This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json) Hash identifier: gh+KSQ5nWYAZlP6CsB6KOg2ZH14BVLO9r6ERssz+OX0= Subject key identifier: EA:62:9E:B4:53:7F:C5:4C:15:0B:E3:67:74:B6:88:4D:5D:D3:6A:13 Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26 Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226 Certificate serial: 019AF208DCA8A0613A2EECD5E8659F8B3555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft Manifest number: 108A Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=) 2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: eMG6wLNrKeweik8WBw5ofJaZp3vu9pCvhsebsiAc0cM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:dc:a8:a0:61:3a:2e:ec:d5:e8:65:9f:8b:35:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=ea629eb4537fc54c150be36774b6884d5dd36a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7f:b6:13:a5:32:bc:82:1b:b1:c2:06:56:07: 1e:8a:7e:99:7b:56:8d:1f:ff:76:10:51:03:8e:96: 30:f4:b9:0d:5e:67:fe:51:4d:5e:46:23:83:8f:ab: 3f:01:c9:a8:66:d8:b2:7d:5c:82:fb:f6:65:da:b9: 2f:4d:e2:2e:8b:c1:ac:b2:65:57:e0:e1:5a:21:cc: c1:76:c3:c5:0e:f4:6b:e1:ff:a1:55:ed:33:a9:a0: 31:d9:d5:95:e7:41:1d:79:cb:82:a7:bc:d1:66:ed: 6e:96:40:2b:ed:45:4b:b2:a7:ac:c8:33:a6:1a:90: 30:95:09:ba:18:3e:6e:73:6e:a8:c9:96:89:34:d8: aa:60:47:cb:a8:80:0a:93:8b:f5:6c:ec:d5:b0:ec: bb:82:5f:ca:6a:5e:08:96:54:ef:2f:7b:bb:7d:1b: 4f:bb:49:ca:a9:71:68:27:67:84:ce:db:80:48:5e: 7a:08:0f:92:81:db:32:59:f2:0c:33:f2:0b:8f:95: 05:9e:39:68:f9:24:e5:b5:37:e0:20:e3:6b:58:2c: 09:d7:33:61:1d:e5:b7:ee:2b:65:b6:81:d2:2a:90: 69:c1:cd:66:23:01:3c:4d:b4:46:50:23:94:c2:b9: 15:4a:28:72:97:8d:bb:4c:57:f1:fd:3f:5b:dd:80: 2d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:62:9E:B4:53:7F:C5:4C:15:0B:E3:67:74:B6:88:4D:5D:D3:6A:13 X509v3 Authority Key Identifier: keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:32:d0:89:b0:4a:68:d1:1e:18:6e:9e:e1:6d:f7:04:8d:ba: e4:83:f9:35:c5:ce:ee:6c:4b:62:d2:86:e0:14:9f:ae:5e:4c: 4d:61:d4:73:48:3d:7c:78:bc:a0:a9:b9:61:d4:de:a7:62:0d: 7c:9c:9e:f9:f3:ee:c4:59:a0:0b:54:40:18:c3:5f:3b:8c:e2: 08:14:73:8d:4b:2a:d9:0c:e7:11:71:16:6a:68:61:4e:64:52: b7:67:8d:58:c6:bc:02:5d:2b:72:40:a8:04:dc:7b:5f:9f:57: 16:2e:de:90:0e:84:00:82:19:aa:96:70:fd:43:f3:28:7e:60: 3d:ba:4e:b7:39:a3:b1:fe:9f:16:7a:3d:56:a5:8b:17:b8:a2: 82:97:4d:ff:08:17:31:ca:da:cc:95:56:32:02:aa:2d:cd:f9: 98:65:13:f7:5e:60:08:ba:a4:42:0d:ec:a4:5f:ef:2c:25:fb: b9:cd:d3:e4:1d:17:df:f9:a5:1a:df:e7:10:63:0e:22:83:2e: 1f:73:1a:87:cc:28:1a:ff:4f:8f:e4:c2:c1:af:df:d3:01:ef: 7c:47:1a:e0:b0:79:0c:76:6e:32:0d:5e:63:db:9d:cf:19:62: 93:9e:34:7b:c0:60:1c:e4:1c:f4:db:3f:63:de:7f:08:af:ed: cc:a7:f0:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNyooGE6LuzV6GWfizVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMWU2ZDVlNzJkYWY0MTA4Y2Y2MGJkNDdlOTM2ZGYxYTFl OTcyMjYwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhlYTYyOWViNDUzN2ZjNTRjMTUwYmUzNjc3NGI2ODg0ZDVkZDM2YTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H+2E6UyvIIbscIGVgcein6Ze1aN H/92EFEDjpYw9LkNXmf+UU1eRiODj6s/AcmoZtiyfVyC+/Zl2rkvTeIui8GssmVX 4OFaIczBdsPFDvRr4f+hVe0zqaAx2dWV50EdecuCp7zRZu1ulkAr7UVLsqesyDOm GpAwlQm6GD5uc26oyZaJNNiqYEfLqIAKk4v1bOzVsOy7gl/Kal4IllTvL3u7fRtP u0nKqXFoJ2eEztuASF56CA+SgdsyWfIMM/ILj5UFnjlo+STltTfgIONrWCwJ1zNh HeW37itltoHSKpBpwc1mIwE8TbRGUCOUwrkVSihyl427TFfx/T9b3YAtwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpinrRTf8VMFQvjZ3S2iE1d02oTMB8GA1UdIwQY MBaAFAwebV5y2vQQjPYL1H6TbfGh6XImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUt YTI5NTgxM2YxZjgyLzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUtYTI5NTgxM2YxZjgy LzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjLQibBK aNEeGG6e4W33BI265IP5NcXO7mxLYtKG4BSfrl5MTWHUc0g9fHi8oKm5YdTep2IN fJye+fPuxFmgC1RAGMNfO4ziCBRzjUsq2QznEXEWamhhTmRSt2eNWMa8Al0rckCo BNx7X59XFi7ekA6EAIIZqpZw/UPzKH5gPbpOtzmjsf6fFno9VqWLF7iigpdN/wgX McrazJVWMgKqLc35mGUT915gCLqkQg3spF/vLCX7uc3T5B0X3/mlGt/nEGMOIoMu H3Mah8woGv9Pj+TCwa/f0wHvfEca4LB5DHZuMg1eY9udzxlik540e8BgHOQc9Ns/ Y95/CK/tzKfwMg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:23 2025 by rpki-client