This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json) Hash identifier: 0EW0eGzbMXME3BOdnqc6h+pfjKcIqVzHlBYYKO9orKY= Subject key identifier: 44:4E:21:F1:1E:86:0C:FA:09:87:AB:66:6C:39:17:AD:D3:E9:28:78 Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2 Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2 Certificate serial: 019AF163FF89B3A9C3E60BAAF57E8613B4B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 02:00:53 +0000 Manifest next update: Sun 07 Dec 2025 02:00:53 +0000 Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: is8e7lMfzPc7U0mkMH+GGQwHVbzNLySr7Uis5U11gFc=) 2: tP4Nr3k13Af3UtlucGdOvIgy7uY.roa (hash: ofrFnG5ByBdxFiFLthIkeYVusoIIsNMbVNLs6rFZMMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ff:89:b3:a9:c3:e6:0b:aa:f5:7e:86:13:b4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2 Validity Not Before: Dec 6 02:00:53 2025 GMT Not After : Dec 7 02:00:53 2025 GMT Subject: CN=444e21f11e860cfa0987ab666c3917add3e92878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fb:64:1b:bc:da:44:2a:e9:78:5d:cb:ec:ba: 1c:9b:3f:1c:0d:56:2f:cd:8d:e8:cc:84:64:51:9b: db:16:38:50:8e:80:73:81:bd:ca:09:84:85:fd:81: 69:7f:82:65:d6:dc:61:b5:94:8a:d5:55:b9:a3:b2: 65:77:44:98:27:ac:63:81:1d:da:01:2b:55:65:86: 68:dd:59:be:96:7a:22:6e:36:54:05:6b:5c:8e:0c: 43:41:20:8e:47:a2:dc:a3:86:07:c1:15:f3:12:fe: fd:30:21:4d:69:8b:d4:4a:ad:0e:c5:0f:97:7d:0c: fa:fe:d0:2b:68:29:c3:11:25:56:a8:66:67:18:8b: 68:96:bd:09:7f:18:7b:f5:44:44:6a:39:c8:c2:90: 0e:1d:3a:86:a8:67:9b:ea:e2:30:50:05:14:55:1e: 94:56:14:80:23:64:90:3d:97:7c:96:f0:9d:42:a2: 5c:b6:fc:8c:f4:b5:62:28:bd:1c:23:0a:ca:fc:15: 96:31:75:07:2f:58:75:a5:c0:6c:73:7b:7a:c8:bd: 2f:38:79:1a:95:53:be:53:c4:30:2f:7a:af:46:1f: 41:30:70:ac:ae:1f:46:72:8f:c8:e8:5d:38:ec:e8: 0a:94:fe:92:70:b5:0c:5f:6a:51:df:77:d9:96:43: a1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4E:21:F1:1E:86:0C:FA:09:87:AB:66:6C:39:17:AD:D3:E9:28:78 X509v3 Authority Key Identifier: keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d8:7c:23:cf:bc:80:9a:c2:a5:a2:c3:d4:4e:f9:dc:72:21: 05:cc:c8:b0:2e:40:19:7e:64:1e:05:45:0e:80:c4:d8:b4:83: 3a:9a:65:00:e8:42:c8:3a:24:a9:8b:e9:dc:81:e8:fc:75:6e: 6e:3e:a8:f9:18:51:db:e7:89:4b:e0:ce:c9:68:d1:36:a8:e8: 62:c1:10:79:95:3c:fc:fd:0e:6c:da:88:00:95:05:90:81:9e: 27:49:7c:12:00:44:0a:e8:78:24:21:f6:78:d7:39:a3:79:1c: 62:e6:b9:7a:6a:ba:65:fc:cb:78:1c:5b:cd:bb:ae:fa:d7:e4: 67:66:d4:1c:f8:1f:86:5d:18:18:a5:58:4d:7f:0c:c6:94:dd: 34:07:1a:67:c7:b4:ff:f0:80:c9:30:6e:d3:81:35:7b:82:cd: 0c:0f:b9:43:5c:d5:c4:8d:e3:80:94:70:03:81:9a:ed:30:5c: ae:5f:b1:0f:3e:84:90:bb:8e:2d:d8:01:c3:a8:c3:f1:57:fd: 8f:04:05:27:32:ef:dd:e6:0e:03:02:82:45:ee:4a:81:25:6c: 2c:80:39:ea:1d:db:17:f4:13:fb:6c:d8:d0:27:23:e5:41:78: 09:78:dd:eb:a0:7c:77:51:aa:da:04:d1:e8:b5:13:80:2a:61: ac:00:22:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/+Js6nD5guq9X6GE7SzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YjM0NTU2MmQ1NzE4YjZjNGIyMDZiMWFlMzA0ZmM2ODQz NmFkYjIwHhcNMjUxMjA2MDIwMDUzWhcNMjUxMjA3MDIwMDUzWjAzMTEwLwYDVQQD Eyg0NDRlMjFmMTFlODYwY2ZhMDk4N2FiNjY2YzM5MTdhZGQzZTkyODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/tkG7zaRCrpeF3L7Locmz8cDVYv zY3ozIRkUZvbFjhQjoBzgb3KCYSF/YFpf4Jl1txhtZSK1VW5o7Jld0SYJ6xjgR3a AStVZYZo3Vm+lnoibjZUBWtcjgxDQSCOR6Lco4YHwRXzEv79MCFNaYvUSq0OxQ+X fQz6/tAraCnDESVWqGZnGItolr0Jfxh79UREajnIwpAOHTqGqGeb6uIwUAUUVR6U VhSAI2SQPZd8lvCdQqJctvyM9LViKL0cIwrK/BWWMXUHL1h1pcBsc3t6yL0vOHka lVO+U8QwL3qvRh9BMHCsrh9Gco/I6F047OgKlP6ScLUMX2pR33fZlkOhbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEROIfEehgz6CYerZmw5F63T6Sh4MB8GA1UdIwQY MBaAFHWzRVYtVxi2xLIGsa4wT8aENq2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMt OGFlNTFmNjJkMjE4LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMtOGFlNTFmNjJkMjE4 LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNh8I8+8 gJrCpaLD1E753HIhBczIsC5AGX5kHgVFDoDE2LSDOpplAOhCyDokqYvp3IHo/HVu bj6o+RhR2+eJS+DOyWjRNqjoYsEQeZU8/P0ObNqIAJUFkIGeJ0l8EgBECuh4JCH2 eNc5o3kcYua5emq6ZfzLeBxbzbuu+tfkZ2bUHPgfhl0YGKVYTX8MxpTdNAcaZ8e0 //CAyTBu04E1e4LNDA+5Q1zVxI3jgJRwA4Ga7TBcrl+xDz6EkLuOLdgBw6jD8Vf9 jwQFJzLv3eYOAwKCRe5KgSVsLIA56h3bF/QT+2zY0Ccj5UF4CXjd66B8d1Gq2gTR 6LUTgCphrAAi8w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:58 2025 by rpki-client