This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft File: dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json) Hash identifier: WYdLuyDRSm0MkZsmae+Q7P+qINBmUrJfxoYZDCE9l2k= Subject key identifier: 28:FE:72:7C:98:39:37:CC:44:9F:76:D2:1F:80:05:91:5A:DD:53:9C Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15 Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215 Certificate serial: 019B3D9075E0ADDF4BAA082FC68E317CFCE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft Manifest number: 0B6F Signing time: Sat 20 Dec 2025 21:00:36 +0000 Manifest this update: Sat 20 Dec 2025 21:00:36 +0000 Manifest next update: Sun 21 Dec 2025 21:00:36 +0000 Files and hashes: 1: 7SHjb3To_8zToO1PZkaOAJQ-mzY.roa (hash: aqql1uslZqhQkjcDpj0gs+oDngpuPaF1ypOzLp6Vqak=) 2: K2WTfNgGTgwLI8daJh2SwttMQ5w.roa (hash: kg2DGvsW5/IaD92YzOAMjHp8f1xtHOO7qcNliTfoKss=) 3: Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa (hash: pUR0ufw079uWlFJjSqIiEUz3vris4ZJFN/dXSNPf1bk=) 4: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: iLWSWe338vk5gazsS+oSu4cPjOoztcS/Eh4R5Sb3cfY=) 5: gYinuUkN5-ijpn1rqGGqGii0p6g.roa (hash: lpzZyTHLuJfHa94o7AaeZ6AmXeDKqlRwU9KcssuE8rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:75:e0:ad:df:4b:aa:08:2f:c6:8e:31:7c:fc:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215 Validity Not Before: Dec 20 21:00:36 2025 GMT Not After : Dec 21 21:00:36 2025 GMT Subject: CN=28fe727c983937cc449f76d21f8005915add539c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:12:a0:ce:62:7f:d6:2b:ec:91:0f:ca:74: 31:04:40:34:bf:9c:fc:aa:6e:d5:5c:3d:c2:26:d0: 63:cd:b1:57:10:7a:c9:5b:10:89:2d:07:47:32:1f: 70:02:ea:72:53:40:81:f2:0b:5a:64:35:e4:98:76: ee:ce:90:b8:1f:6f:2f:e7:d0:22:38:bc:c7:be:82: 83:6d:b5:08:70:97:2f:a5:8a:9e:30:49:68:07:e2: e7:90:96:2d:10:b5:5a:ae:57:29:c2:4f:81:f1:98: 52:d5:ec:f4:38:a0:19:8b:c5:c8:ec:d0:86:7a:74: ec:14:80:ce:72:72:0b:e7:59:25:c1:77:39:a0:73: d1:1a:7d:e4:aa:e7:e3:4a:c2:ff:17:96:3f:89:bf: ae:8d:2b:1f:cb:2f:74:1f:f3:fa:91:f6:3f:55:e0: 15:8e:b9:0a:e0:16:6f:13:c3:6f:e6:1a:b7:28:56: 57:d7:8d:29:15:29:8b:07:75:a2:38:d4:f7:da:2c: ea:db:76:b8:fa:19:66:77:10:f4:f8:0c:d5:e6:4d: 94:34:dc:54:da:4a:76:bf:9b:1d:ff:1f:19:a0:62: bc:6c:f0:29:8a:61:25:ea:6b:f1:a0:25:49:fb:18: e6:42:59:4a:f0:e4:0f:e2:25:29:fe:64:16:a1:36: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FE:72:7C:98:39:37:CC:44:9F:76:D2:1F:80:05:91:5A:DD:53:9C X509v3 Authority Key Identifier: keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d4:23:0e:39:2d:27:b5:86:14:d3:ac:32:73:6c:1c:93:c0: 34:63:37:d1:40:18:8f:c0:35:80:98:b0:77:72:3c:aa:38:af: 5a:4e:36:53:a4:40:52:91:cb:80:c1:28:25:49:f9:14:ff:eb: d6:51:6b:6d:a2:a6:92:e3:d0:10:1b:98:43:a2:28:11:e2:21: 72:52:cb:7c:11:9b:a6:ec:e4:74:fa:ce:21:de:94:91:ec:f6: 14:28:07:57:67:1f:47:0d:ff:64:b3:e6:23:1b:f3:0f:d3:eb: dd:67:8c:4e:02:40:7f:b5:22:11:65:9e:32:84:c4:86:06:e1: 92:25:d8:d5:81:d9:08:f3:a1:37:e3:2f:e6:05:cb:62:17:80: ea:d5:9d:01:f1:a7:2c:22:00:60:45:a0:49:05:69:6d:c0:21: 64:f0:8f:2d:99:56:3e:49:0c:1f:74:7f:85:7b:48:1a:8a:5c: 9a:6e:9b:04:87:48:1e:54:bf:a6:cf:15:25:37:2e:6c:f8:30: 69:82:20:ce:82:14:44:3f:0b:67:cd:c7:25:5c:e2:9b:17:12: db:18:13:11:cc:d1:e0:9f:39:e7:47:82:0f:ec:a7:29:9b:ba: 7f:c7:9e:5c:07:56:ea:d4:51:e4:3b:62:31:5a:f7:f0:b6:04: d6:3f:14:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kHXgrd9Lqggvxo4xfPzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Yjc5NTA2NjE1MGExYzM2N2RhYmNjZjY5Yzk3MGFiMGM3 MjMyMTUwHhcNMjUxMjIwMjEwMDM2WhcNMjUxMjIxMjEwMDM2WjAzMTEwLwYDVQQD EygyOGZlNzI3Yzk4MzkzN2NjNDQ5Zjc2ZDIxZjgwMDU5MTVhZGQ1MzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobMSoM5if9Yr7JEPynQxBEA0v5z8 qm7VXD3CJtBjzbFXEHrJWxCJLQdHMh9wAupyU0CB8gtaZDXkmHbuzpC4H28v59Ai OLzHvoKDbbUIcJcvpYqeMEloB+LnkJYtELVarlcpwk+B8ZhS1ez0OKAZi8XI7NCG enTsFIDOcnIL51klwXc5oHPRGn3kqufjSsL/F5Y/ib+ujSsfyy90H/P6kfY/VeAV jrkK4BZvE8Nv5hq3KFZX140pFSmLB3WiONT32izq23a4+hlmdxD0+AzV5k2UNNxU 2kp2v5sd/x8ZoGK8bPApimEl6mvxoCVJ+xjmQllK8OQP4iUp/mQWoTZujQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj+cnyYOTfMRJ920h+ABZFa3VOcMB8GA1UdIwQY MBaAFHW3lQZhUKHDZ9q8z2nJcKsMcjIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjct NTQ3YmU0Y2ZhNDU3LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjctNTQ3YmU0Y2ZhNDU3 LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdQjDjkt J7WGFNOsMnNsHJPANGM30UAYj8A1gJiwd3I8qjivWk42U6RAUpHLgMEoJUn5FP/r 1lFrbaKmkuPQEBuYQ6IoEeIhclLLfBGbpuzkdPrOId6Ukez2FCgHV2cfRw3/ZLPm IxvzD9Pr3WeMTgJAf7UiEWWeMoTEhgbhkiXY1YHZCPOhN+Mv5gXLYheA6tWdAfGn LCIAYEWgSQVpbcAhZPCPLZlWPkkMH3R/hXtIGopcmm6bBIdIHlS/ps8VJTcubPgw aYIgzoIURD8LZ83HJVzimxcS2xgTEczR4J8550eCD+ynKZu6f8eeXAdW6tRR5Dti MVr38LYE1j8Utg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:13:41 2025 by rpki-client