This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json) Hash identifier: TfDjRjBxv8JH7U/hfP9NFLUE5FfUtgNaTvXDFYfXe/0= Subject key identifier: FC:0A:3D:82:D7:B3:E2:91:5F:C4:ED:14:51:64:67:C3:24:42:89:FB Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42 Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242 Certificate serial: 019AF276CF8785D89AA2E09A7D279F93D066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft Manifest number: 09AF Signing time: Sat 06 Dec 2025 07:01:03 +0000 Manifest this update: Sat 06 Dec 2025 07:01:03 +0000 Manifest next update: Sun 07 Dec 2025 07:01:03 +0000 Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: QmQNtlKd0zqFm5Pwm1GxsrxCeRY9j8xtau+Qh/MBgtI=) 2: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (hash: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:cf:87:85:d8:9a:a2:e0:9a:7d:27:9f:93:d0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242 Validity Not Before: Dec 6 07:01:03 2025 GMT Not After : Dec 7 07:01:03 2025 GMT Subject: CN=fc0a3d82d7b3e2915fc4ed14516467c3244289fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:00:d2:24:0c:2c:e1:98:f5:ed:6a:2c:42: d0:de:3e:c9:46:b7:be:ca:31:da:ab:d9:cf:62:e3: e0:47:2e:b2:b8:c6:34:4c:be:ab:12:48:3d:6b:03: 84:1f:16:69:19:9f:22:88:06:21:d4:9e:63:f7:88: 63:cb:27:8c:9c:d4:a6:2f:ec:49:83:0e:b4:bc:0f: 83:4a:3d:93:99:36:97:3c:36:91:10:5d:ce:bd:90: fc:c7:ef:b0:b9:c6:99:d4:02:5e:d3:ec:83:5f:ce: 3b:88:f6:cd:e6:61:94:fc:6c:3c:80:d0:6e:9b:28: 28:83:ca:69:40:36:95:97:3f:66:5d:67:d8:f7:07: 87:47:13:15:8d:66:ab:56:18:5a:1f:8e:bb:b5:5f: af:52:ed:60:df:a7:5c:fe:49:c5:d2:57:24:74:8a: 59:fe:5b:55:f8:fb:7f:ec:fd:80:14:cb:60:2e:10: 04:21:58:59:4b:f5:89:ce:8d:13:47:1d:65:1c:1e: 59:1f:e5:70:c5:17:9e:ed:e5:92:31:9a:84:09:8a: 75:e8:8b:d9:11:42:0d:6f:29:2e:a1:56:8a:05:54: 27:a7:43:bb:c5:0a:06:49:ab:d4:b5:c4:53:a5:74: 89:e3:cc:4f:85:09:60:71:9b:58:9d:bf:01:f5:cd: 38:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0A:3D:82:D7:B3:E2:91:5F:C4:ED:14:51:64:67:C3:24:42:89:FB X509v3 Authority Key Identifier: keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:fc:94:17:16:a3:80:9d:56:83:83:6a:d8:aa:41:09:b5:cd: 8b:30:ab:11:ff:03:fe:0e:6c:a7:b4:23:3e:47:a9:30:a2:2b: ff:62:55:9b:29:5b:db:b0:45:c8:11:ee:2a:06:ec:8e:1d:a8: 92:b9:e5:10:c2:49:1e:b7:fc:b7:f1:d9:39:37:28:35:06:c6: cf:4c:b9:7a:c2:43:4e:21:86:0a:84:dc:c6:80:c1:4c:22:8b: 65:64:3f:dc:1b:bd:2d:53:c6:03:af:56:8a:59:60:e6:ca:0a: b4:fe:c8:5c:63:28:8c:32:0e:17:e9:f0:c4:c1:10:b7:ce:db: fb:d8:e9:2b:5e:4c:52:c3:2c:26:0e:b3:df:e9:f8:9b:04:b2: 30:12:af:9c:75:da:d5:8a:c0:32:37:0b:e3:c1:5d:aa:3b:b7: 53:07:36:e5:ce:d5:1f:2b:78:df:06:db:0e:7b:8e:04:7d:87: 21:a8:11:83:1b:18:22:d0:78:81:12:e1:b3:40:55:17:6d:1f: 36:e6:74:e5:4f:e1:14:7b:f9:52:6e:b0:63:fd:73:45:d5:11: 45:b4:f8:ee:34:d2:b9:00:d3:48:6b:54:d1:52:5e:c4:ea:76: a3:b7:ad:21:ea:75:59:f2:92:2f:57:3f:5f:67:49:f2:0c:95: 69:50:e5:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryds+HhdiaouCafSefk9BmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjZkNDVmZDU2OTIxZDM0NjlkMTljNDc1NzJmMjc1Zjlk NTUyNDIwHhcNMjUxMjA2MDcwMTAzWhcNMjUxMjA3MDcwMTAzWjAzMTEwLwYDVQQD EyhmYzBhM2Q4MmQ3YjNlMjkxNWZjNGVkMTQ1MTY0NjdjMzI0NDI4OWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP0A0iQMLOGY9e1qLELQ3j7JRre+ yjHaq9nPYuPgRy6yuMY0TL6rEkg9awOEHxZpGZ8iiAYh1J5j94hjyyeMnNSmL+xJ gw60vA+DSj2TmTaXPDaREF3OvZD8x++wucaZ1AJe0+yDX847iPbN5mGU/Gw8gNBu mygog8ppQDaVlz9mXWfY9weHRxMVjWarVhhaH467tV+vUu1g36dc/knF0lckdIpZ /ltV+Pt/7P2AFMtgLhAEIVhZS/WJzo0TRx1lHB5ZH+VwxRee7eWSMZqECYp16IvZ EUINbykuoVaKBVQnp0O7xQoGSavUtcRTpXSJ48xPhQlgcZtYnb8B9c04XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwKPYLXs+KRX8TtFFFkZ8MkQon7MB8GA1UdIwQY MBaAFA4m1F/VaSHTRp0ZxHVy8nX51VJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQt NjY1YTY5Y2I4OTAwLzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQtNjY1YTY5Y2I4OTAw LzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefyUFxaj gJ1Wg4Nq2KpBCbXNizCrEf8D/g5sp7QjPkepMKIr/2JVmylb27BFyBHuKgbsjh2o krnlEMJJHrf8t/HZOTcoNQbGz0y5esJDTiGGCoTcxoDBTCKLZWQ/3Bu9LVPGA69W illg5soKtP7IXGMojDIOF+nwxMEQt87b+9jpK15MUsMsJg6z3+n4mwSyMBKvnHXa 1YrAMjcL48Fdqju3Uwc25c7VHyt43wbbDnuOBH2HIagRgxsYItB4gRLhs0BVF20f NuZ05U/hFHv5Um6wY/1zRdURRbT47jTSuQDTSGtU0VJexOp2o7etIep1WfKSL1c/ X2dJ8gyVaVDl9w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:43 2025 by rpki-client