This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json) Hash identifier: H7DvI8g2ZyX/MP21UT+Idub0Gg1b4Yhu+2pWb8Z+aFI= Subject key identifier: DC:DC:74:9E:28:91:E4:51:4E:4A:3E:0A:99:81:CB:7E:B5:22:92:1E Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a Certificate serial: 019AF50BD29E514F69657BB7D53D74FBB194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft Manifest number: 0BB3 Signing time: Sat 06 Dec 2025 19:03:03 +0000 Manifest this update: Sat 06 Dec 2025 19:03:03 +0000 Manifest next update: Sun 07 Dec 2025 19:03:03 +0000 Files and hashes: 1: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=) 2: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: VFiCjZea49eMj7JOga//ALmLGwaaN8AQcMXjwTOOUbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:d2:9e:51:4f:69:65:7b:b7:d5:3d:74:fb:b1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a Validity Not Before: Dec 6 19:03:03 2025 GMT Not After : Dec 7 19:03:03 2025 GMT Subject: CN=dcdc749e2891e4514e4a3e0a9981cb7eb522921e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:68:7c:bc:0b:48:ff:e6:d2:a9:12:61:7b:56: 3f:c9:56:3f:28:8b:b1:c5:01:ce:7e:18:5b:21:bb: 6d:70:57:bc:68:55:79:3c:57:02:10:cc:da:1a:34: 7e:c8:3b:b3:a7:44:c8:71:07:c4:1d:0b:de:9d:72: fd:66:82:ba:dd:0c:e0:9d:0f:f8:da:35:cf:fa:f8: 0f:bd:6a:5e:82:0a:98:4d:b4:70:af:2a:b5:7d:f6: a6:09:e0:38:51:3f:0a:0c:dd:37:b9:2d:8c:a4:14: 38:cd:ce:68:6f:8f:7b:da:7b:29:ca:41:e4:8a:bb: 05:54:97:f2:30:ec:03:5a:87:93:19:c6:13:20:0e: 58:b1:1e:57:5f:38:a8:29:43:89:31:8f:cb:ed:76: 2e:a5:07:21:07:cf:35:6c:99:2a:c5:dc:b9:8c:94: 06:cc:0f:f0:f9:ac:ed:4a:e8:70:28:87:a1:df:eb: 18:29:a4:13:83:17:9a:df:14:31:f1:f0:11:b3:c0: 21:6e:8a:31:48:63:1a:49:46:6c:ad:d7:f4:8e:43: 1b:1c:3e:86:39:8d:d1:d4:14:05:89:50:7a:15:2c: 49:61:2f:02:3d:ad:f0:b9:94:18:da:ca:8b:06:a2: ff:ae:f3:43:5f:81:f9:08:7f:e5:ce:92:48:77:b5: 20:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DC:74:9E:28:91:E4:51:4E:4A:3E:0A:99:81:CB:7E:B5:22:92:1E X509v3 Authority Key Identifier: keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:38:c0:1f:0e:1d:d8:84:cf:a2:6d:90:f3:f7:38:cd:12:18: 15:98:20:79:07:d4:4f:b9:6a:d0:45:15:e0:9e:ea:85:e6:ca: 94:42:d0:13:b9:cc:a2:f7:b1:e1:cd:de:5b:53:5a:7e:8e:5c: 3c:e0:3d:6b:df:72:52:64:d5:9c:c8:e2:74:c1:aa:6e:4d:d1: 7f:8a:b3:fe:f8:ca:c7:bf:8b:78:26:f2:69:f8:c2:8f:90:53: 1e:61:83:c6:41:d3:02:c7:18:99:b4:82:16:cf:a4:44:a8:1c: 8b:d0:73:71:6e:49:b9:df:35:b8:51:98:ff:68:22:ed:b9:15: 26:4d:53:09:91:93:99:fc:1b:58:2c:df:0d:17:81:ec:bc:6f: 3d:3c:14:8d:ef:a7:7c:7a:72:c9:1d:63:7c:6a:b4:ee:79:e9: 2a:f6:4e:42:f1:4a:d1:ba:13:dc:2c:3a:fd:1a:87:d4:1f:63: 92:8a:30:53:86:cb:06:0f:da:49:80:ea:55:91:e1:c3:71:66: a7:1a:18:5e:56:2d:48:37:08:c8:a5:65:bc:f5:81:3d:bc:b0: 15:1b:c7:d8:36:7c:a1:ff:c3:d2:01:ae:c6:30:93:7b:6d:69: 17:01:50:e3:59:27:db:59:09:95:b3:fe:a1:79:73:63:5b:e2: b1:c1:4b:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C9KeUU9pZXu31T10+7GUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0 MDA0NGEwHhcNMjUxMjA2MTkwMzAzWhcNMjUxMjA3MTkwMzAzWjAzMTEwLwYDVQQD EyhkY2RjNzQ5ZTI4OTFlNDUxNGU0YTNlMGE5OTgxY2I3ZWI1MjI5MjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2h8vAtI/+bSqRJhe1Y/yVY/KIux xQHOfhhbIbttcFe8aFV5PFcCEMzaGjR+yDuzp0TIcQfEHQvenXL9ZoK63QzgnQ/4 2jXP+vgPvWpeggqYTbRwryq1ffamCeA4UT8KDN03uS2MpBQ4zc5ob4972nspykHk irsFVJfyMOwDWoeTGcYTIA5YsR5XXzioKUOJMY/L7XYupQchB881bJkqxdy5jJQG zA/w+aztSuhwKIeh3+sYKaQTgxea3xQx8fARs8AhbooxSGMaSUZsrdf0jkMbHD6G OY3R1BQFiVB6FSxJYS8CPa3wuZQY2sqLBqL/rvNDX4H5CH/lzpJId7Ug9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzcdJ4okeRRTko+CpmBy361IpIeMB8GA1UdIwQY MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDjAHw4d 2ITPom2Q8/c4zRIYFZggeQfUT7lq0EUV4J7qhebKlELQE7nMovex4c3eW1Nafo5c POA9a99yUmTVnMjidMGqbk3Rf4qz/vjKx7+LeCbyafjCj5BTHmGDxkHTAscYmbSC Fs+kRKgci9BzcW5Jud81uFGY/2gi7bkVJk1TCZGTmfwbWCzfDReB7LxvPTwUje+n fHpyyR1jfGq07nnpKvZOQvFK0boT3Cw6/RqH1B9jkoowU4bLBg/aSYDqVZHhw3Fm pxoYXlYtSDcIyKVlvPWBPbywFRvH2DZ8of/D0gGuxjCTe21pFwFQ41kn21kJlbP+ oXlzY1viscFLMg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:49 2025 by rpki-client