This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: Oi7QwKIdG2F+0iJIE0acIQP+2ajWT7OmIJV0UuTE32A= Subject key identifier: BF:7F:31:5F:27:2B:61:C4:62:6C:F1:F6:F7:E2:36:D8:FC:86:D5:F1 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019B378EBDACD55047B62F9A8FB618FD05BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 1152 Signing time: Fri 19 Dec 2025 17:01:00 +0000 Manifest this update: Fri 19 Dec 2025 17:01:00 +0000 Manifest next update: Sat 20 Dec 2025 17:01:00 +0000 Files and hashes: 1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=) 2: 4SJGO0ahyGrj6_wgUycRPIM87rQ.roa (hash: KKyfxNUe79UZQMGD42WojNOLaLKHp+8lyvcAmB4f9dM=) 3: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 4: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 5: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: ukB8NdlGEICU9TCTMFSb0+gcJZgURk3EgAEpcPdryt0=) 6: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 7: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 8: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 9: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 10: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 11: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 12: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 13: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:bd:ac:d5:50:47:b6:2f:9a:8f:b6:18:fd:05:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Dec 19 17:01:00 2025 GMT Not After : Dec 20 17:01:00 2025 GMT Subject: CN=bf7f315f272b61c4626cf1f6f7e236d8fc86d5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:11:3f:00:ec:27:8c:6c:2a:cb:33:c1:ff: 4a:81:0f:a3:2b:b8:08:ed:aa:bd:fc:25:dc:93:0e: b1:f5:b5:52:99:8c:db:d8:19:94:bc:5e:73:73:61: 5f:b8:aa:ba:93:bb:96:43:ad:c3:09:30:d3:19:3c: d6:f7:5c:f4:fd:f7:14:0d:71:aa:d4:da:d1:b6:01: a1:73:d3:18:cf:ad:63:d7:3c:a5:b2:1c:ba:30:d6: 3f:fd:85:54:57:18:9a:57:55:2c:65:d4:a8:5a:2c: 19:23:77:00:ae:82:84:b6:88:43:3d:d2:9c:17:5a: d9:38:a0:e6:e2:40:3b:d3:db:41:31:94:0d:5a:c0: db:4e:c1:58:ef:f4:a0:4f:8f:5b:98:1a:ac:d1:16: ae:d5:26:56:d6:1f:a7:b3:bb:f7:c5:f6:57:7b:89: d4:91:71:81:87:40:1b:9d:97:7d:12:b8:ef:de:6d: d5:67:8e:44:ea:06:86:05:61:a5:93:ae:19:a3:51: 2f:6e:d4:66:16:45:90:db:e3:76:9d:77:99:43:da: 1e:23:1f:20:16:c1:0f:ef:83:49:61:69:6c:fa:fb: 35:51:25:63:71:71:ad:f1:f3:c1:48:8f:f4:79:ae: 86:be:a3:9c:5d:31:2b:88:18:55:43:98:f1:86:c4: 8e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7F:31:5F:27:2B:61:C4:62:6C:F1:F6:F7:E2:36:D8:FC:86:D5:F1 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e3:8f:ad:18:64:df:09:c7:b9:95:f1:66:c1:92:bc:ef:8a: cc:06:66:86:69:86:2f:d0:e4:60:e8:7d:96:3d:2c:bd:66:8f: 93:26:e9:d5:4f:80:0b:ac:45:79:fd:4a:f7:56:df:80:42:2d: e8:ed:66:a9:12:c5:88:55:e2:ae:c2:ff:28:bf:64:fe:0e:fd: 50:0e:05:e0:7b:22:57:7f:92:aa:d9:f7:2f:bd:66:6a:5f:79: 79:d3:5c:10:a3:7e:c8:fe:10:c1:62:19:90:4a:3b:e5:99:a5: 55:7f:35:66:7e:05:72:72:8a:18:4d:63:52:bd:b5:cc:fe:5f: 0f:d8:e5:cb:4b:67:10:92:02:19:93:87:7c:ae:fa:91:63:84: 72:fc:0d:b0:73:db:54:d2:1f:0c:e0:03:25:9a:4c:f4:7d:61: 7d:4f:f8:e9:39:16:3b:55:54:7c:68:96:57:81:3e:89:f5:f3: 24:62:af:16:59:ce:7a:4d:ee:ed:fd:00:ac:35:7f:a7:04:08: 25:b3:cc:d7:a4:08:db:3e:0e:26:75:85:66:e7:4e:c3:5e:1e: 48:d3:38:41:b2:1b:7c:b6:6f:f7:4f:47:c8:7f:1a:83:07:e2: 3c:97:ad:e2:15:22:31:70:05:ea:88:c3:8f:eb:6c:50:a0:7c: 9f:a0:97:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jr2s1VBHti+aj7YY/QW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUxMjE5MTcwMTAwWhcNMjUxMjIwMTcwMTAwWjAzMTEwLwYDVQQD EyhiZjdmMzE1ZjI3MmI2MWM0NjI2Y2YxZjZmN2UyMzZkOGZjODZkNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuckRPwDsJ4xsKsszwf9KgQ+jK7gI 7aq9/CXckw6x9bVSmYzb2BmUvF5zc2FfuKq6k7uWQ63DCTDTGTzW91z0/fcUDXGq 1NrRtgGhc9MYz61j1zylshy6MNY//YVUVxiaV1UsZdSoWiwZI3cAroKEtohDPdKc F1rZOKDm4kA709tBMZQNWsDbTsFY7/SgT49bmBqs0Rau1SZW1h+ns7v3xfZXe4nU kXGBh0AbnZd9Erjv3m3VZ45E6gaGBWGlk64Zo1EvbtRmFkWQ2+N2nXeZQ9oeIx8g FsEP74NJYWls+vs1USVjcXGt8fPBSI/0ea6GvqOcXTEriBhVQ5jxhsSOcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9/MV8nK2HEYmzx9vfiNtj8htXxMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOOPrRhk 3wnHuZXxZsGSvO+KzAZmhmmGL9DkYOh9lj0svWaPkybp1U+AC6xFef1K91bfgEIt 6O1mqRLFiFXirsL/KL9k/g79UA4F4HsiV3+Sqtn3L71mal95edNcEKN+yP4QwWIZ kEo75ZmlVX81Zn4FcnKKGE1jUr21zP5fD9jly0tnEJICGZOHfK76kWOEcvwNsHPb VNIfDOADJZpM9H1hfU/46TkWO1VUfGiWV4E+ifXzJGKvFlnOek3u7f0ArDV/pwQI JbPM16QI2z4OJnWFZudOw14eSNM4QbIbfLZv909HyH8agwfiPJet4hUiMXAF6ojD j+tsUKB8n6CXnw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:01:36 2025 by rpki-client