This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft File: dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json) Hash identifier: DKn8fCzJ/YFuib1ef7K2qEmCsiWFmCKXM2uOh6dz5NM= Subject key identifier: 97:25:E0:99:1E:FF:3B:35:A8:B7:ED:9B:81:CD:BD:41:B3:38:93:AE Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC Certificate issuer: /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc Certificate serial: 019AF0BF694DA03845C29C76BDC00250D0F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft Manifest number: 047B Signing time: Fri 05 Dec 2025 23:01:07 +0000 Manifest this update: Fri 05 Dec 2025 23:01:07 +0000 Manifest next update: Sat 06 Dec 2025 23:01:07 +0000 Files and hashes: 1: 9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa (hash: wGfSTyvkpA3QffCb7EADqonJa2uikcNI7XZWM9G88mE=) 2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: tN5dDrYjda0iToBmHKhimCkjhzJXpi//HVAEgBOr0XY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:69:4d:a0:38:45:c2:9c:76:bd:c0:02:50:d0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc Validity Not Before: Dec 5 23:01:07 2025 GMT Not After : Dec 6 23:01:07 2025 GMT Subject: CN=9725e0991eff3b35a8b7ed9b81cdbd41b33893ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0c:24:9e:21:75:be:d5:3b:88:49:4a:31:aa: aa:1e:27:c9:42:cd:c6:c1:af:85:ec:f1:42:2e:c6: 1a:9f:9a:56:63:d6:7f:22:f7:a0:9d:f2:c4:ba:c0: 20:f8:d6:40:4f:fd:ef:07:25:92:45:0a:d5:7b:d3: 2a:97:a2:95:14:53:37:31:e9:d7:27:3d:89:49:81: 8f:70:33:91:c5:c1:fb:b5:db:23:ff:73:23:5e:b1: 8f:aa:f7:c2:6a:54:99:25:29:2b:52:eb:47:9e:8c: 83:45:30:0c:6d:53:70:be:fb:41:72:08:5c:c9:d0: ec:01:6c:db:4e:a6:b6:bc:88:10:4e:30:34:a1:60: 29:2f:f1:bc:78:ff:fb:11:a3:e6:dd:a8:c3:88:54: d7:14:8c:3f:53:98:40:e5:3e:14:e7:ba:03:35:29: 45:9f:96:23:7f:f0:e8:a1:83:fc:d3:24:34:53:7a: 39:45:ba:99:57:a3:55:cf:b1:d4:73:12:d5:f3:f7: 3c:27:fe:54:96:2e:b1:ea:5d:07:84:3e:20:86:18: 1b:68:d4:06:41:d6:76:49:ed:64:4b:ea:9f:5c:cf: 02:a5:74:37:be:73:2f:97:fc:9d:62:06:b8:19:0b: 55:ec:9a:ef:cb:3f:4a:9a:7b:9f:f1:ed:0b:12:28: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:25:E0:99:1E:FF:3B:35:A8:B7:ED:9B:81:CD:BD:41:B3:38:93:AE X509v3 Authority Key Identifier: keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c2:7a:07:2c:9f:b6:72:d3:e7:76:71:9d:ab:e4:dd:80:22: 78:b8:23:ea:cc:b2:2f:7c:7c:73:e6:88:e0:65:c3:cc:d5:ca: 27:5e:42:c2:35:fd:02:72:b7:12:6d:67:22:d5:83:ed:45:c3: 2d:6c:2f:df:36:4f:80:5d:48:c4:19:af:24:85:09:40:42:39: 45:9a:c5:f7:a5:89:ed:d7:90:8e:f5:a1:4c:0f:e8:29:60:71: d0:7b:04:3b:56:94:e5:bc:53:99:8b:f6:f2:2e:f9:a3:1b:71: d8:d4:d1:ca:0f:ec:22:cb:2f:d3:e5:e5:df:f6:4b:59:40:9a: d4:ec:ff:9c:58:41:2f:da:9d:d5:6a:0b:76:f8:08:ff:ad:9c: 8d:22:14:65:80:1e:ea:99:67:fe:28:98:61:9d:ba:ab:96:8c: 13:4c:3c:db:de:4b:63:0a:69:ec:af:55:37:bd:63:76:16:8c: 70:b2:a4:02:9a:60:7e:0d:43:1e:49:5f:fd:39:cb:4d:68:91: c7:02:ce:53:0b:4c:3c:35:16:e6:86:9c:c8:42:69:2e:ff:48: 8c:80:4e:08:11:52:40:b5:26:a1:02:63:0d:4f:e0:40:27:e8: 2e:a8:aa:59:69:85:17:84:4e:2a:69:70:be:85:f7:3e:fb:00: 54:5c:f5:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2lNoDhFwpx2vcACUNDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YjE4ZWYyYzRiNGY4MjQ5ZjlhNmVkYTBiMzNmMGU1N2Rh OGE5ZGMwHhcNMjUxMjA1MjMwMTA3WhcNMjUxMjA2MjMwMTA3WjAzMTEwLwYDVQQD Eyg5NzI1ZTA5OTFlZmYzYjM1YThiN2VkOWI4MWNkYmQ0MWIzMzg5M2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AwkniF1vtU7iElKMaqqHifJQs3G wa+F7PFCLsYan5pWY9Z/IvegnfLEusAg+NZAT/3vByWSRQrVe9Mql6KVFFM3MenX Jz2JSYGPcDORxcH7tdsj/3MjXrGPqvfCalSZJSkrUutHnoyDRTAMbVNwvvtBcghc ydDsAWzbTqa2vIgQTjA0oWApL/G8eP/7EaPm3ajDiFTXFIw/U5hA5T4U57oDNSlF n5Yjf/DooYP80yQ0U3o5RbqZV6NVz7HUcxLV8/c8J/5Uli6x6l0HhD4ghhgbaNQG QdZ2Se1kS+qfXM8CpXQ3vnMvl/ydYga4GQtV7Jrvyz9Kmnuf8e0LEiiEBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcl4Jke/zs1qLftm4HNvUGzOJOuMB8GA1UdIwQY MBaAFHWxjvLEtPgkn5pu2gsz8OV9qKncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUt YjVlNTZlMGVjY2RlLzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUtYjVlNTZlMGVjY2Rl LzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8J6Byyf tnLT53Zxnavk3YAieLgj6syyL3x8c+aI4GXDzNXKJ15CwjX9AnK3Em1nItWD7UXD LWwv3zZPgF1IxBmvJIUJQEI5RZrF96WJ7deQjvWhTA/oKWBx0HsEO1aU5bxTmYv2 8i75oxtx2NTRyg/sIssv0+Xl3/ZLWUCa1Oz/nFhBL9qd1WoLdvgI/62cjSIUZYAe 6pln/iiYYZ26q5aME0w8295LYwpp7K9VN71jdhaMcLKkAppgfg1DHklf/TnLTWiR xwLOUwtMPDUW5oacyEJpLv9IjIBOCBFSQLUmoQJjDU/gQCfoLqiqWWmFF4ROKmlw voX3PvsAVFz1Qw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:35 2025 by rpki-client