This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft File: dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json) Hash identifier: b2S4vsxXJnG0Fot/kBS5ATvhzpJN4vFvUQdh+lSbSVI= Subject key identifier: CB:16:EF:67:BC:A2:EF:FD:02:50:EB:62:C6:87:84:D9:A8:83:43:B5 Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0 Certificate issuer: /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0 Certificate serial: 019B51BD8EE7F8D0AB8A0B22D254FB3B6AFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft Manifest number: 0A8F Signing time: Wed 24 Dec 2025 19:02:15 +0000 Manifest this update: Wed 24 Dec 2025 19:02:15 +0000 Manifest next update: Thu 25 Dec 2025 19:02:15 +0000 Files and hashes: 1: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: WKc7/kwL9BMtLuMRuN90PJ4EPT8yxDmZljNWR4XaFPg=) 2: fckG1hreaQ8xP9aJJKEUiJVYbO4.roa (hash: H/fpzZgWfyhKP6Q91nDD52iN8W1nvip6ZLK/KybKJsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:8e:e7:f8:d0:ab:8a:0b:22:d2:54:fb:3b:6a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0 Validity Not Before: Dec 24 19:02:15 2025 GMT Not After : Dec 25 19:02:15 2025 GMT Subject: CN=cb16ef67bca2effd0250eb62c68784d9a88343b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:90:e5:02:2e:e7:28:b0:f4:3c:7a:23:90:f7: 36:47:b8:6e:3f:90:05:f2:fa:96:29:91:e4:e2:5c: 7f:e2:ad:ab:e9:5c:1e:cf:e2:7b:a6:23:9a:49:81: 6a:5c:c5:7f:93:1f:4d:e1:57:dd:e0:23:6a:b5:14: b6:11:df:e4:1b:c0:3f:7e:ce:10:c1:03:d3:ad:25: b3:a7:ef:63:27:ab:2e:38:6e:93:d4:1b:21:8c:39: b0:04:af:8d:91:ff:5e:b3:2a:92:fe:30:11:2c:47: f1:4b:63:0f:4d:da:99:9d:5d:ae:35:c4:cc:9c:64: e0:45:b7:f1:ca:1f:35:d6:90:99:51:4b:02:57:da: 3d:bd:8e:c6:d6:e2:70:1e:fc:9c:7a:40:92:b3:f6: a3:81:12:fe:86:62:eb:f6:c6:f9:f8:39:85:97:6b: d2:91:98:ef:fd:56:8f:c4:77:b9:44:fa:18:b1:95: 00:7f:62:87:30:e0:18:b1:58:24:25:28:25:57:25: 8d:1a:d8:d3:b8:95:55:4e:72:be:96:1a:f3:b6:a1: f3:07:40:2b:39:d4:74:d4:e4:30:fa:cb:b6:49:69: 42:da:42:e7:7f:50:50:7a:20:ca:e5:84:a0:84:04: c3:e2:d0:3b:9b:55:e1:d0:92:d8:c6:ed:de:2f:2e: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:16:EF:67:BC:A2:EF:FD:02:50:EB:62:C6:87:84:D9:A8:83:43:B5 X509v3 Authority Key Identifier: keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:35:10:6e:58:60:09:59:1d:fc:0a:9d:96:03:4e:ef:56:59: c0:9d:06:7d:b8:85:43:42:14:9a:65:46:2b:3c:29:ab:86:a2: 5c:ed:a4:f5:8e:80:e5:88:00:38:f0:cf:ba:ce:3c:49:eb:09: b9:1a:ac:15:a9:a4:20:5a:2c:fa:45:96:a0:88:eb:09:34:5b: 5b:1f:ab:99:6a:d1:33:6b:34:b0:65:ed:1f:73:19:0a:f0:7e: 88:10:1b:5d:b1:3c:7e:8b:4e:e8:b5:a2:e0:8b:18:1e:75:53: 6c:59:0f:c6:61:fa:7c:bd:8d:63:fb:83:1e:72:2e:00:05:82: fd:60:26:54:c3:3a:3b:6a:70:47:26:ec:d0:92:03:dc:07:db: 0d:68:2e:98:5c:e2:45:02:ea:97:ef:63:a9:cc:b6:81:b2:b0: 5e:58:c3:94:4f:c3:98:dd:38:bc:06:90:05:71:7d:d3:ef:7e: 6c:1b:74:93:da:f5:0b:d1:70:e7:09:0a:33:23:4c:6b:0d:54: 93:b0:82:a9:84:72:4b:3b:ad:ca:57:c3:8e:bb:0a:29:4e:13: b6:99:3c:ef:48:d4:4d:8b:41:4d:08:c8:93:e6:43:5d:34:67: 0a:96:1a:75:dc:fd:d4:87:18:6d:0d:c4:54:5a:82:be:4d:83: 7b:a0:8b:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvY7n+NCrigsi0lT7O2r+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MThjMzZkMDQxODIxZjg2YjM4ZDMyMjNkNDNmZTVjZGIy MDExYTAwHhcNMjUxMjI0MTkwMjE1WhcNMjUxMjI1MTkwMjE1WjAzMTEwLwYDVQQD EyhjYjE2ZWY2N2JjYTJlZmZkMDI1MGViNjJjNjg3ODRkOWE4ODM0M2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JDlAi7nKLD0PHojkPc2R7huP5AF 8vqWKZHk4lx/4q2r6Vwez+J7piOaSYFqXMV/kx9N4Vfd4CNqtRS2Ed/kG8A/fs4Q wQPTrSWzp+9jJ6suOG6T1BshjDmwBK+Nkf9esyqS/jARLEfxS2MPTdqZnV2uNcTM nGTgRbfxyh811pCZUUsCV9o9vY7G1uJwHvycekCSs/ajgRL+hmLr9sb5+DmFl2vS kZjv/VaPxHe5RPoYsZUAf2KHMOAYsVgkJSglVyWNGtjTuJVVTnK+lhrztqHzB0Ar OdR01OQw+su2SWlC2kLnf1BQeiDK5YSghATD4tA7m1Xh0JLYxu3eLy5VCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsW72e8ou/9AlDrYsaHhNmog0O1MB8GA1UdIwQY MBaAFHQYw20EGCH4azjTIj1D/lzbIBGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYjM0MjctM2E5ZS00N2FmLWE4ZjQt NGI4MWQ2MmMzYjUzLzEvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lYjM0MjctM2E5ZS00N2FmLWE4ZjQtNGI4MWQ2MmMzYjUz LzEvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTUQblhg CVkd/AqdlgNO71ZZwJ0GfbiFQ0IUmmVGKzwpq4aiXO2k9Y6A5YgAOPDPus48SesJ uRqsFamkIFos+kWWoIjrCTRbWx+rmWrRM2s0sGXtH3MZCvB+iBAbXbE8fotO6LWi 4IsYHnVTbFkPxmH6fL2NY/uDHnIuAAWC/WAmVMM6O2pwRybs0JID3AfbDWgumFzi RQLql+9jqcy2gbKwXljDlE/DmN04vAaQBXF90+9+bBt0k9r1C9Fw5wkKMyNMaw1U k7CCqYRySzutylfDjrsKKU4Ttpk870jUTYtBTQjIk+ZDXTRnCpYaddz91IcYbQ3E VFqCvk2De6CLgQ== -----END CERTIFICATE-----Generated at Thu Dec 25 01:22:16 2025 by rpki-client