This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json) Hash identifier: NkjXlrCCL03N0GTeNRJWFkENNdYDoXSoCP1vUb5ItLo= Subject key identifier: 43:36:86:DB:E6:A0:FB:B6:06:8A:4B:9D:8C:60:9C:E7:16:98:D4:F5 Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25 Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025 Certificate serial: 019B3F11CA4FF048BF94AD4CD16ADD40CC25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft Manifest number: 063A Signing time: Sun 21 Dec 2025 04:01:29 +0000 Manifest this update: Sun 21 Dec 2025 04:01:29 +0000 Manifest next update: Mon 22 Dec 2025 04:01:29 +0000 Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: 0EPUI1+3LwcibugB65DFcKEqXXkB6YA4mrTMMVlFQ+I=) 2: HlRlmfqG33_y8zZWUJ5cFuyj6Fc.roa (hash: u9+BSFLokNeEPeP/eOU5bAd4eXptmEVrwo502ugbJuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:ca:4f:f0:48:bf:94:ad:4c:d1:6a:dd:40:cc:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025 Validity Not Before: Dec 21 04:01:29 2025 GMT Not After : Dec 22 04:01:29 2025 GMT Subject: CN=433686dbe6a0fbb6068a4b9d8c609ce71698d4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:03:7c:5c:6d:2b:ed:5a:58:2a:8b:2c:98:e5: a3:e2:2d:ff:96:78:89:97:77:ac:b5:3b:2c:e5:2c: 4e:e0:f9:ec:4f:ff:92:53:d5:16:82:d7:0c:34:57: 0b:ce:91:19:07:2b:d3:c6:16:16:68:21:4b:58:b3: 2c:9b:d7:25:74:c4:23:44:c6:2d:f4:94:d1:53:37: 84:c8:83:3c:05:c8:d3:9c:c7:86:a2:94:3a:34:41: c4:88:38:36:84:b1:f3:df:d2:2c:f8:fa:9e:e0:cb: 2f:5c:5d:4c:99:60:06:8b:ee:28:b8:a2:a1:21:9d: b9:5b:99:d0:c7:60:bd:3d:50:22:90:29:cd:ff:71: 6f:e1:ce:da:3c:02:1e:0f:c8:59:9b:eb:a3:fb:4c: 6c:af:4c:45:94:88:0b:5f:3d:55:a5:fc:a0:d2:e4: 92:51:15:47:d4:e0:ab:6f:39:75:60:77:a7:b6:09: fa:aa:93:89:e2:67:7c:44:3e:64:3a:b8:91:bb:79: da:94:d6:6a:63:ed:f2:a0:06:f2:ef:cf:b1:5d:27: c2:54:61:6c:41:87:60:3d:f5:d2:22:27:3f:b1:31: 04:38:03:6a:f6:43:12:02:b4:33:2d:08:9a:1b:1a: 52:b7:88:45:fd:6b:47:b4:b1:75:f9:4d:c8:f9:81: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:36:86:DB:E6:A0:FB:B6:06:8A:4B:9D:8C:60:9C:E7:16:98:D4:F5 X509v3 Authority Key Identifier: keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:83:33:18:de:d3:b9:c0:2d:42:55:3e:8e:d9:61:da:b6:1e: e4:19:ee:28:f4:d3:3e:90:ea:24:92:d5:35:14:7e:b5:d5:56: b3:c2:4f:e2:4b:e5:4c:e5:d4:65:27:0d:b4:2a:f5:a1:00:65: 72:4a:08:7c:1b:a4:96:47:35:2b:6f:e0:1d:d3:80:fd:e4:2b: f6:fb:3d:e4:14:0a:2c:05:d0:33:e8:c9:f3:b7:17:53:f8:5e: 9c:8d:f0:06:48:7d:d4:1b:4c:40:e1:ca:cb:e8:a9:cc:c0:d6: dc:8c:f8:3f:cc:72:48:ea:01:fd:58:91:02:12:7a:d7:2e:84: b1:c4:c8:39:2c:db:07:28:1b:77:cc:b3:0e:97:67:04:ea:21: 8e:a3:eb:46:b1:3a:c0:d7:3b:f1:ca:6a:44:e1:5a:4c:cb:58: 20:9a:2a:c0:e1:c9:84:77:3f:73:f1:7b:47:3e:28:13:fe:c9: 5c:b8:9c:a9:b3:5f:30:43:a4:3d:38:e2:43:a2:27:75:23:2b: 3d:8b:5b:6a:21:1c:4a:7a:bd:28:61:4d:3a:fc:fb:13:c3:e6: 67:dd:07:38:bc:0c:38:73:87:5b:6f:3d:26:0f:34:eb:49:83: 37:e0:26:39:a3:21:76:1d:93:67:c2:fe:5d:97:43:d0:9a:73: 20:3d:89:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EcpP8Ei/lK1M0WrdQMwlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZWNlYzk2YTAzNzFhM2FlNjJkN2FhNmRkN2Q5ZTQzYWM1 NWQwMjUwHhcNMjUxMjIxMDQwMTI5WhcNMjUxMjIyMDQwMTI5WjAzMTEwLwYDVQQD Eyg0MzM2ODZkYmU2YTBmYmI2MDY4YTRiOWQ4YzYwOWNlNzE2OThkNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wN8XG0r7VpYKossmOWj4i3/lniJ l3estTss5SxO4PnsT/+SU9UWgtcMNFcLzpEZByvTxhYWaCFLWLMsm9cldMQjRMYt 9JTRUzeEyIM8BcjTnMeGopQ6NEHEiDg2hLHz39Is+Pqe4MsvXF1MmWAGi+4ouKKh IZ25W5nQx2C9PVAikCnN/3Fv4c7aPAIeD8hZm+uj+0xsr0xFlIgLXz1Vpfyg0uSS URVH1OCrbzl1YHentgn6qpOJ4md8RD5kOriRu3nalNZqY+3yoAby78+xXSfCVGFs QYdgPfXSIic/sTEEOANq9kMSArQzLQiaGxpSt4hF/WtHtLF1+U3I+YF2BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEM2htvmoPu2BopLnYxgnOcWmNT1MB8GA1UdIwQY MBaAFNvs7JagNxo65i16pt19nkOsVdAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2Yjct YTg3NjY1MjBmZWEyLzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2YjctYTg3NjY1MjBmZWEy LzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIMzGN7T ucAtQlU+jtlh2rYe5BnuKPTTPpDqJJLVNRR+tdVWs8JP4kvlTOXUZScNtCr1oQBl ckoIfBuklkc1K2/gHdOA/eQr9vs95BQKLAXQM+jJ87cXU/henI3wBkh91BtMQOHK y+ipzMDW3Iz4P8xySOoB/ViRAhJ61y6EscTIOSzbBygbd8yzDpdnBOohjqPrRrE6 wNc78cpqROFaTMtYIJoqwOHJhHc/c/F7Rz4oE/7JXLicqbNfMEOkPTjiQ6IndSMr PYtbaiEcSnq9KGFNOvz7E8PmZ90HOLwMOHOHW289Jg8060mDN+AmOaMhdh2TZ8L+ XZdD0JpzID2JHg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:06:59 2025 by rpki-client