This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json) Hash identifier: iqhXkDZFg2thdfm5HS/ORgXA/VDzpJgEKDzg4xir2BM= Subject key identifier: 6D:EC:E1:92:D1:57:B4:DF:B8:AD:22:5E:5A:87:7B:2C:B0:F3:3C:D3 Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27 Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27 Certificate serial: 019AF2ADB62959471873644A1EE70F2CA2BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 08:01:01 +0000 Manifest this update: Sat 06 Dec 2025 08:01:01 +0000 Manifest next update: Sun 07 Dec 2025 08:01:01 +0000 Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: 2TUgqJbU6iXSK6Tl858bO7Q4rlkLA7CsLRaQ/JNVKck=) 2: zYDOCeKC7kKgpKbk0isuZ6zgxdU.roa (hash: w347S4U24N5+dIdmg0/S6hyDG1PqUwaZbQe5AD4eTIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b6:29:59:47:18:73:64:4a:1e:e7:0f:2c:a2:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27 Validity Not Before: Dec 6 08:01:01 2025 GMT Not After : Dec 7 08:01:01 2025 GMT Subject: CN=6dece192d157b4dfb8ad225e5a877b2cb0f33cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:63:d8:66:0e:a0:4c:aa:f3:88:38:85:e1:2c: a6:9b:5d:20:82:2f:ad:ea:aa:5f:77:32:9f:b8:7f: 2e:3e:9d:d8:dd:c9:15:c2:78:35:ce:53:03:69:ef: 7b:f9:1d:ee:ad:6e:69:17:57:a6:4f:f1:94:1d:46: ee:d5:5f:57:9c:ba:c4:ec:a8:90:19:e7:49:2f:91: c6:7c:77:4b:f5:60:83:31:fb:f4:a2:36:fc:1c:8d: 56:b2:49:63:a6:5a:04:8a:a7:fb:2d:c4:b8:5b:7d: 83:fe:1a:98:b2:b2:d3:eb:f3:63:70:f5:11:d7:a2: 7b:31:59:8c:d8:df:96:bc:b3:45:16:2a:11:fb:eb: 59:38:9a:f5:da:4b:48:6c:8c:78:ea:ea:d7:5e:5a: 78:d6:79:78:63:85:dd:ee:5c:24:e4:50:6c:55:d4: d5:ef:66:fe:c5:df:0a:d2:59:36:9e:7b:93:5d:24: 9b:fd:1a:a2:ec:ef:e7:2f:9b:b8:2e:46:8e:2a:51: dd:15:a2:d3:6f:2f:85:8b:72:5b:9f:75:e4:2b:76: 5f:c1:63:a6:63:84:0a:ca:ce:d7:eb:68:4f:00:cd: 17:38:2d:aa:f0:62:98:03:73:cb:9d:7f:08:3f:38: 3e:fe:99:48:cc:e8:37:52:6f:3a:4a:38:46:6b:8f: 85:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EC:E1:92:D1:57:B4:DF:B8:AD:22:5E:5A:87:7B:2C:B0:F3:3C:D3 X509v3 Authority Key Identifier: keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:88:eb:e8:93:e3:07:ec:5d:4a:91:e8:9c:92:fe:03:0c:29: b9:c4:c2:2b:b0:14:8c:6e:34:27:7e:eb:4b:86:0e:4d:0a:3d: 2f:10:3f:f7:3f:da:3d:6c:72:8e:db:95:35:3d:58:e9:d8:70: e8:13:47:ae:65:59:11:f1:b8:30:31:84:74:61:23:e0:fd:e3: d8:00:d1:2f:9d:12:5f:72:c5:c7:b8:4a:47:66:8b:1e:16:5d: b9:36:51:48:05:ff:01:3a:51:62:8d:49:b9:5f:7c:fe:83:36: 2a:39:a0:b7:42:b0:a4:a9:26:80:ba:c0:0d:bf:21:c5:36:2e: db:7e:10:25:e9:f0:bd:9e:7a:78:2b:e1:cf:02:09:97:14:50: 1a:3f:2a:32:84:19:94:9d:c5:95:c5:cc:ae:0d:8a:97:7f:aa: 35:53:c1:28:e4:ae:be:9d:4b:a2:a5:dc:3f:81:36:dc:03:fd: 96:64:57:0d:e0:83:f5:c7:2a:9a:2b:30:9f:96:a1:80:21:1d: 40:fb:10:5f:57:34:70:b6:50:12:63:10:89:ae:a7:5e:44:36: eb:33:3f:0c:6f:fa:06:7c:32:81:28:5a:07:68:2a:5a:2c:8f: 88:e8:ea:ca:bf:99:28:d0:ad:40:db:19:d8:fa:dd:8d:76:7a: f6:45:61:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbYpWUcYc2RKHucPLKK/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMTAzN2MxN2JjMTVhN2M5ZDg1Njk4ODdmNWIwNTgzNWNl MzJkMjcwHhcNMjUxMjA2MDgwMTAxWhcNMjUxMjA3MDgwMTAxWjAzMTEwLwYDVQQD Eyg2ZGVjZTE5MmQxNTdiNGRmYjhhZDIyNWU1YTg3N2IyY2IwZjMzY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GPYZg6gTKrziDiF4Symm10ggi+t 6qpfdzKfuH8uPp3Y3ckVwng1zlMDae97+R3urW5pF1emT/GUHUbu1V9XnLrE7KiQ GedJL5HGfHdL9WCDMfv0ojb8HI1WskljploEiqf7LcS4W32D/hqYsrLT6/NjcPUR 16J7MVmM2N+WvLNFFioR++tZOJr12ktIbIx46urXXlp41nl4Y4Xd7lwk5FBsVdTV 72b+xd8K0lk2nnuTXSSb/Rqi7O/nL5u4LkaOKlHdFaLTby+Fi3Jbn3XkK3ZfwWOm Y4QKys7X62hPAM0XOC2q8GKYA3PLnX8IPzg+/plIzOg3Um86SjhGa4+FmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3s4ZLRV7TfuK0iXlqHeyyw8zzTMB8GA1UdIwQY MBaAFAwQN8F7wVp8nYVpiH9bBYNc4y0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNjJhN2ItOGY3Ni00ODk5LWExNTMt OGM1MDAyOTVjYjk2LzEvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hNjJhN2ItOGY3Ni00ODk5LWExNTMtOGM1MDAyOTVjYjk2 LzEvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4jr6JPj B+xdSpHonJL+AwwpucTCK7AUjG40J37rS4YOTQo9LxA/9z/aPWxyjtuVNT1Y6dhw 6BNHrmVZEfG4MDGEdGEj4P3j2ADRL50SX3LFx7hKR2aLHhZduTZRSAX/ATpRYo1J uV98/oM2Kjmgt0KwpKkmgLrADb8hxTYu234QJenwvZ56eCvhzwIJlxRQGj8qMoQZ lJ3FlcXMrg2Kl3+qNVPBKOSuvp1LoqXcP4E23AP9lmRXDeCD9ccqmiswn5ahgCEd QPsQX1c0cLZQEmMQia6nXkQ26zM/DG/6BnwygShaB2gqWiyPiOjqyr+ZKNCtQNsZ 2PrdjXZ69kVh8A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:06 2025 by rpki-client