This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json) Hash identifier: SXOCeRioq+fsiISsQCBN+xaQcZymwryx7trIb+2mdQ4= Subject key identifier: CA:B5:07:78:C4:E9:F6:5C:5C:B2:CE:9C:10:6A:8A:6B:7E:DC:53:C9 Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88 Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88 Certificate serial: 019AF2092E3C6231FC80FA375F2088806684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 05:01:19 +0000 Manifest this update: Sat 06 Dec 2025 05:01:19 +0000 Manifest next update: Sun 07 Dec 2025 05:01:19 +0000 Files and hashes: 1: 1-eNfPNgGjJz34a_6zifXZRNCWXw.roa (hash: BrqTM2h6iG7WyfhfDjhQFT8qhh74OvrPhMC05Ggy8tQ=) 2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: Jr5uprRw4gGziBaSpUw5fKlxIN/cyvr1d/53/M9DCuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2e:3c:62:31:fc:80:fa:37:5f:20:88:80:66:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88 Validity Not Before: Dec 6 05:01:19 2025 GMT Not After : Dec 7 05:01:19 2025 GMT Subject: CN=cab50778c4e9f65c5cb2ce9c106a8a6b7edc53c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:a0:db:4e:4c:42:43:8f:3d:30:6d:be:cc: 28:40:7b:76:14:ea:c4:6c:0d:7b:9a:2c:c8:02:a1: aa:10:ab:37:da:48:b5:ea:e6:d1:d0:79:dc:8b:67: 66:dc:8c:30:74:ba:86:0e:8f:45:6a:2e:c1:2b:a0: a3:0e:1c:56:08:06:20:a1:c4:d5:6f:82:4b:8e:01: d0:bc:ee:92:35:51:6a:2f:61:c0:63:0b:55:7e:92: d6:85:f4:45:72:01:7f:7f:7b:2a:16:2a:18:de:19: 69:11:c7:4e:a5:87:c4:e9:ef:9b:b3:da:93:a6:20: 42:6e:e0:db:21:6d:4d:01:a3:49:ab:eb:26:06:48: 9d:16:cd:60:49:9d:83:da:ca:30:81:58:1e:e2:0d: f4:39:79:f2:c5:aa:dd:56:9b:e9:f2:6e:03:f2:75: 3a:be:92:c5:69:30:4e:37:9f:ae:32:45:64:b7:44: b0:a3:d5:9b:bd:7a:e8:d1:e6:0c:88:7f:be:09:f8: 5d:8b:b1:66:50:98:1f:67:d8:8c:d7:00:e6:a8:75: 70:37:fc:49:98:e4:7c:cc:76:28:0c:8a:35:05:cf: 1d:14:43:e7:9f:8b:09:89:ad:89:eb:37:6e:f6:bf: 54:38:59:17:cf:27:94:9d:52:b6:e2:f2:9e:a1:f6: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B5:07:78:C4:E9:F6:5C:5C:B2:CE:9C:10:6A:8A:6B:7E:DC:53:C9 X509v3 Authority Key Identifier: keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fa:1b:4e:bc:e9:24:05:ba:4b:af:e1:5a:4f:37:46:4b:dc: ac:7e:4a:30:75:61:a7:9e:b1:40:e2:b7:38:5c:1b:03:88:ec: 71:64:cb:90:e5:d8:db:4d:9a:27:b9:04:f2:d7:e6:0f:72:58: d5:fa:bb:45:53:94:22:47:06:bf:81:4c:12:bb:f2:93:c0:9f: c5:4a:59:0b:da:94:b4:c1:bd:25:46:24:c3:e1:7b:cf:48:a1: 0e:b9:a2:76:ab:74:0b:cb:c2:bb:5e:44:9f:bf:bb:22:1e:ed: 53:61:b4:81:c8:8a:49:8a:c4:8f:4a:e0:e5:c4:f6:7b:ad:6e: 7d:4a:33:0f:12:13:b8:07:ef:bd:2d:ad:9d:e7:3b:9d:b0:1d: 54:5e:84:b0:17:1a:e4:ba:d7:f0:37:27:c7:18:0a:b9:91:7c: 5b:bc:43:41:70:0a:9e:0d:80:fe:bc:79:3a:f2:18:d4:66:56: cc:15:67:7a:fb:bc:3c:9d:e4:cc:42:59:70:f3:9a:4b:b7:f1: c5:c1:c8:4e:49:67:35:ef:bf:b0:1a:4e:9c:32:f2:ad:49:13: e2:e1:00:8c:85:65:03:7f:fe:ba:94:94:a5:9a:82:8c:15:91: a6:6f:8b:95:86:e4:9a:92:fb:9a:1a:b9:05:53:0a:10:35:51: e7:90:c1:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCS48YjH8gPo3XyCIgGaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZTA1ZTllZTU5NDc3ZTAxNTVmYzFlZGMwYTE4MzA3Mjk3 NjZlODgwHhcNMjUxMjA2MDUwMTE5WhcNMjUxMjA3MDUwMTE5WjAzMTEwLwYDVQQD EyhjYWI1MDc3OGM0ZTlmNjVjNWNiMmNlOWMxMDZhOGE2YjdlZGM1M2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxGg205MQkOPPTBtvswoQHt2FOrE bA17mizIAqGqEKs32ki16ubR0Hnci2dm3IwwdLqGDo9Fai7BK6CjDhxWCAYgocTV b4JLjgHQvO6SNVFqL2HAYwtVfpLWhfRFcgF/f3sqFioY3hlpEcdOpYfE6e+bs9qT piBCbuDbIW1NAaNJq+smBkidFs1gSZ2D2sowgVge4g30OXnyxardVpvp8m4D8nU6 vpLFaTBON5+uMkVkt0Swo9WbvXro0eYMiH++Cfhdi7FmUJgfZ9iM1wDmqHVwN/xJ mOR8zHYoDIo1Bc8dFEPnn4sJia2J6zdu9r9UOFkXzyeUnVK24vKeofZ7lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMq1B3jE6fZcXLLOnBBqimt+3FPJMB8GA1UdIwQY MBaAFHbgXp7llHfgFV/B7cChgwcpdm6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82NmU1MWEtZmU4Mi00YjVkLTk4ODQt YjUzM2Y0OTQxYWZlLzEvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS82NmU1MWEtZmU4Mi00YjVkLTk4ODQtYjUzM2Y0OTQxYWZl LzEvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvobTrzp JAW6S6/hWk83RkvcrH5KMHVhp56xQOK3OFwbA4jscWTLkOXY202aJ7kE8tfmD3JY 1fq7RVOUIkcGv4FMErvyk8CfxUpZC9qUtMG9JUYkw+F7z0ihDrmidqt0C8vCu15E n7+7Ih7tU2G0gciKSYrEj0rg5cT2e61ufUozDxITuAfvvS2tnec7nbAdVF6EsBca 5LrX8DcnxxgKuZF8W7xDQXAKng2A/rx5OvIY1GZWzBVnevu8PJ3kzEJZcPOaS7fx xcHITklnNe+/sBpOnDLyrUkT4uEAjIVlA3/+upSUpZqCjBWRpm+LlYbkmpL7mhq5 BVMKEDVR55DBVg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:43 2025 by rpki-client