This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json) Hash identifier: hPrsDKHn3apv5pZWyt0AhmbdEXYciQtNFQrsXdhifUI= Subject key identifier: EA:5C:D0:8C:EE:FA:94:D4:A5:1F:B3:0F:34:02:3F:37:24:AF:E3:F4 Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5 Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5 Certificate serial: 019B4E4DCBA28FD124B7B7F4EA9028A77C6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft Manifest number: 178D Signing time: Wed 24 Dec 2025 03:01:19 +0000 Manifest this update: Wed 24 Dec 2025 03:01:19 +0000 Manifest next update: Thu 25 Dec 2025 03:01:19 +0000 Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: rfqPVjWuus9yTDiSuL/wDnv+zdazd0r9PCHwtY+I7Rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:cb:a2:8f:d1:24:b7:b7:f4:ea:90:28:a7:7c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5 Validity Not Before: Dec 24 03:01:19 2025 GMT Not After : Dec 25 03:01:19 2025 GMT Subject: CN=ea5cd08ceefa94d4a51fb30f34023f3724afe3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:72:31:39:12:e1:34:ee:f2:6b:51:a0:59:bb: 13:94:00:b7:00:c0:b1:87:9d:2b:25:68:ee:66:c6: 9b:00:6f:7b:ce:d4:9c:0f:db:59:3c:96:71:92:67: b3:95:1c:16:01:c9:6e:74:ac:94:49:47:be:69:19: 0f:d7:bb:30:4f:9e:01:17:bc:33:63:3f:2c:3c:ee: 3d:33:db:a1:71:27:2e:9a:b6:ec:ee:1e:4b:c8:99: ee:0a:66:48:81:0a:05:ef:e3:0b:d7:ea:30:8c:3c: 17:7b:0c:70:7f:e1:86:09:01:e6:7f:55:cb:29:4d: 99:ed:a8:5b:93:0a:5b:8e:2e:95:a9:a8:b3:fe:07: cc:8b:79:45:11:1a:2a:2c:a4:40:3d:1d:ff:1e:cc: cc:0e:55:db:55:dc:c3:06:35:64:cb:fe:aa:55:1b: f4:d6:56:2a:00:92:a1:ec:37:cc:de:46:d5:78:26: 34:00:81:1a:c7:36:62:0b:60:60:b2:06:de:6f:f8: cd:6c:82:b1:5b:4d:3b:95:39:28:35:c0:a1:74:7f: 06:81:04:12:e0:0b:a0:e4:82:2c:aa:b8:a0:13:ac: d9:7d:ac:85:3d:ea:45:c0:9b:d9:97:f9:b9:97:d3: d5:26:4b:f8:60:f1:8a:7d:0f:6b:b1:74:6d:5d:be: 13:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5C:D0:8C:EE:FA:94:D4:A5:1F:B3:0F:34:02:3F:37:24:AF:E3:F4 X509v3 Authority Key Identifier: keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:5e:f6:4b:80:da:73:f1:e5:00:de:c2:d7:2c:34:90:9b:61: 3d:0c:0c:46:e8:45:aa:0e:fc:0e:7d:8f:2e:12:a0:d9:33:7e: 1f:9a:ce:fc:90:75:52:77:c5:0a:a8:29:fe:9e:f8:7a:6e:32: 50:c7:6c:2b:69:f8:87:bd:20:fd:2b:a5:b5:0a:ee:d1:e5:ab: d5:48:98:06:f7:5e:1d:a5:bd:30:1e:d9:e5:50:54:cd:44:72: 84:c2:b3:83:ee:c1:5d:18:ae:4d:0d:70:e0:30:b1:ce:2f:f5: 88:c0:d1:da:88:00:fe:50:20:d6:7c:47:84:92:c7:9f:f3:de: f9:ea:e1:cd:c5:70:e1:fd:ba:a7:99:27:11:da:bb:c5:b1:e1: 6f:92:50:d7:24:80:ed:0c:db:a1:17:28:7e:c6:01:a4:8a:fc: eb:12:30:71:68:39:a1:b7:e8:a7:1c:50:45:51:28:d5:6d:2f: bd:15:92:87:a5:8f:61:0b:2f:bf:26:c2:8f:33:55:15:7a:2f: 33:d8:0e:27:31:c8:0c:77:cd:65:b5:1d:1b:b9:cb:0d:bc:71: 84:af:79:e8:05:cc:17:3c:ee:de:63:f3:74:08:5a:a0:25:90: 52:6f:68:1b:c1:61:b9:cb:81:79:fa:51:a1:3e:10:58:c6:0d: 66:68:f3:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTcuij9Ekt7f06pAop3xtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhN2ZkNjBjYzhlN2JiNjI5MzIwNGYzMGEyMjZlMDA4NzUy NGIwYjUwHhcNMjUxMjI0MDMwMTE5WhcNMjUxMjI1MDMwMTE5WjAzMTEwLwYDVQQD EyhlYTVjZDA4Y2VlZmE5NGQ0YTUxZmIzMGYzNDAyM2YzNzI0YWZlM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnIxORLhNO7ya1GgWbsTlAC3AMCx h50rJWjuZsabAG97ztScD9tZPJZxkmezlRwWAcludKyUSUe+aRkP17swT54BF7wz Yz8sPO49M9uhcScumrbs7h5LyJnuCmZIgQoF7+ML1+owjDwXewxwf+GGCQHmf1XL KU2Z7ahbkwpbji6Vqaiz/gfMi3lFERoqLKRAPR3/HszMDlXbVdzDBjVky/6qVRv0 1lYqAJKh7DfM3kbVeCY0AIEaxzZiC2Bgsgbeb/jNbIKxW007lTkoNcChdH8GgQQS 4Aug5IIsqrigE6zZfayFPepFwJvZl/m5l9PVJkv4YPGKfQ9rsXRtXb4TzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpc0Izu+pTUpR+zDzQCPzckr+P0MB8GA1UdIwQY MBaAFNp/1gzI57tikyBPMKIm4Ah1JLC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMTk1ZDAtMWFiOC00MGEwLWE3Zjkt ZDZhYjkzZWQ5ZmI1LzEvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8wMTk1ZDAtMWFiOC00MGEwLWE3ZjktZDZhYjkzZWQ5ZmI1 LzEvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMl72S4Da c/HlAN7C1yw0kJthPQwMRuhFqg78Dn2PLhKg2TN+H5rO/JB1UnfFCqgp/p74em4y UMdsK2n4h70g/SultQru0eWr1UiYBvdeHaW9MB7Z5VBUzURyhMKzg+7BXRiuTQ1w 4DCxzi/1iMDR2ogA/lAg1nxHhJLHn/Pe+erhzcVw4f26p5knEdq7xbHhb5JQ1ySA 7QzboRcofsYBpIr86xIwcWg5obfopxxQRVEo1W0vvRWSh6WPYQsvvybCjzNVFXov M9gOJzHIDHfNZbUdG7nLDbxxhK956AXMFzzu3mPzdAhaoCWQUm9oG8FhucuBefpR oT4QWMYNZmjz4w== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:08 2025 by rpki-client