eUbu2wtCsosny4uXLpheJ71/6cfb1ASxHnZwdghzPCk ynaS8FZi7niXTGvD4SGDCIjtpAVwI57EyzA4zBKOcafbKwqAqiGqyTvASrlKtRNq TMM2AAI3+nhuE3uL1hH4zhOvdo6YXqsb4w3N1v0mBPwNAE/Ie2A2cj+/ABel0d5p Yu5fMRF5J9uRClnHlhMvARjvaQNzGh6hbqGAka83/q4w/xxnyCKs/Rvl+CI/1Z6O EpO8gRvPJr+lLn8SjiKb8VpHQE9UGcj4SMUqWAzb9U8ywE2dQwDWF998LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZ9+LP3PFhuiX2cWabp0g1pUBEtMB8GA1UdIwQY MBaAFNlEaPPMPzhvJuYoG3+osMO7I2oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2Qt NzZmYTUxNWI0YjZlLzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2QtNzZmYTUxNWI0YjZl LzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPYZIb1M VW2jA1TaCZ+Jz3Fdw3Gn2Q+4WI+DKCc2vWzzKfBIMj5LYfhpnRrugh0njEy23win GlBn/v1fwLdhlMlvS/Fkif0/hMZK+aCKZL6/mm8LelOO1rRidbJqfUMPj3nOy+Zn AIR1HQgbvHp6sGzAVzINRzhaeiiJPXHszgycUED5fkaA79AHJL8n1VVayxqGmcXl 4VFAlZ/j1vbEEkSC+LGzL6C6rtCVMdTHKtbSZAZG0LKIPcwk14dlhiZMYKHLU8x6 mP7KMMemS3X5g28kTYMLxBDNm5xceHDKqEh25hFXChOZ7js//pmRIg7/do8QwymI RT1mEf8ChOUN3A== -----END CERTIFICATE-----Generated at Sun Dec 21 03:55:38 2025 by rpki-client