This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft File: 59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json) Hash identifier: AGDs2CUCrGctbKAKWRVk+hHFZelLyr9CdlMjmQawKbM= Subject key identifier: E4:06:C2:52:77:06:F3:CD:60:E9:B8:8B:4B:53:01:A6:D7:20:13:63 Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7 Certificate issuer: /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7 Certificate serial: 019B2B8A36A44B8B0E851E5CB7931B4D14B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft Manifest number: 129D Signing time: Wed 17 Dec 2025 09:00:36 +0000 Manifest this update: Wed 17 Dec 2025 09:00:36 +0000 Manifest next update: Thu 18 Dec 2025 09:00:36 +0000 Files and hashes: 1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: AHdGdA8WuIrguVAkWS/c6bacvd/NmIWo1oxjpYavTMA=) 2: doaBFCoAi9PMEGjDVkL2tXpIeqk.roa (hash: Z98ogMYuCRCB/EUQ20sK/eyL2P/vgOy7W+oSu1U5VEE=) 3: uRo2bMOeIiH8StyfjDXOPHZmCRc.roa (hash: /c4Qcmm44bZ40YwEJJpcK2loOF7YWT9F41wjJC1v0Vc=) 4: xOWUW0bOewUorU3PuzR6cnv41Ec.roa (hash: z/ye3u1sqtlYcBf/GAFPNRmAn23AockZVnADhLIPFmU=) 5: ygDMNPZB6ioJh9v1SV5ZJ0aINDg.roa (hash: 0bPn18ewCwFlle0D4D1zaFp/YvFhdd8pfg8oWQqwtM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:36:a4:4b:8b:0e:85:1e:5c:b7:93:1b:4d:14:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7 Validity Not Before: Dec 17 09:00:36 2025 GMT Not After : Dec 18 09:00:36 2025 GMT Subject: CN=e406c2527706f3cd60e9b88b4b5301a6d7201363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:61:08:8e:94:8c:2b:43:82:0c:84:3e:77:64: c5:7a:50:96:ba:24:17:c2:c9:87:b3:4e:d5:5d:35: 12:0e:e1:39:57:79:3a:23:47:c3:d0:f0:28:f9:4f: de:80:df:11:b0:66:58:c2:8e:f7:e8:56:dc:27:f5: 3f:2e:75:42:15:7b:c8:de:e2:94:39:37:9f:d5:ed: 6e:65:30:88:54:56:c8:08:2f:0e:aa:b0:ba:ad:09: 57:25:11:a3:51:c0:7d:38:77:d1:db:cd:76:39:d4: 54:0b:f8:0d:a0:02:85:b4:c9:94:d4:86:39:cb:78: 0c:a5:b5:f0:f0:da:1b:67:c8:d4:36:b1:b7:d4:21: 00:5e:43:6a:a8:6a:9e:7d:c0:6d:55:cf:55:06:e9: 29:7e:a9:fa:2c:92:35:a9:bf:84:63:32:8b:92:dc: 86:34:56:8d:e0:8a:f1:8c:36:ab:85:98:2e:d1:37: 98:ca:b0:b4:82:9d:24:de:09:6d:1f:d3:9b:59:4d: b6:a1:15:9f:c4:53:10:00:98:57:f9:7d:70:7f:95: 21:b7:80:0c:69:dd:cb:b3:6e:b4:e6:50:fa:3e:3b: a3:ce:a7:a8:3f:f6:18:13:8f:82:f3:70:25:ba:6a: 73:48:e3:a9:89:25:61:81:51:f9:5d:98:62:a4:c2: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:06:C2:52:77:06:F3:CD:60:E9:B8:8B:4B:53:01:A6:D7:20:13:63 X509v3 Authority Key Identifier: keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9c:97:28:e6:26:45:da:75:ce:37:db:19:dc:ea:be:15:af: df:e0:02:6c:43:42:f1:d6:86:c2:30:69:f0:b4:af:5f:81:e0: 10:30:16:96:8a:69:20:88:00:30:82:98:5d:71:9b:70:10:af: 91:cf:f3:28:ec:25:24:de:bc:08:dd:00:82:88:1d:28:22:ca: f8:12:93:c8:1d:27:ec:23:1a:d9:28:be:51:5b:35:de:2e:8b: e5:54:9f:da:2e:43:90:7f:ce:72:a4:fa:2f:65:9d:ec:de:8d: fc:1a:cc:17:93:a3:fa:2f:88:e8:d4:b1:66:e2:d3:6f:8b:6d: 33:47:66:28:80:04:71:40:78:04:03:e6:d7:0a:2a:88:8a:7d: 3f:9c:9b:f5:83:39:ea:64:a9:1c:8f:ca:7b:1b:ab:1b:b8:f2: e8:d6:6f:27:5b:f0:af:38:83:1b:2d:54:0a:01:2a:6f:c1:03: 4b:1d:ed:e2:da:17:ba:10:ba:d4:4f:f5:66:64:92:c7:49:9d: b0:61:31:f3:71:cc:47:67:73:19:cf:56:4a:45:81:13:99:a5: 07:df:90:6c:94:2b:57:5a:6d:71:40:35:6a:6b:e1:aa:e8:38: 12:d0:5f:44:75:f9:ef:ec:2f:ae:7a:f1:8f:ef:c0:9a:7c:67: 2d:72:4d:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrijakS4sOhR5ct5MbTRS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDljZmIwNzhlZGE1ODE2ZmM4MDllOThjMjVjYjcxOTYz ZTc1YjcwHhcNMjUxMjE3MDkwMDM2WhcNMjUxMjE4MDkwMDM2WjAzMTEwLwYDVQQD EyhlNDA2YzI1Mjc3MDZmM2NkNjBlOWI4OGI0YjUzMDFhNmQ3MjAxMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mEIjpSMK0OCDIQ+d2TFelCWuiQX wsmHs07VXTUSDuE5V3k6I0fD0PAo+U/egN8RsGZYwo736FbcJ/U/LnVCFXvI3uKU OTef1e1uZTCIVFbICC8OqrC6rQlXJRGjUcB9OHfR2812OdRUC/gNoAKFtMmU1IY5 y3gMpbXw8NobZ8jUNrG31CEAXkNqqGqefcBtVc9VBukpfqn6LJI1qb+EYzKLktyG NFaN4IrxjDarhZgu0TeYyrC0gp0k3gltH9ObWU22oRWfxFMQAJhX+X1wf5Uht4AM ad3Ls2605lD6PjujzqeoP/YYE4+C83AlumpzSOOpiSVhgVH5XZhipMKvdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQGwlJ3BvPNYOm4i0tTAabXIBNjMB8GA1UdIwQY MBaAFOfZz7B47aWBb8gJ6Ywly3GWPnW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wMDBlYTctYzlmNC00ZWJiLWI5YjEt ZmVlZTdjMjlkNGRlLzEvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wMDBlYTctYzlmNC00ZWJiLWI5YjEtZmVlZTdjMjlkNGRl LzEvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZyXKOYm Rdp1zjfbGdzqvhWv3+ACbENC8daGwjBp8LSvX4HgEDAWloppIIgAMIKYXXGbcBCv kc/zKOwlJN68CN0AgogdKCLK+BKTyB0n7CMa2Si+UVs13i6L5VSf2i5DkH/OcqT6 L2Wd7N6N/BrMF5Oj+i+I6NSxZuLTb4ttM0dmKIAEcUB4BAPm1woqiIp9P5yb9YM5 6mSpHI/KexurG7jy6NZvJ1vwrziDGy1UCgEqb8EDSx3t4toXuhC61E/1ZmSSx0md sGEx83HMR2dzGc9WSkWBE5mlB9+QbJQrV1ptcUA1amvhqug4EtBfRHX57+wvrnrx j+/AmnxnLXJNag== -----END CERTIFICATE-----Generated at Wed Dec 17 13:46:09 2025 by rpki-client