This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json) Hash identifier: AbGEh0z+UjsJQl5HP6sOG++FXfHtidr2yYN9TX/GhaY= Subject key identifier: 00:2E:68:F0:75:43:39:DD:25:C7:5F:8C:75:28:91:D9:B5:8F:D5:F6 Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0 Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0 Certificate serial: 019AF31BAF23C1E8916F2B7700E5B05E235B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:01:09 +0000 Manifest this update: Sat 06 Dec 2025 10:01:09 +0000 Manifest next update: Sun 07 Dec 2025 10:01:09 +0000 Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: GbWK9GayIdayl8hKXKAak+DMas/WTvkjXxd14CHJdPc=) 2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:af:23:c1:e8:91:6f:2b:77:00:e5:b0:5e:23:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0 Validity Not Before: Dec 6 10:01:09 2025 GMT Not After : Dec 7 10:01:09 2025 GMT Subject: CN=002e68f0754339dd25c75f8c752891d9b58fd5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c8:73:c4:e1:82:16:36:db:25:d0:cd:33:d0: 9f:48:37:57:40:4b:8a:f1:e9:ee:3a:3b:01:cb:95: ff:a3:2b:01:bc:80:5e:64:b0:85:89:69:a6:d9:44: 42:41:43:d0:11:62:60:90:5c:ee:6b:d0:87:52:f0: 9e:75:b7:9e:0e:cc:76:42:4a:a9:14:12:fd:8f:3a: 2f:ab:25:b9:44:35:a2:d1:82:12:34:ae:c6:57:50: 40:92:b6:87:97:2f:a7:b9:43:ff:a0:a3:b2:a8:ea: 98:76:7b:44:a1:a5:59:75:b9:ff:08:1b:dd:13:f7: 2d:c8:3f:f4:ea:9d:25:a0:ea:63:1f:33:f7:ee:db: d3:67:d7:85:e5:9c:4c:ce:1f:4a:38:8b:e2:6b:f8: 87:5f:34:4f:68:bc:ff:de:b2:69:b1:29:68:63:4b: 61:a8:7e:7f:a7:0e:95:33:68:6d:d8:c8:69:e0:01: 70:2e:a3:d7:a6:3d:a8:15:fe:76:37:b5:e0:b2:fd: ea:d8:ed:f6:28:7e:29:87:9e:61:1f:61:44:b2:42: 3b:26:21:f7:69:e7:c8:5b:99:07:e0:ee:80:9e:df: f7:e4:a9:2d:41:12:45:8c:e6:f8:3c:45:6d:b7:e7: 4d:94:66:7a:f2:8e:7a:b8:cc:d5:f4:d2:e9:c5:91: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2E:68:F0:75:43:39:DD:25:C7:5F:8C:75:28:91:D9:B5:8F:D5:F6 X509v3 Authority Key Identifier: keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6f:43:d4:85:29:36:9f:0d:d0:d7:5e:c6:41:e2:8d:cb:02: d7:bc:fa:87:c1:da:46:32:d1:45:06:ab:9e:f6:a4:eb:31:1f: f0:c4:fd:ff:1b:0c:95:0b:55:bf:ac:c2:3f:c7:88:30:01:8b: 23:4d:07:f1:e8:3e:65:90:de:20:9c:be:2f:60:81:28:f7:06: 8b:b4:b5:53:1e:39:38:7f:a0:bc:b9:62:e9:66:8b:89:ea:65: 50:a9:56:10:f8:62:8d:5a:9d:2b:ac:df:8b:b5:b3:2b:64:19: 79:d2:cf:cb:f9:a9:50:58:a6:99:71:dd:a3:4d:60:b7:9f:f2: 32:05:84:16:39:09:66:5f:63:f3:52:01:fa:1d:43:02:5d:1f: 59:99:ce:24:40:50:0e:d0:ff:10:ab:5d:8c:6c:97:4f:22:ea: cc:5d:db:7d:f9:0f:37:36:dd:23:4b:dd:4d:46:d6:f7:01:e7: 41:28:9d:4c:4f:3e:0f:bf:9e:5a:bd:c8:32:76:29:5e:f0:5f: 44:89:57:b7:f0:f3:0f:05:cd:71:0f:4d:19:65:37:e1:34:ef: 76:60:de:af:d4:be:ab:97:17:7b:da:15:97:95:64:5b:ed:3a: d8:70:14:00:7c:11:df:35:f6:08:39:85:28:84:81:b3:d3:5e: 15:35:03:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG68jweiRbyt3AOWwXiNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjQ5MTIyZDllOWJiYWZhNTc3ZjY0NDdmMjFiOGJlYzc2 YzA1ZjAwHhcNMjUxMjA2MTAwMTA5WhcNMjUxMjA3MTAwMTA5WjAzMTEwLwYDVQQD EygwMDJlNjhmMDc1NDMzOWRkMjVjNzVmOGM3NTI4OTFkOWI1OGZkNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6chzxOGCFjbbJdDNM9CfSDdXQEuK 8enuOjsBy5X/oysBvIBeZLCFiWmm2URCQUPQEWJgkFzua9CHUvCedbeeDsx2Qkqp FBL9jzovqyW5RDWi0YISNK7GV1BAkraHly+nuUP/oKOyqOqYdntEoaVZdbn/CBvd E/ctyD/06p0loOpjHzP37tvTZ9eF5ZxMzh9KOIvia/iHXzRPaLz/3rJpsSloY0th qH5/pw6VM2ht2Mhp4AFwLqPXpj2oFf52N7Xgsv3q2O32KH4ph55hH2FEskI7JiH3 aefIW5kH4O6Ant/35KktQRJFjOb4PEVtt+dNlGZ68o56uMzV9NLpxZGwGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAuaPB1QzndJcdfjHUokdm1j9X2MB8GA1UdIwQY MBaAFA20kSLZ6buvpXf2RH8huL7HbAXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2Et MTQ2MDBkNTc4MDhhLzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2EtMTQ2MDBkNTc4MDhh LzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPG9D1IUp Np8N0NdexkHijcsC17z6h8HaRjLRRQarnvak6zEf8MT9/xsMlQtVv6zCP8eIMAGL I00H8eg+ZZDeIJy+L2CBKPcGi7S1Ux45OH+gvLli6WaLieplUKlWEPhijVqdK6zf i7WzK2QZedLPy/mpUFimmXHdo01gt5/yMgWEFjkJZl9j81IB+h1DAl0fWZnOJEBQ DtD/EKtdjGyXTyLqzF3bffkPNzbdI0vdTUbW9wHnQSidTE8+D7+eWr3IMnYpXvBf RIlXt/DzDwXNcQ9NGWU34TTvdmDer9S+q5cXe9oVl5VkW+062HAUAHwR3zX2CDmF KISBs9NeFTUDDA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:44 2025 by rpki-client