This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json) Hash identifier: XBFHVChxzWPLl77LU6yo3AycEBYRws056QN/+raflHk= Subject key identifier: EC:A7:8A:74:25:7F:38:AD:6C:7E:EA:18:86:28:2F:BD:6C:B6:72:11 Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee Certificate serial: 019B53E1D11AEAB0F8AAE1E3AC26B527F898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft Manifest number: 0B5D Signing time: Thu 25 Dec 2025 05:01:06 +0000 Manifest this update: Thu 25 Dec 2025 05:01:06 +0000 Manifest next update: Fri 26 Dec 2025 05:01:06 +0000 Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: dZZUPQHnHZc7R0jZJ6EQ/nl2oVNtPFRv8pEitaX40vE=) 2: jOjUJYKoLHn0iKDz6xmlsGUntNA.roa (hash: dqARMuMMhdUxtBH/82mhr6b+TrmEh6Uv8dt27P0LcGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:d1:1a:ea:b0:f8:aa:e1:e3:ac:26:b5:27:f8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee Validity Not Before: Dec 25 05:01:06 2025 GMT Not After : Dec 26 05:01:06 2025 GMT Subject: CN=eca78a74257f38ad6c7eea1886282fbd6cb67211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:51:3e:9b:d0:05:ff:2e:0b:62:6f:30:2a:71: ef:10:4e:ef:94:18:ce:9c:a7:45:66:ec:df:89:0b: 41:97:7f:1d:31:31:76:ad:69:2a:7b:c5:25:e2:b0: a8:d5:ea:26:12:12:c0:90:39:40:32:e2:0f:24:90: 31:7c:b8:90:f7:7b:ce:40:a3:e5:96:58:36:1d:65: 96:c8:9d:8b:77:af:a7:8a:49:18:9b:03:00:cc:ed: 65:28:30:8e:b1:dc:51:f8:65:fc:32:ed:01:1d:0d: c1:a8:e7:48:86:07:0c:b8:87:89:58:8f:dd:b0:36: 58:85:2c:81:e2:6b:ba:b0:8b:0a:39:30:e2:83:4b: fc:b6:e1:86:4e:1a:ee:fc:45:2a:fe:bb:61:2d:c5: d7:7f:dd:c8:a1:a8:9a:8b:76:0f:8e:66:e3:78:0d: ec:d7:44:f2:e4:8b:88:b6:38:eb:1e:96:95:04:89: ba:29:0a:89:90:e9:4f:13:72:fd:d0:de:a3:f7:46: 0a:8c:84:39:2c:34:fd:75:0b:cf:04:ee:3a:e5:fa: b6:e2:01:95:50:eb:19:7d:e3:9d:17:41:65:67:d4: 4c:ae:46:da:27:07:cc:ca:0b:48:ac:38:d3:d2:5d: 40:77:d2:ea:51:5b:ee:61:62:1c:9f:fb:dd:2b:78: ba:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A7:8A:74:25:7F:38:AD:6C:7E:EA:18:86:28:2F:BD:6C:B6:72:11 X509v3 Authority Key Identifier: keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:76:0c:75:43:bf:71:d5:3f:c9:6c:c3:87:89:8b:57:45:f3: 1c:4c:1f:7e:1f:7b:36:6f:f0:fb:ba:e9:5d:bb:5d:ff:37:34: 97:eb:a6:52:af:0c:65:2a:ce:1f:ac:85:0a:37:e8:df:ab:cc: eb:82:c5:6e:fb:92:9a:08:52:63:a7:21:79:19:c2:99:a1:44: 95:ab:3c:64:94:e4:7c:a4:12:ce:e2:14:65:0e:69:b6:ad:08: 29:4d:e5:85:47:cc:f3:e8:be:48:e9:a1:44:e1:d0:db:65:7c: 6c:af:5f:09:58:6b:c5:f7:17:af:34:79:be:0c:7f:d5:0e:86: 58:f2:d3:f7:fb:44:72:32:cf:50:41:78:91:7c:02:8b:37:dd: da:13:7b:16:cc:42:26:d7:50:b4:e0:d8:d4:54:18:bb:5b:dc: c0:a3:91:cc:a3:dc:37:1f:10:86:43:79:29:04:7b:79:08:3d: bd:58:a0:ff:84:b5:65:79:a4:a3:3f:d6:4c:be:8c:0e:ce:5c: fa:17:a1:40:c1:1c:62:ac:25:e5:cf:8a:86:c8:80:47:7e:d2: c7:7d:ab:e2:e1:2b:68:52:0d:7a:e1:ac:e0:f3:9d:11:5b:51: 5b:91:44:28:39:bb:95:0a:0a:9f:69:95:33:ca:2e:1a:49:cf: 26:22:a0:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4dEa6rD4quHjrCa1J/iYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZmI2ZjU2MGVjNTQyYWM2NmMzMDgwMjAzYzY2MzM1ODcz YWU4ZWUwHhcNMjUxMjI1MDUwMTA2WhcNMjUxMjI2MDUwMTA2WjAzMTEwLwYDVQQD EyhlY2E3OGE3NDI1N2YzOGFkNmM3ZWVhMTg4NjI4MmZiZDZjYjY3MjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VE+m9AF/y4LYm8wKnHvEE7vlBjO nKdFZuzfiQtBl38dMTF2rWkqe8Ul4rCo1eomEhLAkDlAMuIPJJAxfLiQ93vOQKPl llg2HWWWyJ2Ld6+nikkYmwMAzO1lKDCOsdxR+GX8Mu0BHQ3BqOdIhgcMuIeJWI/d sDZYhSyB4mu6sIsKOTDig0v8tuGGThru/EUq/rthLcXXf93Ioaiai3YPjmbjeA3s 10Ty5IuItjjrHpaVBIm6KQqJkOlPE3L90N6j90YKjIQ5LDT9dQvPBO465fq24gGV UOsZfeOdF0FlZ9RMrkbaJwfMygtIrDjT0l1Ad9LqUVvuYWIcn/vdK3i64wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyninQlfzitbH7qGIYoL71stnIRMB8GA1UdIwQY MBaAFNv7b1YOxUKsZsMIAgPGYzWHOujuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAt YjI1MDg1MDUxYWI4LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAtYjI1MDg1MDUxYWI4 LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHYMdUO/ cdU/yWzDh4mLV0XzHEwffh97Nm/w+7rpXbtd/zc0l+umUq8MZSrOH6yFCjfo36vM 64LFbvuSmghSY6cheRnCmaFElas8ZJTkfKQSzuIUZQ5ptq0IKU3lhUfM8+i+SOmh ROHQ22V8bK9fCVhrxfcXrzR5vgx/1Q6GWPLT9/tEcjLPUEF4kXwCizfd2hN7FsxC JtdQtODY1FQYu1vcwKORzKPcNx8QhkN5KQR7eQg9vVig/4S1ZXmkoz/WTL6MDs5c +hehQMEcYqwl5c+KhsiAR37Sx32r4uEraFINeuGs4POdEVtRW5FEKDm7lQoKn2mV M8ouGknPJiKgKw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:24:46 2025 by rpki-client