This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json) Hash identifier: lOGutljM1fEWe2vhhwTR8cnujKeocvGuv37IvCLMFsc= Subject key identifier: 63:5A:FF:62:60:D4:E3:6D:19:72:10:1E:7B:48:7F:83:32:0F:67:A0 Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Certificate serial: 019B3A588BC148CCD74A7E94D16681950AB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 06:00:39 +0000 Manifest this update: Sat 20 Dec 2025 06:00:39 +0000 Manifest next update: Sun 21 Dec 2025 06:00:39 +0000 Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: MN5sntgZkmkp95A9TofPPDXOhGDCQf/3i6M/QTann9Y=) 2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=) 3: rSNt5mbOe2enCzlMGRj201i-_cs.roa (hash: uWOokgWLXLQE0h3ZyEyKwrogrQWS207xC1q6GvYUv54=) 4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:8b:c1:48:cc:d7:4a:7e:94:d1:66:81:95:0a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Validity Not Before: Dec 20 06:00:39 2025 GMT Not After : Dec 21 06:00:39 2025 GMT Subject: CN=635aff6260d4e36d1972101e7b487f83320f67a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6b:cc:a5:af:86:74:41:a8:9d:3a:ff:79:54: a6:0e:3d:b2:fb:74:01:da:dd:81:40:7d:87:2d:2f: d1:d6:25:9a:33:58:cd:78:e6:4c:a1:fd:ca:f7:e2: ec:2c:e5:19:9c:98:5d:02:a6:ed:a0:42:57:24:94: 06:f9:40:12:4e:e2:72:ad:a1:c9:df:93:af:4a:51: 0f:f1:b5:ea:b8:64:0e:be:b8:5f:fd:71:19:7a:6b: 3b:86:f0:a8:22:15:c2:0e:2b:51:45:15:b3:25:44: 04:1d:88:b0:ff:b8:f9:83:e2:27:29:e8:ca:e9:41: 8f:fa:6d:84:56:4f:18:63:d2:19:5c:14:51:7f:8b: 69:0c:f6:fc:32:92:d7:8b:e0:0a:36:99:33:b4:11: e7:7a:e4:63:57:ed:a5:2a:b1:6b:8f:c7:a2:61:76: f1:c2:95:6f:d1:34:95:9b:b2:3d:06:b6:62:85:9d: f6:8c:1f:d6:dc:0c:76:b1:01:0e:f9:25:2e:68:2c: 5d:d0:ee:a5:e4:34:ec:48:60:3a:bd:4d:43:5f:98: 09:af:dd:0f:e5:6d:45:85:0e:d4:9a:a3:11:67:7f: ac:44:60:dc:db:ff:d3:ea:1d:9c:3d:d4:c9:51:e9: b7:83:4c:06:a8:93:01:22:ed:d4:fc:89:a9:19:f3: 51:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5A:FF:62:60:D4:E3:6D:19:72:10:1E:7B:48:7F:83:32:0F:67:A0 X509v3 Authority Key Identifier: keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f0:89:98:a8:0a:ce:f1:27:68:9a:99:a1:98:28:93:38:53: 67:83:55:bc:6c:11:33:c0:cb:24:20:5e:56:a4:09:6a:34:5e: 90:65:c4:9f:58:ee:ca:96:a5:57:fe:be:bb:a8:49:4d:16:4a: 83:d2:d6:fc:34:6d:f0:7c:98:e6:f3:78:72:7e:cb:60:81:26: 94:bf:4e:0a:6c:63:1d:ac:08:7c:1b:6e:cf:8f:69:84:d8:a1: 8d:d7:05:b0:b2:16:c9:e1:9c:e5:25:49:0a:51:24:d4:38:7b: b9:15:b9:21:ff:89:a4:f9:f1:15:5f:89:98:0d:61:12:2f:5f: 44:14:49:c6:65:d9:23:6b:ca:4d:82:ac:d4:d6:6d:5f:1c:89: c8:99:a7:a8:cb:0b:61:5c:14:56:90:a5:5d:f4:29:d3:d8:6f: 4d:f2:9a:10:2a:1b:44:fb:20:22:06:31:7c:84:9b:53:bc:f5: 13:f3:39:66:74:6c:c9:f6:1d:61:e2:0c:72:bb:be:31:96:eb: 5d:4c:4d:56:85:12:3c:86:e3:03:ab:d8:1b:04:84:86:91:39: 70:fc:d1:b8:d3:52:7e:f7:ee:91:da:1b:21:1e:ac:2d:e5:d5: 76:b2:39:b4:95:95:fd:b0:54:fa:08:e8:c9:b1:73:3b:0d:64: dc:b5:c9:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WIvBSMzXSn6U0WaBlQq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh ZTUyNDMwHhcNMjUxMjIwMDYwMDM5WhcNMjUxMjIxMDYwMDM5WjAzMTEwLwYDVQQD Eyg2MzVhZmY2MjYwZDRlMzZkMTk3MjEwMWU3YjQ4N2Y4MzMyMGY2N2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mvMpa+GdEGonTr/eVSmDj2y+3QB 2t2BQH2HLS/R1iWaM1jNeOZMof3K9+LsLOUZnJhdAqbtoEJXJJQG+UASTuJyraHJ 35OvSlEP8bXquGQOvrhf/XEZems7hvCoIhXCDitRRRWzJUQEHYiw/7j5g+InKejK 6UGP+m2EVk8YY9IZXBRRf4tpDPb8MpLXi+AKNpkztBHneuRjV+2lKrFrj8eiYXbx wpVv0TSVm7I9BrZihZ32jB/W3Ax2sQEO+SUuaCxd0O6l5DTsSGA6vU1DX5gJr90P 5W1FhQ7UmqMRZ3+sRGDc2//T6h2cPdTJUem3g0wGqJMBIu3U/ImpGfNR0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNa/2Jg1ONtGXIQHntIf4MyD2egMB8GA1UdIwQY MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt NGY5MTEyZWRlOTY4LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4 LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPCJmKgK zvEnaJqZoZgokzhTZ4NVvGwRM8DLJCBeVqQJajRekGXEn1juypalV/6+u6hJTRZK g9LW/DRt8HyY5vN4cn7LYIEmlL9OCmxjHawIfBtuz49phNihjdcFsLIWyeGc5SVJ ClEk1Dh7uRW5If+JpPnxFV+JmA1hEi9fRBRJxmXZI2vKTYKs1NZtXxyJyJmnqMsL YVwUVpClXfQp09hvTfKaECobRPsgIgYxfISbU7z1E/M5ZnRsyfYdYeIMcru+MZbr XUxNVoUSPIbjA6vYGwSEhpE5cPzRuNNSfvfukdobIR6sLeXVdrI5tJWV/bBU+gjo ybFzOw1k3LXJwg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:23:31 2025 by rpki-client