This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json) Hash identifier: ej8aw1cn4PU51ZAt+/DEONd3n9EwBYX8lgJdqxSyHpo= Subject key identifier: 11:BC:97:C2:F7:B2:94:82:B8:C0:6D:F7:66:B3:4C:22:90:EB:CC:16 Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b Certificate serial: 019AF208AE653A7BEC643EAB337D4AD24DB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:00:46 +0000 Manifest this update: Sat 06 Dec 2025 05:00:46 +0000 Manifest next update: Sun 07 Dec 2025 05:00:46 +0000 Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: LhFaY3sOvZ31+vuVD8lUgV4Jzh6DGAQDv7v19RJV+ik=) 2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ae:65:3a:7b:ec:64:3e:ab:33:7d:4a:d2:4d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b Validity Not Before: Dec 6 05:00:46 2025 GMT Not After : Dec 7 05:00:46 2025 GMT Subject: CN=11bc97c2f7b29482b8c06df766b34c2290ebcc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:25:9a:8b:32:a7:04:82:77:4b:59:76:a0: 6e:41:85:83:bb:a4:3d:93:6a:08:dc:87:c2:80:93: f5:b9:aa:7a:c9:d9:95:1d:4c:76:4e:ba:c7:46:ea: a9:3a:49:cf:e8:99:c9:63:22:89:d2:90:06:be:69: 83:9e:6c:1b:4d:d1:87:5e:5d:4b:e8:42:57:42:77: c6:64:2e:33:20:41:8e:38:53:48:ba:1a:6f:4f:a9: 9b:8b:5a:fc:39:02:d3:d9:ef:ad:5a:6b:e5:ba:73: 57:e3:3c:b9:d8:0d:ef:3d:78:a6:b5:eb:f4:14:00: 4b:04:85:11:93:50:c6:db:2c:41:51:87:bd:6c:8f: 70:65:b3:74:e8:fa:c2:3f:a7:e0:46:23:52:9c:f9: f3:4f:5c:50:6a:d9:72:27:3b:3c:74:cc:48:e2:4e: 10:6e:7b:9c:8e:34:08:d9:60:0f:da:89:d0:b9:9b: 71:28:68:15:14:d3:d9:af:a5:97:97:3a:d2:64:57: 35:4c:1a:54:61:f6:aa:65:c6:8f:56:8f:27:e2:a7: 71:13:3c:d7:44:f9:fb:f7:51:5b:69:00:8d:b4:5e: 88:54:33:37:61:e5:e5:3a:f5:46:d0:5b:ba:db:db: b2:b0:8d:1a:f3:2a:b1:11:f1:0d:70:98:b8:16:dd: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BC:97:C2:F7:B2:94:82:B8:C0:6D:F7:66:B3:4C:22:90:EB:CC:16 X509v3 Authority Key Identifier: keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ad:7d:03:86:43:73:80:15:fa:9a:73:40:33:1e:ea:43:cb: 96:67:70:ae:31:56:f0:c4:40:a2:98:37:c7:39:89:22:b5:8f: 9b:1e:b6:1b:6d:d3:d6:9f:25:35:98:cb:96:fe:5b:22:7b:66: fe:5c:92:2a:bf:c9:24:5a:77:09:e0:62:cc:82:e8:d3:71:94: c4:46:72:2d:90:51:80:97:7e:37:c5:c3:55:a9:ed:c9:22:a3: f5:a4:3c:11:b3:cb:ed:a1:80:ad:f2:25:4a:f7:4c:6a:bd:2c: 25:cd:fc:aa:20:4c:56:b6:62:ff:46:b2:63:d5:8f:5e:17:66: b2:17:f7:f0:75:89:ad:f7:1c:99:26:72:f5:30:f2:5c:2e:7a: 66:e1:9e:45:a7:20:62:00:20:8d:50:d0:14:70:31:f9:ad:42: 07:5d:10:b8:99:5b:e1:3f:5e:71:2f:e1:7d:47:ed:05:1b:1e: 4a:56:df:8d:07:39:48:92:d3:ab:6c:de:5c:c6:ef:cd:3b:60: 56:6f:ab:e1:36:e6:51:29:f6:b0:bc:de:90:ff:dd:40:81:90: ef:fe:24:9b:df:20:8e:3e:c2:79:2b:bd:a8:bc:e4:27:0d:ac: dc:6f:53:3d:96:bc:29:61:b9:58:5b:e8:c4:7b:3a:91:d4:3b: 44:82:39:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCK5lOnvsZD6rM31K0k2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YmNlOGYwOGI1ZWZjNDRhZmFmOGQ3MDYzZTFhZTk1MTgy NTE0MmIwHhcNMjUxMjA2MDUwMDQ2WhcNMjUxMjA3MDUwMDQ2WjAzMTEwLwYDVQQD EygxMWJjOTdjMmY3YjI5NDgyYjhjMDZkZjc2NmIzNGMyMjkwZWJjYzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqAlmosypwSCd0tZdqBuQYWDu6Q9 k2oI3IfCgJP1uap6ydmVHUx2TrrHRuqpOknP6JnJYyKJ0pAGvmmDnmwbTdGHXl1L 6EJXQnfGZC4zIEGOOFNIuhpvT6mbi1r8OQLT2e+tWmvlunNX4zy52A3vPXimtev0 FABLBIURk1DG2yxBUYe9bI9wZbN06PrCP6fgRiNSnPnzT1xQatlyJzs8dMxI4k4Q bnucjjQI2WAP2onQuZtxKGgVFNPZr6WXlzrSZFc1TBpUYfaqZcaPVo8n4qdxEzzX RPn791FbaQCNtF6IVDM3YeXlOvVG0Fu629uysI0a8yqxEfENcJi4Ft2ELQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG8l8L3spSCuMBt92azTCKQ68wWMB8GA1UdIwQY MBaAFHW86PCLXvxEr6+NcGPhrpUYJRQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYt MTM2YzlmZmNiODJjLzEvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYtMTM2YzlmZmNiODJj LzEvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASa19A4ZD c4AV+ppzQDMe6kPLlmdwrjFW8MRAopg3xzmJIrWPmx62G23T1p8lNZjLlv5bIntm /lySKr/JJFp3CeBizILo03GUxEZyLZBRgJd+N8XDVantySKj9aQ8EbPL7aGArfIl SvdMar0sJc38qiBMVrZi/0ayY9WPXhdmshf38HWJrfccmSZy9TDyXC56ZuGeRacg YgAgjVDQFHAx+a1CB10QuJlb4T9ecS/hfUftBRseSlbfjQc5SJLTq2zeXMbvzTtg Vm+r4TbmUSn2sLzekP/dQIGQ7/4km98gjj7CeSu9qLzkJw2s3G9TPZa8KWG5WFvo xHs6kdQ7RII53Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:41:53 2025 by rpki-client