This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json) Hash identifier: GULYoYMB5fDLJZbJt5ZGcWbK3lPPZXTL7H+/NyylDvE= Subject key identifier: F9:84:2B:40:B9:BA:24:93:3F:BA:81:FC:73:39:FA:B9:86:FB:04:9D Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25 Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025 Certificate serial: 019AF3C0C64A5D4728F88E2A54CA697DACAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft Manifest number: 0613 Signing time: Sat 06 Dec 2025 13:01:28 +0000 Manifest this update: Sat 06 Dec 2025 13:01:28 +0000 Manifest next update: Sun 07 Dec 2025 13:01:28 +0000 Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: 3E3R92xGte+cq33qNrWEl6gmxep7S8hrHspuz5yjygQ=) 2: HlRlmfqG33_y8zZWUJ5cFuyj6Fc.roa (hash: u9+BSFLokNeEPeP/eOU5bAd4eXptmEVrwo502ugbJuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:c6:4a:5d:47:28:f8:8e:2a:54:ca:69:7d:ac:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025 Validity Not Before: Dec 6 13:01:28 2025 GMT Not After : Dec 7 13:01:28 2025 GMT Subject: CN=f9842b40b9ba24933fba81fc7339fab986fb049d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:c5:0c:4a:e6:55:df:47:d5:aa:83:39:a9: d3:9c:76:25:f3:fe:c0:52:3d:b8:ec:c4:18:28:53: 40:ab:f3:eb:20:7c:82:19:73:38:87:c7:bd:74:f6: bd:8d:5f:d7:0c:8c:49:ba:87:55:b5:cb:69:fc:b5: 9f:11:ff:ec:bb:5e:c6:a5:f4:1a:14:54:3e:fd:f9: 3d:a2:bb:3a:e2:39:93:d9:4d:97:94:29:ac:09:2e: 36:27:2c:c9:d0:9a:a8:3e:9c:ab:55:9c:82:d8:cd: e6:2f:f8:23:b1:e4:42:41:d9:b2:f7:6d:1c:75:b9: fe:77:fd:d2:55:e2:91:9e:10:34:a4:71:d1:37:63: dc:d7:ce:89:b0:77:65:6c:9c:52:e1:42:5c:df:92: a7:83:93:49:d8:d0:7d:cc:eb:65:06:c5:7d:bf:e4: 03:27:68:9d:cf:c3:d8:31:93:9e:d2:83:09:fd:be: f5:49:44:cb:15:87:75:95:dc:56:c8:7a:fe:7b:bb: 4b:f7:de:32:34:1d:5e:b8:92:86:e0:93:88:98:cd: 05:7e:d0:e0:69:75:c2:ea:28:b4:9a:94:4e:24:f1: 0c:ad:63:aa:86:e9:45:e5:8b:b8:e8:2f:91:4c:2b: b9:00:98:a2:97:d0:a4:fc:a8:39:e1:56:07:d6:0c: 61:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:84:2B:40:B9:BA:24:93:3F:BA:81:FC:73:39:FA:B9:86:FB:04:9D X509v3 Authority Key Identifier: keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:89:2f:6b:92:c9:9e:4e:3f:b7:2a:b4:c0:7a:3e:6d:cb:c9: 03:fc:d0:d0:3b:01:0f:ad:ff:9b:c6:ba:79:6b:e5:48:b7:bb: f2:e4:3f:e3:e8:53:cf:9f:99:8f:0f:fb:4d:db:4f:9c:06:f1: 16:9b:7c:fd:1e:01:51:f8:15:1d:bf:b3:7f:64:f7:73:66:4f: df:ad:be:07:0d:08:e3:22:24:eb:3f:67:90:39:b4:24:fc:b3: 4b:2e:f1:ea:69:4c:6c:a5:48:33:04:a9:77:ca:2f:75:b0:57: 79:95:b7:ca:a1:76:77:52:74:ef:25:9d:c5:ae:30:52:13:8e: 85:4a:ac:de:90:a2:86:9a:b1:16:66:6e:31:0f:ca:d3:53:1e: b2:d3:a1:c3:d0:c7:48:e2:90:40:79:16:04:4c:9a:8a:3c:ac: d6:f1:20:df:31:0f:4c:8c:6a:55:01:ef:16:2e:47:a6:93:4f: dc:09:44:a2:33:7e:6a:58:a0:9b:08:f5:be:96:d7:f8:14:c0: 30:d3:8e:44:69:9e:d2:f3:02:3b:25:04:05:27:05:03:b5:74: c5:9a:cc:17:c9:fd:4d:a8:ce:91:44:af:26:82:9b:72:cc:b8: 13:b8:5e:f2:42:72:dc:a1:20:3a:42:30:ab:5f:3b:80:84:35: 0e:54:cb:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwMZKXUco+I4qVMppfayuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZWNlYzk2YTAzNzFhM2FlNjJkN2FhNmRkN2Q5ZTQzYWM1 NWQwMjUwHhcNMjUxMjA2MTMwMTI4WhcNMjUxMjA3MTMwMTI4WjAzMTEwLwYDVQQD EyhmOTg0MmI0MGI5YmEyNDkzM2ZiYTgxZmM3MzM5ZmFiOTg2ZmIwNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxprFDErmVd9H1aqDOanTnHYl8/7A Uj247MQYKFNAq/PrIHyCGXM4h8e9dPa9jV/XDIxJuodVtctp/LWfEf/su17GpfQa FFQ+/fk9ors64jmT2U2XlCmsCS42JyzJ0JqoPpyrVZyC2M3mL/gjseRCQdmy920c dbn+d/3SVeKRnhA0pHHRN2Pc186JsHdlbJxS4UJc35Kng5NJ2NB9zOtlBsV9v+QD J2idz8PYMZOe0oMJ/b71SUTLFYd1ldxWyHr+e7tL994yNB1euJKG4JOImM0FftDg aXXC6ii0mpROJPEMrWOqhulF5Yu46C+RTCu5AJiil9Ck/Kg54VYH1gxhLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmEK0C5uiSTP7qB/HM5+rmG+wSdMB8GA1UdIwQY MBaAFNvs7JagNxo65i16pt19nkOsVdAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2Yjct YTg3NjY1MjBmZWEyLzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2YjctYTg3NjY1MjBmZWEy LzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIkva5LJ nk4/tyq0wHo+bcvJA/zQ0DsBD63/m8a6eWvlSLe78uQ/4+hTz5+Zjw/7TdtPnAbx Fpt8/R4BUfgVHb+zf2T3c2ZP362+Bw0I4yIk6z9nkDm0JPyzSy7x6mlMbKVIMwSp d8ovdbBXeZW3yqF2d1J07yWdxa4wUhOOhUqs3pCihpqxFmZuMQ/K01MestOhw9DH SOKQQHkWBEyaijys1vEg3zEPTIxqVQHvFi5HppNP3AlEojN+aligmwj1vpbX+BTA MNOORGme0vMCOyUEBScFA7V0xZrMF8n9TajOkUSvJoKbcsy4E7he8kJy3KEgOkIw q187gIQ1DlTLYA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:41 2025 by rpki-client