This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: aPxxXvjWA5Aa+EegCxwLW9nUl1bBSQ52hMQMii6G1Go= Subject key identifier: A5:26:9E:A6:B2:F3:E7:A6:A2:C4:A2:BD:6F:C1:73:A8:C2:83:01:01 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019AF2098B5C11DD53695B7D6622EF452D23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 112E Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=) 2: 4SJGO0ahyGrj6_wgUycRPIM87rQ.roa (hash: KKyfxNUe79UZQMGD42WojNOLaLKHp+8lyvcAmB4f9dM=) 3: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 4: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 5: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: sCA/VGN/cfAtXuv2srRbfY7Yin4gQ9P+ZJEccBMGPfM=) 6: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 7: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 8: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 9: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 10: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 11: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 12: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 13: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8b:5c:11:dd:53:69:5b:7d:66:22:ef:45:2d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=a5269ea6b2f3e7a6a2c4a2bd6fc173a8c2830101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:4f:2e:f5:34:9d:fa:9f:5a:e3:09:6a:25: 7e:91:61:73:8b:44:97:b4:c0:78:e2:5b:c7:00:03: fa:f7:7a:96:c7:1f:1c:14:ff:13:9f:ad:da:5a:50: 15:e1:30:8b:8d:06:70:2c:99:2c:7d:6e:32:da:51: 0f:1b:a3:da:a0:69:52:c3:78:c0:17:6c:10:67:2d: f1:1f:1e:a4:52:1c:a2:b8:46:f8:b4:11:a6:72:55: 2d:77:cf:a4:06:78:72:d3:67:b5:c4:80:23:36:b7: 86:8c:82:2c:83:ae:25:de:9b:40:33:08:d8:bb:b9: 43:b5:f6:1c:1c:f6:3e:01:59:93:e3:94:e0:45:75: 91:be:86:eb:23:47:32:27:3d:c6:a0:15:52:03:6c: f0:33:82:bc:3f:9c:5b:ef:da:02:90:7b:7b:b0:ac: 8e:57:bc:25:ed:e3:63:36:f3:1e:08:4b:16:6c:9b: e3:7b:46:7c:a4:5c:48:62:52:26:d0:a1:67:aa:fa: dd:cf:52:cd:23:a9:41:aa:a0:54:b5:fe:ac:37:2d: cf:69:fe:96:c9:8b:07:cb:9a:14:8f:d8:0b:8b:f1: f0:39:43:6b:60:7d:8c:88:27:76:a8:a7:c2:ea:2f: 7c:8d:d1:3e:49:c5:4a:33:f3:e3:59:83:fa:48:16: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:26:9E:A6:B2:F3:E7:A6:A2:C4:A2:BD:6F:C1:73:A8:C2:83:01:01 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:04:1e:4d:36:84:cc:d9:44:3b:f3:69:2f:a1:65:2d:4c:24: 96:15:03:12:e2:6b:1b:30:39:46:da:2f:08:47:d1:5b:88:1e: 71:89:1e:cf:28:5f:80:42:b7:92:b6:8a:4d:5c:b6:4c:34:22: a3:9c:ca:81:34:49:12:36:cc:fe:48:5c:25:86:fb:b7:e0:5e: ce:c4:d6:f6:6f:0a:08:bf:2e:48:9d:a1:d4:c8:ab:ad:5a:b1: 2a:17:21:e4:7b:b1:b8:fa:50:ad:66:c9:c2:c8:59:6f:2b:d2: 5b:dc:9e:e4:7e:87:1b:cb:66:34:f2:af:0d:c4:d8:b6:d8:0c: a3:e6:9c:b4:bc:82:fe:2c:a8:1a:4d:da:d0:aa:b0:18:39:67: 39:b8:a3:ac:84:ff:cd:bb:cd:b0:79:98:04:f3:50:16:56:ee: d9:a6:84:d6:d1:82:28:45:3e:06:39:f2:ca:6d:06:e8:6d:7f: 63:70:4b:14:56:87:78:97:19:90:cc:32:bd:c9:38:41:20:73: cc:e8:64:69:e7:66:e8:0e:7c:4e:48:46:52:79:3b:d6:70:c5: 48:2c:39:56:9e:9f:12:c2:23:36:bc:92:05:54:cd:cb:86:bb: 5f:14:22:5b:0d:70:c8:2d:1d:ad:22:24:50:20:68:cd:fd:32: ee:66:7d:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYtcEd1TaVt9ZiLvRS0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD EyhhNTI2OWVhNmIyZjNlN2E2YTJjNGEyYmQ2ZmMxNzNhOGMyODMwMTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zBPLvU0nfqfWuMJaiV+kWFzi0SX tMB44lvHAAP693qWxx8cFP8Tn63aWlAV4TCLjQZwLJksfW4y2lEPG6PaoGlSw3jA F2wQZy3xHx6kUhyiuEb4tBGmclUtd8+kBnhy02e1xIAjNreGjIIsg64l3ptAMwjY u7lDtfYcHPY+AVmT45TgRXWRvobrI0cyJz3GoBVSA2zwM4K8P5xb79oCkHt7sKyO V7wl7eNjNvMeCEsWbJvje0Z8pFxIYlIm0KFnqvrdz1LNI6lBqqBUtf6sNy3Paf6W yYsHy5oUj9gLi/HwOUNrYH2MiCd2qKfC6i98jdE+ScVKM/PjWYP6SBZy6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUmnqay8+emosSivW/Bc6jCgwEBMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwQeTTaE zNlEO/NpL6FlLUwklhUDEuJrGzA5RtovCEfRW4gecYkezyhfgEK3kraKTVy2TDQi o5zKgTRJEjbM/khcJYb7t+BezsTW9m8KCL8uSJ2h1MirrVqxKhch5HuxuPpQrWbJ wshZbyvSW9ye5H6HG8tmNPKvDcTYttgMo+actLyC/iyoGk3a0KqwGDlnObijrIT/ zbvNsHmYBPNQFlbu2aaE1tGCKEU+Bjnyym0G6G1/Y3BLFFaHeJcZkMwyvck4QSBz zOhkaedm6A58TkhGUnk71nDFSCw5Vp6fEsIjNrySBVTNy4a7XxQiWw1wyC0drSIk UCBozf0y7mZ9PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:54 2025 by rpki-client