This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json) Hash identifier: Sut29b4UaiEgGSvxyRE94bTR0QlZCwB5frjI003P08E= Subject key identifier: 9A:68:43:77:A5:38:6D:9A:B4:A6:C2:27:20:64:66:44:16:A4:D3:C4 Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Certificate serial: 019AF2E445579C964074B7C1B29A6DFE244C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 09:00:37 +0000 Manifest this update: Sat 06 Dec 2025 09:00:37 +0000 Manifest next update: Sun 07 Dec 2025 09:00:37 +0000 Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: 18FhpsoxEqKefretzU+RERSOdzvktNeXdzgFQFiRmz8=) 2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=) 3: rSNt5mbOe2enCzlMGRj201i-_cs.roa (hash: uWOokgWLXLQE0h3ZyEyKwrogrQWS207xC1q6GvYUv54=) 4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:45:57:9c:96:40:74:b7:c1:b2:9a:6d:fe:24:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Validity Not Before: Dec 6 09:00:37 2025 GMT Not After : Dec 7 09:00:37 2025 GMT Subject: CN=9a684377a5386d9ab4a6c2272064664416a4d3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:48:55:29:d9:b0:49:87:bc:4d:bb:8c:4f: a3:95:ee:db:7a:4a:6b:a6:f6:5f:68:08:85:34:8c: 58:51:41:a4:8c:92:a8:04:93:53:74:36:75:81:4d: 15:1c:0e:6e:19:2c:e7:87:6f:79:46:bc:c5:e0:d0: 51:68:04:e6:b0:e8:b1:87:10:e7:7b:e0:d3:10:d4: 42:da:b1:52:63:7d:a0:94:3f:fb:ad:a4:c2:d9:72: b5:41:7f:6f:59:48:c9:97:01:5d:1e:85:f8:7e:4a: 51:eb:df:33:85:23:c1:33:b0:88:9c:7c:21:86:d0: f6:51:fa:c2:18:80:ef:82:51:93:51:84:d0:25:6d: 73:c2:5d:16:7b:d8:1d:bc:82:be:a5:39:2c:6a:9b: d7:a9:65:c8:de:ce:b0:3b:b6:fc:7b:57:6e:e3:9c: ee:e7:0a:71:28:8c:d4:bd:9b:59:f4:99:10:05:2b: 68:c5:a6:c3:29:18:bf:d1:7c:bb:66:91:39:a2:be: b6:9a:d7:32:37:12:9f:1d:1c:a6:43:61:4e:3b:33: 11:f7:89:c5:8e:7d:b7:8f:91:2d:cf:c2:88:99:31: 06:d4:85:56:2d:7e:d6:15:8e:e0:d2:8f:62:8b:8f: fa:ac:6e:c8:18:78:b9:d6:c1:bf:f4:af:7b:58:ea: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:68:43:77:A5:38:6D:9A:B4:A6:C2:27:20:64:66:44:16:A4:D3:C4 X509v3 Authority Key Identifier: keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d1:0c:e7:2f:30:fe:48:ab:f8:06:67:13:af:9f:63:3d:b4: 3d:16:15:1b:11:45:95:23:06:d4:12:db:8b:b4:6a:c2:9b:17: df:61:72:59:cf:47:2f:55:b6:bc:e1:53:cf:71:fe:28:7f:20: 34:df:d7:f1:13:f6:c8:db:06:ef:fe:c6:5b:76:79:df:a9:85: 5f:c6:a7:32:52:40:f1:cf:d2:5e:25:de:41:30:3b:86:4d:dc: bd:01:14:a2:a0:4e:19:de:2e:1a:78:70:44:ad:14:bd:a6:ca: 15:ac:1b:56:a1:96:37:6f:ae:a7:24:7d:e2:49:05:84:4a:3e: b9:e8:0b:8c:47:ac:cd:e5:e5:f7:fc:3c:31:cd:db:ac:4f:a6: cd:81:63:4c:90:79:6d:d3:9d:74:78:a5:20:b1:73:e8:af:01: 16:90:18:3c:d1:8a:45:5f:ff:b5:fb:a0:7e:a0:96:e3:d9:22: 82:38:43:eb:e1:ac:e0:80:aa:16:5f:52:17:25:ab:70:b8:e6: 52:10:ac:68:4c:2d:7e:49:cd:a2:d1:5f:8b:6b:d7:98:18:9a: e8:df:09:13:d6:3f:b3:78:bb:45:b8:ff:e7:85:cd:bc:08:78: 7d:3f:0d:ad:14:17:77:4b:26:7c:2a:97:61:98:a5:0c:b3:fb: 68:ff:9f:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EVXnJZAdLfBsppt/iRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh ZTUyNDMwHhcNMjUxMjA2MDkwMDM3WhcNMjUxMjA3MDkwMDM3WjAzMTEwLwYDVQQD Eyg5YTY4NDM3N2E1Mzg2ZDlhYjRhNmMyMjcyMDY0NjY0NDE2YTRkM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdVIVSnZsEmHvE27jE+jle7bekpr pvZfaAiFNIxYUUGkjJKoBJNTdDZ1gU0VHA5uGSznh295RrzF4NBRaATmsOixhxDn e+DTENRC2rFSY32glD/7raTC2XK1QX9vWUjJlwFdHoX4fkpR698zhSPBM7CInHwh htD2UfrCGIDvglGTUYTQJW1zwl0We9gdvIK+pTksapvXqWXI3s6wO7b8e1du45zu 5wpxKIzUvZtZ9JkQBStoxabDKRi/0Xy7ZpE5or62mtcyNxKfHRymQ2FOOzMR94nF jn23j5Etz8KImTEG1IVWLX7WFY7g0o9ii4/6rG7IGHi51sG/9K97WOrV+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpoQ3elOG2atKbCJyBkZkQWpNPEMB8GA1UdIwQY MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt NGY5MTEyZWRlOTY4LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4 LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9EM5y8w /kir+AZnE6+fYz20PRYVGxFFlSMG1BLbi7RqwpsX32FyWc9HL1W2vOFTz3H+KH8g NN/X8RP2yNsG7/7GW3Z536mFX8anMlJA8c/SXiXeQTA7hk3cvQEUoqBOGd4uGnhw RK0UvabKFawbVqGWN2+upyR94kkFhEo+uegLjEeszeXl9/w8Mc3brE+mzYFjTJB5 bdOddHilILFz6K8BFpAYPNGKRV//tfugfqCW49kigjhD6+Gs4ICqFl9SFyWrcLjm UhCsaEwtfknNotFfi2vXmBia6N8JE9Y/s3i7Rbj/54XNvAh4fT8NrRQXd0smfCqX YZilDLP7aP+f5w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:36 2025 by rpki-client