This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json) Hash identifier: Kwv+kGVuawsPRFNMwZoseSrnOTSaTwvyebwT7rl36PE= Subject key identifier: 0B:0E:DB:E3:4C:01:F4:2F:3D:A3:94:DE:A6:E2:CF:FE:A5:D5:62:A0 Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee Certificate serial: 019AF3529FB68BF32CCEE9F952809CE79D26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft Manifest number: 0B2B Signing time: Sat 06 Dec 2025 11:01:09 +0000 Manifest this update: Sat 06 Dec 2025 11:01:09 +0000 Manifest next update: Sun 07 Dec 2025 11:01:09 +0000 Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: V6FpZb+8XgZhjl58qkM9NO6Jkzk7GAF/EW7ZI7xZ3/U=) 2: jOjUJYKoLHn0iKDz6xmlsGUntNA.roa (hash: dqARMuMMhdUxtBH/82mhr6b+TrmEh6Uv8dt27P0LcGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:9f:b6:8b:f3:2c:ce:e9:f9:52:80:9c:e7:9d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee Validity Not Before: Dec 6 11:01:09 2025 GMT Not After : Dec 7 11:01:09 2025 GMT Subject: CN=0b0edbe34c01f42f3da394dea6e2cffea5d562a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:0e:f3:a9:43:bb:52:da:b1:a2:f7:27:30: 62:b4:d0:0a:77:fd:25:da:85:6f:e8:08:a9:7c:68: dd:98:23:f0:6e:2f:7d:69:6d:e1:d2:9e:2e:f7:53: 32:d5:64:b5:79:a8:a7:b9:b0:2d:06:03:ee:1d:cc: b1:41:b0:4a:df:cd:23:d9:ea:af:8a:2d:6b:09:24: b2:2c:3e:3e:cc:15:c3:c5:2c:be:33:2a:3b:c9:4b: 32:03:11:ee:b9:3c:53:d7:63:c3:6e:91:76:d7:ca: 6e:b7:2a:9c:90:72:15:c2:b7:3c:4f:fe:00:26:fa: 43:8f:37:73:5e:4b:e8:3d:3a:ae:8f:1d:ea:84:33: b2:c2:d6:96:17:1a:c2:6e:f1:15:12:02:0a:98:51: ca:32:9d:8b:62:42:7c:24:3d:38:9a:be:39:ce:e3: 38:5a:ec:47:2a:c4:f9:9a:d5:96:ff:16:0c:18:87: e2:54:15:af:0a:ec:0c:86:a6:52:fa:61:97:02:ce: b7:86:07:90:f6:b0:e7:b7:73:82:2c:7d:d8:29:0e: 05:18:26:c6:f4:e8:6c:a9:3d:b0:5f:ba:e7:9e:5f: b4:0e:f6:19:15:3d:00:5f:97:15:19:7f:11:fa:38: ed:5b:94:f0:85:d8:9c:e5:ac:15:e1:ec:28:87:51: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0E:DB:E3:4C:01:F4:2F:3D:A3:94:DE:A6:E2:CF:FE:A5:D5:62:A0 X509v3 Authority Key Identifier: keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:e4:1b:64:bc:1b:11:ec:5c:57:51:78:84:20:e4:17:f4:ed: 70:c9:6d:ed:4b:89:e3:a3:ec:30:31:b7:19:b1:de:b3:35:07: 58:79:4b:da:6b:f7:0d:30:1e:7e:08:6c:76:9d:9f:b0:43:42: eb:27:a1:f8:a5:0c:6d:1c:6b:01:2e:c2:d2:16:b4:96:c5:81: 2f:7e:77:69:1a:17:f6:bb:2c:87:1c:f7:3f:ee:b5:4b:b9:5d: 85:fd:03:d5:b1:2c:54:b4:8a:93:bd:28:df:8c:d8:00:dd:52: 0d:05:f9:95:fc:c4:3d:3b:7d:93:74:6b:5f:cf:41:6d:88:46: 0c:83:44:e3:c1:92:0a:b8:19:7e:e3:2d:1e:8c:88:51:a5:b3: 4f:fb:93:8e:66:fe:d2:ca:00:90:0e:dd:3e:63:e2:a2:b3:2e: 08:18:35:67:61:52:f7:de:84:f5:42:25:0a:3b:7b:4f:2e:2f: 43:7d:ea:91:3a:5e:e5:09:3d:b7:b8:16:e5:3e:0c:e5:5e:4f: de:e3:6b:de:af:bd:74:af:50:3c:82:50:13:8c:a4:cc:e0:eb: 6d:34:c4:14:a2:65:12:f1:6f:bb:6f:cd:73:3f:25:57:df:ab: 80:e8:85:24:d1:d9:f8:c0:81:0d:72:b1:dc:92:84:c6:65:37: a6:32:da:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUp+2i/Mszun5UoCc550mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZmI2ZjU2MGVjNTQyYWM2NmMzMDgwMjAzYzY2MzM1ODcz YWU4ZWUwHhcNMjUxMjA2MTEwMTA5WhcNMjUxMjA3MTEwMTA5WjAzMTEwLwYDVQQD EygwYjBlZGJlMzRjMDFmNDJmM2RhMzk0ZGVhNmUyY2ZmZWE1ZDU2MmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0gO86lDu1LasaL3JzBitNAKd/0l 2oVv6AipfGjdmCPwbi99aW3h0p4u91My1WS1eainubAtBgPuHcyxQbBK380j2eqv ii1rCSSyLD4+zBXDxSy+Myo7yUsyAxHuuTxT12PDbpF218putyqckHIVwrc8T/4A JvpDjzdzXkvoPTqujx3qhDOywtaWFxrCbvEVEgIKmFHKMp2LYkJ8JD04mr45zuM4 WuxHKsT5mtWW/xYMGIfiVBWvCuwMhqZS+mGXAs63hgeQ9rDnt3OCLH3YKQ4FGCbG 9OhsqT2wX7rnnl+0DvYZFT0AX5cVGX8R+jjtW5Twhdic5awV4ewoh1EfwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsO2+NMAfQvPaOU3qbiz/6l1WKgMB8GA1UdIwQY MBaAFNv7b1YOxUKsZsMIAgPGYzWHOujuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAt YjI1MDg1MDUxYWI4LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAtYjI1MDg1MDUxYWI4 LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOQbZLwb EexcV1F4hCDkF/TtcMlt7UuJ46PsMDG3GbHeszUHWHlL2mv3DTAefghsdp2fsENC 6yeh+KUMbRxrAS7C0ha0lsWBL353aRoX9rsshxz3P+61S7ldhf0D1bEsVLSKk70o 34zYAN1SDQX5lfzEPTt9k3RrX89BbYhGDINE48GSCrgZfuMtHoyIUaWzT/uTjmb+ 0soAkA7dPmPiorMuCBg1Z2FS996E9UIlCjt7Ty4vQ33qkTpe5Qk9t7gW5T4M5V5P 3uNr3q+9dK9QPIJQE4ykzODrbTTEFKJlEvFvu2/Ncz8lV9+rgOiFJNHZ+MCBDXKx 3JKExmU3pjLaQg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:26 2025 by rpki-client