This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json) Hash identifier: rvm9PyPs4hz8HvVV1GAOQaI0GjPwyiEw1xTtkZtsUIg= Subject key identifier: 20:09:96:59:37:AC:77:C6:90:0F:B8:D9:E9:8F:AD:BF:78:3E:79:67 Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26 Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226 Certificate serial: 019B6DA101865E030EA41A077CE9B490B7EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft Manifest number: 10CA Signing time: Tue 30 Dec 2025 05:00:26 +0000 Manifest this update: Tue 30 Dec 2025 05:00:26 +0000 Manifest next update: Wed 31 Dec 2025 05:00:26 +0000 Files and hashes: 1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=) 2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: Jgppl4MsX/LB68Bk0UBH2IFj7jvfh+7vm1AK6t9IhAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 05:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:01:86:5e:03:0e:a4:1a:07:7c:e9:b4:90:b7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226 Validity Not Before: Dec 30 05:00:26 2025 GMT Not After : Dec 31 05:00:26 2025 GMT Subject: CN=2009965937ac77c6900fb8d9e98fadbf783e7967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:fa:3f:ff:b7:54:88:05:72:19:db:da:9c: 03:85:5b:8b:ee:4e:5c:b4:3f:09:1c:c4:14:7c:a0: 1b:51:dc:9c:85:0a:54:eb:98:be:0e:aa:da:87:1b: 62:33:ee:eb:15:4c:0e:09:bf:5c:5b:48:d0:e9:24: 67:c7:fd:9b:3b:d7:64:b9:72:a2:f9:41:82:f9:68: ab:bd:c3:f8:e0:b7:d3:28:d3:b6:a2:69:98:58:37: 1c:a4:46:32:70:df:3b:80:b5:5d:4a:61:d6:16:d6: c1:c8:e7:15:a5:e1:c8:76:2c:bf:36:8c:e5:1c:62: 5f:67:6b:5e:a0:41:f7:b3:ed:b6:2e:da:be:51:e5: 25:6e:c2:ed:b4:1a:53:21:d2:8a:8b:7f:67:57:cc: 8a:25:e5:86:3b:6c:0d:ee:28:5e:5c:75:af:ed:75: 38:d4:0c:a4:aa:73:5d:73:b7:bc:d0:a0:c2:5a:f0: e6:eb:ce:ae:db:13:11:0a:ca:41:39:83:6a:7f:b3: 1f:99:71:46:95:05:ac:fd:63:60:7a:12:86:b4:0a: 02:d4:44:c0:07:a8:27:28:4d:47:98:18:ea:0f:9c: d7:42:72:17:a7:d4:33:9c:4e:e4:f9:6c:ed:84:55: 27:8b:46:6a:d2:6b:78:5c:47:9b:13:94:db:65:3a: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:09:96:59:37:AC:77:C6:90:0F:B8:D9:E9:8F:AD:BF:78:3E:79:67 X509v3 Authority Key Identifier: keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:04:10:d4:59:ad:36:f2:dc:5f:22:4f:03:ad:a8:8c:f5:3f: 8e:c2:16:55:2e:86:b2:c1:62:78:39:1c:f7:33:da:38:01:9d: 43:c0:95:64:3d:26:9b:2a:85:1f:05:d4:e8:a5:b7:f7:09:23: de:67:bd:f1:6d:bb:6c:64:63:06:57:a6:61:42:c1:97:81:98: b7:c9:48:af:80:5f:b9:32:9a:8d:5d:e0:84:1e:13:67:af:bc: 45:3c:1c:2b:28:db:5a:17:dc:10:35:00:4e:62:05:44:ab:fa: 38:a1:d1:47:a8:44:b1:a5:d3:ba:85:0b:3b:04:05:b7:02:5a: e9:b3:92:57:93:3b:31:14:5f:a6:5c:c4:ee:d8:ed:a4:b7:fe: d8:9b:33:ef:a0:13:d8:0b:70:5b:dd:91:61:4e:6f:ef:6d:ec: 6d:e4:4c:dc:5b:9a:11:bf:a0:90:32:98:6b:a1:88:43:20:40: f8:6c:9e:f1:39:47:88:d1:c4:c3:b6:a4:17:5d:8f:58:d5:27: 66:6b:7d:79:0d:f7:77:12:3a:65:13:06:8a:b0:50:04:f8:ac: 79:bf:1f:d5:a0:57:c5:57:b0:73:1e:5e:b7:58:e5:27:9a:d3: ca:22:0b:41:f9:1f:12:33:7f:71:72:9e:cc:50:0f:50:bc:61: 89:8a:49:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoQGGXgMOpBoHfOm0kLfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMWU2ZDVlNzJkYWY0MTA4Y2Y2MGJkNDdlOTM2ZGYxYTFl OTcyMjYwHhcNMjUxMjMwMDUwMDI2WhcNMjUxMjMxMDUwMDI2WjAzMTEwLwYDVQQD EygyMDA5OTY1OTM3YWM3N2M2OTAwZmI4ZDllOThmYWRiZjc4M2U3OTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprT6P/+3VIgFchnb2pwDhVuL7k5c tD8JHMQUfKAbUdychQpU65i+DqrahxtiM+7rFUwOCb9cW0jQ6SRnx/2bO9dkuXKi +UGC+WirvcP44LfTKNO2ommYWDccpEYycN87gLVdSmHWFtbByOcVpeHIdiy/Nozl HGJfZ2teoEH3s+22Ltq+UeUlbsLttBpTIdKKi39nV8yKJeWGO2wN7iheXHWv7XU4 1AykqnNdc7e80KDCWvDm686u2xMRCspBOYNqf7MfmXFGlQWs/WNgehKGtAoC1ETA B6gnKE1HmBjqD5zXQnIXp9QznE7k+WzthFUni0Zq0mt4XEebE5TbZTpz4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAJllk3rHfGkA+42emPrb94PnlnMB8GA1UdIwQY MBaAFAwebV5y2vQQjPYL1H6TbfGh6XImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUt YTI5NTgxM2YxZjgyLzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUtYTI5NTgxM2YxZjgy LzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwQQ1Fmt NvLcXyJPA62ojPU/jsIWVS6GssFieDkc9zPaOAGdQ8CVZD0mmyqFHwXU6KW39wkj 3me98W27bGRjBlemYULBl4GYt8lIr4BfuTKajV3ghB4TZ6+8RTwcKyjbWhfcEDUA TmIFRKv6OKHRR6hEsaXTuoULOwQFtwJa6bOSV5M7MRRfplzE7tjtpLf+2Jsz76AT 2AtwW92RYU5v723sbeRM3FuaEb+gkDKYa6GIQyBA+Gye8TlHiNHEw7akF12PWNUn Zmt9eQ33dxI6ZRMGirBQBPiseb8f1aBXxVewcx5et1jlJ5rTyiILQfkfEjN/cXKe zFAPULxhiYpJlw== -----END CERTIFICATE-----Generated at Tue Dec 30 12:15:13 2025 by rpki-client