This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json) Hash identifier: mI+et2sWY+0IAyUw4rSvM5veGUgMFg5CnrrPsxFlA9I= Subject key identifier: E4:D6:45:E3:83:1D:0A:EA:1F:6F:C6:5E:BA:9A:2C:DB:45:A5:24:C5 Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42 Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242 Certificate serial: 019B6C20F7C555412973489AC3C31FF4832B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft Manifest number: 09EE Signing time: Mon 29 Dec 2025 22:00:58 +0000 Manifest this update: Mon 29 Dec 2025 22:00:58 +0000 Manifest next update: Tue 30 Dec 2025 22:00:58 +0000 Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: D5eJmYJAjQCv0fTcSqMNShyhQJRs2mQOHQWA+jpRqb4=) 2: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (hash: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:20:f7:c5:55:41:29:73:48:9a:c3:c3:1f:f4:83:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242 Validity Not Before: Dec 29 22:00:58 2025 GMT Not After : Dec 30 22:00:58 2025 GMT Subject: CN=e4d645e3831d0aea1f6fc65eba9a2cdb45a524c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:ba:9b:ec:81:b2:6f:eb:1f:5b:1e:b0:0e: b6:e0:90:a4:22:57:69:ee:e1:62:c9:61:82:52:cc: 29:b5:28:d1:51:a7:c2:e3:60:5c:6f:9d:f9:88:43: b7:8b:ce:e1:2c:2f:bb:e5:3e:e0:97:3f:07:1a:fc: 88:6a:05:77:f7:08:fc:6c:f4:10:55:10:97:67:27: fa:99:2d:81:04:b9:e6:0f:cc:24:cf:4d:f9:2a:5f: e5:f7:08:fd:fa:9d:38:97:85:11:41:40:97:5b:d7: 23:55:a3:31:be:49:56:af:a5:97:61:67:ab:09:b8: 59:e8:55:bd:47:65:84:70:0f:54:d4:63:06:8d:dd: fa:32:41:ae:d9:1c:5a:e2:ed:28:06:b6:77:ce:84: 17:0a:2e:5e:88:06:5d:ba:a6:5a:52:ec:99:0c:db: 65:de:8e:59:ce:16:49:3d:62:30:98:7c:d2:d3:8e: 91:cc:8c:86:3a:a6:61:47:46:c4:2b:fe:4f:ec:e8: 12:2a:aa:1f:4d:fa:6c:2b:53:d5:d8:ce:dc:48:14: 04:91:22:15:62:06:a8:0b:ea:d9:ac:24:43:35:90: 04:01:5a:a3:ac:42:aa:5f:53:66:04:7d:c1:d8:66: d8:17:5c:52:26:cb:de:30:df:d2:20:08:7c:45:f9: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D6:45:E3:83:1D:0A:EA:1F:6F:C6:5E:BA:9A:2C:DB:45:A5:24:C5 X509v3 Authority Key Identifier: keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7a:bf:85:78:8b:7d:58:cd:3d:d6:cd:11:c4:3c:de:a2:89: 0b:10:71:41:b2:2b:c1:83:17:14:7b:03:3f:4d:b5:b5:2b:09: 61:37:e9:09:8c:34:01:62:7c:4e:02:ba:be:81:bd:50:f4:17: 95:a0:dc:bd:d1:51:60:8b:7d:64:6a:f2:e0:5e:15:c3:b5:a1: f7:97:85:6d:81:43:72:8e:d0:84:d3:13:ae:43:36:d1:42:1a: 41:bc:4d:26:3c:d4:4c:49:3b:e5:2e:6f:84:40:d2:3a:b8:dd: 8e:c5:0d:69:02:ff:cd:13:2a:e4:82:f7:84:3d:2d:18:9f:73: af:2a:1d:9a:51:62:9f:94:fa:66:74:73:b8:6f:29:2c:98:94: b9:b6:6e:02:74:57:fd:52:74:f8:a2:3d:75:61:df:d2:de:55: a6:37:d7:a3:97:06:ed:45:f6:4c:d2:be:5d:5a:d9:0e:e5:18: 25:d9:b0:2b:2d:25:00:0a:5b:03:be:5c:4c:68:51:3e:1b:3a: d6:a5:f9:ff:e1:d3:63:3d:28:e3:8b:ae:ba:be:e0:bf:57:84: 7f:e2:0a:65:50:fe:8a:a5:b7:82:41:98:f3:50:d0:1e:21:4f: d0:c7:cc:13:57:7f:75:17:15:6f:ab:40:b0:3b:ac:79:03:0b: 9c:09:6a:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIPfFVUEpc0iaw8Mf9IMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjZkNDVmZDU2OTIxZDM0NjlkMTljNDc1NzJmMjc1Zjlk NTUyNDIwHhcNMjUxMjI5MjIwMDU4WhcNMjUxMjMwMjIwMDU4WjAzMTEwLwYDVQQD EyhlNGQ2NDVlMzgzMWQwYWVhMWY2ZmM2NWViYTlhMmNkYjQ1YTUyNGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2a6m+yBsm/rH1sesA624JCkIldp 7uFiyWGCUswptSjRUafC42Bcb535iEO3i87hLC+75T7glz8HGvyIagV39wj8bPQQ VRCXZyf6mS2BBLnmD8wkz035Kl/l9wj9+p04l4URQUCXW9cjVaMxvklWr6WXYWer CbhZ6FW9R2WEcA9U1GMGjd36MkGu2Rxa4u0oBrZ3zoQXCi5eiAZduqZaUuyZDNtl 3o5ZzhZJPWIwmHzS046RzIyGOqZhR0bEK/5P7OgSKqofTfpsK1PV2M7cSBQEkSIV YgaoC+rZrCRDNZAEAVqjrEKqX1NmBH3B2GbYF1xSJsveMN/SIAh8RflIUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTWReODHQrqH2/GXrqaLNtFpSTFMB8GA1UdIwQY MBaAFA4m1F/VaSHTRp0ZxHVy8nX51VJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQt NjY1YTY5Y2I4OTAwLzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQtNjY1YTY5Y2I4OTAw LzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3q/hXiL fVjNPdbNEcQ83qKJCxBxQbIrwYMXFHsDP021tSsJYTfpCYw0AWJ8TgK6voG9UPQX laDcvdFRYIt9ZGry4F4Vw7Wh95eFbYFDco7QhNMTrkM20UIaQbxNJjzUTEk75S5v hEDSOrjdjsUNaQL/zRMq5IL3hD0tGJ9zryodmlFin5T6ZnRzuG8pLJiUubZuAnRX /VJ0+KI9dWHf0t5VpjfXo5cG7UX2TNK+XVrZDuUYJdmwKy0lAApbA75cTGhRPhs6 1qX5/+HTYz0o44uuur7gv1eEf+IKZVD+iqW3gkGY81DQHiFP0MfME1d/dRcVb6tA sDuseQMLnAlqag== -----END CERTIFICATE-----Generated at Tue Dec 30 08:00:50 2025 by rpki-client