This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json) Hash identifier: VXGuU9Cv/PUghd3/ylLYwUPiA71LrVrfjk6yTPlXiVQ= Subject key identifier: 6F:F4:F9:60:39:85:86:23:7E:7D:43:CC:29:16:DD:C9:0B:D6:86:9A Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31 Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831 Certificate serial: 019B657A2DFBE60BB06B9BE6B73817E55EF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft Manifest number: 0340 Signing time: Sun 28 Dec 2025 15:01:04 +0000 Manifest this update: Sun 28 Dec 2025 15:01:04 +0000 Manifest next update: Mon 29 Dec 2025 15:01:04 +0000 Files and hashes: 1: 79VsR-5nub7DUrhryJn99r0sSJE.roa (hash: PKoaa5fww3RYvMlarfjIhYGHHPB9uxMDQ5a1vOFmd9k=) 2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: Dpx5WMApDDEYTY7h48PxYRn2Z3ivLf8+T06kwiD5mGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:2d:fb:e6:0b:b0:6b:9b:e6:b7:38:17:e5:5e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831 Validity Not Before: Dec 28 15:01:04 2025 GMT Not After : Dec 29 15:01:04 2025 GMT Subject: CN=6ff4f960398586237e7d43cc2916ddc90bd6869a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:b7:6f:79:d7:d2:b5:fb:2f:83:20:9a:25: 48:50:ff:77:c5:1b:8c:42:5f:4c:f6:55:11:5f:ea: 34:2c:08:9a:9c:7e:66:35:53:9d:ed:dc:c2:e7:bf: 06:86:83:b0:a4:c3:a9:be:ab:ee:2f:7a:7b:aa:ad: 76:84:94:b3:1b:40:a8:39:42:9f:c8:7a:f3:79:f5: ed:7f:18:ec:f0:40:00:88:5a:e9:2c:27:27:f4:c9: 50:40:db:80:d3:a8:97:a9:83:6a:3b:a5:bc:0c:46: db:ca:c3:da:41:f5:17:ad:41:e7:9b:29:1e:34:8f: e5:9e:99:19:b3:f6:88:79:93:44:6b:45:ac:63:49: 44:e2:6d:c0:7f:9b:fe:46:74:c5:aa:02:26:56:61: 89:3b:46:b7:b1:e0:2d:ad:d3:7b:a6:04:b1:b6:af: f6:81:82:56:a5:05:22:1d:8d:40:ee:e5:64:bd:fc: 24:62:0c:a5:24:d2:03:92:c3:0a:fe:d3:b3:47:85: 32:ef:0d:6d:49:35:50:5a:c0:f8:02:4e:a4:fd:16: 80:26:c2:70:80:09:52:47:82:a3:d1:e5:48:19:a6: ce:54:a5:e4:7e:59:e2:35:e3:e1:90:61:11:8c:c4: d1:8d:6b:13:d0:c6:64:b0:fb:ef:c0:a3:77:a6:e2: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F4:F9:60:39:85:86:23:7E:7D:43:CC:29:16:DD:C9:0B:D6:86:9A X509v3 Authority Key Identifier: keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ca:b0:6a:8b:7a:13:79:f0:6a:89:9f:86:a2:49:0c:28:1d: 6c:e7:a7:ce:53:fd:ab:40:17:61:27:b8:45:3f:55:4e:e6:c5: b7:2b:92:48:f4:ba:b9:98:c8:12:a0:6d:2a:e2:58:d5:e8:5b: 3a:23:51:cb:2f:24:71:3b:86:f5:b6:62:77:21:d0:5d:7a:67: 20:86:bc:25:cb:42:95:43:b1:a4:1d:7d:e0:0d:f9:23:1e:64: c0:f5:93:c7:0a:12:05:83:cc:29:1f:52:01:cd:35:6f:57:45: c9:77:ff:62:44:9e:69:d2:44:fd:de:63:e1:8c:78:33:b5:ae: 75:54:a0:05:8a:ff:fb:19:8f:f8:06:52:81:ea:75:d1:a0:e1: 55:70:12:05:0b:00:4c:3f:34:ef:4b:05:3b:47:c6:20:c0:a2: 4e:c0:2d:d2:58:98:56:69:4a:f8:0a:f5:0a:e4:6e:05:45:9a: 53:c8:cc:20:11:78:2b:f7:6b:08:c6:98:fd:40:dc:79:e7:dc: c5:42:20:37:ff:a6:9c:1b:aa:e8:d4:32:4a:f0:4a:0d:43:f2: 8e:a0:f3:28:2d:90:e8:b7:7f:65:3c:1c:b8:de:20:07:6d:af: b1:99:28:9c:a4:b4:91:34:19:aa:27:6f:66:7e:1c:f0:fa:26: 05:4f:8b:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlei375guwa5vmtzgX5V7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzZlMDRlNTNiOWQzOTY3Y2Y5ZDQxOGU3OGI2MGJiYWQw NzU4MzEwHhcNMjUxMjI4MTUwMTA0WhcNMjUxMjI5MTUwMTA0WjAzMTEwLwYDVQQD Eyg2ZmY0Zjk2MDM5ODU4NjIzN2U3ZDQzY2MyOTE2ZGRjOTBiZDY4NjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSK3b3nX0rX7L4MgmiVIUP93xRuM Ql9M9lURX+o0LAianH5mNVOd7dzC578GhoOwpMOpvqvuL3p7qq12hJSzG0CoOUKf yHrzefXtfxjs8EAAiFrpLCcn9MlQQNuA06iXqYNqO6W8DEbbysPaQfUXrUHnmyke NI/lnpkZs/aIeZNEa0WsY0lE4m3Af5v+RnTFqgImVmGJO0a3seAtrdN7pgSxtq/2 gYJWpQUiHY1A7uVkvfwkYgylJNIDksMK/tOzR4Uy7w1tSTVQWsD4Ak6k/RaAJsJw gAlSR4Kj0eVIGabOVKXkflniNePhkGERjMTRjWsT0MZksPvvwKN3puLOswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/0+WA5hYYjfn1DzCkW3ckL1oaaMB8GA1UdIwQY MBaAFHA24E5TudOWfPnUGOeLYLutB1gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEt ODlkZWYwMDgyZTJhLzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEtODlkZWYwMDgyZTJh LzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8qwaot6 E3nwaomfhqJJDCgdbOenzlP9q0AXYSe4RT9VTubFtyuSSPS6uZjIEqBtKuJY1ehb OiNRyy8kcTuG9bZidyHQXXpnIIa8JctClUOxpB194A35Ix5kwPWTxwoSBYPMKR9S Ac01b1dFyXf/YkSeadJE/d5j4Yx4M7WudVSgBYr/+xmP+AZSgep10aDhVXASBQsA TD8070sFO0fGIMCiTsAt0liYVmlK+Ar1CuRuBUWaU8jMIBF4K/drCMaY/UDceefc xUIgN/+mnBuq6NQySvBKDUPyjqDzKC2Q6Ld/ZTwcuN4gB22vsZkonKS0kTQZqidv Zn4c8PomBU+LVw== -----END CERTIFICATE-----Generated at Sun Dec 28 18:54:08 2025 by rpki-client