This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json) Hash identifier: RhG63PUe+mwBj9QdurBI7raJjoIJNMLP+Uu4mEvHNvc= Subject key identifier: 77:11:7F:AF:93:57:76:75:ED:CE:F7:76:37:81:78:1A:AD:15:9E:74 Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31 Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831 Certificate serial: 019B44A59C1C4E7FDF0440767B165CCEAAC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft Manifest number: 032F Signing time: Mon 22 Dec 2025 06:01:02 +0000 Manifest this update: Mon 22 Dec 2025 06:01:02 +0000 Manifest next update: Tue 23 Dec 2025 06:01:02 +0000 Files and hashes: 1: 79VsR-5nub7DUrhryJn99r0sSJE.roa (hash: PKoaa5fww3RYvMlarfjIhYGHHPB9uxMDQ5a1vOFmd9k=) 2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: XnULVwTHkPBCRIw4/kzmg+berDIAG6YQ2eNJfqPsj/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:9c:1c:4e:7f:df:04:40:76:7b:16:5c:ce:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831 Validity Not Before: Dec 22 06:01:02 2025 GMT Not After : Dec 23 06:01:02 2025 GMT Subject: CN=77117faf93577675edcef7763781781aad159e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6f:2f:98:e2:c1:24:5f:12:a4:56:46:ab:26: 99:30:08:a4:ae:b0:c0:5b:82:48:e2:d7:51:52:b4: 04:a4:cc:ca:db:ea:e8:c2:fd:90:7b:36:20:68:37: 6b:f6:a1:b5:62:1d:8e:ce:25:2b:c2:17:9d:95:cd: e1:ee:b8:51:77:90:34:00:7d:af:bf:48:c5:92:89: ca:a9:46:ec:76:4a:dd:fb:e7:a2:c9:07:21:71:7b: a0:15:be:77:e8:73:6e:d1:b5:77:4a:ce:34:7e:ac: a2:ab:13:0a:b1:57:79:9d:27:c3:57:20:94:81:52: f3:81:93:72:1f:d2:b6:a9:70:c4:0f:ea:60:4b:7b: a8:48:c6:96:94:9a:55:70:30:2d:e3:34:90:83:8e: 42:77:6e:75:bb:84:d6:71:02:0f:d6:96:48:be:4b: f4:75:4c:34:35:05:46:06:18:2a:28:db:70:14:e5: ae:16:9d:b0:ae:b4:14:43:dd:7c:41:2a:c1:36:35: fb:e7:2a:66:7b:45:b4:03:1f:bf:95:fd:d5:b5:52: 6d:f7:b9:81:3f:59:f8:d0:6a:31:50:a5:b1:95:c9: b3:ee:3b:f1:a9:87:c4:24:ad:2e:f4:1c:80:7f:00: fd:bf:45:81:dd:77:1b:1c:70:0d:32:7c:8b:3f:2c: 2e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:11:7F:AF:93:57:76:75:ED:CE:F7:76:37:81:78:1A:AD:15:9E:74 X509v3 Authority Key Identifier: keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c7:0a:ed:3e:38:fe:02:c9:71:a4:14:82:6e:18:ef:e6:26: ad:d7:bd:23:34:8f:c0:de:22:2e:c8:d7:a7:fe:a7:6d:c1:f4: 7e:4d:49:ab:e7:1e:e2:bc:de:06:83:ed:c4:2d:c1:6c:47:35: b4:ec:20:b4:4b:c3:6e:3c:0c:f8:96:16:e7:dd:5a:9f:01:ae: 81:b0:90:52:7d:b3:a1:da:26:43:7e:bb:85:b4:e7:26:4c:84: b0:02:f7:32:eb:65:32:a2:78:3b:8c:3a:5f:4c:b3:37:c7:05: 96:17:54:7a:71:34:35:51:05:2a:4d:4a:85:48:e4:d5:b9:57: b7:1a:6f:68:25:61:50:92:13:8a:45:81:f3:1d:98:31:bc:68: 03:12:2e:88:67:27:84:1b:5a:db:9f:f0:ab:a6:5c:ed:c1:8a: 31:be:05:e6:f9:1f:ef:7b:0d:2f:63:bf:1b:04:4c:6c:0e:5b: bb:cf:fb:9b:aa:e1:10:b3:1e:e9:3d:47:f7:aa:1a:67:bb:d7: 1a:26:9e:8a:4c:6e:0d:d5:77:69:2d:08:6e:ed:59:fd:80:b5: 8e:5d:be:79:7e:0e:e0:d4:6f:5b:0b:20:0a:61:30:f9:1e:f3: 64:42:16:c8:c2:e2:7c:21:38:a2:61:04:c6:91:85:82:59:31: 37:39:e9:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpZwcTn/fBEB2exZczqrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzZlMDRlNTNiOWQzOTY3Y2Y5ZDQxOGU3OGI2MGJiYWQw NzU4MzEwHhcNMjUxMjIyMDYwMTAyWhcNMjUxMjIzMDYwMTAyWjAzMTEwLwYDVQQD Eyg3NzExN2ZhZjkzNTc3Njc1ZWRjZWY3NzYzNzgxNzgxYWFkMTU5ZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G8vmOLBJF8SpFZGqyaZMAikrrDA W4JI4tdRUrQEpMzK2+rowv2QezYgaDdr9qG1Yh2OziUrwhedlc3h7rhRd5A0AH2v v0jFkonKqUbsdkrd++eiyQchcXugFb536HNu0bV3Ss40fqyiqxMKsVd5nSfDVyCU gVLzgZNyH9K2qXDED+pgS3uoSMaWlJpVcDAt4zSQg45Cd251u4TWcQIP1pZIvkv0 dUw0NQVGBhgqKNtwFOWuFp2wrrQUQ918QSrBNjX75ypme0W0Ax+/lf3VtVJt97mB P1n40GoxUKWxlcmz7jvxqYfEJK0u9ByAfwD9v0WB3XcbHHANMnyLPywuawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcRf6+TV3Z17c73djeBeBqtFZ50MB8GA1UdIwQY MBaAFHA24E5TudOWfPnUGOeLYLutB1gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEt ODlkZWYwMDgyZTJhLzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEtODlkZWYwMDgyZTJh LzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMcK7T44 /gLJcaQUgm4Y7+Ymrde9IzSPwN4iLsjXp/6nbcH0fk1Jq+ce4rzeBoPtxC3BbEc1 tOwgtEvDbjwM+JYW591anwGugbCQUn2zodomQ367hbTnJkyEsAL3MutlMqJ4O4w6 X0yzN8cFlhdUenE0NVEFKk1KhUjk1blXtxpvaCVhUJITikWB8x2YMbxoAxIuiGcn hBta25/wq6Zc7cGKMb4F5vkf73sNL2O/GwRMbA5bu8/7m6rhELMe6T1H96oaZ7vX GiaeikxuDdV3aS0Ibu1Z/YC1jl2+eX4O4NRvWwsgCmEw+R7zZEIWyMLifCE4omEE xpGFglkxNznpeA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:44 2025 by rpki-client