This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft File: DBATeUToh60HVp7U1BKEZzLQr3A.mft (raw, json) Hash identifier: Yfhb58/l3eocAA8ck/Jw/PmJMu6vlDLR7JrTmujkbvE= Subject key identifier: EE:59:8E:E4:F3:04:F3:93:95:76:4F:61:13:7E:9F:2F:71:E3:E0:D7 Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70 Certificate issuer: /CN=0c10137944e887ad07569ed4d412846732d0af70 Certificate serial: 019AF19B7882B055B1F3FEC924475B8F391F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft Manifest number: 0F40 Signing time: Sat 06 Dec 2025 03:01:29 +0000 Manifest this update: Sat 06 Dec 2025 03:01:29 +0000 Manifest next update: Sun 07 Dec 2025 03:01:29 +0000 Files and hashes: 1: 1teQs2-Gqr9Ttken-kpobex52GM.roa (hash: JwKmhVt10f03COhT0AoYFXxwUVkj2YdwV7qznRh2SmM=) 2: DBATeUToh60HVp7U1BKEZzLQr3A.crl (hash: T2kBJdcMrpsfcVpjbLd8mqNTPr188GEWJpwDfmctAaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:78:82:b0:55:b1:f3:fe:c9:24:47:5b:8f:39:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70 Validity Not Before: Dec 6 03:01:29 2025 GMT Not After : Dec 7 03:01:29 2025 GMT Subject: CN=ee598ee4f304f39395764f61137e9f2f71e3e0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0b:e8:c2:8a:34:29:f5:58:3d:47:6d:10:33: a9:b8:49:7c:b3:39:0a:57:03:bf:17:58:f6:f9:28: f0:47:b3:71:36:09:31:a2:00:95:74:1f:f6:4a:90: 4c:d1:66:a1:f1:84:4f:81:84:cb:76:60:0e:34:fb: 7f:a9:a5:1a:ee:8e:26:e9:5f:ac:f4:f9:39:64:70: bb:64:c6:40:7a:21:16:6f:58:c0:ff:d5:37:7a:cf: d6:63:c7:d9:26:e0:e9:ce:73:02:46:35:49:02:e1: 12:be:a8:f1:19:83:92:cc:d0:d0:c7:ab:90:e9:41: fd:76:07:a5:dc:c9:f3:33:23:90:49:97:62:a8:94: d9:97:9b:14:3e:78:6a:b8:a2:ad:a5:b6:10:83:34: 62:38:13:a4:ef:dc:cd:95:9f:99:46:75:3a:76:fb: 94:c8:57:37:90:39:65:f6:5c:17:41:6f:a0:80:1c: 45:f5:7c:6b:dc:b8:31:fd:5e:24:26:68:68:33:0a: ec:a3:ac:62:ab:33:5a:6b:70:14:18:6c:c9:71:5b: 06:43:14:40:43:04:12:e1:27:25:76:d6:54:a6:e4: fa:76:3d:66:91:28:ad:4c:18:01:72:31:84:27:76: b3:b4:80:14:fa:50:ff:7d:06:8f:d2:d6:c1:b8:d3: c8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:59:8E:E4:F3:04:F3:93:95:76:4F:61:13:7E:9F:2F:71:E3:E0:D7 X509v3 Authority Key Identifier: keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:96:f9:43:79:f6:2b:b6:3f:65:3d:0e:1d:5e:58:9c:a6:9a: bd:85:a2:62:ba:41:16:ef:6d:23:4a:f2:2d:d7:ae:bd:74:0f: 4d:f5:1a:13:1b:2b:1e:4e:04:a3:c6:89:51:cf:ad:af:df:2c: 42:1d:00:52:cc:b7:1b:2f:f4:7c:66:43:c1:1b:55:e1:f2:8b: d9:4c:ea:02:89:c9:0b:79:89:8a:62:0e:7c:95:b7:6a:1f:0a: 5c:a7:df:c1:f6:a2:47:2f:be:96:b8:bd:a1:2a:e2:01:1f:99: 34:9d:af:c2:bd:e5:04:8a:98:4e:ec:cc:f0:6f:d5:23:7e:f7: 12:ea:7a:5e:b1:c7:a5:f3:aa:3f:6c:35:75:47:30:90:b5:57: 39:16:b6:fa:b8:dc:dd:54:2a:49:15:0c:37:83:ca:0f:db:d1: 07:86:f3:a7:cd:67:1e:9f:c3:bb:ae:0f:38:83:24:97:e0:6d: 36:6b:d3:1a:7b:37:1a:b8:10:c5:9f:11:ed:86:1a:2b:d8:04: 42:95:cc:92:12:65:ec:27:88:44:0a:bf:08:03:07:9c:5e:24: af:d8:f2:cb:c2:1e:f6:e6:e4:44:dd:ab:42:c0:05:54:04:61: f8:c9:f9:a3:de:01:2c:ad:22:e4:0e:ae:90:de:3c:0c:04:dd: 0c:a8:1b:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3iCsFWx8/7JJEdbjzkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMTAxMzc5NDRlODg3YWQwNzU2OWVkNGQ0MTI4NDY3MzJk MGFmNzAwHhcNMjUxMjA2MDMwMTI5WhcNMjUxMjA3MDMwMTI5WjAzMTEwLwYDVQQD EyhlZTU5OGVlNGYzMDRmMzkzOTU3NjRmNjExMzdlOWYyZjcxZTNlMGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wvowoo0KfVYPUdtEDOpuEl8szkK VwO/F1j2+SjwR7NxNgkxogCVdB/2SpBM0Wah8YRPgYTLdmAONPt/qaUa7o4m6V+s 9Pk5ZHC7ZMZAeiEWb1jA/9U3es/WY8fZJuDpznMCRjVJAuESvqjxGYOSzNDQx6uQ 6UH9dgel3MnzMyOQSZdiqJTZl5sUPnhquKKtpbYQgzRiOBOk79zNlZ+ZRnU6dvuU yFc3kDll9lwXQW+ggBxF9Xxr3Lgx/V4kJmhoMwrso6xiqzNaa3AUGGzJcVsGQxRA QwQS4ScldtZUpuT6dj1mkSitTBgBcjGEJ3aztIAU+lD/fQaP0tbBuNPI4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5ZjuTzBPOTlXZPYRN+ny9x4+DXMB8GA1UdIwQY MBaAFAwQE3lE6IetB1ae1NQShGcy0K9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREJBVGVVVG9oNjBIVnA3VTFCS0VaekxRcjNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81ODRhNDYtM2ZkYy00MjViLWIyYjYt ZjAzYWFlMTMwMzJmLzEvREJBVGVVVG9oNjBIVnA3VTFCS0VaekxRcjNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81ODRhNDYtM2ZkYy00MjViLWIyYjYtZjAzYWFlMTMwMzJm LzEvREJBVGVVVG9oNjBIVnA3VTFCS0VaekxRcjNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJb5Q3n2 K7Y/ZT0OHV5YnKaavYWiYrpBFu9tI0ryLdeuvXQPTfUaExsrHk4Eo8aJUc+tr98s Qh0AUsy3Gy/0fGZDwRtV4fKL2UzqAonJC3mJimIOfJW3ah8KXKffwfaiRy++lri9 oSriAR+ZNJ2vwr3lBIqYTuzM8G/VI373Eup6XrHHpfOqP2w1dUcwkLVXORa2+rjc 3VQqSRUMN4PKD9vRB4bzp81nHp/Du64POIMkl+BtNmvTGns3GrgQxZ8R7YYaK9gE QpXMkhJl7CeIRAq/CAMHnF4kr9jyy8Ie9ubkRN2rQsAFVARh+Mn5o94BLK0i5A6u kN48DATdDKgbUA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:48 2025 by rpki-client