This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json) Hash identifier: RhM/y68KPMjus64pcsB3JaJPNh4CkHzah//DzVhX5oI= Subject key identifier: 61:DD:F4:5B:C1:93:78:52:62:F8:5D:71:0F:F3:C9:70:89:58:0B:3F Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45 Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945 Certificate serial: 019B34C5348E4BC5FD69D0DDBD4FA3E20E85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft Manifest number: 0C68 Signing time: Fri 19 Dec 2025 04:01:37 +0000 Manifest this update: Fri 19 Dec 2025 04:01:37 +0000 Manifest next update: Sat 20 Dec 2025 04:01:37 +0000 Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: pbBSP5E3/PVubr4lHduPjJYyl+kj7gyPVEt+tCMoRAo=) 2: s3TIKJMGO-H8fbbN5SX9DjrKZbg.roa (hash: nJZCH4ElBXirrkbsvqmvn6OniRKSBo6O3OjFqSqnuAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:34:8e:4b:c5:fd:69:d0:dd:bd:4f:a3:e2:0e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945 Validity Not Before: Dec 19 04:01:37 2025 GMT Not After : Dec 20 04:01:37 2025 GMT Subject: CN=61ddf45bc193785262f85d710ff3c97089580b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:4d:4a:a2:57:3e:55:fc:48:5a:90:7e:da: ee:73:96:87:00:9e:22:1b:e3:60:52:a4:36:2b:ca: d7:d8:a0:ce:bb:2c:20:c2:c7:fd:85:d7:3f:c3:61: 2f:79:31:a2:10:22:9c:ff:9f:a5:51:fb:ff:d3:df: b0:e4:d1:3d:cd:b7:4d:b5:f5:0f:ee:a5:65:cd:1e: bc:90:d2:6b:5b:15:7a:59:1e:dd:c0:bd:53:c3:48: e8:3e:be:73:c7:d7:48:b0:4a:e3:56:aa:37:37:72: bf:b2:42:a3:16:b2:e9:c1:7f:ab:47:15:80:ee:ae: 01:69:97:d9:4d:11:b8:19:7c:64:80:61:71:34:06: f9:82:58:46:d9:78:f2:c5:60:c8:44:2d:b3:4f:c4: c7:1d:9e:fe:12:9f:8c:2d:b8:55:ce:ea:e4:1c:06: 50:f0:88:21:7c:4c:db:90:cb:c8:7e:da:4a:75:4c: da:fa:19:de:d4:49:10:b0:b7:36:de:7f:bb:71:f6: 38:36:03:d2:21:f4:2b:c2:a0:fe:94:dc:b4:6a:b3: 2c:74:85:16:57:ab:11:a9:57:82:56:17:b4:3d:87: ce:b8:f7:a7:f6:9a:71:52:96:2d:39:1f:22:7d:17: 6d:14:9b:4f:59:89:ef:04:f4:16:0c:5f:41:ba:69: d3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DD:F4:5B:C1:93:78:52:62:F8:5D:71:0F:F3:C9:70:89:58:0B:3F X509v3 Authority Key Identifier: keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5f:76:dd:71:17:63:1c:69:4f:47:14:45:ce:d6:dd:e6:d5: e3:0c:7a:55:78:57:6b:d6:74:2a:dc:c0:ab:93:ae:7f:9c:db: ab:76:30:6c:0e:9c:07:12:0c:fe:91:fe:cd:e0:9f:be:39:cd: 40:98:b7:28:b6:85:9d:ba:99:15:19:29:16:b3:a2:ad:ba:41: 95:92:a3:83:59:d1:95:59:7d:a2:d7:1f:9d:21:99:8a:b9:f3: ab:19:99:49:a6:d3:4a:91:b4:70:05:ae:59:c8:12:70:1f:aa: 14:10:02:64:18:54:7e:2b:cb:e5:0a:c8:31:93:09:0d:92:d3: 6f:ce:ad:8c:bb:2c:55:27:0c:62:fa:c6:f1:0d:eb:96:ff:58: 9c:16:78:90:b7:29:b1:1a:94:27:46:ce:2b:95:22:9a:07:7d: 83:5f:4a:47:5d:13:ae:06:76:4f:2e:28:81:b2:a3:5c:81:65: 88:a7:be:66:88:32:36:08:f8:9d:18:7b:8c:3c:87:da:bf:5c: 9e:84:34:4e:4d:83:92:54:19:ed:cf:54:16:53:0f:9e:a0:d0: 7a:f4:44:cc:63:78:77:37:08:d4:83:c2:f6:ff:ab:b1:df:b6: 64:67:9f:89:52:8b:96:c0:08:1f:06:8d:aa:16:d7:8f:dc:60: 24:01:ef:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xTSOS8X9adDdvU+j4g6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjBmOWY3NTViMGUzMDNjYzE2ZDFhNjMzZjk1OGMwMzYw MzQ5NDUwHhcNMjUxMjE5MDQwMTM3WhcNMjUxMjIwMDQwMTM3WjAzMTEwLwYDVQQD Eyg2MWRkZjQ1YmMxOTM3ODUyNjJmODVkNzEwZmYzYzk3MDg5NTgwYjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R5NSqJXPlX8SFqQftruc5aHAJ4i G+NgUqQ2K8rX2KDOuywgwsf9hdc/w2EveTGiECKc/5+lUfv/09+w5NE9zbdNtfUP 7qVlzR68kNJrWxV6WR7dwL1Tw0joPr5zx9dIsErjVqo3N3K/skKjFrLpwX+rRxWA 7q4BaZfZTRG4GXxkgGFxNAb5glhG2XjyxWDIRC2zT8THHZ7+Ep+MLbhVzurkHAZQ 8IghfEzbkMvIftpKdUza+hne1EkQsLc23n+7cfY4NgPSIfQrwqD+lNy0arMsdIUW V6sRqVeCVhe0PYfOuPen9ppxUpYtOR8ifRdtFJtPWYnvBPQWDF9BumnTSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHd9FvBk3hSYvhdcQ/zyXCJWAs/MB8GA1UdIwQY MBaAFA2w+fdVsOMDzBbRpjP5WMA2A0lFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUt NjRjOWMyY2M5NjA5LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUtNjRjOWMyY2M5NjA5 LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWl923XEX YxxpT0cURc7W3ebV4wx6VXhXa9Z0KtzAq5Ouf5zbq3YwbA6cBxIM/pH+zeCfvjnN QJi3KLaFnbqZFRkpFrOirbpBlZKjg1nRlVl9otcfnSGZirnzqxmZSabTSpG0cAWu WcgScB+qFBACZBhUfivL5QrIMZMJDZLTb86tjLssVScMYvrG8Q3rlv9YnBZ4kLcp sRqUJ0bOK5Uimgd9g19KR10TrgZ2Ty4ogbKjXIFliKe+ZogyNgj4nRh7jDyH2r9c noQ0Tk2DklQZ7c9UFlMPnqDQevREzGN4dzcI1IPC9v+rsd+2ZGefiVKLlsAIHwaN qhbXj9xgJAHv7A== -----END CERTIFICATE-----Generated at Fri Dec 19 13:52:02 2025 by rpki-client