This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft File: dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json) Hash identifier: PxsKYzPQimQtuS9X38trBbJc6CBGMqFXlWZnbUbpFx4= Subject key identifier: 3F:F6:AF:B1:00:4D:6A:C2:B4:B8:CB:9B:E3:68:4D:E9:02:84:C4:50 Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27 Certificate issuer: /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027 Certificate serial: 019B18DFCCC3DC7280BAFD90461D1327AA0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft Manifest number: 0E06 Signing time: Sat 13 Dec 2025 18:01:18 +0000 Manifest this update: Sat 13 Dec 2025 18:01:18 +0000 Manifest next update: Sun 14 Dec 2025 18:01:18 +0000 Files and hashes: 1: dNIjhcgOmJl_uqUY3ufEirea4-I.roa (hash: gkwMMNbP4H2f7PZtpLojDcOWvuhbyLZWIbK4WgzSXOU=) 2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: 15CoXuH8Gn9frtLVlsFWN3r3xpZB5p9Nv5txgqGuxw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:cc:c3:dc:72:80:ba:fd:90:46:1d:13:27:aa:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027 Validity Not Before: Dec 13 18:01:18 2025 GMT Not After : Dec 14 18:01:18 2025 GMT Subject: CN=3ff6afb1004d6ac2b4b8cb9be3684de90284c450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:60:1d:fc:43:a3:d6:30:e9:cf:6b:01:6c: fa:b8:9a:10:3f:ee:13:9f:85:40:29:00:e8:42:ed: 3e:77:ae:6f:57:81:6d:66:6d:9e:16:d3:aa:6e:73: 5b:a9:b9:46:73:df:94:64:7e:21:e8:d4:b5:a9:92: 84:2c:03:31:0c:66:6c:6b:c8:ca:30:f1:61:c6:66: f2:24:4c:dc:1c:eb:3c:2e:35:13:28:86:4e:83:e0: 90:06:8d:4d:1d:27:d8:6c:f3:64:02:7d:73:fd:6d: 54:27:54:6e:d0:44:a5:88:9c:1f:42:f9:92:ba:81: 46:2c:4d:46:33:66:a4:5e:7a:f2:a3:4e:15:02:52: 94:10:00:9b:6f:5c:89:6c:fc:9b:cc:a4:1d:7a:ed: fd:b7:78:0d:24:2a:23:86:64:a8:e4:4f:25:f3:fe: 24:57:b2:bd:b3:59:b4:cf:84:77:36:4a:76:de:cb: ef:f7:01:78:5f:a7:d1:df:25:8f:43:c2:3a:89:61: cb:5e:cf:9e:bf:da:f8:f9:e5:f9:0b:8c:bb:c7:cd: c8:53:97:b9:6c:0d:4e:21:7a:c0:41:bd:f5:ce:ef: d6:7a:4e:6c:11:17:df:0a:ad:55:84:a8:6c:8a:8c: 74:31:41:0f:26:5e:5d:f5:33:81:0d:a2:94:df:28: b0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F6:AF:B1:00:4D:6A:C2:B4:B8:CB:9B:E3:68:4D:E9:02:84:C4:50 X509v3 Authority Key Identifier: keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2c:83:d4:41:de:f2:5c:17:ed:a7:69:f6:c0:2d:01:68:78: 3d:b3:44:9e:4b:48:5a:87:31:29:23:4b:4d:3c:0e:3f:d2:51: f0:2d:e6:2e:5a:1c:bb:ec:ad:fd:84:b5:e4:da:25:53:43:ca: a4:35:23:88:ab:16:f9:6c:24:b5:11:fe:a3:35:39:4a:a0:df: be:30:b5:d3:8d:1e:5a:f3:c9:8d:f8:0e:45:07:82:da:4f:ed: 75:ee:88:23:41:e4:3d:30:07:94:e5:17:67:46:8d:97:60:af: 75:dc:5b:ea:2e:eb:5c:5a:9b:b8:5a:7d:d1:9b:25:cb:51:c8: 26:ce:ec:ef:34:2d:bd:22:3d:56:61:11:8a:49:a6:02:33:45: e7:42:7c:7f:0e:ce:14:21:39:1e:37:5e:1b:d3:8c:42:19:d2: d8:a6:bb:16:75:a4:4e:38:a0:27:43:f1:0f:c5:3b:70:c7:19: af:6e:0a:f7:ee:49:07:ad:2c:d8:23:fb:28:47:8e:c0:7a:fc: bb:51:c5:73:e7:ea:a2:f7:e1:fc:5e:95:53:d8:ed:90:1c:65: 5d:9d:99:19:4b:8d:a6:43:76:70:f7:32:0c:66:78:99:45:77: 26:d1:f0:03:17:e8:18:bc:75:f1:c7:17:bf:1e:46:85:02:29: a1:7c:bd:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY38zD3HKAuv2QRh0TJ6oNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YmJjODlhZDA0MjBkZTdiNWJjMmRkMzJmZWEzYjk3OWZh ZGUwMjcwHhcNMjUxMjEzMTgwMTE4WhcNMjUxMjE0MTgwMTE4WjAzMTEwLwYDVQQD EygzZmY2YWZiMTAwNGQ2YWMyYjRiOGNiOWJlMzY4NGRlOTAyODRjNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5JgHfxDo9Yw6c9rAWz6uJoQP+4T n4VAKQDoQu0+d65vV4FtZm2eFtOqbnNbqblGc9+UZH4h6NS1qZKELAMxDGZsa8jK MPFhxmbyJEzcHOs8LjUTKIZOg+CQBo1NHSfYbPNkAn1z/W1UJ1Ru0ESliJwfQvmS uoFGLE1GM2akXnryo04VAlKUEACbb1yJbPybzKQdeu39t3gNJCojhmSo5E8l8/4k V7K9s1m0z4R3Nkp23svv9wF4X6fR3yWPQ8I6iWHLXs+ev9r4+eX5C4y7x83IU5e5 bA1OIXrAQb31zu/Wek5sERffCq1VhKhsiox0MUEPJl5d9TOBDaKU3yiwVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/2r7EATWrCtLjLm+NoTekChMRQMB8GA1UdIwQY MBaAFHW7yJrQQg3ntbwt0y/qO5efreAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAt MDJmYTIxOGQxNGY4LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAtMDJmYTIxOGQxNGY4 LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCyD1EHe 8lwX7adp9sAtAWh4PbNEnktIWocxKSNLTTwOP9JR8C3mLlocu+yt/YS15NolU0PK pDUjiKsW+WwktRH+ozU5SqDfvjC1040eWvPJjfgORQeC2k/tde6II0HkPTAHlOUX Z0aNl2Cvddxb6i7rXFqbuFp90Zsly1HIJs7s7zQtvSI9VmERikmmAjNF50J8fw7O FCE5HjdeG9OMQhnS2Ka7FnWkTjigJ0PxD8U7cMcZr24K9+5JB60s2CP7KEeOwHr8 u1HFc+fqovfh/F6VU9jtkBxlXZ2ZGUuNpkN2cPcyDGZ4mUV3JtHwAxfoGLx18ccX vx5GhQIpoXy9MA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:13 2025 by rpki-client