This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json) Hash identifier: ux0FqgbOM5hOT3mh+yYCBhCM5r8/hymjGE4Gayx5Ei4= Subject key identifier: A2:F6:D3:0E:F3:4A:E0:13:FF:33:50:A5:6A:64:72:CF:F2:74:B9:74 Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5 Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5 Certificate serial: 019B59E42A697EC12BA54EE81512840B6B0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 09:01:23 +0000 Manifest this update: Fri 26 Dec 2025 09:01:23 +0000 Manifest next update: Sat 27 Dec 2025 09:01:23 +0000 Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: TSc9E6d988PYmukIcrZR02ceugG+ezipSfyN1JWxaBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:2a:69:7e:c1:2b:a5:4e:e8:15:12:84:0b:6b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5 Validity Not Before: Dec 26 09:01:23 2025 GMT Not After : Dec 27 09:01:23 2025 GMT Subject: CN=a2f6d30ef34ae013ff3350a56a6472cff274b974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:70:92:a8:ee:5b:7e:41:28:84:89:3e:54: 12:45:dc:18:15:56:5c:ce:5c:6c:6a:ca:a9:70:68: 15:aa:6a:51:fb:5d:a3:a7:06:18:a2:9d:a4:b8:92: 48:e9:62:00:e4:47:d1:68:17:02:e7:af:02:4c:11: ca:76:30:e4:23:43:22:9a:9a:69:80:34:b9:8c:60: 31:b8:b1:ff:c8:3c:87:ed:b0:22:45:cb:e6:d1:11: d0:79:db:d4:c7:17:f9:eb:c1:5a:45:3b:1d:64:41: 98:90:90:3d:9e:44:da:cd:c4:bc:6a:a7:71:d0:1e: bb:42:ee:fb:3a:34:cd:dd:f0:f7:e0:cc:a7:e5:08: b5:5a:5e:45:3a:c3:3d:78:e9:ec:53:fd:66:0b:54: ac:b0:cc:57:61:6f:f2:f5:de:4a:48:d1:c1:a9:19: 1d:e6:70:f7:38:0b:9c:65:98:30:6f:45:62:a6:ec: 8e:eb:69:f0:97:2e:d2:cf:14:60:0e:8d:52:b9:e2: d7:b3:91:e9:6e:52:18:94:38:a5:4c:4a:bc:ae:b2: f2:d1:01:7a:d4:32:9f:9e:3e:7a:81:c1:f0:ea:c0: ca:7c:9d:cf:09:4e:04:7e:67:44:b2:81:22:c6:15: 10:f2:68:58:ba:08:a0:be:98:c8:f6:6e:09:e4:f6: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F6:D3:0E:F3:4A:E0:13:FF:33:50:A5:6A:64:72:CF:F2:74:B9:74 X509v3 Authority Key Identifier: keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:73:d6:13:59:d2:49:4a:61:63:70:66:74:74:16:2e:24:a0: f4:b1:75:c2:61:52:71:83:3f:5e:66:71:0a:8d:f5:a2:10:50: 1f:6b:d5:3a:54:dc:f3:03:7b:73:c0:27:2d:1e:3b:73:83:c5: 23:ad:27:a2:87:b4:6d:c9:e5:8c:93:39:a8:3c:25:db:49:80: 6c:a6:56:9d:d5:4a:e5:13:86:02:79:cb:f0:e1:f7:13:c2:8f: ec:c9:e0:13:df:0a:a7:66:5b:22:48:a9:05:1f:5f:63:04:6c: 44:66:d4:96:e6:a6:b2:e0:b2:e6:99:26:58:85:65:f4:ff:c9: ca:bf:54:18:65:9d:a8:f9:84:aa:11:7f:62:72:a4:5d:ac:c1: 82:61:39:f4:a2:a2:7f:f1:23:26:fd:4a:25:d1:41:03:49:f4: e8:02:27:cd:91:e1:2d:e3:21:38:02:eb:ae:bd:b7:3a:b7:be: 8f:4b:c8:49:4a:70:e0:2f:fd:e1:02:ac:f3:91:4b:39:59:c4: 20:64:d7:52:ba:8d:c6:db:be:83:69:3a:39:c4:a0:32:be:e1: 56:4f:89:d0:0e:ed:a5:cc:b6:1f:ff:a3:bd:9b:29:15:a3:ce: f3:d4:7c:04:43:c7:5e:e2:a0:2d:9a:79:56:27:09:a2:07:6c: 11:55:21:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5CppfsErpU7oFRKEC2sNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhN2ZkNjBjYzhlN2JiNjI5MzIwNGYzMGEyMjZlMDA4NzUy NGIwYjUwHhcNMjUxMjI2MDkwMTIzWhcNMjUxMjI3MDkwMTIzWjAzMTEwLwYDVQQD EyhhMmY2ZDMwZWYzNGFlMDEzZmYzMzUwYTU2YTY0NzJjZmYyNzRiOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UxwkqjuW35BKISJPlQSRdwYFVZc zlxsasqpcGgVqmpR+12jpwYYop2kuJJI6WIA5EfRaBcC568CTBHKdjDkI0Mimppp gDS5jGAxuLH/yDyH7bAiRcvm0RHQedvUxxf568FaRTsdZEGYkJA9nkTazcS8aqdx 0B67Qu77OjTN3fD34Myn5Qi1Wl5FOsM9eOnsU/1mC1SssMxXYW/y9d5KSNHBqRkd 5nD3OAucZZgwb0VipuyO62nwly7SzxRgDo1SueLXs5HpblIYlDilTEq8rrLy0QF6 1DKfnj56gcHw6sDKfJ3PCU4EfmdEsoEixhUQ8mhYugigvpjI9m4J5PbVuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKL20w7zSuAT/zNQpWpkcs/ydLl0MB8GA1UdIwQY MBaAFNp/1gzI57tikyBPMKIm4Ah1JLC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMTk1ZDAtMWFiOC00MGEwLWE3Zjkt ZDZhYjkzZWQ5ZmI1LzEvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8wMTk1ZDAtMWFiOC00MGEwLWE3ZjktZDZhYjkzZWQ5ZmI1 LzEvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXPWE1nS SUphY3BmdHQWLiSg9LF1wmFScYM/XmZxCo31ohBQH2vVOlTc8wN7c8AnLR47c4PF I60nooe0bcnljJM5qDwl20mAbKZWndVK5ROGAnnL8OH3E8KP7MngE98Kp2ZbIkip BR9fYwRsRGbUluamsuCy5pkmWIVl9P/Jyr9UGGWdqPmEqhF/YnKkXazBgmE59KKi f/EjJv1KJdFBA0n06AInzZHhLeMhOALrrr23Ore+j0vISUpw4C/94QKs85FLOVnE IGTXUrqNxtu+g2k6OcSgMr7hVk+J0A7tpcy2H/+jvZspFaPO89R8BEPHXuKgLZp5 VicJogdsEVUhhA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:01 2025 by rpki-client