This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json) Hash identifier: i4BaAzvh+X5xSbp7MKRzLExpEoLUe0dlNbHgnj3MIrM= Subject key identifier: 85:E0:77:69:DB:74:08:0C:38:3F:B0:6A:41:DA:6F:67:F3:E5:71:CB Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7 Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7 Certificate serial: 019AF19AB7AADD2675E9BAE64660E4C225AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:00:39 +0000 Manifest this update: Sat 06 Dec 2025 03:00:39 +0000 Manifest next update: Sun 07 Dec 2025 03:00:39 +0000 Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: XNbCKrIUdYTXETlWRcnisCG4u28CokibFfcgPZus4Pk=) 2: JKIB76zKkkKrBoUXjR0hAQtGTdM.roa (hash: ykn0vkdS9mLj16yNgBoFWQshZXTgOTHfF/eRZDldNCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b7:aa:dd:26:75:e9:ba:e6:46:60:e4:c2:25:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7 Validity Not Before: Dec 6 03:00:39 2025 GMT Not After : Dec 7 03:00:39 2025 GMT Subject: CN=85e07769db74080c383fb06a41da6f67f3e571cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:59:2f:69:45:19:93:54:2f:dd:f2:17:ed: 0b:49:2f:6e:99:2f:bf:73:94:59:e1:c3:27:41:3e: 80:cc:aa:17:37:33:b3:38:4b:85:90:be:1a:31:15: b4:c3:ef:b7:27:7f:64:75:02:eb:4a:c9:7b:ee:c4: 33:46:37:51:9f:02:dd:b3:a7:70:98:65:91:c3:ea: 1a:42:48:5c:e9:ba:f3:1e:a2:9c:1b:b7:7b:28:ea: 70:88:aa:4f:cd:b3:7c:b7:85:22:13:e2:c9:f0:d8: a3:c7:fd:3c:33:63:65:3b:8b:7d:8c:26:4d:ff:92: 2a:01:69:1c:9b:d7:ee:92:05:5c:c8:2c:52:f4:60: 9f:97:a9:3a:9d:1d:66:9e:18:49:39:f9:5d:e8:f1: 92:79:c7:a0:97:f4:7c:34:04:0a:f9:55:c8:75:d8: 47:fe:a5:b6:b1:95:a4:5e:d6:df:75:f0:da:1d:22: 0b:15:81:2a:92:85:a8:01:a1:a4:b7:dc:67:14:63: ed:77:e9:37:fd:3e:3b:37:3a:f6:31:7f:b0:2a:c1: c6:c0:48:bc:f9:ad:f0:46:72:64:d1:08:f9:0e:81: 27:87:e3:56:a8:2e:08:4e:59:90:7a:c6:e9:48:67: 38:9d:10:05:40:1d:11:2f:40:39:f0:e9:4b:db:8e: 09:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E0:77:69:DB:74:08:0C:38:3F:B0:6A:41:DA:6F:67:F3:E5:71:CB X509v3 Authority Key Identifier: keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:92:a1:17:9e:fa:76:20:1d:13:b6:84:d8:8e:b5:19:5c:b6: 65:e4:ee:91:88:32:4c:ee:24:95:27:1c:85:f3:2b:35:70:27: af:29:7b:01:18:65:2d:ab:0d:ca:6b:0a:9e:5f:4c:fc:f4:74: 74:4f:a4:6b:e3:a5:2d:e9:9a:d7:e5:eb:a5:09:96:e5:f5:fb: 61:10:51:80:e1:ba:58:5f:13:71:72:8d:38:59:65:24:7a:11: a0:34:7e:0a:c2:86:a0:2c:c4:3e:42:b3:cf:41:59:ea:95:6f: 7b:41:a4:c0:c7:25:ba:7f:15:45:04:ce:89:90:0c:82:14:35: 71:c1:71:2c:2d:45:8d:eb:0c:cb:54:61:b0:23:7e:eb:5c:8e: ab:b2:89:70:74:88:20:87:0f:78:84:23:e2:a4:cb:77:16:a2: fe:da:d5:0e:cb:df:32:ea:01:36:b7:da:31:2e:36:53:69:d9: 16:12:59:e4:44:39:11:d4:bc:31:02:3c:b6:60:2c:dc:1b:7d: 73:40:71:13:e5:da:f8:0a:b1:10:79:51:10:2e:fb:fc:71:cc: 59:ce:3e:7c:09:45:19:06:1d:00:ca:b6:4f:5e:c0:bf:23:a5: 0b:3b:6d:36:56:be:95:8f:2d:03:d7:cd:58:06:be:36:c7:f2: 66:4d:bc:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmreq3SZ16brmRmDkwiWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZjZlNjMzMDY3YzA2NmFlOWJlZjFkMzc3MWNjMzAwZTRi NGQxYTcwHhcNMjUxMjA2MDMwMDM5WhcNMjUxMjA3MDMwMDM5WjAzMTEwLwYDVQQD Eyg4NWUwNzc2OWRiNzQwODBjMzgzZmIwNmE0MWRhNmY2N2YzZTU3MWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkRZL2lFGZNUL93yF+0LSS9umS+/ c5RZ4cMnQT6AzKoXNzOzOEuFkL4aMRW0w++3J39kdQLrSsl77sQzRjdRnwLds6dw mGWRw+oaQkhc6brzHqKcG7d7KOpwiKpPzbN8t4UiE+LJ8Nijx/08M2NlO4t9jCZN /5IqAWkcm9fukgVcyCxS9GCfl6k6nR1mnhhJOfld6PGSecegl/R8NAQK+VXIddhH /qW2sZWkXtbfdfDaHSILFYEqkoWoAaGkt9xnFGPtd+k3/T47Nzr2MX+wKsHGwEi8 +a3wRnJk0Qj5DoEnh+NWqC4ITlmQesbpSGc4nRAFQB0RL0A58OlL244JDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXgd2nbdAgMOD+wakHab2fz5XHLMB8GA1UdIwQY MBaAFA325jMGfAZq6b7x03ccwwDktNGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mYWUxYzEtYWExOC00NmFhLTgzYTct OGQxYzlkMTE5MmIwLzEvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mYWUxYzEtYWExOC00NmFhLTgzYTctOGQxYzlkMTE5MmIw LzEvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5KhF576 diAdE7aE2I61GVy2ZeTukYgyTO4klScchfMrNXAnryl7ARhlLasNymsKnl9M/PR0 dE+ka+OlLema1+XrpQmW5fX7YRBRgOG6WF8TcXKNOFllJHoRoDR+CsKGoCzEPkKz z0FZ6pVve0GkwMclun8VRQTOiZAMghQ1ccFxLC1FjesMy1RhsCN+61yOq7KJcHSI IIcPeIQj4qTLdxai/trVDsvfMuoBNrfaMS42U2nZFhJZ5EQ5EdS8MQI8tmAs3Bt9 c0BxE+Xa+AqxEHlREC77/HHMWc4+fAlFGQYdAMq2T17AvyOlCzttNla+lY8tA9fN WAa+NsfyZk28iQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:24 2025 by rpki-client