This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft File: debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json) Hash identifier: 0ZoCnV/5sstuvvDd5LCuo+AkDaWcsi8ldJHV1bQPKD0= Subject key identifier: F4:68:DF:F4:6A:08:99:9D:37:70:59:7B:02:22:0A:7E:B9:C1:9A:E3 Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35 Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335 Certificate serial: 019AF19B6E6611D13CDF4C2ED75F7A9C2B3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (hash: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=) 2: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: fQylBgF/rMA9LCKn/9K1dbcWGopcuk5YPHe4OcdcY7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6e:66:11:d1:3c:df:4c:2e:d7:5f:7a:9c:2b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335 Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=f468dff46a08999d3770597b02220a7eb9c19ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:df:1e:5a:52:b4:82:82:5e:f4:a5:2e:ce:0f: 51:e5:3f:b0:ed:db:95:01:8f:8e:16:d7:3f:e0:ad: 6e:bb:10:16:88:64:da:86:d3:5b:84:0c:d3:5b:c4: f1:0c:ca:38:fe:66:38:d8:29:d9:39:1e:bc:2d:e3: e7:d6:cc:42:92:2f:3a:42:54:95:d2:ce:71:44:71: df:76:22:9e:0a:df:7e:35:50:51:7d:18:0f:a1:aa: f6:11:85:e8:02:c8:93:83:f8:57:84:f8:70:5b:0d: 06:63:17:fe:a5:ad:1c:53:f4:98:c1:5a:ac:87:44: b0:2c:3c:6b:4a:22:eb:c1:42:5d:19:59:5e:ab:3f: eb:bb:e1:2b:cb:2b:cf:a6:18:2b:a1:5c:23:01:ac: c7:39:18:cf:1e:2b:a7:46:d8:b0:13:42:97:2a:45: d8:9c:00:96:ca:1e:dd:58:ca:bb:6b:bd:f9:88:5f: b0:2d:a3:04:aa:74:bd:94:09:1c:cd:e0:17:0b:a5: 08:b5:66:16:d9:8a:59:c7:f0:a1:62:62:2b:0c:6e: f0:59:80:3a:bd:4e:4f:60:87:5a:0c:a8:04:59:58: b8:a9:63:18:19:6b:05:b0:96:8b:9d:71:9b:ad:0c: 7e:05:21:a2:d7:bf:88:4c:cd:c7:34:64:98:60:40: 59:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:68:DF:F4:6A:08:99:9D:37:70:59:7B:02:22:0A:7E:B9:C1:9A:E3 X509v3 Authority Key Identifier: keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:4c:33:cf:ff:71:7b:f7:cf:7e:29:5a:dd:fb:f4:17:85:bd: 0b:39:33:a7:52:8b:72:bc:c5:33:cf:ab:80:96:a6:b2:c5:cb: e1:ef:b8:69:53:ce:12:75:c8:18:89:24:5f:0b:87:a9:b5:5b: 77:b0:09:1d:29:11:14:c6:24:46:41:55:5d:66:fc:f1:f4:03: 3f:b0:52:32:1d:8d:87:09:59:50:33:8a:81:95:6c:38:ae:95: 51:91:66:08:a0:59:63:b6:c2:a9:31:d8:83:7c:2b:b7:43:38: 62:35:c0:d4:47:de:61:ec:db:87:66:c7:83:04:f2:0d:c1:79: fa:d1:c6:37:fc:57:86:e5:fd:68:df:e3:2e:72:3b:1d:0c:c0: 55:fc:14:d0:48:64:7d:9b:be:d0:61:38:82:13:64:01:bb:7e: d6:be:1a:7c:3c:3f:54:db:04:19:8f:84:00:7b:54:9c:f5:59: 33:cb:31:ec:f2:76:98:3f:4d:af:bf:4b:f9:e1:08:6e:1f:0e: 32:9e:32:d5:01:97:7d:de:38:92:b9:cb:28:31:c5:73:10:df: 5e:1d:c2:a3:2e:da:74:c1:a4:d4:d2:23:6d:e8:87:2a:05:d7: e9:1f:f4:73:fa:7a:be:47:a3:02:d1:75:6d:40:ce:fe:58:b3: 78:de:11:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm25mEdE830wu1196nCs9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZTZlMjEyYzYzNzQxYjg1Yjk1N2M3Yzk3ZjdjNThmNWI1 ZTEzMzUwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD EyhmNDY4ZGZmNDZhMDg5OTlkMzc3MDU5N2IwMjIyMGE3ZWI5YzE5YWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit8eWlK0goJe9KUuzg9R5T+w7duV AY+OFtc/4K1uuxAWiGTahtNbhAzTW8TxDMo4/mY42CnZOR68LePn1sxCki86QlSV 0s5xRHHfdiKeCt9+NVBRfRgPoar2EYXoAsiTg/hXhPhwWw0GYxf+pa0cU/SYwVqs h0SwLDxrSiLrwUJdGVleqz/ru+EryyvPphgroVwjAazHORjPHiunRtiwE0KXKkXY nACWyh7dWMq7a735iF+wLaMEqnS9lAkczeAXC6UItWYW2YpZx/ChYmIrDG7wWYA6 vU5PYIdaDKgEWVi4qWMYGWsFsJaLnXGbrQx+BSGi17+ITM3HNGSYYEBZvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRo3/RqCJmdN3BZewIiCn65wZrjMB8GA1UdIwQY MBaAFHXm4hLGN0G4W5V8fJf3xY9bXhM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzct MDNkNzQ2MWViNThhLzEvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzctMDNkNzQ2MWViNThh LzEvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0wzz/9x e/fPfila3fv0F4W9Czkzp1KLcrzFM8+rgJamssXL4e+4aVPOEnXIGIkkXwuHqbVb d7AJHSkRFMYkRkFVXWb88fQDP7BSMh2NhwlZUDOKgZVsOK6VUZFmCKBZY7bCqTHY g3wrt0M4YjXA1EfeYezbh2bHgwTyDcF5+tHGN/xXhuX9aN/jLnI7HQzAVfwU0Ehk fZu+0GE4ghNkAbt+1r4afDw/VNsEGY+EAHtUnPVZM8sx7PJ2mD9Nr79L+eEIbh8O Mp4y1QGXfd44krnLKDHFcxDfXh3Coy7adMGk1NIjbeiHKgXX6R/0c/p6vkejAtF1 bUDO/lizeN4R6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:44 2025 by rpki-client