This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json) Hash identifier: 7Cbwkw/FTGKktHMk3c7WAkiAScQFEr+5d4kg9rHhkoo= Subject key identifier: 3B:B4:BB:71:AA:C8:73:C9:4D:9C:E5:D1:69:1A:4D:AD:98:2E:C7:5B Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45 Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945 Certificate serial: 019B32D772904F824EBCA8D6B04BAB590DD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft Manifest number: 0C67 Signing time: Thu 18 Dec 2025 19:02:18 +0000 Manifest this update: Thu 18 Dec 2025 19:02:18 +0000 Manifest next update: Fri 19 Dec 2025 19:02:18 +0000 Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: 1d2KOewsB14YSFLfzVhba+BXbDn7cISFuZlpx88NGJI=) 2: s3TIKJMGO-H8fbbN5SX9DjrKZbg.roa (hash: nJZCH4ElBXirrkbsvqmvn6OniRKSBo6O3OjFqSqnuAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:72:90:4f:82:4e:bc:a8:d6:b0:4b:ab:59:0d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945 Validity Not Before: Dec 18 19:02:18 2025 GMT Not After : Dec 19 19:02:18 2025 GMT Subject: CN=3bb4bb71aac873c94d9ce5d1691a4dad982ec75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:a7:3f:e1:3c:e3:a2:fc:c3:20:6f:f9:d9: f3:a9:8c:c9:0c:f2:ab:51:89:aa:e8:de:0b:95:90: 51:e9:92:83:c7:01:c4:23:35:76:9c:53:a7:01:39: 04:4c:af:b7:4a:43:0d:08:db:b5:36:b5:76:ed:4c: ae:df:b0:68:78:f0:5b:8e:43:eb:a4:e5:bc:62:80: 34:bd:d9:8b:d0:0f:e6:01:22:9d:e8:0b:e4:ab:6f: 9f:41:0d:86:e1:3c:1d:c2:98:88:97:9f:38:ee:bd: 94:76:4c:c9:b7:e7:f9:e6:6c:fa:46:51:bb:f3:3f: 36:0a:21:d6:06:8d:6a:d8:e0:30:13:25:3c:07:fe: f8:a3:33:56:c5:91:17:04:d0:c3:a1:f6:82:1b:a2: 68:83:79:2b:a9:1c:33:36:3e:6e:45:b0:29:6b:2b: a9:15:95:d9:bb:f3:f6:2b:fd:b7:fa:50:69:73:67: b5:91:8e:ad:6d:2e:ce:a1:4d:c3:cc:c9:64:ac:9f: 32:f8:b1:f6:06:69:ad:73:48:14:8d:0c:08:ed:e7: cd:e0:91:e3:1d:4f:c2:52:21:12:fe:51:4f:45:8a: 87:14:4a:e3:02:36:8f:be:1d:9a:b6:39:ae:29:75: 15:af:6e:39:a7:9f:04:85:42:12:50:3b:5c:5c:71: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B4:BB:71:AA:C8:73:C9:4D:9C:E5:D1:69:1A:4D:AD:98:2E:C7:5B X509v3 Authority Key Identifier: keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b4:48:e2:f2:20:5e:f9:28:b8:d8:19:d8:b4:11:4e:c2:99: 66:80:d1:2a:20:a9:e0:fa:ea:10:5c:45:ca:e6:22:7e:7b:cf: bc:12:6a:3b:4d:a7:9f:7d:fd:5e:32:e7:63:a7:fd:83:e2:31: b8:29:fa:d1:b1:a5:f0:a4:52:ed:3f:e8:4e:56:b8:9e:0f:8f: 63:9b:09:f2:d6:de:37:73:9c:0f:a9:97:54:0a:27:cf:33:bc: 61:7f:d1:59:c5:13:35:4b:93:b7:72:c8:ec:2a:c0:2a:c8:c7: 7e:f4:fb:ab:ff:ce:45:b1:81:75:d2:ba:1b:46:81:c7:10:d0: d9:0c:31:8e:fc:00:21:9c:3d:e2:96:ad:83:82:90:7a:cb:50: 1c:d2:11:c0:fb:6b:a9:59:3a:7e:f5:ec:e0:a5:1e:0d:e8:c8: ac:1f:a9:66:f8:a3:b1:fa:32:1d:ae:66:51:ba:dd:88:a8:c9: f6:e1:e4:75:51:0a:8e:72:4b:49:c1:84:8e:5a:7a:69:53:aa: 1e:6f:83:d6:ab:f2:75:b6:fa:75:de:59:5d:da:9e:4e:cf:1c: e9:68:03:f3:54:76:bb:7d:d9:33:e1:d7:d4:bd:6d:73:3e:cb: 68:5f:58:c8:14:93:5d:0a:21:bf:5f:da:45:da:3c:51:51:99: 6b:b1:f5:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy13KQT4JOvKjWsEurWQ3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjBmOWY3NTViMGUzMDNjYzE2ZDFhNjMzZjk1OGMwMzYw MzQ5NDUwHhcNMjUxMjE4MTkwMjE4WhcNMjUxMjE5MTkwMjE4WjAzMTEwLwYDVQQD EygzYmI0YmI3MWFhYzg3M2M5NGQ5Y2U1ZDE2OTFhNGRhZDk4MmVjNzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24qnP+E846L8wyBv+dnzqYzJDPKr UYmq6N4LlZBR6ZKDxwHEIzV2nFOnATkETK+3SkMNCNu1NrV27Uyu37BoePBbjkPr pOW8YoA0vdmL0A/mASKd6Avkq2+fQQ2G4TwdwpiIl5847r2UdkzJt+f55mz6RlG7 8z82CiHWBo1q2OAwEyU8B/74ozNWxZEXBNDDofaCG6Jog3krqRwzNj5uRbApayup FZXZu/P2K/23+lBpc2e1kY6tbS7OoU3DzMlkrJ8y+LH2Bmmtc0gUjQwI7efN4JHj HU/CUiES/lFPRYqHFErjAjaPvh2atjmuKXUVr245p58EhUISUDtcXHFC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu0u3GqyHPJTZzl0WkaTa2YLsdbMB8GA1UdIwQY MBaAFA2w+fdVsOMDzBbRpjP5WMA2A0lFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUt NjRjOWMyY2M5NjA5LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUtNjRjOWMyY2M5NjA5 LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrRI4vIg XvkouNgZ2LQRTsKZZoDRKiCp4PrqEFxFyuYifnvPvBJqO02nn339XjLnY6f9g+Ix uCn60bGl8KRS7T/oTla4ng+PY5sJ8tbeN3OcD6mXVAonzzO8YX/RWcUTNUuTt3LI 7CrAKsjHfvT7q//ORbGBddK6G0aBxxDQ2QwxjvwAIZw94patg4KQestQHNIRwPtr qVk6fvXs4KUeDejIrB+pZvijsfoyHa5mUbrdiKjJ9uHkdVEKjnJLScGEjlp6aVOq Hm+D1qvydbb6dd5ZXdqeTs8c6WgD81R2u33ZM+HX1L1tcz7LaF9YyBSTXQohv1/a Rdo8UVGZa7H18w== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:57 2025 by rpki-client