This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json) Hash identifier: NUFPPXTQGwNfmC4jNmBHQqfP1+za0D9joqVWhvIvdwQ= Subject key identifier: 71:D7:1E:FE:08:57:7B:58:28:8F:80:4E:EC:B6:A1:28:C7:EB:25:09 Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a Certificate serial: 019B3E6C877079F0DF9E5549C36178634DB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft Manifest number: 06D7 Signing time: Sun 21 Dec 2025 01:00:58 +0000 Manifest this update: Sun 21 Dec 2025 01:00:58 +0000 Manifest next update: Mon 22 Dec 2025 01:00:58 +0000 Files and hashes: 1: UrDZwQUlz8oM-YZBJZCko8DzwV4.roa (hash: R8F+9yAyW9iHTTMQt2jYkPuGAbrbM2b50inI73XP78c=) 2: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (hash: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=) 3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: J/oElN4yKzCBbiogGwQgobzh02hiYGcRR79MbEApLqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:87:70:79:f0:df:9e:55:49:c3:61:78:63:4d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a Validity Not Before: Dec 21 01:00:58 2025 GMT Not After : Dec 22 01:00:58 2025 GMT Subject: CN=71d71efe08577b58288f804eecb6a128c7eb2509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cc:b6:c4:e7:4a:d4:1a:98:00:5d:50:3e:75: 8d:a1:3f:65:d5:0c:98:b3:ba:22:ca:0c:87:21:a2: e5:20:5f:1d:69:cb:23:5a:e0:94:80:0d:1f:1b:ba: 4f:09:37:ff:d8:53:21:a6:22:15:ef:8f:1b:c0:49: 91:2e:48:13:3e:6f:e9:73:d7:23:f8:16:91:47:35: 7c:c3:7c:76:24:80:8e:31:84:68:fb:42:9f:78:3c: 8c:59:1a:f2:d6:65:a0:01:0d:24:f9:ab:99:7d:2b: c9:8e:8e:59:4e:fb:a7:79:54:06:a9:48:f0:1b:82: 9a:6d:cd:ed:f4:9e:55:02:be:b7:21:34:80:80:2d: a2:26:08:2c:a9:6b:3d:21:8f:a6:8b:aa:eb:d4:c2: d7:1c:c8:7a:16:a8:8a:6a:83:6e:85:ee:31:86:05: a5:b4:33:f9:d0:9b:f8:6d:77:b0:ee:6c:12:5b:b4: 32:fd:60:50:66:f3:ce:c7:e5:d3:d4:cd:93:95:45: 34:a3:d7:de:e8:5e:c2:67:7e:98:6d:35:20:ef:b3: 01:04:0f:85:85:3d:10:94:fa:d2:89:5c:c4:8c:7d: ba:0f:2f:aa:72:ef:96:06:5a:d2:bb:00:42:6d:9d: 2d:41:b0:4b:5f:22:53:f4:16:8a:89:d7:94:06:5a: 95:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D7:1E:FE:08:57:7B:58:28:8F:80:4E:EC:B6:A1:28:C7:EB:25:09 X509v3 Authority Key Identifier: keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:36:bd:2d:09:a3:96:79:c2:e7:3b:b5:8d:d7:02:54:6f:ca: 4c:34:af:b7:41:d1:e5:26:ef:73:14:aa:2f:d4:11:1e:b1:9f: 94:78:6b:60:12:02:06:35:0b:f2:13:e9:cd:22:6a:a0:1d:2e: ea:b7:db:6d:5e:6e:03:8d:93:9a:a3:7e:36:b0:66:38:c7:ff: bf:1e:70:20:d4:e3:25:ee:12:74:94:e3:ad:4a:bb:e8:11:10: 02:fb:c1:54:bf:0a:54:8d:60:f1:62:1c:62:82:fa:bb:08:6b: 2c:e3:d1:5b:0d:6c:6b:3e:0f:a3:be:b0:78:b3:f8:cd:c2:3b: ea:da:63:38:9c:ff:4d:a0:6c:b5:5a:ce:52:f5:eb:93:07:92: c6:04:bd:f8:f6:f6:d3:be:e9:8e:2c:8b:31:41:9b:4d:88:51: 6e:52:90:0c:ed:01:e3:f6:d2:7e:be:73:07:f3:a0:49:16:ad: 5f:0d:d3:f6:6b:69:79:20:f9:bc:64:f3:3e:10:53:84:49:91: 2a:13:93:18:59:b0:22:9d:2a:99:dc:c2:fd:ad:28:b8:e3:52: 54:32:a1:ad:13:8e:e5:68:64:d1:69:18:0a:31:a9:df:43:3b: eb:6a:54:fa:d7:29:ad:4d:ea:c5:ee:88:6a:86:43:86:4d:15: fe:6a:66:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bIdwefDfnlVJw2F4Y02wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YjVhYmIzNWZjYTMwNzBkNDgxMjJhMzM5ZWM1Y2JlZmYw YmU5N2EwHhcNMjUxMjIxMDEwMDU4WhcNMjUxMjIyMDEwMDU4WjAzMTEwLwYDVQQD Eyg3MWQ3MWVmZTA4NTc3YjU4Mjg4ZjgwNGVlY2I2YTEyOGM3ZWIyNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMy2xOdK1BqYAF1QPnWNoT9l1QyY s7oiygyHIaLlIF8dacsjWuCUgA0fG7pPCTf/2FMhpiIV748bwEmRLkgTPm/pc9cj +BaRRzV8w3x2JICOMYRo+0KfeDyMWRry1mWgAQ0k+auZfSvJjo5ZTvuneVQGqUjw G4Kabc3t9J5VAr63ITSAgC2iJggsqWs9IY+mi6rr1MLXHMh6FqiKaoNuhe4xhgWl tDP50Jv4bXew7mwSW7Qy/WBQZvPOx+XT1M2TlUU0o9fe6F7CZ36YbTUg77MBBA+F hT0QlPrSiVzEjH26Dy+qcu+WBlrSuwBCbZ0tQbBLXyJT9BaKideUBlqVSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHXHv4IV3tYKI+ATuy2oSjH6yUJMB8GA1UdIwQY MBaAFHW1q7NfyjBw1IEioznsXL7/C+l6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ZDg0MmYtNjMyNC00MTIyLWI4NTAt MmM2YTJjNjkyMTJiLzEvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi81ZDg0MmYtNjMyNC00MTIyLWI4NTAtMmM2YTJjNjkyMTJi LzEvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDa9LQmj lnnC5zu1jdcCVG/KTDSvt0HR5SbvcxSqL9QRHrGflHhrYBICBjUL8hPpzSJqoB0u 6rfbbV5uA42TmqN+NrBmOMf/vx5wINTjJe4SdJTjrUq76BEQAvvBVL8KVI1g8WIc YoL6uwhrLOPRWw1saz4Po76weLP4zcI76tpjOJz/TaBstVrOUvXrkweSxgS9+Pb2 077pjiyLMUGbTYhRblKQDO0B4/bSfr5zB/OgSRatXw3T9mtpeSD5vGTzPhBThEmR KhOTGFmwIp0qmdzC/a0ouONSVDKhrROO5Whk0WkYCjGp30M762pU+tcprU3qxe6I aoZDhk0V/mpmPQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:17:49 2025 by rpki-client