This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft File: dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json) Hash identifier: cqq4oS0A2xdI1D3rxkRhBN6yEuPvbd8uS4vLzuJqyf8= Subject key identifier: 38:2D:80:6E:E5:E6:CB:2A:C8:4B:9E:D4:B8:C4:0F:59:47:22:C3:EE Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0 Certificate issuer: /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0 Certificate serial: 019AF12E5A425FF840B68F3F3A8836487CC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft Manifest number: 0A5D Signing time: Sat 06 Dec 2025 01:02:18 +0000 Manifest this update: Sat 06 Dec 2025 01:02:18 +0000 Manifest next update: Sun 07 Dec 2025 01:02:18 +0000 Files and hashes: 1: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: tNu/K7ZJVnBA+bnX2jpeaFsNMRHwXt0Ckmb5JP1iPCo=) 2: fckG1hreaQ8xP9aJJKEUiJVYbO4.roa (hash: H/fpzZgWfyhKP6Q91nDD52iN8W1nvip6ZLK/KybKJsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5a:42:5f:f8:40:b6:8f:3f:3a:88:36:48:7c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0 Validity Not Before: Dec 6 01:02:18 2025 GMT Not After : Dec 7 01:02:18 2025 GMT Subject: CN=382d806ee5e6cb2ac84b9ed4b8c40f594722c3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:0d:ad:42:c7:9f:98:25:b4:2c:02:35:be: 7d:30:d7:19:07:a9:00:2b:bc:5e:c6:84:c0:f9:e0: d5:8e:96:df:c4:cd:e4:5a:14:af:46:27:bb:39:a2: 3e:89:b5:52:26:58:d5:1c:20:5d:bb:d2:66:8b:03: 8d:58:c0:a9:b4:08:23:bf:0f:2e:c9:f8:0b:6f:0a: 3e:fd:31:17:3d:3a:76:dc:d0:39:49:54:eb:9f:40: 73:22:73:e0:25:79:92:dc:36:42:99:bf:fd:00:29: 2b:ca:f9:d8:ec:aa:88:22:e0:6c:2e:8d:d1:15:7a: 7c:be:09:7a:9f:fa:81:80:d6:5f:49:7f:e7:49:b4: 03:42:5d:9f:fc:4f:20:e6:54:70:db:a7:0d:93:b7: af:38:a0:b2:a5:df:31:4e:42:2b:9f:dd:42:8f:c2: 02:8f:17:fa:d3:22:0d:df:aa:cd:ca:4a:df:67:e2: 0a:58:cc:8a:79:48:1f:ef:78:55:aa:75:c1:9f:7e: e6:91:f0:ed:bf:9c:d0:ba:9b:fc:d3:2c:f4:4a:06: c2:4f:db:22:69:ba:6a:88:e7:e2:c0:17:60:41:37: ad:40:b2:43:ef:cc:91:51:19:f3:44:24:40:e7:f0: b1:8c:ff:28:50:a9:f5:fc:8a:30:4d:8c:37:8b:12: e3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2D:80:6E:E5:E6:CB:2A:C8:4B:9E:D4:B8:C4:0F:59:47:22:C3:EE X509v3 Authority Key Identifier: keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2d:bc:0e:f1:af:19:61:d0:27:48:79:0b:75:2c:aa:e3:6f: e2:81:d0:a9:10:bc:c2:7e:28:6e:ea:d5:05:ee:bf:77:18:d3: e1:c4:b0:14:9b:cf:89:f7:0d:a4:3b:aa:c9:9f:64:ed:33:65: 39:1e:bc:69:63:db:36:10:b3:9b:50:d2:58:ff:a6:fe:d9:a8: 72:c3:84:23:d6:d4:af:14:d7:1b:19:f6:b6:0b:07:05:49:df: db:71:70:91:9f:8b:35:45:ca:ef:00:6f:2a:f2:98:6c:4a:6f: 93:b6:2e:57:3f:d7:e2:4a:91:47:25:5e:a6:cc:79:0c:b1:9a: 08:70:30:6e:12:02:a7:da:19:04:3b:a2:01:f1:25:8e:5c:74: cf:13:2e:9c:93:4e:a8:5c:1a:c7:d9:6b:60:c5:46:f8:d7:e4: 13:07:f7:7e:f5:3c:43:ae:97:57:85:4f:44:40:3e:31:5e:88: 6d:9c:93:52:ae:47:2d:88:87:29:f5:b9:0e:16:c0:35:ad:ea: ff:02:7b:19:63:ef:e3:4b:83:37:14:83:ec:98:31:8d:97:e0: a2:2e:05:3d:ce:46:0b:0a:40:d3:b0:f2:37:0f:ee:71:62:11: 16:9c:29:4c:e2:25:60:4f:fa:76:d0:80:fc:09:bf:bb:85:55: 0a:0e:f1:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlpCX/hAto8/Oog2SHzHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MThjMzZkMDQxODIxZjg2YjM4ZDMyMjNkNDNmZTVjZGIy MDExYTAwHhcNMjUxMjA2MDEwMjE4WhcNMjUxMjA3MDEwMjE4WjAzMTEwLwYDVQQD EygzODJkODA2ZWU1ZTZjYjJhYzg0YjllZDRiOGM0MGY1OTQ3MjJjM2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2isNrULHn5gltCwCNb59MNcZB6kA K7xexoTA+eDVjpbfxM3kWhSvRie7OaI+ibVSJljVHCBdu9JmiwONWMCptAgjvw8u yfgLbwo+/TEXPTp23NA5SVTrn0BzInPgJXmS3DZCmb/9ACkryvnY7KqIIuBsLo3R FXp8vgl6n/qBgNZfSX/nSbQDQl2f/E8g5lRw26cNk7evOKCypd8xTkIrn91Cj8IC jxf60yIN36rNykrfZ+IKWMyKeUgf73hVqnXBn37mkfDtv5zQupv80yz0SgbCT9si abpqiOfiwBdgQTetQLJD78yRURnzRCRA5/CxjP8oUKn1/IowTYw3ixLj3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgtgG7l5ssqyEue1LjED1lHIsPuMB8GA1UdIwQY MBaAFHQYw20EGCH4azjTIj1D/lzbIBGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYjM0MjctM2E5ZS00N2FmLWE4ZjQt NGI4MWQ2MmMzYjUzLzEvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lYjM0MjctM2E5ZS00N2FmLWE4ZjQtNGI4MWQ2MmMzYjUz LzEvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfS28DvGv GWHQJ0h5C3UsquNv4oHQqRC8wn4oburVBe6/dxjT4cSwFJvPifcNpDuqyZ9k7TNl OR68aWPbNhCzm1DSWP+m/tmocsOEI9bUrxTXGxn2tgsHBUnf23FwkZ+LNUXK7wBv KvKYbEpvk7YuVz/X4kqRRyVepsx5DLGaCHAwbhICp9oZBDuiAfEljlx0zxMunJNO qFwax9lrYMVG+NfkEwf3fvU8Q66XV4VPREA+MV6IbZyTUq5HLYiHKfW5DhbANa3q /wJ7GWPv40uDNxSD7JgxjZfgoi4FPc5GCwpA07DyNw/ucWIRFpwpTOIlYE/6dtCA /Am/u4VVCg7x9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:17 2025 by rpki-client