This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json) Hash identifier: Ju/03eT2xHEQex78WOIrGGK9q0HA5my0XZj9SSmJbRA= Subject key identifier: 3D:C7:55:18:80:88:AB:42:0E:F5:2F:43:54:6D:55:BD:E3:36:DD:59 Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7 Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7 Certificate serial: 019B3532486CEEF4F5B8B7CB34717C914D28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 06:00:46 +0000 Manifest this update: Fri 19 Dec 2025 06:00:46 +0000 Manifest next update: Sat 20 Dec 2025 06:00:46 +0000 Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: hYFqaTltDVdy4/hQuswFTQtCXYbQfjJCiTtsKe0tGyw=) 2: JKIB76zKkkKrBoUXjR0hAQtGTdM.roa (hash: ykn0vkdS9mLj16yNgBoFWQshZXTgOTHfF/eRZDldNCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:48:6c:ee:f4:f5:b8:b7:cb:34:71:7c:91:4d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7 Validity Not Before: Dec 19 06:00:46 2025 GMT Not After : Dec 20 06:00:46 2025 GMT Subject: CN=3dc755188088ab420ef52f43546d55bde336dd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a9:2d:55:b9:88:b5:4e:08:7b:69:5b:fe:52: 21:2e:f4:6a:4d:39:dd:9a:dd:b4:31:45:6b:0a:05: 05:02:79:8f:2d:09:ea:d4:ec:9f:f3:67:50:55:9d: 87:34:a3:e1:2d:28:c2:81:4d:e5:5d:23:eb:94:24: a6:9c:3d:d2:93:57:c5:69:d3:53:bd:ec:f3:b3:54: 4e:de:a5:44:4f:bd:12:83:71:be:88:be:92:7e:8e: 19:b6:a1:24:aa:13:f5:8e:a6:d8:58:b5:ea:97:94: ed:d5:c7:9f:db:d1:9b:9f:a3:20:e6:8d:b3:8d:ad: 0a:77:3e:9b:7a:2a:43:3b:0f:36:9f:80:a1:ce:c0: 23:ea:1f:83:a3:ab:3d:59:fb:c3:42:f5:67:f1:94: a3:bd:d9:d6:54:5c:05:14:81:3b:cf:b0:be:0a:5b: 41:78:ea:58:47:d3:a7:19:95:5e:e0:c8:25:d9:c3: 7a:f2:97:a0:8d:8c:5c:8c:9d:6c:cd:bb:58:cf:ee: bc:7e:c2:79:c5:a4:a8:74:ca:f8:9b:94:d2:3e:70: 9e:57:98:e4:cb:9b:ed:6d:4d:de:f4:1d:a8:c4:39: 71:b7:4e:23:d9:7d:5c:62:ce:90:6a:87:7f:3e:58: 3b:c0:0e:63:96:e3:88:c7:c1:90:65:9f:cd:56:bc: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C7:55:18:80:88:AB:42:0E:F5:2F:43:54:6D:55:BD:E3:36:DD:59 X509v3 Authority Key Identifier: keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d4:60:6f:a7:62:88:96:a2:9d:13:da:c8:fc:a0:a5:a9:71: d3:54:bb:13:89:33:53:21:22:fb:2b:07:24:5d:07:1c:4f:f3: 0e:be:08:5d:e7:66:9a:47:c1:be:2d:9a:78:72:d4:19:01:15: 2f:8e:07:96:b3:a4:6f:ba:d0:7a:64:65:c5:6c:04:49:56:9b: 26:5c:5e:a1:fd:09:df:ac:c9:56:59:18:47:6a:c8:91:9d:2f: 28:7a:10:23:1a:56:71:76:97:b4:13:a1:4d:5e:42:a5:06:37: 14:e9:4f:32:80:45:9f:93:9a:97:b9:b7:24:81:26:ac:6b:f1: f8:4b:aa:d4:01:e8:8d:48:fd:a2:54:42:eb:fb:69:cf:51:01: c3:39:e9:63:b7:c4:26:35:95:b3:5c:92:4a:e4:db:2f:cf:93: cf:b6:e0:ef:1c:44:2d:a6:08:e4:48:87:66:c9:70:d1:cb:17: 97:ac:84:93:fc:1f:ea:3f:d7:a4:c2:84:1b:05:d1:98:b3:25: cb:a5:8c:b1:4f:47:e8:b2:a9:13:81:8d:6c:ec:aa:b8:cc:8e: bf:4a:48:37:3d:97:90:a0:0e:d1:d9:8e:24:b8:62:1a:f0:19: 77:92:36:cd:c8:79:3c:4d:48:ae:9e:9d:a4:79:79:cc:bf:3c: e2:b5:ad:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mkhs7vT1uLfLNHF8kU0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZjZlNjMzMDY3YzA2NmFlOWJlZjFkMzc3MWNjMzAwZTRi NGQxYTcwHhcNMjUxMjE5MDYwMDQ2WhcNMjUxMjIwMDYwMDQ2WjAzMTEwLwYDVQQD EygzZGM3NTUxODgwODhhYjQyMGVmNTJmNDM1NDZkNTViZGUzMzZkZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6ktVbmItU4Ie2lb/lIhLvRqTTnd mt20MUVrCgUFAnmPLQnq1Oyf82dQVZ2HNKPhLSjCgU3lXSPrlCSmnD3Sk1fFadNT vezzs1RO3qVET70Sg3G+iL6Sfo4ZtqEkqhP1jqbYWLXql5Tt1cef29Gbn6Mg5o2z ja0Kdz6beipDOw82n4ChzsAj6h+Do6s9WfvDQvVn8ZSjvdnWVFwFFIE7z7C+CltB eOpYR9OnGZVe4Mgl2cN68pegjYxcjJ1szbtYz+68fsJ5xaSodMr4m5TSPnCeV5jk y5vtbU3e9B2oxDlxt04j2X1cYs6Qaod/Plg7wA5jluOIx8GQZZ/NVry1DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3HVRiAiKtCDvUvQ1RtVb3jNt1ZMB8GA1UdIwQY MBaAFA325jMGfAZq6b7x03ccwwDktNGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mYWUxYzEtYWExOC00NmFhLTgzYTct OGQxYzlkMTE5MmIwLzEvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mYWUxYzEtYWExOC00NmFhLTgzYTctOGQxYzlkMTE5MmIw LzEvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNRgb6di iJainRPayPygpalx01S7E4kzUyEi+ysHJF0HHE/zDr4IXedmmkfBvi2aeHLUGQEV L44HlrOkb7rQemRlxWwESVabJlxeof0J36zJVlkYR2rIkZ0vKHoQIxpWcXaXtBOh TV5CpQY3FOlPMoBFn5Oal7m3JIEmrGvx+Euq1AHojUj9olRC6/tpz1EBwznpY7fE JjWVs1ySSuTbL8+Tz7bg7xxELaYI5EiHZslw0csXl6yEk/wf6j/XpMKEGwXRmLMl y6WMsU9H6LKpE4GNbOyquMyOv0pINz2XkKAO0dmOJLhiGvAZd5I2zch5PE1Irp6d pHl5zL884rWtEA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:23:26 2025 by rpki-client