This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft File: dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json) Hash identifier: umsGLl8vBCheUx/ZSNTLy2OTzoRPv3Zj2RXqQ6D0+Lc= Subject key identifier: 30:78:85:58:E5:87:E8:F5:EC:6D:36:52:12:58:10:E0:F6:F2:65:8A Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D Certificate issuer: /CN=75b72215ae3a618305c123142b349df26672a14d Certificate serial: 019B30E78D60983D9F3975991BA02F83578A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft Manifest number: 0473 Signing time: Thu 18 Dec 2025 10:00:39 +0000 Manifest this update: Thu 18 Dec 2025 10:00:39 +0000 Manifest next update: Fri 19 Dec 2025 10:00:39 +0000 Files and hashes: 1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: tyP8cLRez6FBXuTMLXAsl1smGH3x0teiIFZ82BFNdOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e7:8d:60:98:3d:9f:39:75:99:1b:a0:2f:83:57:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b72215ae3a618305c123142b349df26672a14d Validity Not Before: Dec 18 10:00:39 2025 GMT Not After : Dec 19 10:00:39 2025 GMT Subject: CN=30788558e587e8f5ec6d3652125810e0f6f2658a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:3f:b8:01:81:ac:f1:46:64:4c:19:5a:72: e9:9a:95:d0:fa:6a:8e:7b:cd:a1:20:ab:21:ff:94: 48:19:0c:aa:2e:ce:f4:d0:ee:e5:9a:1e:94:51:b1: d7:8c:b6:83:5d:d6:48:b0:21:a2:58:83:ce:73:54: a8:72:ac:de:0d:b9:c3:16:72:55:76:f8:85:3d:42: 18:07:3a:24:26:1b:cc:6c:33:a2:67:97:b5:0b:62: c7:3e:9a:3c:c4:16:a3:c5:b2:b9:0c:ed:7c:77:fa: 70:6b:20:e0:0a:4c:7e:ee:3e:bf:8c:43:7d:aa:3d: a4:0a:46:c7:31:05:09:82:e7:38:0a:84:ba:0a:05: 73:39:9b:83:3c:90:b2:ec:2f:21:36:8a:ac:ad:10: ca:85:e3:a4:f8:cc:3f:f7:28:1f:87:60:8d:5c:28: c5:f6:95:eb:b8:c6:3e:6d:d7:54:8b:bd:37:42:26: 47:d5:38:37:ee:e9:cd:85:8e:46:f2:de:d0:ec:55: c6:8f:79:8b:d3:7e:dc:28:7c:77:ae:ef:6f:e0:07: 12:d6:2a:d8:bd:2a:11:49:47:4f:70:1c:b4:32:df: cd:4a:62:92:31:ea:34:89:d1:d9:b3:27:db:a3:95: 58:2d:9b:81:6e:a9:1d:4b:c2:fe:62:bb:1f:72:de: 3a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:78:85:58:E5:87:E8:F5:EC:6D:36:52:12:58:10:E0:F6:F2:65:8A X509v3 Authority Key Identifier: keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:39:63:2a:d5:88:15:b1:e6:eb:68:a0:dd:a4:62:3c:e4:f5: 42:27:42:3f:68:88:26:05:99:ac:7c:6b:b8:64:b3:59:19:50: 46:30:b8:eb:90:13:f8:70:7d:e8:e1:5b:56:60:93:eb:66:fb: 87:af:38:11:19:06:a2:80:4c:c5:a6:87:36:5b:43:10:66:87: e6:24:2a:0c:5d:4e:cd:14:a9:4e:e7:1f:f5:66:62:4c:be:07: 76:c1:8d:bb:21:14:73:90:dd:12:65:ab:96:44:99:74:07:8d: 13:79:55:34:4a:f3:1f:8d:4e:76:f7:67:75:be:b0:9e:2d:b6: 26:14:ed:0b:8e:02:0c:6b:49:71:0a:c2:5c:7f:7d:aa:d9:0b: 08:ae:fa:4e:22:28:0d:06:b1:54:f2:03:11:8e:75:a8:99:bc: f0:94:49:e5:59:f5:b7:e7:63:48:89:f7:55:c1:3c:ed:ad:e1: 7e:27:df:d7:0f:d6:46:6b:e0:86:cd:a5:1f:51:56:0f:4f:3a: 50:3c:ea:87:32:3c:aa:29:f3:22:df:48:f4:83:b6:ca:a6:94: d2:51:58:e5:3f:db:d0:f0:61:45:22:f9:87:a3:c1:45:c9:0e: 27:e6:6f:f4:5c:83:0c:d0:81:6d:75:3c:5b:af:af:16:3f:53: 77:54:4e:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw541gmD2fOXWZG6Avg1eKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YjcyMjE1YWUzYTYxODMwNWMxMjMxNDJiMzQ5ZGYyNjY3 MmExNGQwHhcNMjUxMjE4MTAwMDM5WhcNMjUxMjE5MTAwMDM5WjAzMTEwLwYDVQQD EygzMDc4ODU1OGU1ODdlOGY1ZWM2ZDM2NTIxMjU4MTBlMGY2ZjI2NThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p0/uAGBrPFGZEwZWnLpmpXQ+mqO e82hIKsh/5RIGQyqLs700O7lmh6UUbHXjLaDXdZIsCGiWIPOc1SocqzeDbnDFnJV dviFPUIYBzokJhvMbDOiZ5e1C2LHPpo8xBajxbK5DO18d/pwayDgCkx+7j6/jEN9 qj2kCkbHMQUJguc4CoS6CgVzOZuDPJCy7C8hNoqsrRDKheOk+Mw/9ygfh2CNXCjF 9pXruMY+bddUi703QiZH1Tg37unNhY5G8t7Q7FXGj3mL037cKHx3ru9v4AcS1irY vSoRSUdPcBy0Mt/NSmKSMeo0idHZsyfbo5VYLZuBbqkdS8L+Yrsfct46awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDB4hVjlh+j17G02UhJYEOD28mWKMB8GA1UdIwQY MBaAFHW3IhWuOmGDBcEjFCs0nfJmcqFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iZWE5ZGItMWI5Mi00NGNiLThmZDMt YmRiZTViN2E3NjgwLzEvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9iZWE5ZGItMWI5Mi00NGNiLThmZDMtYmRiZTViN2E3Njgw LzEvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDljKtWI FbHm62ig3aRiPOT1QidCP2iIJgWZrHxruGSzWRlQRjC465AT+HB96OFbVmCT62b7 h684ERkGooBMxaaHNltDEGaH5iQqDF1OzRSpTucf9WZiTL4HdsGNuyEUc5DdEmWr lkSZdAeNE3lVNErzH41Odvdndb6wni22JhTtC44CDGtJcQrCXH99qtkLCK76TiIo DQaxVPIDEY51qJm88JRJ5Vn1t+djSIn3VcE87a3hfiff1w/WRmvghs2lH1FWD086 UDzqhzI8qinzIt9I9IO2yqaU0lFY5T/b0PBhRSL5h6PBRckOJ+Zv9FyDDNCBbXU8 W6+vFj9Td1ROiA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:04:27 2025 by rpki-client