This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft File: deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json) Hash identifier: BS6SPqFrRnJ29eoPHbHp6NOu5aGisX2mNZbFY3RyuRA= Subject key identifier: AD:6B:37:53:23:EB:57:6E:E8:FD:50:8E:38:84:68:BF:79:88:4D:6B Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a Certificate serial: 019AF3F799A46D6DB42CE5BFF6E66EB5E42F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 14:01:21 +0000 Manifest this update: Sat 06 Dec 2025 14:01:21 +0000 Manifest next update: Sun 07 Dec 2025 14:01:21 +0000 Files and hashes: 1: UJAjdPQrd8bP5k3ucoOuD61_MT8.roa (hash: ugk9F1DdJco8dK5O++Cvmb5dblVQF4BV4yb8wudILQ0=) 2: WkmHxNpKrmAzpx_FXkIaqhpVbpg.roa (hash: +AeFew5fsUdx9Fz3OOuJ7ZKCrATyNvcvfW0fCxc+tvg=) 3: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: Sg7ZoBz3qRZu2mkPNHWoSJMQ9m5QoINCpwiWTBl7+Cw=) 4: imLX_iKSVxIt55dbqRMupQNb-6o.roa (hash: OviNWocn0RhLkHHteMWnzyr2rnMguzIPeb1JC9urBc0=) 5: iwdwl1HuN2YXg9VICxrnQ2L8T_o.roa (hash: tLBry0LnEHMR25EGcYFuNe2nISzjy4sXmppIiMI5cVo=) 6: ju7dlcjXTVtzrpg-cXuTrngFgtw.roa (hash: Odms44ovs7hGv3jdYt/7+590lUec8LGS69mCjmZU8q4=) 7: oDzpo9P1CSTveVeS7HO-MB_9-so.roa (hash: TBsZnZ6Hce91sBTky4DlDhCeMhJRvacSOmd1DwZB9+E=) 8: rsxSpj9moP8LtPzNvFBSE3jnhTY.roa (hash: EI5toUib0yn2k83FMVjkqamZ8A/+xIBPYiOu2bZVLHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:99:a4:6d:6d:b4:2c:e5:bf:f6:e6:6e:b5:e4:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a Validity Not Before: Dec 6 14:01:21 2025 GMT Not After : Dec 7 14:01:21 2025 GMT Subject: CN=ad6b375323eb576ee8fd508e388468bf79884d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:06:a1:51:73:74:42:07:9a:fb:e8:be:d1: d1:ed:ea:d6:63:52:52:bd:24:1a:a6:ee:68:a6:04: d1:2e:c5:b1:05:bb:f7:6e:99:30:5b:04:f9:b9:bc: 2c:0e:42:9f:d4:19:14:2b:10:4d:0e:e5:1d:af:f7: 7f:89:f2:41:ed:58:19:f9:79:96:22:05:88:f5:21: c6:34:4c:5f:9c:ad:d7:31:5b:10:65:90:3a:c2:1e: 50:cb:15:87:9c:d1:f1:bc:fe:d7:d6:45:12:e1:37: cc:63:af:eb:c2:27:68:0c:71:6c:c8:85:49:18:46: d8:f1:a0:fc:2b:d2:60:b9:b2:f6:33:f4:2c:b0:60: b2:11:c7:28:a5:e1:65:56:f3:87:8c:01:e4:28:4f: f6:82:8b:b0:30:68:f8:6e:20:e1:8f:3f:2f:27:d3: fe:43:a2:5b:0e:32:2c:3d:40:a6:b8:14:7d:af:9b: 04:82:aa:a6:c2:f0:a8:86:ef:4b:27:5b:96:41:fb: d0:39:66:eb:69:23:b4:d6:68:61:cb:fc:bc:28:41: 54:45:7c:5c:f0:26:95:e5:62:b5:6f:b4:cd:48:c7: 4b:9d:01:e0:df:53:0f:45:a9:3c:f1:ef:07:47:87: 0d:8b:00:dd:b7:18:6a:f2:93:a6:46:87:a0:a0:2e: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6B:37:53:23:EB:57:6E:E8:FD:50:8E:38:84:68:BF:79:88:4D:6B X509v3 Authority Key Identifier: keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:14:5b:ba:e9:5f:36:fa:ae:ad:ee:8f:d6:df:62:b0:87:de: 0b:39:07:3c:8e:3a:a3:77:54:fb:dc:4a:6e:aa:43:8b:15:c6: 71:a8:c4:9d:75:67:67:1b:4d:90:91:e4:33:54:f5:c2:33:4c: 11:fb:17:71:db:83:7b:5c:41:ed:8c:8b:61:bf:56:ea:3c:e9: 1d:85:78:db:a0:1d:7c:b9:62:2a:ff:da:4c:5d:52:5a:4a:0f: 9e:23:76:ab:fd:09:28:f9:cc:6d:7c:28:89:76:7c:f8:3b:e6: 25:a8:09:41:da:2b:22:68:5f:3f:2b:ed:46:47:88:b2:dc:f5: 96:3e:66:2b:7d:c9:93:ca:ab:e3:cd:6d:e0:57:73:fc:21:3c: c6:cc:af:14:71:c6:19:b3:ff:43:60:30:b3:eb:43:fe:0d:fc: ac:4c:eb:dc:5d:76:f8:05:7d:86:15:ca:9c:15:28:6a:3d:e3: ed:a4:44:41:7c:65:de:2e:7f:cd:8f:16:63:1c:ae:bd:28:93: b4:90:83:58:9e:c0:88:9b:cd:e9:07:36:f4:84:c9:e6:8c:f5: 61:67:47:ad:7d:31:73:6f:96:60:f8:52:64:e7:31:59:2e:c1: cd:f2:c0:13:4a:7e:e7:56:3c:54:a0:2d:86:2a:5f:28:72:12: 42:a6:56:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95mkbW20LOW/9uZuteQvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj ZTVhNGEwHhcNMjUxMjA2MTQwMTIxWhcNMjUxMjA3MTQwMTIxWjAzMTEwLwYDVQQD EyhhZDZiMzc1MzIzZWI1NzZlZThmZDUwOGUzODg0NjhiZjc5ODg0ZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzcGoVFzdEIHmvvovtHR7erWY1JS vSQapu5opgTRLsWxBbv3bpkwWwT5ubwsDkKf1BkUKxBNDuUdr/d/ifJB7VgZ+XmW IgWI9SHGNExfnK3XMVsQZZA6wh5QyxWHnNHxvP7X1kUS4TfMY6/rwidoDHFsyIVJ GEbY8aD8K9JgubL2M/QssGCyEccopeFlVvOHjAHkKE/2gouwMGj4biDhjz8vJ9P+ Q6JbDjIsPUCmuBR9r5sEgqqmwvCohu9LJ1uWQfvQOWbraSO01mhhy/y8KEFURXxc 8CaV5WK1b7TNSMdLnQHg31MPRak88e8HR4cNiwDdtxhq8pOmRoegoC4iFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1rN1Mj61du6P1QjjiEaL95iE1rMB8GA1UdIwQY MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct ZDQ1YWI3ZGYyZGUxLzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBRbuulf Nvqure6P1t9isIfeCzkHPI46o3dU+9xKbqpDixXGcajEnXVnZxtNkJHkM1T1wjNM EfsXcduDe1xB7YyLYb9W6jzpHYV426AdfLliKv/aTF1SWkoPniN2q/0JKPnMbXwo iXZ8+DvmJagJQdorImhfPyvtRkeIstz1lj5mK33Jk8qr481t4Fdz/CE8xsyvFHHG GbP/Q2Aws+tD/g38rEzr3F12+AV9hhXKnBUoaj3j7aREQXxl3i5/zY8WYxyuvSiT tJCDWJ7AiJvN6Qc29ITJ5oz1YWdHrX0xc2+WYPhSZOcxWS7BzfLAE0p+51Y8VKAt hipfKHISQqZWYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:40:43 2025 by rpki-client