This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json) Hash identifier: VPUlLZrwbSEMhEiPSJYHYfljn5qHcaWxh02dUbrWZBE= Subject key identifier: 43:56:86:60:7D:EF:3A:6D:54:E7:B4:41:CC:20:6E:85:63:A9:99:BB Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31 Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831 Certificate serial: 019AFB431408C6EF2D05FD3F60EAE765CA82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft Manifest number: 0309 Signing time: Mon 08 Dec 2025 00:01:08 +0000 Manifest this update: Mon 08 Dec 2025 00:01:08 +0000 Manifest next update: Tue 09 Dec 2025 00:01:08 +0000 Files and hashes: 1: 79VsR-5nub7DUrhryJn99r0sSJE.roa (hash: PKoaa5fww3RYvMlarfjIhYGHHPB9uxMDQ5a1vOFmd9k=) 2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: yfZnL4hY5v0rDD9tbVNgGg+sUm79Mrr0IJNXEieTyRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:14:08:c6:ef:2d:05:fd:3f:60:ea:e7:65:ca:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831 Validity Not Before: Dec 8 00:01:08 2025 GMT Not After : Dec 9 00:01:08 2025 GMT Subject: CN=435686607def3a6d54e7b441cc206e8563a999bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:5e:b7:da:cb:04:7b:de:90:41:d9:9b:16: 3d:49:4c:d4:93:51:71:3d:9d:bc:0a:41:97:18:c0: 05:06:2b:03:65:09:d7:c8:e9:4a:70:a3:f7:dd:96: 93:43:ac:0f:56:9f:06:a6:49:fb:4f:e6:85:30:e3: cc:8f:e5:f9:ee:9f:ce:dc:73:ab:a7:14:d8:97:54: e2:2b:99:31:57:f7:74:c3:01:25:58:7d:83:2e:54: 93:53:2d:12:6d:cb:9e:ef:e9:a0:03:23:16:2a:73: be:bd:51:03:78:3e:77:1c:64:8c:7f:69:fa:1a:b4: 2f:21:28:d2:67:ec:58:0a:53:17:10:a6:d9:37:d4: 2c:eb:d8:0c:c0:98:14:12:12:d8:66:48:f7:2c:4d: b2:58:50:a7:3c:ea:ac:24:cc:72:77:c7:4f:64:aa: 31:95:37:89:01:d5:49:11:7f:69:1c:a1:da:66:59: dd:15:4b:d1:c3:ae:a7:a6:ba:02:1f:60:da:56:76: 90:70:c8:55:ff:b9:b9:71:18:1c:ab:f1:93:fa:3e: 22:e1:57:1f:10:22:c2:01:e8:6c:95:4f:6a:a7:f4: 65:23:fc:53:6f:09:8d:e2:52:30:bb:5b:eb:fc:14: c1:a6:4a:0f:32:48:3f:71:a7:11:08:84:4b:7e:c0: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:56:86:60:7D:EF:3A:6D:54:E7:B4:41:CC:20:6E:85:63:A9:99:BB X509v3 Authority Key Identifier: keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:d3:85:06:15:cb:b7:3f:c6:7e:f2:99:6e:06:ce:74:4e:39: 62:e9:c7:20:99:d7:37:ce:98:b7:88:a3:d2:3d:d2:2d:af:5d: 07:37:cb:f6:4c:40:48:43:a2:17:30:0e:a6:5a:c7:d3:28:58: 3e:8b:eb:b0:aa:4e:35:de:33:7c:6b:d0:88:95:39:96:fd:84: 02:f4:ca:02:63:ce:1c:38:bb:96:f0:8b:a7:3d:bf:9f:5e:8f: f4:68:e2:7c:f7:0d:3a:7a:f7:14:04:68:9c:ab:63:a4:1a:2c: d3:a7:46:e6:25:90:87:11:3b:7b:f1:96:e5:85:bb:b4:69:5d: b5:a9:d6:a5:8f:30:40:07:38:55:79:87:b0:0c:a8:95:85:0b: 57:9d:13:35:73:99:a0:79:14:08:71:dd:78:49:cb:5d:53:4f: fb:73:32:c4:ea:2d:50:5c:0e:bf:1f:1e:86:fc:d3:36:1b:b1: b1:fe:86:7f:1e:e5:14:0e:23:d7:24:0d:ec:fe:23:7c:d2:bf: 06:db:f9:97:b5:9a:b3:53:8a:b4:d2:6e:26:1b:ff:c2:c3:ff: 33:66:6c:25:fe:2d:81:da:a6:ba:5a:54:e4:82:ca:9d:94:ec: 97:90:ce:fa:ba:0b:55:05:c7:ba:27:51:a4:20:fe:89:87:c8: 35:10:f1:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7QxQIxu8tBf0/YOrnZcqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzZlMDRlNTNiOWQzOTY3Y2Y5ZDQxOGU3OGI2MGJiYWQw NzU4MzEwHhcNMjUxMjA4MDAwMTA4WhcNMjUxMjA5MDAwMTA4WjAzMTEwLwYDVQQD Eyg0MzU2ODY2MDdkZWYzYTZkNTRlN2I0NDFjYzIwNmU4NTYzYTk5OWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7het9rLBHvekEHZmxY9SUzUk1Fx PZ28CkGXGMAFBisDZQnXyOlKcKP33ZaTQ6wPVp8Gpkn7T+aFMOPMj+X57p/O3HOr pxTYl1TiK5kxV/d0wwElWH2DLlSTUy0Sbcue7+mgAyMWKnO+vVEDeD53HGSMf2n6 GrQvISjSZ+xYClMXEKbZN9Qs69gMwJgUEhLYZkj3LE2yWFCnPOqsJMxyd8dPZKox lTeJAdVJEX9pHKHaZlndFUvRw66nproCH2DaVnaQcMhV/7m5cRgcq/GT+j4i4Vcf ECLCAehslU9qp/RlI/xTbwmN4lIwu1vr/BTBpkoPMkg/cacRCIRLfsA76QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENWhmB97zptVOe0QcwgboVjqZm7MB8GA1UdIwQY MBaAFHA24E5TudOWfPnUGOeLYLutB1gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEt ODlkZWYwMDgyZTJhLzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEtODlkZWYwMDgyZTJh LzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt9OFBhXL tz/GfvKZbgbOdE45YunHIJnXN86Yt4ij0j3SLa9dBzfL9kxASEOiFzAOplrH0yhY PovrsKpONd4zfGvQiJU5lv2EAvTKAmPOHDi7lvCLpz2/n16P9GjifPcNOnr3FARo nKtjpBos06dG5iWQhxE7e/GW5YW7tGldtanWpY8wQAc4VXmHsAyolYULV50TNXOZ oHkUCHHdeEnLXVNP+3MyxOotUFwOvx8ehvzTNhuxsf6Gfx7lFA4j1yQN7P4jfNK/ Btv5l7Was1OKtNJuJhv/wsP/M2ZsJf4tgdqmulpU5ILKnZTsl5DO+roLVQXHuidR pCD+iYfINRDxEQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:17 2025 by rpki-client