This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft File: dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json) Hash identifier: 37jUtmlTMLfVv/G/xXceeZxDsrSxiXB+0BF19/MgqSA= Subject key identifier: 5A:03:67:45:D3:66:D3:2A:AE:3F:BC:FC:18:ED:4D:E8:F5:10:7F:1A Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC Certificate issuer: /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc Certificate serial: 019B45B7EF5067A2A306E986C00E721874CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft Manifest number: 04A7 Signing time: Mon 22 Dec 2025 11:00:40 +0000 Manifest this update: Mon 22 Dec 2025 11:00:40 +0000 Manifest next update: Tue 23 Dec 2025 11:00:40 +0000 Files and hashes: 1: 9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa (hash: wGfSTyvkpA3QffCb7EADqonJa2uikcNI7XZWM9G88mE=) 2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: ZVPVVSHo5J/cVUJGdU6yrwDck+b20VyOwotePVL9qm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b7:ef:50:67:a2:a3:06:e9:86:c0:0e:72:18:74:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc Validity Not Before: Dec 22 11:00:40 2025 GMT Not After : Dec 23 11:00:40 2025 GMT Subject: CN=5a036745d366d32aae3fbcfc18ed4de8f5107f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:65:99:42:01:ec:d5:fc:4d:f0:57:7d:0c: b3:f5:cd:9b:92:79:cc:a2:bc:6f:84:6b:e7:20:d6: c4:f1:97:da:7c:4e:86:56:d7:b9:57:c0:29:2a:08: c7:01:db:9c:f4:aa:7b:b4:fe:f6:3a:80:54:46:07: 74:a9:d3:f7:d4:68:48:e6:ed:82:b6:5a:e1:a3:a0: 2a:fc:70:14:05:9a:d1:53:b8:41:95:8d:45:18:b9: 38:86:84:66:4c:4f:66:77:25:f2:7f:5c:65:02:be: 98:79:52:bc:2b:ed:37:55:c9:21:6c:e9:ea:37:38: ee:6f:3d:44:3f:01:2d:b4:c1:11:48:03:3f:64:85: 61:6b:cf:b7:cc:80:8f:38:ca:42:68:13:19:33:3c: 2b:8b:bf:76:e6:08:41:55:6d:ef:c1:d8:11:be:c0: 12:68:a0:12:69:b8:d8:30:3a:03:df:a2:3d:63:61: d9:88:37:43:d2:57:6a:f7:e8:96:ea:3b:00:17:ab: d9:90:67:08:2c:f9:62:13:66:05:ba:07:bb:5b:85: d0:e0:65:24:6e:06:13:6b:f6:bb:f0:db:ef:d1:e6: 56:d5:f7:e4:b4:37:a0:77:9e:68:47:ea:79:8d:8c: 8c:79:21:ef:04:18:18:a9:e4:cb:be:37:85:48:67: 62:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:03:67:45:D3:66:D3:2A:AE:3F:BC:FC:18:ED:4D:E8:F5:10:7F:1A X509v3 Authority Key Identifier: keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:85:f0:d3:0f:ab:e7:c7:d6:d4:4e:f5:0d:79:c6:af:ea:c7: 9c:07:49:49:bd:29:5f:9a:84:40:cd:a3:a3:94:cb:24:d6:e3: 58:37:b4:f7:01:04:16:a4:7c:87:4e:7d:f0:e1:9b:f0:0b:82: 7a:d7:dd:86:83:ab:c0:c5:bb:e9:70:8e:49:d1:cc:8b:92:c8: 11:0b:4a:ee:57:50:39:df:16:49:76:68:91:b1:b5:a4:fc:c4: df:11:85:53:58:d9:a9:97:51:08:0a:fe:38:f7:79:cd:28:c6: e8:45:bc:3d:61:1e:70:72:79:4d:13:21:15:7d:b9:74:02:f2: e9:e2:86:e1:3c:d5:88:ed:22:4f:51:d3:cb:1b:45:e4:b4:f5: d2:7b:59:32:66:71:e5:80:4b:8d:ca:29:9a:77:9c:21:5c:49: 9a:9d:e3:99:97:f8:e1:bc:04:25:29:10:e4:03:9b:a1:89:11: 66:d8:9c:92:b9:6e:2b:7f:a8:2e:fe:c8:de:c1:40:a8:93:4a: cf:c6:64:87:c7:da:24:fb:16:38:93:37:05:59:48:78:f7:3f: 18:db:28:a2:72:c3:71:ea:33:d5:d8:66:d0:c6:1c:2d:5e:c8: 7c:e4:e2:0b:e2:5a:1d:bd:30:61:65:a5:e0:5a:3a:83:19:2f: f0:45:18:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFt+9QZ6KjBumGwA5yGHTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YjE4ZWYyYzRiNGY4MjQ5ZjlhNmVkYTBiMzNmMGU1N2Rh OGE5ZGMwHhcNMjUxMjIyMTEwMDQwWhcNMjUxMjIzMTEwMDQwWjAzMTEwLwYDVQQD Eyg1YTAzNjc0NWQzNjZkMzJhYWUzZmJjZmMxOGVkNGRlOGY1MTA3ZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfdlmUIB7NX8TfBXfQyz9c2bknnM orxvhGvnINbE8ZfafE6GVte5V8ApKgjHAduc9Kp7tP72OoBURgd0qdP31GhI5u2C tlrho6Aq/HAUBZrRU7hBlY1FGLk4hoRmTE9mdyXyf1xlAr6YeVK8K+03VckhbOnq Nzjubz1EPwEttMERSAM/ZIVha8+3zICPOMpCaBMZMzwri7925ghBVW3vwdgRvsAS aKASabjYMDoD36I9Y2HZiDdD0ldq9+iW6jsAF6vZkGcILPliE2YFuge7W4XQ4GUk bgYTa/a78Nvv0eZW1ffktDegd55oR+p5jYyMeSHvBBgYqeTLvjeFSGdiGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoDZ0XTZtMqrj+8/BjtTej1EH8aMB8GA1UdIwQY MBaAFHWxjvLEtPgkn5pu2gsz8OV9qKncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUt YjVlNTZlMGVjY2RlLzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUtYjVlNTZlMGVjY2Rl LzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA04Xw0w+r 58fW1E71DXnGr+rHnAdJSb0pX5qEQM2jo5TLJNbjWDe09wEEFqR8h0598OGb8AuC etfdhoOrwMW76XCOSdHMi5LIEQtK7ldQOd8WSXZokbG1pPzE3xGFU1jZqZdRCAr+ OPd5zSjG6EW8PWEecHJ5TRMhFX25dALy6eKG4TzViO0iT1HTyxtF5LT10ntZMmZx 5YBLjcopmnecIVxJmp3jmZf44bwEJSkQ5AOboYkRZtickrluK3+oLv7I3sFAqJNK z8Zkh8faJPsWOJM3BVlIePc/GNsoonLDceoz1dhm0MYcLV7IfOTiC+JaHb0wYWWl 4Fo6gxkv8EUYKA== -----END CERTIFICATE-----Generated at Mon Dec 22 13:55:28 2025 by rpki-client