This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json) Hash identifier: A5ZwnyeR8EUEzAVNwBRFc/bXcp9cN9ElVvr+OO+7d8Y= Subject key identifier: 51:F1:DF:A6:03:3E:93:5A:4B:3A:1C:92:75:04:F0:A6:10:5F:3A:84 Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a Certificate serial: 019B5F42810F40A59FA62FBEB93F72A3EAD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft Manifest number: 0BEA Signing time: Sat 27 Dec 2025 10:02:32 +0000 Manifest this update: Sat 27 Dec 2025 10:02:32 +0000 Manifest next update: Sun 28 Dec 2025 10:02:32 +0000 Files and hashes: 1: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=) 2: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: ULhtQfEeKQTnuZiipMO8CoUCxFwuEWfboPbFEpZiztg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:42:81:0f:40:a5:9f:a6:2f:be:b9:3f:72:a3:ea:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a Validity Not Before: Dec 27 10:02:32 2025 GMT Not After : Dec 28 10:02:32 2025 GMT Subject: CN=51f1dfa6033e935a4b3a1c927504f0a6105f3a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b4:2a:c3:a6:82:e0:e7:f1:c6:1e:3f:4e:97: 67:47:e7:28:49:bd:5d:49:80:94:90:10:b8:45:4b: bf:53:ca:fc:e7:34:d3:db:eb:11:af:d3:f9:43:fb: cf:c3:9d:ff:45:26:52:c6:1f:9e:86:93:bb:ce:9e: 00:21:d2:23:0a:13:fe:d8:30:f9:3b:b2:79:16:56: 3a:40:c7:39:ad:10:d3:41:9d:15:fc:3c:47:5c:04: 91:a9:e8:0f:5b:fd:1f:51:c8:b4:59:28:03:0a:10: d5:6a:4f:6e:a8:d3:90:f8:46:82:14:1a:03:25:f4: a7:33:ab:fa:c4:60:fd:0b:ae:12:63:5a:31:5a:c8: 45:ff:94:0e:b8:35:cf:12:3e:88:af:e4:ee:0d:fc: ab:62:94:af:3c:7c:44:c2:9b:cf:b8:50:40:72:d7: 8d:e6:5b:59:1e:cc:43:cf:47:f0:bd:af:62:b9:d5: 3a:3b:c0:82:94:33:2c:b8:8c:8e:b2:2f:89:1f:6f: e8:95:1e:3b:f8:ac:65:aa:1e:16:14:d9:3d:e5:38: 9e:f0:a1:35:d4:21:56:66:83:ec:3f:b8:3f:f2:6a: 2c:3b:16:cd:88:b0:a0:4c:23:69:52:08:6f:9c:c9: 46:df:f4:a7:63:2a:9c:06:22:bc:4b:ce:27:75:35: 81:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F1:DF:A6:03:3E:93:5A:4B:3A:1C:92:75:04:F0:A6:10:5F:3A:84 X509v3 Authority Key Identifier: keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:34:c7:db:ee:92:1c:9e:42:e2:54:8f:92:1d:53:88:b5:42: ec:d9:a4:95:80:f5:0f:9b:86:98:e0:12:b7:fa:3a:f7:9b:4c: 3f:b5:62:2b:ce:29:4a:8b:df:f0:e2:35:fc:32:9a:08:70:e8: 5a:ab:e1:d7:f9:97:b9:41:17:05:2c:9a:67:e5:04:cf:98:e0: fb:d7:87:0d:33:b5:b1:90:6c:e6:2a:70:e7:80:06:90:ea:08: 9d:81:b6:7d:ef:53:ec:6c:a4:13:bb:58:74:cf:a8:19:7c:9c: 91:fa:7f:9b:ba:e7:e6:69:05:e4:19:b3:07:6a:10:f3:d3:ed: c4:40:3d:bb:f7:1a:97:e5:55:01:3d:e7:e9:11:0d:f6:2d:e7: ae:32:5e:1c:fd:7b:e4:0a:0d:8d:00:bd:17:3e:5b:5e:17:13: 33:b5:14:1e:64:74:80:97:58:3d:fb:5e:3a:18:c4:1a:4e:fb: 45:40:ab:04:ba:de:1d:7e:b8:27:3d:3b:eb:27:ed:b0:2e:f4: ff:37:0e:15:79:56:96:cb:77:d4:10:e0:5d:70:6d:46:36:fc: 87:9b:3d:d4:c6:e4:5c:55:c6:5f:2b:1c:da:b6:76:34:12:14: 16:a3:27:33:4a:cb:63:d3:03:3b:4d:b5:1c:91:ae:2e:40:ec: f1:6d:71:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQoEPQKWfpi++uT9yo+rUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0 MDA0NGEwHhcNMjUxMjI3MTAwMjMyWhcNMjUxMjI4MTAwMjMyWjAzMTEwLwYDVQQD Eyg1MWYxZGZhNjAzM2U5MzVhNGIzYTFjOTI3NTA0ZjBhNjEwNWYzYTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLQqw6aC4Ofxxh4/TpdnR+coSb1d SYCUkBC4RUu/U8r85zTT2+sRr9P5Q/vPw53/RSZSxh+ehpO7zp4AIdIjChP+2DD5 O7J5FlY6QMc5rRDTQZ0V/DxHXASRqegPW/0fUci0WSgDChDVak9uqNOQ+EaCFBoD JfSnM6v6xGD9C64SY1oxWshF/5QOuDXPEj6Ir+TuDfyrYpSvPHxEwpvPuFBActeN 5ltZHsxDz0fwva9iudU6O8CClDMsuIyOsi+JH2/olR47+Kxlqh4WFNk95Tie8KE1 1CFWZoPsP7g/8mosOxbNiLCgTCNpUghvnMlG3/SnYyqcBiK8S84ndTWBBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHx36YDPpNaSzocknUE8KYQXzqEMB8GA1UdIwQY MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvTTH2+6S HJ5C4lSPkh1TiLVC7NmklYD1D5uGmOASt/o695tMP7ViK84pSovf8OI1/DKaCHDo Wqvh1/mXuUEXBSyaZ+UEz5jg+9eHDTO1sZBs5ipw54AGkOoInYG2fe9T7GykE7tY dM+oGXyckfp/m7rn5mkF5BmzB2oQ89PtxEA9u/cal+VVAT3n6REN9i3nrjJeHP17 5AoNjQC9Fz5bXhcTM7UUHmR0gJdYPfteOhjEGk77RUCrBLreHX64Jz076yftsC70 /zcOFXlWlst31BDgXXBtRjb8h5s91MbkXFXGXysc2rZ2NBIUFqMnM0rLY9MDO021 HJGuLkDs8W1xdA== -----END CERTIFICATE-----Generated at Sat Dec 27 17:37:38 2025 by rpki-client