This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft File: dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json) Hash identifier: XhTIVrK6NC7AxSmLAQhqvD9tj2v9KhthsNmI2l2f3Zc= Subject key identifier: B2:1E:DB:27:BA:66:50:9D:62:60:69:6E:D2:CD:55:27:BA:9B:D3:58 Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27 Certificate issuer: /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027 Certificate serial: 019AF240042FA4D724F5EE1F24BBF19B8BFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft Manifest number: 0DF2 Signing time: Sat 06 Dec 2025 06:01:12 +0000 Manifest this update: Sat 06 Dec 2025 06:01:12 +0000 Manifest next update: Sun 07 Dec 2025 06:01:12 +0000 Files and hashes: 1: dNIjhcgOmJl_uqUY3ufEirea4-I.roa (hash: gkwMMNbP4H2f7PZtpLojDcOWvuhbyLZWIbK4WgzSXOU=) 2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: O/qq0FsIO7urle99PSd55R3JY+z5cAD/nzqyjQMN4fE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:04:2f:a4:d7:24:f5:ee:1f:24:bb:f1:9b:8b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027 Validity Not Before: Dec 6 06:01:12 2025 GMT Not After : Dec 7 06:01:12 2025 GMT Subject: CN=b21edb27ba66509d6260696ed2cd5527ba9bd358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:3a:b0:53:39:cf:17:89:79:72:20:2c:55: ee:fa:06:03:76:4e:4d:e2:80:4b:63:8b:22:fc:0f: 81:dd:4e:26:0f:9b:74:9c:d1:00:02:86:d8:cc:0d: 15:c5:8d:10:6b:16:5b:2c:17:8a:2a:d2:dc:03:49: 5f:87:21:42:4f:a6:07:f1:1f:df:2e:ad:94:52:4c: 0d:11:ee:30:6a:31:3c:f0:0c:2b:21:e3:b1:59:c5: ca:50:52:0b:b4:6c:bd:82:30:84:2e:7b:a8:44:d5: cf:c8:3d:8f:ab:fd:2a:c0:8e:28:cf:4b:9b:01:da: d9:6b:3d:54:27:67:ff:28:12:5e:51:f1:c6:6b:2e: 5e:72:3c:87:71:d2:21:44:c6:64:3e:df:08:e5:50: 15:d9:28:97:53:d2:e4:36:e9:5e:ee:5b:b9:fd:26: 59:f6:dc:6c:ad:62:4a:5b:a6:8f:26:87:8f:b6:9d: f1:c9:8e:5f:3c:14:24:72:44:f1:28:31:1f:b8:01: ea:c2:23:a8:4f:db:92:fa:95:b4:86:9d:d3:59:e0: ea:3a:16:96:d6:ad:42:e0:8e:73:c5:11:28:3c:0f: 8c:f1:18:13:fb:d4:77:e4:13:1c:09:78:2b:17:3b: 57:3a:0c:b5:74:0d:19:42:b6:08:38:c2:b6:33:31: 60:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:DB:27:BA:66:50:9D:62:60:69:6E:D2:CD:55:27:BA:9B:D3:58 X509v3 Authority Key Identifier: keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b4:66:c1:a1:65:97:45:f2:e4:52:d3:72:a5:41:71:d1:1e: fb:7f:e0:b9:08:e2:2c:bb:cc:2d:fa:a9:29:c3:8b:e1:cf:88: 29:2b:b7:a8:3a:2e:93:01:c4:4a:0d:9a:0f:e1:df:c6:36:43: c5:19:b9:04:d7:e9:ef:f8:82:d4:86:d3:53:54:e9:d4:9e:fd: 64:99:34:54:13:a1:31:81:e3:ae:87:9b:76:bf:03:79:53:5f: b9:e9:78:57:69:a2:97:61:b4:a7:d1:3a:33:0c:54:a2:43:64: 47:29:00:09:07:4a:aa:d4:c5:7d:ee:2e:1f:0a:78:82:f2:d2: 9f:98:49:45:7d:b4:d3:b6:ae:4a:74:68:a2:f5:f8:cb:29:22: 1f:e7:fc:82:93:cc:95:1b:17:19:a5:b8:57:48:4e:61:fe:1d: 26:bf:c6:86:06:aa:65:c0:12:41:d2:c8:89:72:6b:e4:5e:37: 23:23:9f:57:c4:76:d7:77:58:73:20:31:a4:69:1b:00:6f:e1: d1:35:1a:32:33:60:ef:4d:1b:3d:0c:ed:70:b5:3f:e8:d0:f8: 43:df:aa:f7:af:e3:71:4b:a0:f3:b6:5a:6f:08:d0:08:5a:f9: 4d:ae:e6:9f:af:1f:87:94:8a:37:78:d4:7f:1d:bb:cf:ab:05: 72:7f:0b:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAQvpNck9e4fJLvxm4v7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YmJjODlhZDA0MjBkZTdiNWJjMmRkMzJmZWEzYjk3OWZh ZGUwMjcwHhcNMjUxMjA2MDYwMTEyWhcNMjUxMjA3MDYwMTEyWjAzMTEwLwYDVQQD EyhiMjFlZGIyN2JhNjY1MDlkNjI2MDY5NmVkMmNkNTUyN2JhOWJkMzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT46sFM5zxeJeXIgLFXu+gYDdk5N 4oBLY4si/A+B3U4mD5t0nNEAAobYzA0VxY0QaxZbLBeKKtLcA0lfhyFCT6YH8R/f Lq2UUkwNEe4wajE88AwrIeOxWcXKUFILtGy9gjCELnuoRNXPyD2Pq/0qwI4oz0ub AdrZaz1UJ2f/KBJeUfHGay5ecjyHcdIhRMZkPt8I5VAV2SiXU9LkNule7lu5/SZZ 9txsrWJKW6aPJoePtp3xyY5fPBQkckTxKDEfuAHqwiOoT9uS+pW0hp3TWeDqOhaW 1q1C4I5zxREoPA+M8RgT+9R35BMcCXgrFztXOgy1dA0ZQrYIOMK2MzFgHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIe2ye6ZlCdYmBpbtLNVSe6m9NYMB8GA1UdIwQY MBaAFHW7yJrQQg3ntbwt0y/qO5efreAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAt MDJmYTIxOGQxNGY4LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAtMDJmYTIxOGQxNGY4 LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7RmwaFl l0Xy5FLTcqVBcdEe+3/guQjiLLvMLfqpKcOL4c+IKSu3qDoukwHESg2aD+HfxjZD xRm5BNfp7/iC1IbTU1Tp1J79ZJk0VBOhMYHjroebdr8DeVNfuel4V2mil2G0p9E6 MwxUokNkRykACQdKqtTFfe4uHwp4gvLSn5hJRX2007auSnRoovX4yykiH+f8gpPM lRsXGaW4V0hOYf4dJr/GhgaqZcASQdLIiXJr5F43IyOfV8R213dYcyAxpGkbAG/h 0TUaMjNg700bPQztcLU/6ND4Q9+q96/jcUug87ZabwjQCFr5Ta7mn68fh5SKN3jU fx27z6sFcn8LRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:14 2025 by rpki-client