This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json) Hash identifier: UPYoBFU6p9pYLISbLuxAkVdHfIaHviGPZqM4TcmDna0= Subject key identifier: 7E:5B:24:C8:00:19:92:BB:AB:C2:74:2D:7D:4E:A5:38:D8:AF:4C:9F Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Certificate serial: 019B3C46D3DC0D0EBB67FE9FDDA04C503E81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 15:00:33 +0000 Manifest this update: Sat 20 Dec 2025 15:00:33 +0000 Manifest next update: Sun 21 Dec 2025 15:00:33 +0000 Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: 4HoNKujnlU/DDufdogCpH9909IAcgO6pMjXdArcJY20=) 2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=) 3: rSNt5mbOe2enCzlMGRj201i-_cs.roa (hash: uWOokgWLXLQE0h3ZyEyKwrogrQWS207xC1q6GvYUv54=) 4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:d3:dc:0d:0e:bb:67:fe:9f:dd:a0:4c:50:3e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Validity Not Before: Dec 20 15:00:33 2025 GMT Not After : Dec 21 15:00:33 2025 GMT Subject: CN=7e5b24c8001992bbabc2742d7d4ea538d8af4c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:94:87:e6:95:13:13:bb:9d:86:45:82:16:3d: a6:16:54:13:57:37:f1:1d:78:9f:8e:5d:18:72:f1: 70:49:0f:39:93:3b:5d:71:bf:f3:e9:61:8b:29:0b: 54:52:75:b1:e0:4d:41:e9:48:e2:c2:16:4d:1f:99: 9a:cf:5b:a2:01:4d:69:21:18:1c:d5:d3:32:1d:ee: a6:fa:47:bd:86:ef:ca:7d:2f:b9:0e:df:8d:53:83: a6:0e:54:4d:0d:e3:62:27:0c:51:92:4f:8f:7c:c6: 17:cb:1a:93:b2:27:0a:8e:72:f5:e2:aa:ea:5e:75: 32:50:f6:b0:32:be:98:f1:fa:7b:db:e4:40:7f:65: b2:4e:e5:db:77:dc:94:9e:d7:99:71:c4:16:72:d3: a7:0a:40:2c:c3:a1:d8:77:6a:fc:8d:e3:f8:db:b6: 9c:0f:fd:76:59:7d:cf:d0:97:60:93:4e:40:41:92: 5f:63:53:a2:e0:35:06:9e:38:c1:ed:cd:86:e1:a4: d5:a3:3a:0f:54:94:37:a4:bf:60:20:28:38:b8:6a: 5f:3a:c8:4e:ad:4c:55:cf:51:3a:c5:3d:65:a1:c6: 90:d1:da:ff:76:69:5b:cc:83:c3:d8:dd:e8:d7:80: b1:ba:fc:0a:92:5f:79:58:86:a5:77:78:10:4a:92: 72:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5B:24:C8:00:19:92:BB:AB:C2:74:2D:7D:4E:A5:38:D8:AF:4C:9F X509v3 Authority Key Identifier: keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:bc:31:7c:1a:50:ce:56:45:53:d6:4a:4e:a0:03:2e:b0:d9: 4f:e8:b5:ef:14:ee:ca:a6:b2:e6:48:a1:8c:5e:b9:b0:0b:bb: fa:26:4c:84:b2:ae:06:2a:56:d7:83:87:7a:c1:e3:7b:13:74: b0:b9:ad:f2:74:05:9a:63:d9:32:a2:3c:6f:28:91:e3:e8:1e: d7:25:f5:dd:16:b1:3e:94:27:09:22:c5:e6:5e:40:a7:d7:3a: b0:59:61:32:56:17:dd:d5:ed:2f:21:0e:ef:20:bf:87:b5:29: 5e:78:d5:3c:9b:f5:77:2e:de:c7:b7:57:7c:bf:82:1c:b2:6b: 9a:e9:6a:ab:08:e8:a8:3c:14:a2:10:4d:99:5f:5c:45:cb:97: 17:62:20:e4:8e:06:b2:0d:f7:50:82:9f:c4:ca:43:f2:20:85: ea:1c:22:9b:35:09:fd:b6:32:33:e5:47:11:5f:a1:e1:30:f5: 9f:34:43:25:76:80:48:7a:95:b8:22:21:06:98:9c:97:36:da: 1f:04:87:99:8e:b4:f4:7d:8c:16:70:74:13:fc:0e:25:72:e7: af:05:e0:8f:76:d0:dd:c5:96:9a:ed:46:62:95:76:4b:34:62: da:04:aa:c7:84:7c:66:63:77:42:23:74:19:9f:48:40:ef:ff: 7b:57:ea:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RtPcDQ67Z/6f3aBMUD6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh ZTUyNDMwHhcNMjUxMjIwMTUwMDMzWhcNMjUxMjIxMTUwMDMzWjAzMTEwLwYDVQQD Eyg3ZTViMjRjODAwMTk5MmJiYWJjMjc0MmQ3ZDRlYTUzOGQ4YWY0YzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65SH5pUTE7udhkWCFj2mFlQTVzfx HXifjl0YcvFwSQ85kztdcb/z6WGLKQtUUnWx4E1B6UjiwhZNH5maz1uiAU1pIRgc 1dMyHe6m+ke9hu/KfS+5Dt+NU4OmDlRNDeNiJwxRkk+PfMYXyxqTsicKjnL14qrq XnUyUPawMr6Y8fp72+RAf2WyTuXbd9yUnteZccQWctOnCkAsw6HYd2r8jeP427ac D/12WX3P0Jdgk05AQZJfY1Oi4DUGnjjB7c2G4aTVozoPVJQ3pL9gICg4uGpfOshO rUxVz1E6xT1locaQ0dr/dmlbzIPD2N3o14CxuvwKkl95WIald3gQSpJyCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5bJMgAGZK7q8J0LX1OpTjYr0yfMB8GA1UdIwQY MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt NGY5MTEyZWRlOTY4LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4 LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrwxfBpQ zlZFU9ZKTqADLrDZT+i17xTuyqay5kihjF65sAu7+iZMhLKuBipW14OHesHjexN0 sLmt8nQFmmPZMqI8byiR4+ge1yX13RaxPpQnCSLF5l5Ap9c6sFlhMlYX3dXtLyEO 7yC/h7UpXnjVPJv1dy7ex7dXfL+CHLJrmulqqwjoqDwUohBNmV9cRcuXF2Ig5I4G sg33UIKfxMpD8iCF6hwimzUJ/bYyM+VHEV+h4TD1nzRDJXaASHqVuCIhBpiclzba HwSHmY609H2MFnB0E/wOJXLnrwXgj3bQ3cWWmu1GYpV2SzRi2gSqx4R8ZmN3QiN0 GZ9IQO//e1fqEg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:27 2025 by rpki-client