This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft File: dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json) Hash identifier: JTcMY+lrbWIBn+H2EP5G6tJB0uqDIzRW13qeN0FDfOs= Subject key identifier: 3C:16:6F:86:3E:8F:3C:20:C7:26:EB:35:95:DE:44:9E:01:AB:DA:2C Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15 Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215 Certificate serial: 019B11259083EB3539209EDD949C527A78EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft Manifest number: 0B58 Signing time: Fri 12 Dec 2025 06:00:32 +0000 Manifest this update: Fri 12 Dec 2025 06:00:32 +0000 Manifest next update: Sat 13 Dec 2025 06:00:32 +0000 Files and hashes: 1: 7SHjb3To_8zToO1PZkaOAJQ-mzY.roa (hash: aqql1uslZqhQkjcDpj0gs+oDngpuPaF1ypOzLp6Vqak=) 2: K2WTfNgGTgwLI8daJh2SwttMQ5w.roa (hash: kg2DGvsW5/IaD92YzOAMjHp8f1xtHOO7qcNliTfoKss=) 3: Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa (hash: pUR0ufw079uWlFJjSqIiEUz3vris4ZJFN/dXSNPf1bk=) 4: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: g7VY4m7zWl2cIga17mBOFSDHCSnxGGTdKPrBWwEHjJ8=) 5: gYinuUkN5-ijpn1rqGGqGii0p6g.roa (hash: lpzZyTHLuJfHa94o7AaeZ6AmXeDKqlRwU9KcssuE8rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:90:83:eb:35:39:20:9e:dd:94:9c:52:7a:78:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215 Validity Not Before: Dec 12 06:00:32 2025 GMT Not After : Dec 13 06:00:32 2025 GMT Subject: CN=3c166f863e8f3c20c726eb3595de449e01abda2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:f7:8c:f6:c5:3d:12:d5:20:da:ee:24:29: 93:9d:39:27:6d:af:24:c4:6a:89:a2:98:99:81:20: 22:43:93:f4:ba:17:54:73:0b:94:b0:83:ec:ad:4f: fb:9e:05:25:71:67:fa:51:07:82:2c:1b:3c:41:52: 59:49:f3:7a:f5:fa:c2:fe:88:a2:47:f4:0f:d8:28: 41:77:01:40:34:3c:cd:80:0a:50:66:c1:6c:ff:d8: 9e:2f:06:83:ad:b4:ca:b6:b6:01:d1:81:29:58:50: f4:ad:8c:39:49:80:89:6e:e7:53:1d:f4:6a:91:6d: 5d:43:c6:ed:34:c0:24:da:76:74:66:21:aa:c5:af: eb:0f:d2:1d:ab:e2:6e:b3:34:92:f4:c0:9f:4f:6c: 86:a7:e1:46:3c:e2:ee:16:f0:70:47:36:7c:8d:e4: 40:95:b2:19:99:e8:63:43:4c:91:c2:95:bf:0f:35: c8:3a:83:7c:a2:3b:ad:3a:f3:a8:ad:ab:3d:4a:0b: 55:f4:81:a9:43:b7:88:d6:da:5f:17:11:c5:1a:04: b1:87:58:39:e4:b8:54:fc:f6:47:86:c8:00:21:fa: 6d:58:2a:7d:1d:63:f0:b4:50:60:14:66:89:ed:85: 98:d4:74:f3:c6:ef:44:94:9c:ad:b4:23:4f:c0:42: 36:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:16:6F:86:3E:8F:3C:20:C7:26:EB:35:95:DE:44:9E:01:AB:DA:2C X509v3 Authority Key Identifier: keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:c4:96:57:ff:e0:d5:d3:5b:6c:5b:c9:6b:24:7b:6b:6a:23: 1f:aa:ca:c4:42:8e:5e:a9:fa:66:24:17:b9:dd:64:e9:db:94: 0e:bf:01:ba:f0:a3:4b:fc:76:4a:76:20:ad:79:e9:10:e1:df: 57:19:59:ba:ce:18:b0:61:8b:4f:89:4d:8d:37:aa:cd:9b:d2: a8:b2:76:00:48:bc:06:ab:6d:39:24:a5:02:aa:61:0d:93:ff: f7:11:da:a3:ff:a0:2c:49:4d:66:72:e4:bf:84:9b:18:1b:29: d0:d9:0e:37:47:e6:69:68:34:95:7c:0d:11:1e:64:ab:63:bc: ea:ca:2b:2f:fd:0c:24:d8:ec:c5:35:0d:d5:1e:16:97:17:2e: 42:3e:45:5d:5a:de:48:a3:1e:8c:b1:32:16:69:f1:28:8f:87: f2:b5:82:a6:7f:65:3e:26:33:54:84:7a:a6:a5:52:35:57:78: 89:29:6a:07:dc:a7:5a:93:48:00:b8:b8:d6:06:d0:29:7c:e2: 8f:74:de:3e:cc:cd:0d:b8:db:d4:8a:98:bc:db:3b:f0:34:eb: ec:7c:3c:5b:a8:60:a2:66:77:a9:6f:d0:e4:0b:27:ed:0a:55: d3:d9:aa:cd:15:8b:47:00:1f:50:9c:98:21:d8:cd:8a:a9:52: 55:ec:61:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJZCD6zU5IJ7dlJxSenjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Yjc5NTA2NjE1MGExYzM2N2RhYmNjZjY5Yzk3MGFiMGM3 MjMyMTUwHhcNMjUxMjEyMDYwMDMyWhcNMjUxMjEzMDYwMDMyWjAzMTEwLwYDVQQD EygzYzE2NmY4NjNlOGYzYzIwYzcyNmViMzU5NWRlNDQ5ZTAxYWJkYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR73jPbFPRLVINruJCmTnTknba8k xGqJopiZgSAiQ5P0uhdUcwuUsIPsrU/7ngUlcWf6UQeCLBs8QVJZSfN69frC/oii R/QP2ChBdwFANDzNgApQZsFs/9ieLwaDrbTKtrYB0YEpWFD0rYw5SYCJbudTHfRq kW1dQ8btNMAk2nZ0ZiGqxa/rD9Idq+JuszSS9MCfT2yGp+FGPOLuFvBwRzZ8jeRA lbIZmehjQ0yRwpW/DzXIOoN8ojutOvOoras9SgtV9IGpQ7eI1tpfFxHFGgSxh1g5 5LhU/PZHhsgAIfptWCp9HWPwtFBgFGaJ7YWY1HTzxu9ElJyttCNPwEI2SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwWb4Y+jzwgxybrNZXeRJ4Bq9osMB8GA1UdIwQY MBaAFHW3lQZhUKHDZ9q8z2nJcKsMcjIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjct NTQ3YmU0Y2ZhNDU3LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjctNTQ3YmU0Y2ZhNDU3 LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxMSWV//g 1dNbbFvJayR7a2ojH6rKxEKOXqn6ZiQXud1k6duUDr8BuvCjS/x2SnYgrXnpEOHf VxlZus4YsGGLT4lNjTeqzZvSqLJ2AEi8BqttOSSlAqphDZP/9xHao/+gLElNZnLk v4SbGBsp0NkON0fmaWg0lXwNER5kq2O86sorL/0MJNjsxTUN1R4WlxcuQj5FXVre SKMejLEyFmnxKI+H8rWCpn9lPiYzVIR6pqVSNVd4iSlqB9ynWpNIALi41gbQKXzi j3TePszNDbjb1IqYvNs78DTr7Hw8W6hgomZ3qW/Q5Asn7QpV09mqzRWLRwAfUJyY IdjNiqlSVexhJQ== -----END CERTIFICATE-----Generated at Fri Dec 12 09:24:10 2025 by rpki-client