This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft File: dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft (raw, json) Hash identifier: xu64TJssApiaKPDO2PiuEbZnU9dHhf0eHBRW1cUoPwc= Subject key identifier: CB:D0:00:9E:5A:38:03:31:64:81:F4:6B:F1:2D:BF:72:C8:B0:F2:88 Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49 Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49 Certificate serial: 019B28C06623D1DE2419922E9CA7A28F9B77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 20:00:56 +0000 Manifest this update: Tue 16 Dec 2025 20:00:56 +0000 Manifest next update: Wed 17 Dec 2025 20:00:56 +0000 Files and hashes: 1: ITU9N73wNSwtRlo0RIBRFcqyI18.roa (hash: tZ8waA6UjAXlSU4mKy5eCZ0yrObYCvk+4Q5dVUfAZCs=) 2: dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl (hash: c6KZcypzxSrvk9cLGyMDgjFUt60/2TJ8F1Mbx4qdcts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:66:23:d1:de:24:19:92:2e:9c:a7:a2:8f:9b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49 Validity Not Before: Dec 16 20:00:56 2025 GMT Not After : Dec 17 20:00:56 2025 GMT Subject: CN=cbd0009e5a3803316481f46bf12dbf72c8b0f288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:d5:8b:b1:74:c6:42:e3:ad:11:f4:8f:de: f8:e8:9b:0b:62:e4:40:fe:6b:03:7b:44:95:99:35: d3:f7:5f:68:62:47:c9:2c:24:e5:c2:b3:94:e7:1b: b3:83:62:23:89:1f:36:11:81:14:d1:0b:0a:2f:1a: 51:65:76:22:b2:bb:9b:23:8d:83:a6:a4:d8:6d:aa: 45:ec:d7:e7:9b:67:37:c9:70:bd:d2:ea:b5:9e:a2: 6c:0c:f3:44:20:aa:03:72:96:bf:bc:65:f3:d6:e8: e0:29:d3:80:0a:88:25:02:ff:51:5b:f9:40:00:db: e3:93:ce:fd:4d:9e:62:69:65:0d:9d:2d:67:bc:1a: 91:da:1c:ce:7e:54:36:50:f8:9d:02:77:6e:47:fe: 12:92:a7:ca:72:31:2b:17:98:95:4b:1b:e5:3e:e3: bd:20:7f:0c:ab:be:00:a6:46:8b:f4:89:56:fa:7a: 4c:29:d9:c7:61:43:5b:19:bd:86:f4:a6:a7:b5:6b: 59:52:e6:14:15:15:46:16:23:65:e1:0f:2b:98:98: cf:35:81:11:1d:a4:fe:ee:7a:76:2a:1f:c1:2c:3d: bd:c7:35:ac:ef:e5:af:1f:5f:5b:69:d2:4a:96:40: af:eb:7b:6b:61:8b:aa:04:f6:33:a1:27:7a:85:3d: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D0:00:9E:5A:38:03:31:64:81:F4:6B:F1:2D:BF:72:C8:B0:F2:88 X509v3 Authority Key Identifier: keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:88:2b:8d:75:60:4e:74:7e:01:b9:25:db:86:95:2d:b9:c1: 56:76:65:cb:fb:47:87:9d:f0:e3:37:31:4b:fe:74:b0:3b:19: 4b:d1:ff:f8:25:e4:c7:c8:dc:f4:ac:b1:8e:b6:cc:5e:7c:54: b6:16:fa:0c:f3:9e:b9:9b:ab:ae:54:5f:87:6e:4b:df:61:a4: 7a:69:d3:79:93:53:57:f2:79:93:83:6b:21:64:a8:84:59:08: f7:4f:94:7a:0e:5f:bd:81:51:61:3a:49:eb:c9:68:71:bb:28: 24:2c:02:11:f8:ef:95:15:17:67:b1:8b:d2:0e:fd:b6:4f:6d: 93:1b:03:26:f9:16:f9:24:1a:a2:7b:fb:c5:81:a4:b3:3c:d3: f3:7f:04:92:10:22:60:7f:a1:bb:d5:32:5e:ed:1f:d5:f7:ae: 89:da:a9:89:de:8a:5a:7f:d9:45:00:e5:5d:a7:e0:0f:3b:78: b3:92:ec:77:0e:16:0a:b7:76:3c:89:5a:e7:81:99:0e:f8:74: 13:04:70:7c:7f:85:ee:6e:94:f1:48:c6:61:97:7d:91:80:5c: 78:8c:25:2e:3f:ce:41:da:00:39:a2:b6:14:fe:9a:bd:dc:ba: 78:8a:e0:8a:a9:73:a1:58:3b:49:72:d5:62:75:a3:ce:63:3c: 77:b1:e0:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowGYj0d4kGZIunKeij5t3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Yjk4MmVhYmE0NDA4Y2Q5NDE4OTlmNWNlZWMxZGE2YTY3 YzVjNDkwHhcNMjUxMjE2MjAwMDU2WhcNMjUxMjE3MjAwMDU2WjAzMTEwLwYDVQQD EyhjYmQwMDA5ZTVhMzgwMzMxNjQ4MWY0NmJmMTJkYmY3MmM4YjBmMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTLVi7F0xkLjrRH0j9746JsLYuRA /msDe0SVmTXT919oYkfJLCTlwrOU5xuzg2IjiR82EYEU0QsKLxpRZXYisrubI42D pqTYbapF7Nfnm2c3yXC90uq1nqJsDPNEIKoDcpa/vGXz1ujgKdOACoglAv9RW/lA ANvjk879TZ5iaWUNnS1nvBqR2hzOflQ2UPidAnduR/4SkqfKcjErF5iVSxvlPuO9 IH8Mq74ApkaL9IlW+npMKdnHYUNbGb2G9KantWtZUuYUFRVGFiNl4Q8rmJjPNYER HaT+7np2Kh/BLD29xzWs7+WvH19badJKlkCv63trYYuqBPYzoSd6hT2WdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvQAJ5aOAMxZIH0a/Etv3LIsPKIMB8GA1UdIwQY MBaAFHW5guq6RAjNlBiZ9c7sHaamfFxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OWYzZjMtMGZhYS00NjVmLWFhN2Et ZDcxY2ExOWY5ODllLzEvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82OWYzZjMtMGZhYS00NjVmLWFhN2EtZDcxY2ExOWY5ODll LzEvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlogrjXVg TnR+Abkl24aVLbnBVnZly/tHh53w4zcxS/50sDsZS9H/+CXkx8jc9KyxjrbMXnxU thb6DPOeuZurrlRfh25L32GkemnTeZNTV/J5k4NrIWSohFkI90+Ueg5fvYFRYTpJ 68locbsoJCwCEfjvlRUXZ7GL0g79tk9tkxsDJvkW+SQaonv7xYGkszzT838EkhAi YH+hu9UyXu0f1feuidqpid6KWn/ZRQDlXafgDzt4s5Lsdw4WCrd2PIla54GZDvh0 EwRwfH+F7m6U8UjGYZd9kYBceIwlLj/OQdoAOaK2FP6avdy6eIrgiqlzoVg7SXLV YnWjzmM8d7Hgdg== -----END CERTIFICATE-----Generated at Tue Dec 16 21:30:54 2025 by rpki-client