This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft File: dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json) Hash identifier: Nqr/lFqXKupN+sPbPPPOoKIUBnoBkkoy8NWuJVrlGRQ= Subject key identifier: BA:36:2B:68:70:9F:42:9F:1B:A4:D8:9B:B9:44:57:3F:7B:C7:B7:6E Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D Certificate issuer: /CN=75b72215ae3a618305c123142b349df26672a14d Certificate serial: 019B2B1C4219BE8490DF35DEC35E9169EDB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft Manifest number: 0470 Signing time: Wed 17 Dec 2025 07:00:30 +0000 Manifest this update: Wed 17 Dec 2025 07:00:30 +0000 Manifest next update: Thu 18 Dec 2025 07:00:30 +0000 Files and hashes: 1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: Ym1sVlHf1yzriUQuU++WiOecOeEdbPPlwlrJSTX5820=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:42:19:be:84:90:df:35:de:c3:5e:91:69:ed:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b72215ae3a618305c123142b349df26672a14d Validity Not Before: Dec 17 07:00:30 2025 GMT Not After : Dec 18 07:00:30 2025 GMT Subject: CN=ba362b68709f429f1ba4d89bb944573f7bc7b76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7f:8e:b8:dc:d0:4d:56:66:f3:8b:61:3e:49: cc:6d:ab:5e:c6:77:27:b9:33:7f:fe:89:29:cc:15: 3b:f4:fd:b3:69:d2:cf:57:c4:9e:50:e6:2a:85:c2: 32:cb:17:81:49:d8:c8:e0:a7:ac:ea:ad:aa:36:d5: 6c:89:0c:df:72:6f:a6:ad:a8:53:2d:6f:68:6f:fd: bc:b1:16:43:ba:a8:67:d6:12:87:26:33:8d:37:07: eb:a0:b6:ea:af:4b:6a:6b:94:d9:49:e2:99:f1:2b: c2:72:c3:29:95:67:92:92:9c:47:0b:91:f4:48:82: 28:20:bb:4f:c7:6c:d6:11:66:ef:cd:4a:72:e6:ed: 96:ea:40:59:93:75:2c:c1:5d:b2:76:b2:6c:b4:f4: e4:71:61:45:8f:f5:3e:8a:75:6a:d8:d9:3f:fa:c8: 14:49:e3:7f:9f:ee:fd:45:5b:3b:9c:58:9c:42:ca: e5:e7:0e:3a:2a:c1:e7:02:68:09:00:2c:b9:cf:e3: 4d:be:c7:e8:33:35:2a:fa:77:91:d8:8f:19:e3:7a: 09:6a:46:5c:a0:35:54:a5:e0:da:1b:94:30:49:eb: d2:a1:6c:8d:3f:d2:53:7a:cc:0a:33:4b:a6:79:d0: 0a:d1:fc:90:62:d2:23:8d:10:e7:96:2b:2b:e9:e8: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:36:2B:68:70:9F:42:9F:1B:A4:D8:9B:B9:44:57:3F:7B:C7:B7:6E X509v3 Authority Key Identifier: keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e1:a1:3f:1e:67:6b:f4:57:33:ec:1d:7a:38:73:64:89:9e: a2:02:0f:a3:9c:1e:90:10:00:c0:b6:b6:eb:00:9d:a5:5d:2f: a8:ce:90:0b:ce:ef:a8:73:0e:9f:64:81:bd:e1:34:ff:09:5c: 19:98:66:55:73:86:66:16:ce:b3:92:b5:a9:78:81:ca:e7:44: f5:51:b9:6b:61:9d:92:0f:58:e8:68:2b:5b:dc:aa:41:4c:b7: f7:c3:04:0a:71:1d:41:02:a1:79:8d:29:89:c3:c3:20:b6:b6: 2a:9b:66:e8:2d:96:38:c0:03:c9:54:6b:48:a9:d2:5a:40:af: 5f:e5:9b:61:c4:5a:7c:1d:ca:fe:16:33:0a:5e:57:9d:4b:7c: 93:f3:91:38:14:ba:bd:b5:0f:97:23:cd:29:ca:84:25:f2:ba: 08:b1:cc:26:31:a1:9f:11:22:ef:5d:e9:58:fd:7e:52:75:dc: 0a:5f:50:6d:d5:7b:7e:95:ce:da:03:25:d0:30:cb:17:ac:ec: 81:34:33:c8:a8:b1:46:d7:92:52:97:69:ef:3c:b8:f8:b3:4d: ce:85:1f:7a:70:43:c5:c7:a7:5c:39:c9:d1:b8:31:64:fd:f0: e8:0e:b7:76:1f:94:a3:a4:4b:5e:4a:ff:4a:30:d1:ae:ce:29: 39:92:e1:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHEIZvoSQ3zXew16Rae20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YjcyMjE1YWUzYTYxODMwNWMxMjMxNDJiMzQ5ZGYyNjY3 MmExNGQwHhcNMjUxMjE3MDcwMDMwWhcNMjUxMjE4MDcwMDMwWjAzMTEwLwYDVQQD EyhiYTM2MmI2ODcwOWY0MjlmMWJhNGQ4OWJiOTQ0NTczZjdiYzdiNzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH+OuNzQTVZm84thPknMbatexncn uTN//okpzBU79P2zadLPV8SeUOYqhcIyyxeBSdjI4Kes6q2qNtVsiQzfcm+mrahT LW9ob/28sRZDuqhn1hKHJjONNwfroLbqr0tqa5TZSeKZ8SvCcsMplWeSkpxHC5H0 SIIoILtPx2zWEWbvzUpy5u2W6kBZk3UswV2ydrJstPTkcWFFj/U+inVq2Nk/+sgU SeN/n+79RVs7nFicQsrl5w46KsHnAmgJACy5z+NNvsfoMzUq+neR2I8Z43oJakZc oDVUpeDaG5QwSevSoWyNP9JTeswKM0umedAK0fyQYtIjjRDnlisr6eh0BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo2K2hwn0KfG6TYm7lEVz97x7duMB8GA1UdIwQY MBaAFHW3IhWuOmGDBcEjFCs0nfJmcqFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iZWE5ZGItMWI5Mi00NGNiLThmZDMt YmRiZTViN2E3NjgwLzEvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9iZWE5ZGItMWI5Mi00NGNiLThmZDMtYmRiZTViN2E3Njgw LzEvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOGhPx5n a/RXM+wdejhzZImeogIPo5wekBAAwLa26wCdpV0vqM6QC87vqHMOn2SBveE0/wlc GZhmVXOGZhbOs5K1qXiByudE9VG5a2Gdkg9Y6GgrW9yqQUy398MECnEdQQKheY0p icPDILa2Kptm6C2WOMADyVRrSKnSWkCvX+WbYcRafB3K/hYzCl5XnUt8k/OROBS6 vbUPlyPNKcqEJfK6CLHMJjGhnxEi713pWP1+UnXcCl9QbdV7fpXO2gMl0DDLF6zs gTQzyKixRteSUpdp7zy4+LNNzoUfenBDxcenXDnJ0bgxZP3w6A63dh+Uo6RLXkr/ SjDRrs4pOZLhTw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:45:46 2025 by rpki-client