This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft File: dbh4BinZITNXwHDBwBBgU0dIg8E.mft (raw, json) Hash identifier: vk6l0bUeb0jC4Vs+NgBx+gLAtFlmlpj+4xvZbO3G6x4= Subject key identifier: 48:D5:38:0E:8A:D4:14:43:DB:B3:4D:43:D9:F5:01:19:2B:41:4A:82 Authority key identifier: 75:B8:78:06:29:D9:21:33:57:C0:70:C1:C0:10:60:53:47:48:83:C1 Certificate issuer: /CN=75b8780629d9213357c070c1c0106053474883c1 Certificate serial: 019B7291F894E69DBBB730F6EB0A53354824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft Manifest number: 0DC8 Signing time: Wed 31 Dec 2025 04:02:07 +0000 Manifest this update: Wed 31 Dec 2025 04:02:07 +0000 Manifest next update: Thu 01 Jan 2026 04:02:07 +0000 Files and hashes: 1: dbh4BinZITNXwHDBwBBgU0dIg8E.crl (hash: FclVjNtHqGgNDQ9q4CPmCiWtBj1E/Jluob87KDyiKwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:f8:94:e6:9d:bb:b7:30:f6:eb:0a:53:35:48:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b8780629d9213357c070c1c0106053474883c1 Validity Not Before: Dec 31 04:02:07 2025 GMT Not After : Jan 1 04:02:07 2026 GMT Subject: CN=48d5380e8ad41443dbb34d43d9f501192b414a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e5:3f:14:a4:5a:f5:68:8a:cf:08:4c:85:e9: 84:04:dc:02:5d:97:dc:59:99:67:74:db:93:93:c3: 1a:57:8e:2f:86:ed:47:0a:79:0b:e6:cf:e9:18:d2: 75:99:d7:c2:09:47:6a:89:42:75:ab:fb:91:47:d2: 93:28:77:58:36:2c:f1:71:bb:67:76:38:84:0a:9a: 3d:82:c3:72:6b:ce:39:fa:c6:ab:ce:66:3c:a7:68: 47:34:05:9a:af:b3:27:5a:7c:60:f6:d5:28:2a:62: f9:8e:e3:ce:1a:62:9a:12:52:ee:0d:42:b8:f9:b4: ee:51:52:ac:07:42:61:73:b0:84:0d:1e:11:69:bf: d8:c4:ea:ef:d1:82:cc:5d:6c:f3:f8:82:93:8e:ee: 64:98:df:62:95:78:96:8f:8f:a2:3d:f1:77:a6:9a: 18:9b:fb:c4:64:fe:f4:6c:1f:1d:59:9e:ee:0b:e9: ec:eb:01:ce:02:fd:d2:4b:a9:d3:64:2c:03:e3:26: 3a:bb:b7:50:65:be:22:72:db:2a:14:ce:3e:49:98: 5e:dc:c1:cf:5f:a5:c2:6b:19:aa:cb:aa:89:6f:36: 47:f4:67:47:c7:f0:7c:32:87:2b:04:74:05:81:2e: a1:38:3b:c0:a7:f0:0c:42:28:93:e2:b9:31:7c:81: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D5:38:0E:8A:D4:14:43:DB:B3:4D:43:D9:F5:01:19:2B:41:4A:82 X509v3 Authority Key Identifier: keyid:75:B8:78:06:29:D9:21:33:57:C0:70:C1:C0:10:60:53:47:48:83:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7e:fb:e0:8d:36:12:e4:20:d1:6b:4e:fb:c2:0c:ea:fb:90: db:f8:d6:8f:90:88:76:a5:2f:fb:79:bb:cb:b3:ca:3f:3b:a5: 0d:49:30:1f:38:14:cd:d2:9d:3c:15:2b:99:c5:04:72:ef:a1: d9:79:fc:3f:e2:01:e6:a2:fb:eb:99:78:4a:71:4a:86:26:96: be:77:69:46:2b:e4:6d:0c:16:5f:9f:13:4b:b0:86:42:37:fd: f7:be:c2:bb:b0:76:49:ea:c4:5d:a3:d1:5a:bc:36:04:dc:81: 3e:77:3f:cd:98:3e:42:bd:b4:e2:62:ab:f5:a0:59:4a:83:0c: 22:64:90:67:f9:19:ea:fd:14:c8:13:8d:55:eb:60:e6:1d:b2: 72:f6:9d:53:5b:82:a2:66:e5:e1:2a:c5:b3:40:58:88:42:58: 5b:fd:60:26:8c:3e:bb:40:b0:bc:8c:d1:9e:82:cd:75:85:b2: db:ee:24:54:c6:f4:b1:15:23:06:47:3e:e2:cb:cd:1e:bd:3e: fa:80:83:db:c8:17:b0:1e:50:24:e4:8c:2c:0c:d3:82:a0:ca: 71:9b:6e:e5:01:91:f9:08:5b:43:05:43:f9:be:25:08:31:0d: 5b:f2:d8:84:32:e5:f7:68:13:82:c7:03:4b:21:77:83:1b:5f: f4:15:78:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykfiU5p27tzD26wpTNUgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Yjg3ODA2MjlkOTIxMzM1N2MwNzBjMWMwMTA2MDUzNDc0 ODgzYzEwHhcNMjUxMjMxMDQwMjA3WhcNMjYwMTAxMDQwMjA3WjAzMTEwLwYDVQQD Eyg0OGQ1MzgwZThhZDQxNDQzZGJiMzRkNDNkOWY1MDExOTJiNDE0YTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+U/FKRa9WiKzwhMhemEBNwCXZfc WZlndNuTk8MaV44vhu1HCnkL5s/pGNJ1mdfCCUdqiUJ1q/uRR9KTKHdYNizxcbtn djiECpo9gsNya845+sarzmY8p2hHNAWar7MnWnxg9tUoKmL5juPOGmKaElLuDUK4 +bTuUVKsB0Jhc7CEDR4Rab/YxOrv0YLMXWzz+IKTju5kmN9ilXiWj4+iPfF3ppoY m/vEZP70bB8dWZ7uC+ns6wHOAv3SS6nTZCwD4yY6u7dQZb4ictsqFM4+SZhe3MHP X6XCaxmqy6qJbzZH9GdHx/B8MocrBHQFgS6hODvAp/AMQiiT4rkxfIGF4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjVOA6K1BRD27NNQ9n1ARkrQUqCMB8GA1UdIwQY MBaAFHW4eAYp2SEzV8BwwcAQYFNHSIPBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJoNEJpblpJVE5Yd0hEQndCQmdVMGRJZzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85NmZiOWQtZmY5Zi00ZDVkLWI2YzEt ZDkxMGI3NzIxZDIwLzEvZGJoNEJpblpJVE5Yd0hEQndCQmdVMGRJZzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS85NmZiOWQtZmY5Zi00ZDVkLWI2YzEtZDkxMGI3NzIxZDIw LzEvZGJoNEJpblpJVE5Yd0hEQndCQmdVMGRJZzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWX774I02 EuQg0WtO+8IM6vuQ2/jWj5CIdqUv+3m7y7PKPzulDUkwHzgUzdKdPBUrmcUEcu+h 2Xn8P+IB5qL765l4SnFKhiaWvndpRivkbQwWX58TS7CGQjf9977Cu7B2SerEXaPR Wrw2BNyBPnc/zZg+Qr204mKr9aBZSoMMImSQZ/kZ6v0UyBONVetg5h2ycvadU1uC ombl4SrFs0BYiEJYW/1gJow+u0CwvIzRnoLNdYWy2+4kVMb0sRUjBkc+4svNHr0+ +oCD28gXsB5QJOSMLAzTgqDKcZtu5QGR+QhbQwVD+b4lCDENW/LYhDLl92gTgscD SyF3gxtf9BV4kg== -----END CERTIFICATE-----Generated at Wed Dec 31 09:21:28 2025 by rpki-client