This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json) Hash identifier: JzQS2dJu2CN2zQ1z+//APnqiPBovOqAk8p7YhM5IMAg= Subject key identifier: 86:2B:5A:65:CC:5B:09:F8:4A:DE:EA:6C:EF:98:63:6D:48:CA:B7:7F Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7 Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7 Certificate serial: 019B2F671C6587F16DA806F3AE460D0CC276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 03:00:45 +0000 Manifest this update: Thu 18 Dec 2025 03:00:45 +0000 Manifest next update: Fri 19 Dec 2025 03:00:45 +0000 Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: fpmPVKDqlMecs6Qjx6Lw/0EPeddYyoWDVrXEcsffhDU=) 2: JKIB76zKkkKrBoUXjR0hAQtGTdM.roa (hash: ykn0vkdS9mLj16yNgBoFWQshZXTgOTHfF/eRZDldNCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:1c:65:87:f1:6d:a8:06:f3:ae:46:0d:0c:c2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7 Validity Not Before: Dec 18 03:00:45 2025 GMT Not After : Dec 19 03:00:45 2025 GMT Subject: CN=862b5a65cc5b09f84adeea6cef98636d48cab77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:dd:6e:0c:ed:e3:b0:f3:7e:a8:88:7f:ac: 71:b9:01:8c:fe:1f:08:f0:c6:bd:3e:74:83:7c:1c: 5d:09:39:1f:d8:18:9b:26:b6:ca:0b:07:be:ea:55: 33:95:ae:e1:c1:f9:e5:f7:e1:16:69:f3:2a:4c:50: c6:e2:a9:60:c3:96:b7:c8:67:39:14:19:32:ca:1e: 89:5c:fc:ae:f5:b8:09:45:0b:df:e0:df:43:82:2e: 6d:55:01:ab:9f:f7:6e:08:9a:e0:62:de:f9:51:34: d8:bb:da:42:3d:3e:b7:05:e4:36:f8:c2:a4:1a:d2: 29:e2:c9:c7:c7:3a:db:70:ee:b1:d9:7d:3f:c9:20: b6:a3:33:6d:93:50:6a:72:08:92:77:de:84:e8:f0: 69:21:94:93:25:11:2c:e8:84:8f:0d:01:ab:a2:3a: 70:26:2e:9b:99:20:0e:42:43:ac:0d:0f:59:0b:3e: fa:58:de:50:90:6e:1d:bd:4c:19:06:f7:7b:fc:f5: 9e:55:a0:d0:14:74:24:e1:18:83:b1:db:3e:57:58: a8:1c:d9:7c:5b:4f:85:f6:05:04:c4:06:5e:3b:15: e5:0c:25:63:9d:f0:27:6a:f5:91:f4:10:57:ee:aa: a7:2f:4b:04:fa:a3:62:7d:71:73:c8:4f:08:29:54: 06:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2B:5A:65:CC:5B:09:F8:4A:DE:EA:6C:EF:98:63:6D:48:CA:B7:7F X509v3 Authority Key Identifier: keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ea:fd:34:8e:ed:c0:7c:16:25:ee:13:f3:2e:88:5d:40:e2: 1f:f3:52:a4:2b:c3:46:89:d1:18:ba:72:8e:86:38:4e:b9:16: 2b:7a:bc:b1:3e:5f:da:52:93:bc:2f:52:ce:90:c0:68:41:92: 59:b2:b5:c7:a7:63:91:73:fc:b7:dc:46:81:15:58:3f:25:59: 37:9f:b7:fa:7f:d7:a5:94:94:e6:0b:96:da:a3:32:8e:41:4b: 65:ff:f4:51:72:40:1e:a0:f3:e8:9c:78:7a:3e:6d:59:9a:03: ab:10:9f:ab:7c:a9:83:65:1a:fd:31:68:4d:8a:d0:fd:c6:c2: aa:51:65:e8:2b:c9:a3:de:7a:25:dd:e0:fa:c1:09:cf:bc:d6: 50:c4:4a:5a:0c:d9:1a:2e:c9:1f:47:ee:34:f0:61:f8:e9:fe: 17:fc:16:57:8a:e0:d7:37:db:95:b5:d5:a0:01:87:f7:39:f2: d9:97:40:d0:65:0e:70:e7:32:66:d9:71:e8:31:6a:0f:70:c9: d8:a4:91:dc:70:7c:a4:3b:c1:3b:12:20:f9:b9:2f:e9:0f:18: 46:db:77:b6:d7:9c:ce:bb:48:d6:37:a3:0b:62:fd:dd:b8:ac: 4c:1c:06:6d:90:f5:14:3d:fc:a5:48:99:e4:13:c0:57:79:bc: c8:7c:5f:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZxxlh/FtqAbzrkYNDMJ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZjZlNjMzMDY3YzA2NmFlOWJlZjFkMzc3MWNjMzAwZTRi NGQxYTcwHhcNMjUxMjE4MDMwMDQ1WhcNMjUxMjE5MDMwMDQ1WjAzMTEwLwYDVQQD Eyg4NjJiNWE2NWNjNWIwOWY4NGFkZWVhNmNlZjk4NjM2ZDQ4Y2FiNzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyPdbgzt47DzfqiIf6xxuQGM/h8I 8Ma9PnSDfBxdCTkf2BibJrbKCwe+6lUzla7hwfnl9+EWafMqTFDG4qlgw5a3yGc5 FBkyyh6JXPyu9bgJRQvf4N9Dgi5tVQGrn/duCJrgYt75UTTYu9pCPT63BeQ2+MKk GtIp4snHxzrbcO6x2X0/ySC2ozNtk1BqcgiSd96E6PBpIZSTJREs6ISPDQGrojpw Ji6bmSAOQkOsDQ9ZCz76WN5QkG4dvUwZBvd7/PWeVaDQFHQk4RiDsds+V1ioHNl8 W0+F9gUExAZeOxXlDCVjnfAnavWR9BBX7qqnL0sE+qNifXFzyE8IKVQG6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYrWmXMWwn4St7qbO+YY21Iyrd/MB8GA1UdIwQY MBaAFA325jMGfAZq6b7x03ccwwDktNGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mYWUxYzEtYWExOC00NmFhLTgzYTct OGQxYzlkMTE5MmIwLzEvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mYWUxYzEtYWExOC00NmFhLTgzYTctOGQxYzlkMTE5MmIw LzEvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOr9NI7t wHwWJe4T8y6IXUDiH/NSpCvDRonRGLpyjoY4TrkWK3q8sT5f2lKTvC9SzpDAaEGS WbK1x6djkXP8t9xGgRVYPyVZN5+3+n/XpZSU5guW2qMyjkFLZf/0UXJAHqDz6Jx4 ej5tWZoDqxCfq3ypg2Ua/TFoTYrQ/cbCqlFl6CvJo956Jd3g+sEJz7zWUMRKWgzZ Gi7JH0fuNPBh+On+F/wWV4rg1zfblbXVoAGH9zny2ZdA0GUOcOcyZtlx6DFqD3DJ 2KSR3HB8pDvBOxIg+bkv6Q8YRtt3tteczrtI1jejC2L93bisTBwGbZD1FD38pUiZ 5BPAV3m8yHxfOw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:58:20 2025 by rpki-client