This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json) Hash identifier: /prq06tWlhQMgM4KR9eRQwdOh9IfhQJpb+sazMnSNQA= Subject key identifier: 65:79:60:22:38:A7:AB:00:B4:E3:2A:C2:12:71:B8:E5:85:16:CD:73 Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2 Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2 Certificate serial: 019B2B541652894F164D27893D0228EE2BEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 08:01:29 +0000 Manifest this update: Wed 17 Dec 2025 08:01:29 +0000 Manifest next update: Thu 18 Dec 2025 08:01:29 +0000 Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: oHFTQLP3b+TqPFOISvLIURCpsazhAKn5hVm+NMd/wr8=) 2: tP4Nr3k13Af3UtlucGdOvIgy7uY.roa (hash: ofrFnG5ByBdxFiFLthIkeYVusoIIsNMbVNLs6rFZMMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:16:52:89:4f:16:4d:27:89:3d:02:28:ee:2b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2 Validity Not Before: Dec 17 08:01:29 2025 GMT Not After : Dec 18 08:01:29 2025 GMT Subject: CN=6579602238a7ab00b4e32ac21271b8e58516cd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2f:b5:bb:55:54:88:80:ac:23:df:ad:08:b1: ba:58:83:93:76:db:08:6e:c5:b7:da:a1:b9:f3:d9: d5:3f:b5:1c:d8:1a:81:ff:04:f5:57:b4:95:2d:0f: df:93:3a:65:aa:19:c2:52:6b:f4:e1:d9:40:10:e6: c9:a6:a6:9c:7d:8f:de:97:a7:43:9e:dc:a5:ae:f1: 86:4c:83:29:27:db:e1:f0:51:ed:5a:a2:be:87:14: 1b:0c:82:69:e2:95:a2:e8:ae:0f:b3:ba:c8:b6:04: c5:74:55:02:83:25:84:7a:eb:d2:60:2b:50:a8:f0: 97:64:1a:7e:68:52:11:03:79:1d:18:1b:93:ec:b1: 3c:f8:66:b2:ab:89:27:b9:30:dd:17:2d:eb:d8:54: d2:5d:4a:bb:03:d1:a5:26:e2:ee:49:3a:d3:b8:e2: 75:39:29:df:64:5d:2d:ef:05:7c:f1:51:58:bd:0a: 32:cf:0b:6b:66:c5:f3:54:5c:47:14:cb:ee:fa:7c: 65:61:bc:0a:d6:5f:5f:c2:40:fe:9b:95:2e:de:ec: c6:8e:5f:a0:6f:37:80:5a:89:77:87:84:cd:3a:9f: 6e:ad:51:03:eb:a0:85:d5:09:41:a1:67:48:3f:dd: 62:ff:eb:67:bd:76:62:25:00:39:95:81:84:73:b8: e8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:79:60:22:38:A7:AB:00:B4:E3:2A:C2:12:71:B8:E5:85:16:CD:73 X509v3 Authority Key Identifier: keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d2:f3:e0:0d:95:28:04:a4:26:8d:41:5b:6c:1d:1a:32:ae: e8:b7:bc:78:65:ff:e5:41:68:6b:40:11:80:6a:48:17:5a:81: 3c:15:20:15:92:5a:19:b3:df:71:c2:ca:e9:c2:ef:4d:4b:3c: 63:4d:e7:9a:72:ef:c2:2a:32:0e:73:e7:dc:bb:c9:47:ef:61: 00:0b:4a:0f:54:08:d2:a0:d8:bc:9a:60:2b:a0:80:bd:b3:7b: 52:fa:d7:cc:1b:6b:6e:be:e8:80:f0:f4:da:d9:a0:92:0d:15: bc:2e:ed:4b:8a:fb:37:05:17:47:38:f3:d2:43:a6:16:8c:16: 5b:01:82:f1:13:02:72:50:aa:7d:fd:85:1e:e3:3a:d9:d6:dd: 85:4d:64:c2:66:54:d0:9f:a9:c5:b7:46:2a:6b:70:4c:b8:1f: 55:b4:e7:42:57:5d:36:e7:6b:a6:14:a7:be:a3:e3:5d:e1:21: 12:99:5e:f7:9b:9a:55:da:78:91:40:6d:58:97:60:0b:68:b5: 63:e1:15:df:a3:f6:77:cb:7e:8c:0c:9d:b7:ff:5b:7d:78:fe: 6d:5f:e2:20:14:95:7a:ce:cc:ee:41:26:d1:c5:31:af:ab:23: f2:07:11:26:9d:23:17:6b:de:50:02:c1:39:a5:f9:0b:f4:9a: 2c:c1:85:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVBZSiU8WTSeJPQIo7ivqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YjM0NTU2MmQ1NzE4YjZjNGIyMDZiMWFlMzA0ZmM2ODQz NmFkYjIwHhcNMjUxMjE3MDgwMTI5WhcNMjUxMjE4MDgwMTI5WjAzMTEwLwYDVQQD Eyg2NTc5NjAyMjM4YTdhYjAwYjRlMzJhYzIxMjcxYjhlNTg1MTZjZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly+1u1VUiICsI9+tCLG6WIOTdtsI bsW32qG589nVP7Uc2BqB/wT1V7SVLQ/fkzplqhnCUmv04dlAEObJpqacfY/el6dD ntylrvGGTIMpJ9vh8FHtWqK+hxQbDIJp4pWi6K4Ps7rItgTFdFUCgyWEeuvSYCtQ qPCXZBp+aFIRA3kdGBuT7LE8+Gayq4knuTDdFy3r2FTSXUq7A9GlJuLuSTrTuOJ1 OSnfZF0t7wV88VFYvQoyzwtrZsXzVFxHFMvu+nxlYbwK1l9fwkD+m5Uu3uzGjl+g bzeAWol3h4TNOp9urVED66CF1QlBoWdIP91i/+tnvXZiJQA5lYGEc7jo/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGV5YCI4p6sAtOMqwhJxuOWFFs1zMB8GA1UdIwQY MBaAFHWzRVYtVxi2xLIGsa4wT8aENq2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMt OGFlNTFmNjJkMjE4LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMtOGFlNTFmNjJkMjE4 LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtLz4A2V KASkJo1BW2wdGjKu6Le8eGX/5UFoa0ARgGpIF1qBPBUgFZJaGbPfccLK6cLvTUs8 Y03nmnLvwioyDnPn3LvJR+9hAAtKD1QI0qDYvJpgK6CAvbN7UvrXzBtrbr7ogPD0 2tmgkg0VvC7tS4r7NwUXRzjz0kOmFowWWwGC8RMCclCqff2FHuM62dbdhU1kwmZU 0J+pxbdGKmtwTLgfVbTnQlddNudrphSnvqPjXeEhEple95uaVdp4kUBtWJdgC2i1 Y+EV36P2d8t+jAydt/9bfXj+bV/iIBSVes7M7kEm0cUxr6sj8gcRJp0jF2veUALB OaX5C/SaLMGFFQ== -----END CERTIFICATE-----Generated at Wed Dec 17 15:26:19 2025 by rpki-client