This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft File: debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json) Hash identifier: pbpmEpd3Jlf0PZ40Q+LLmgpj/354DtX9PE5lwfTVpzs= Subject key identifier: EB:90:6F:C4:D1:78:37:ED:24:ED:3C:75:53:32:8D:AE:0E:06:7F:59 Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35 Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335 Certificate serial: 019B5FAEF7C9A0A74D80A2D3D5E7D3620928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 12:01:00 +0000 Manifest this update: Sat 27 Dec 2025 12:01:00 +0000 Manifest next update: Sun 28 Dec 2025 12:01:00 +0000 Files and hashes: 1: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (hash: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=) 2: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: XhJSDQRTkATr8nhlsdMUf4Dl4mgaLnseVRVsd0K4uU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:ae:f7:c9:a0:a7:4d:80:a2:d3:d5:e7:d3:62:09:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335 Validity Not Before: Dec 27 12:01:00 2025 GMT Not After : Dec 28 12:01:00 2025 GMT Subject: CN=eb906fc4d17837ed24ed3c7553328dae0e067f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:cf:00:bb:5d:90:14:f6:65:b8:fe:06:4e: 22:e2:60:63:28:16:22:1d:f9:a5:22:19:13:11:56: af:70:83:cd:86:0b:65:31:26:8a:46:47:0c:6c:2e: db:6c:b2:4c:22:95:74:60:b4:49:9c:77:88:5c:6e: 1e:e1:14:19:4f:57:d4:5a:6d:90:ae:ca:d7:22:94: a4:96:11:99:87:50:5c:12:ec:f2:52:70:ce:05:ab: 4b:42:b0:82:98:9f:59:e6:ba:87:2d:b9:5e:18:cd: ba:7a:ae:f9:62:31:73:cc:f5:b3:a8:17:c9:75:35: 61:77:ef:aa:a1:c2:31:74:b8:f0:d2:cf:60:1f:56: 77:54:89:7f:b3:34:9b:ec:24:3e:7c:b5:df:35:d3: 7e:db:62:c2:a4:18:51:09:34:56:9a:eb:d7:02:14: 50:cc:09:93:18:56:04:dd:b9:72:81:90:b7:94:0e: a7:4f:fa:3a:b1:7a:32:1c:63:09:bd:b9:81:52:83: 1b:ff:3c:ce:1a:cd:9c:64:b9:67:1e:6d:72:43:18: 53:e9:bb:5e:2f:cc:e6:ce:17:35:c7:8e:1f:c5:08: 68:99:86:f5:98:49:2c:40:d6:17:4b:61:a3:b9:47: 77:43:99:16:ba:4d:9f:8e:13:ec:b3:bc:33:89:a2: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:90:6F:C4:D1:78:37:ED:24:ED:3C:75:53:32:8D:AE:0E:06:7F:59 X509v3 Authority Key Identifier: keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:da:b5:e2:4b:9c:b8:be:27:d8:75:cc:7f:ac:f1:2e:34:6a: 25:4f:ff:88:37:59:ef:96:5f:c3:01:9a:cd:0f:55:1f:c6:dc: cf:ef:27:a4:cb:ac:e3:78:68:02:a1:91:80:a0:ad:a2:f2:c0: f4:21:e2:57:e7:c2:31:6a:51:32:33:a7:b8:97:59:85:da:cf: 22:d3:aa:99:23:b5:cb:44:09:f6:8e:45:73:98:a8:46:37:ec: e0:45:e0:a8:13:4d:71:be:7e:dc:11:70:db:4c:78:ad:17:21: 17:33:63:87:22:67:88:69:35:23:f4:87:f7:95:ac:c6:43:89: 68:cb:81:a0:fb:53:7e:72:1f:b5:9b:d7:c2:0b:27:7e:18:13: 7d:79:10:9c:5a:81:de:f5:d6:5d:19:b9:51:ec:88:42:ee:99: 38:33:05:6a:0a:20:b9:1d:31:d3:21:17:17:c3:f9:50:30:25: 23:1c:31:c1:4e:94:5e:70:ee:52:d1:8c:04:e2:38:3a:a9:b3: 7f:62:47:78:99:9e:1c:32:69:43:5f:15:64:1a:4f:99:c7:27: e5:cd:de:73:eb:d1:fe:d9:63:e4:dd:e4:2e:69:dc:ee:6d:a4: bd:c7:a0:7d:af:03:5d:44:79:6b:7b:b7:05:ae:0a:e8:ff:79: a1:8d:ca:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfrvfJoKdNgKLT1efTYgkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZTZlMjEyYzYzNzQxYjg1Yjk1N2M3Yzk3ZjdjNThmNWI1 ZTEzMzUwHhcNMjUxMjI3MTIwMTAwWhcNMjUxMjI4MTIwMTAwWjAzMTEwLwYDVQQD EyhlYjkwNmZjNGQxNzgzN2VkMjRlZDNjNzU1MzMyOGRhZTBlMDY3ZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZfPALtdkBT2Zbj+Bk4i4mBjKBYi HfmlIhkTEVavcIPNhgtlMSaKRkcMbC7bbLJMIpV0YLRJnHeIXG4e4RQZT1fUWm2Q rsrXIpSklhGZh1BcEuzyUnDOBatLQrCCmJ9Z5rqHLbleGM26eq75YjFzzPWzqBfJ dTVhd++qocIxdLjw0s9gH1Z3VIl/szSb7CQ+fLXfNdN+22LCpBhRCTRWmuvXAhRQ zAmTGFYE3blygZC3lA6nT/o6sXoyHGMJvbmBUoMb/zzOGs2cZLlnHm1yQxhT6bte L8zmzhc1x44fxQhomYb1mEksQNYXS2GjuUd3Q5kWuk2fjhPss7wziaIpzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuQb8TReDftJO08dVMyja4OBn9ZMB8GA1UdIwQY MBaAFHXm4hLGN0G4W5V8fJf3xY9bXhM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzct MDNkNzQ2MWViNThhLzEvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzctMDNkNzQ2MWViNThh LzEvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwdq14kuc uL4n2HXMf6zxLjRqJU//iDdZ75ZfwwGazQ9VH8bcz+8npMus43hoAqGRgKCtovLA 9CHiV+fCMWpRMjOnuJdZhdrPItOqmSO1y0QJ9o5Fc5ioRjfs4EXgqBNNcb5+3BFw 20x4rRchFzNjhyJniGk1I/SH95WsxkOJaMuBoPtTfnIftZvXwgsnfhgTfXkQnFqB 3vXWXRm5UeyIQu6ZODMFagoguR0x0yEXF8P5UDAlIxwxwU6UXnDuUtGMBOI4Oqmz f2JHeJmeHDJpQ18VZBpPmccn5c3ec+vR/tlj5N3kLmnc7m2kvcegfa8DXUR5a3u3 Ba4K6P95oY3K7g== -----END CERTIFICATE-----Generated at Sat Dec 27 19:27:51 2025 by rpki-client