This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft File: debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json) Hash identifier: ys4XhPCSi++iJsW23i9RlMR37PUjpu/xIbk9FXJ6R3U= Subject key identifier: 78:A9:0E:4F:4D:D8:CD:DD:DE:1F:AA:DF:60:6F:6F:86:F9:85:46:D9 Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35 Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335 Certificate serial: 019B59E37F427D74290B2829ECF07EC862A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 09:00:39 +0000 Manifest this update: Fri 26 Dec 2025 09:00:39 +0000 Manifest next update: Sat 27 Dec 2025 09:00:39 +0000 Files and hashes: 1: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (hash: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=) 2: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: 1W1x9vD17hRYdEjvMsgwPIAKzxj0dfGuhYRhOKZnLgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:7f:42:7d:74:29:0b:28:29:ec:f0:7e:c8:62:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335 Validity Not Before: Dec 26 09:00:39 2025 GMT Not After : Dec 27 09:00:39 2025 GMT Subject: CN=78a90e4f4dd8cdddde1faadf606f6f86f98546d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:47:25:50:f1:fe:98:ec:cb:04:22:de:f9: e0:00:bd:5f:9c:be:44:a8:7e:f3:81:9b:01:a4:00: f4:9e:1f:21:df:b9:12:09:fd:21:2f:54:d0:3c:68: cd:3b:0e:79:cc:fd:26:88:40:96:57:19:4b:8f:5c: 77:98:67:3a:cb:61:93:fc:06:15:6c:5e:7f:c8:7d: 88:07:4d:4e:51:f3:b6:27:04:53:70:83:16:1a:fc: ad:0d:1b:7e:da:2d:d8:34:df:85:02:77:8f:16:ef: 3f:aa:13:fa:ac:2f:bf:bf:ec:1f:3b:32:8a:30:9f: cc:c8:e2:94:95:b4:99:aa:cb:1b:9a:3c:c5:d6:8f: 40:fe:54:b2:61:57:b6:de:72:8b:cd:9d:8e:77:e8: 18:b8:6f:1c:27:bc:56:f7:4e:97:0c:c1:f4:61:79: 81:8d:4f:ef:86:28:1b:ac:a8:bf:88:37:61:64:9c: eb:8b:7d:6d:22:47:b7:9e:f6:12:ad:28:ec:8e:ca: d0:7d:db:66:4c:67:d5:81:25:53:1c:15:5e:85:01: fc:ce:6f:44:6e:7f:ab:69:d6:21:f8:a2:f8:e1:57: 4a:ce:9b:04:2b:ff:4a:c4:33:7c:51:ff:be:49:ba: e2:8e:57:19:84:1a:2d:0a:59:6b:02:80:98:21:28: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A9:0E:4F:4D:D8:CD:DD:DE:1F:AA:DF:60:6F:6F:86:F9:85:46:D9 X509v3 Authority Key Identifier: keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:fa:d6:d1:ae:3e:5d:7e:14:41:fd:18:65:fd:40:6b:b3:96: e7:ca:5e:54:c2:66:aa:3c:56:a6:98:df:c2:d0:28:34:a7:ef: 63:a2:3e:a5:83:8f:df:2b:d2:83:15:b5:5c:6c:6e:18:80:50: 7c:bc:cd:9a:6c:48:98:9a:cc:71:8a:c9:a4:2a:2d:1f:cf:1d: 2b:40:f3:1d:a3:d3:0e:62:de:e3:69:59:e8:46:fb:e3:d1:a1: 06:c1:2d:00:68:02:e3:0a:e3:66:9a:d7:c6:26:60:4a:63:25: 2d:92:a7:a3:02:76:fd:a5:9a:94:36:a0:3a:40:a7:9d:eb:e1: 53:03:f4:8d:bc:d9:c9:0a:49:e8:68:ec:08:a6:6c:7d:89:e8: 1d:69:a2:da:58:9e:55:1c:10:47:09:ae:e7:f3:04:81:a6:51: 93:cd:6c:ea:1e:06:24:0b:69:a1:75:57:4f:83:83:47:08:66: d4:67:1a:3c:42:b0:55:a9:05:ff:9f:20:1d:a2:ec:2b:c4:a8: b0:0c:d2:94:69:ce:cd:fd:ea:2f:12:92:f1:cf:c0:73:07:a9: 63:6a:00:20:19:83:5e:e2:80:d4:3a:45:36:b0:63:3c:36:60: 6c:43:82:09:1c:de:29:e7:72:e6:18:2a:42:f4:ac:97:1a:7e: 5a:2b:35:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ439CfXQpCygp7PB+yGKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZTZlMjEyYzYzNzQxYjg1Yjk1N2M3Yzk3ZjdjNThmNWI1 ZTEzMzUwHhcNMjUxMjI2MDkwMDM5WhcNMjUxMjI3MDkwMDM5WjAzMTEwLwYDVQQD Eyg3OGE5MGU0ZjRkZDhjZGRkZGUxZmFhZGY2MDZmNmY4NmY5ODU0NmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPBHJVDx/pjsywQi3vngAL1fnL5E qH7zgZsBpAD0nh8h37kSCf0hL1TQPGjNOw55zP0miECWVxlLj1x3mGc6y2GT/AYV bF5/yH2IB01OUfO2JwRTcIMWGvytDRt+2i3YNN+FAnePFu8/qhP6rC+/v+wfOzKK MJ/MyOKUlbSZqssbmjzF1o9A/lSyYVe23nKLzZ2Od+gYuG8cJ7xW906XDMH0YXmB jU/vhigbrKi/iDdhZJzri31tIke3nvYSrSjsjsrQfdtmTGfVgSVTHBVehQH8zm9E bn+radYh+KL44VdKzpsEK/9KxDN8Uf++SbrijlcZhBotCllrAoCYISh3cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHipDk9N2M3d3h+q32Bvb4b5hUbZMB8GA1UdIwQY MBaAFHXm4hLGN0G4W5V8fJf3xY9bXhM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzct MDNkNzQ2MWViNThhLzEvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzctMDNkNzQ2MWViNThh LzEvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvrW0a4+ XX4UQf0YZf1Aa7OW58peVMJmqjxWppjfwtAoNKfvY6I+pYOP3yvSgxW1XGxuGIBQ fLzNmmxImJrMcYrJpCotH88dK0DzHaPTDmLe42lZ6Eb749GhBsEtAGgC4wrjZprX xiZgSmMlLZKnowJ2/aWalDagOkCnnevhUwP0jbzZyQpJ6GjsCKZsfYnoHWmi2lie VRwQRwmu5/MEgaZRk81s6h4GJAtpoXVXT4ODRwhm1GcaPEKwVakF/58gHaLsK8So sAzSlGnOzf3qLxKS8c/AcwepY2oAIBmDXuKA1DpFNrBjPDZgbEOCCRzeKedy5hgq QvSslxp+Wis1iA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:42 2025 by rpki-client