This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft File: 59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json) Hash identifier: 88SmFnJK6DGIDKK4olCs77WEWbzSEp4B2wFYPFz0x/8= Subject key identifier: 5B:C1:6E:9D:29:65:70:6D:D8:0B:B6:C5:62:83:53:1E:43:69:0C:22 Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7 Certificate issuer: /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7 Certificate serial: 019AF19AA58A68C6A4AFD79B4530F32A6975 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft Manifest number: 127F Signing time: Sat 06 Dec 2025 03:00:35 +0000 Manifest this update: Sat 06 Dec 2025 03:00:35 +0000 Manifest next update: Sun 07 Dec 2025 03:00:35 +0000 Files and hashes: 1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: VLlxJrSr8W+WJxE9R8z+WPpspVKpr+rBdtUWkpzsFc4=) 2: doaBFCoAi9PMEGjDVkL2tXpIeqk.roa (hash: Z98ogMYuCRCB/EUQ20sK/eyL2P/vgOy7W+oSu1U5VEE=) 3: uRo2bMOeIiH8StyfjDXOPHZmCRc.roa (hash: /c4Qcmm44bZ40YwEJJpcK2loOF7YWT9F41wjJC1v0Vc=) 4: xOWUW0bOewUorU3PuzR6cnv41Ec.roa (hash: z/ye3u1sqtlYcBf/GAFPNRmAn23AockZVnADhLIPFmU=) 5: ygDMNPZB6ioJh9v1SV5ZJ0aINDg.roa (hash: 0bPn18ewCwFlle0D4D1zaFp/YvFhdd8pfg8oWQqwtM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a5:8a:68:c6:a4:af:d7:9b:45:30:f3:2a:69:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7 Validity Not Before: Dec 6 03:00:35 2025 GMT Not After : Dec 7 03:00:35 2025 GMT Subject: CN=5bc16e9d2965706dd80bb6c56283531e43690c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:2e:be:c0:92:68:c9:cd:b9:6d:b7:02:3b: 5e:0a:2e:7c:72:37:30:c7:b8:80:0f:c3:b5:e1:9a: 5d:18:db:c8:60:04:82:25:70:c9:50:09:c3:dc:55: 1d:81:71:69:cc:00:b4:16:c7:91:f5:99:98:5e:63: a5:b3:1c:eb:9f:b0:4c:dc:5f:d5:05:80:91:64:55: 05:5b:29:6c:a2:08:12:dd:0c:11:1b:19:3b:55:17: 33:c9:e6:3e:72:5c:17:1b:ad:9b:bc:01:5b:35:f2: dd:2f:4f:e5:60:0a:19:1e:d0:35:ee:fd:3e:eb:1a: 26:d1:74:3d:33:07:ae:d7:62:1f:08:57:12:d4:49: a6:6a:b3:6b:06:ce:28:d1:99:bd:c3:d5:36:f2:de: 60:b7:f6:93:dc:89:e1:e5:a6:26:be:9f:c4:64:b9: 30:58:06:53:95:2e:ce:d6:28:d9:45:6f:29:77:41: 05:0b:73:bd:e3:94:3a:e2:7a:3c:33:83:9c:43:28: 16:f0:1f:b5:bd:d1:14:8f:a0:66:00:7c:e1:fb:dc: 0f:e6:d5:e7:70:f4:34:18:69:fc:d5:b2:2a:3e:a9: 06:97:19:0d:25:19:96:4e:01:82:b7:49:67:81:9a: 68:25:e6:6f:89:6c:6a:b5:db:ae:c7:7f:9b:57:20: 0b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C1:6E:9D:29:65:70:6D:D8:0B:B6:C5:62:83:53:1E:43:69:0C:22 X509v3 Authority Key Identifier: keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d8:f5:2b:e3:52:94:22:85:e8:de:f2:ec:c4:c8:95:36:13: ff:e2:62:87:f5:72:c1:6e:4b:e8:50:f9:20:8d:69:40:30:89: 1b:05:64:df:3a:e2:8d:dd:1e:6f:65:8b:43:7d:d5:60:37:50: 79:c9:cf:03:8a:d1:b8:89:97:15:83:dc:55:f8:a0:ce:e0:e8: 81:e3:57:2c:25:3e:47:32:07:9c:fa:ed:c4:ae:aa:97:b4:1a: e0:31:dc:c3:43:7b:ad:f1:1c:4e:2e:de:0a:61:b7:c7:9b:3c: 3e:db:63:5c:0c:e8:8a:89:28:f0:fc:10:7f:c5:ce:4a:13:8f: 6f:60:fe:62:d5:51:2c:2d:81:2d:58:0e:70:00:5e:3a:31:37: c8:31:84:73:5f:7f:57:c5:22:82:da:94:a5:c6:9d:c0:06:7f: a5:69:71:0c:db:a4:5e:10:5b:bf:9c:99:ee:9d:9e:35:d8:57: fb:fc:7c:59:cf:12:72:e4:19:32:71:34:08:78:e3:d2:0a:34: c6:a2:0e:a0:6b:55:8f:a5:2e:10:23:05:3b:aa:e7:fb:14:93: 16:94:ad:9b:a6:72:ee:c8:d1:4b:a2:f6:be:ae:ae:aa:ac:e4: 66:6b:57:d0:04:8d:d5:6e:5d:33:06:04:ed:5e:32:88:6a:38: 2e:53:e5:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqWKaMakr9ebRTDzKml1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDljZmIwNzhlZGE1ODE2ZmM4MDllOThjMjVjYjcxOTYz ZTc1YjcwHhcNMjUxMjA2MDMwMDM1WhcNMjUxMjA3MDMwMDM1WjAzMTEwLwYDVQQD Eyg1YmMxNmU5ZDI5NjU3MDZkZDgwYmI2YzU2MjgzNTMxZTQzNjkwYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun8uvsCSaMnNuW23AjteCi58cjcw x7iAD8O14ZpdGNvIYASCJXDJUAnD3FUdgXFpzAC0FseR9ZmYXmOlsxzrn7BM3F/V BYCRZFUFWylsoggS3QwRGxk7VRczyeY+clwXG62bvAFbNfLdL0/lYAoZHtA17v0+ 6xom0XQ9Mweu12IfCFcS1EmmarNrBs4o0Zm9w9U28t5gt/aT3Inh5aYmvp/EZLkw WAZTlS7O1ijZRW8pd0EFC3O945Q64no8M4OcQygW8B+1vdEUj6BmAHzh+9wP5tXn cPQ0GGn81bIqPqkGlxkNJRmWTgGCt0lngZpoJeZviWxqtduux3+bVyAL0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvBbp0pZXBt2Au2xWKDUx5DaQwiMB8GA1UdIwQY MBaAFOfZz7B47aWBb8gJ6Ywly3GWPnW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wMDBlYTctYzlmNC00ZWJiLWI5YjEt ZmVlZTdjMjlkNGRlLzEvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wMDBlYTctYzlmNC00ZWJiLWI5YjEtZmVlZTdjMjlkNGRl LzEvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtj1K+NS lCKF6N7y7MTIlTYT/+Jih/VywW5L6FD5II1pQDCJGwVk3zrijd0eb2WLQ33VYDdQ ecnPA4rRuImXFYPcVfigzuDogeNXLCU+RzIHnPrtxK6ql7Qa4DHcw0N7rfEcTi7e CmG3x5s8PttjXAzoioko8PwQf8XOShOPb2D+YtVRLC2BLVgOcABeOjE3yDGEc19/ V8UigtqUpcadwAZ/pWlxDNukXhBbv5yZ7p2eNdhX+/x8Wc8ScuQZMnE0CHjj0go0 xqIOoGtVj6UuECMFO6rn+xSTFpStm6Zy7sjRS6L2vq6uqqzkZmtX0ASN1W5dMwYE 7V4yiGo4LlPltw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:29 2025 by rpki-client