This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json) Hash identifier: N+DyIs9aoMTd+Zxws0zhRPEup91Qi4U83DC+MdIhRU8= Subject key identifier: EF:0E:B5:29:00:8A:60:37:D4:EA:AD:78:AF:AA:54:31:4E:E5:07:E2 Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45 Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945 Certificate serial: 019B68E9E6D42A90030FC7FB0201E5F56D40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft Manifest number: 0C83 Signing time: Mon 29 Dec 2025 07:01:57 +0000 Manifest this update: Mon 29 Dec 2025 07:01:57 +0000 Manifest next update: Tue 30 Dec 2025 07:01:57 +0000 Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: 4Ucu8PULDxvmA/J+gAe37P+God46GM+PPDLNuMNkmx0=) 2: s3TIKJMGO-H8fbbN5SX9DjrKZbg.roa (hash: nJZCH4ElBXirrkbsvqmvn6OniRKSBo6O3OjFqSqnuAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:e6:d4:2a:90:03:0f:c7:fb:02:01:e5:f5:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945 Validity Not Before: Dec 29 07:01:57 2025 GMT Not After : Dec 30 07:01:57 2025 GMT Subject: CN=ef0eb529008a6037d4eaad78afaa54314ee507e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:d1:60:c5:a8:a3:b7:83:4e:c2:94:4e:8f: a3:cb:2c:19:b4:88:af:5b:bd:1a:17:d3:74:9c:23: 6a:01:8b:94:81:74:03:4a:93:3f:70:9d:60:76:c3: 29:13:f6:3f:9e:8f:72:77:49:13:0f:34:4a:bc:b3: 82:74:5c:cf:8d:30:9b:6e:94:d6:07:87:54:5f:62: 8a:28:44:88:f7:33:a0:c1:5f:c5:04:f6:6e:87:42: 17:7e:11:1a:2d:5b:d9:0c:7a:16:3b:1e:c8:83:58: 89:e6:a3:02:9f:67:74:64:76:46:98:4b:cf:fc:c8: 08:af:fd:2c:8d:bf:52:58:18:8c:18:ff:c3:42:b5: 35:1c:cd:96:0b:f3:ec:ad:62:4a:c1:80:e8:20:63: 25:8d:af:09:61:78:2b:8a:7a:b5:a7:0b:d2:8b:f9: c3:3b:52:8e:f3:5f:73:43:e4:93:5c:ba:7f:36:ff: b0:af:4b:b2:d2:37:8f:e7:8c:de:6e:9f:7c:97:20: eb:73:f1:ac:2e:f1:11:c6:5a:d6:4b:6a:7e:39:f7: e3:ca:0a:ad:2a:1e:40:6a:bd:57:99:a7:c2:16:47: 70:2a:71:a5:95:9b:dd:31:57:ee:4b:9e:15:a6:2f: 97:8c:ac:f4:b4:66:a2:31:62:84:fb:a1:ee:31:2b: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0E:B5:29:00:8A:60:37:D4:EA:AD:78:AF:AA:54:31:4E:E5:07:E2 X509v3 Authority Key Identifier: keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f6:5b:58:2c:32:5b:2d:a1:f2:89:ce:8c:20:4f:61:8a:14: fa:4d:bb:1f:7b:55:ef:2a:cc:9a:f7:96:7c:85:19:ea:72:eb: bd:c8:39:b3:67:84:bb:57:b2:e6:d0:e1:02:79:b7:53:92:3f: c5:44:3a:b5:6a:b1:69:8c:86:55:89:f1:d0:b5:d3:e4:49:f6: 41:ab:9d:9c:85:c0:6d:bb:0d:cd:b4:73:33:8f:be:54:22:03: 42:c8:f0:d4:82:a0:1d:52:32:46:d1:78:a0:08:88:f9:65:dd: cc:43:e5:f6:ae:d5:7c:57:3d:fa:42:c2:f0:3b:53:98:48:70: ad:63:a9:5b:b2:a2:73:c6:43:07:dd:85:99:c0:11:4b:e3:9c: c5:af:52:b4:6e:16:97:64:9e:27:04:d3:43:26:87:20:86:01: 86:99:af:c6:bd:9d:dc:c7:f2:86:9b:7a:31:b6:ab:fa:e3:e6: 19:79:98:d1:bf:91:84:08:bc:e4:56:dd:09:12:80:31:f5:52: 1b:f5:33:4b:1a:27:d4:a5:e7:8e:58:b6:34:0b:18:3a:62:cb: 77:e2:c7:57:67:9e:6e:c3:fd:fa:e2:d2:69:4b:6a:a7:a2:29: 3f:ce:3d:72:c2:bc:c0:ba:36:ba:8c:ce:47:d3:c6:a6:4c:03: 35:fc:5a:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6ebUKpADD8f7AgHl9W1AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjBmOWY3NTViMGUzMDNjYzE2ZDFhNjMzZjk1OGMwMzYw MzQ5NDUwHhcNMjUxMjI5MDcwMTU3WhcNMjUxMjMwMDcwMTU3WjAzMTEwLwYDVQQD EyhlZjBlYjUyOTAwOGE2MDM3ZDRlYWFkNzhhZmFhNTQzMTRlZTUwN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEbRYMWoo7eDTsKUTo+jyywZtIiv W70aF9N0nCNqAYuUgXQDSpM/cJ1gdsMpE/Y/no9yd0kTDzRKvLOCdFzPjTCbbpTW B4dUX2KKKESI9zOgwV/FBPZuh0IXfhEaLVvZDHoWOx7Ig1iJ5qMCn2d0ZHZGmEvP /MgIr/0sjb9SWBiMGP/DQrU1HM2WC/PsrWJKwYDoIGMlja8JYXgrinq1pwvSi/nD O1KO819zQ+STXLp/Nv+wr0uy0jeP54zebp98lyDrc/GsLvERxlrWS2p+Offjygqt Kh5Aar1XmafCFkdwKnGllZvdMVfuS54Vpi+XjKz0tGaiMWKE+6HuMStQ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8OtSkAimA31OqteK+qVDFO5QfiMB8GA1UdIwQY MBaAFA2w+fdVsOMDzBbRpjP5WMA2A0lFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUt NjRjOWMyY2M5NjA5LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUtNjRjOWMyY2M5NjA5 LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPZbWCwy Wy2h8onOjCBPYYoU+k27H3tV7yrMmveWfIUZ6nLrvcg5s2eEu1ey5tDhAnm3U5I/ xUQ6tWqxaYyGVYnx0LXT5En2QaudnIXAbbsNzbRzM4++VCIDQsjw1IKgHVIyRtF4 oAiI+WXdzEPl9q7VfFc9+kLC8DtTmEhwrWOpW7Kic8ZDB92FmcARS+Ocxa9StG4W l2SeJwTTQyaHIIYBhpmvxr2d3Mfyhpt6Mbar+uPmGXmY0b+RhAi85FbdCRKAMfVS G/UzSxon1KXnjli2NAsYOmLLd+LHV2eebsP9+uLSaUtqp6IpP849csK8wLo2uozO R9PGpkwDNfxa8w== -----END CERTIFICATE-----Generated at Mon Dec 29 14:55:48 2025 by rpki-client