This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft File: DbPDFk09jCZEzymzI2dhpXHuWLo.mft (raw, json) Hash identifier: ZzYiTWsk1k58BXdVcRbvjyt694XdqsbmQIUTqdaIDB4= Subject key identifier: 4A:8A:D5:EA:FE:E3:93:3B:94:1B:E1:B3:E4:6C:C3:B6:6B:77:DB:DA Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba Certificate serial: 019B0E935AB3666ED1B1AF08ADCD2106DF92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft Manifest number: 0D77 Signing time: Thu 11 Dec 2025 18:01:36 +0000 Manifest this update: Thu 11 Dec 2025 18:01:36 +0000 Manifest next update: Fri 12 Dec 2025 18:01:36 +0000 Files and hashes: 1: DbPDFk09jCZEzymzI2dhpXHuWLo.crl (hash: W8yv4VEpRn+kGVAVZLvVFBKvyxaZhwm0n0+yGjE4uFQ=) 2: VCOPnV4kZuweFLb_llPPHRAXNUA.roa (hash: cRLhBmbu/yT6hrLfR7qsKhKnC8knJg7oOO9Ome0I9Gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:5a:b3:66:6e:d1:b1:af:08:ad:cd:21:06:df:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba Validity Not Before: Dec 11 18:01:36 2025 GMT Not After : Dec 12 18:01:36 2025 GMT Subject: CN=4a8ad5eafee3933b941be1b3e46cc3b66b77dbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:66:1f:65:33:0b:44:41:07:85:02:d9:35:19: 29:cd:57:14:52:49:a5:2f:33:fc:14:f2:ce:04:f0: d4:4b:35:26:5f:37:12:cc:6b:89:0c:19:e0:66:a1: 6e:d1:ea:17:ee:fb:56:74:16:02:8a:ec:b4:4a:94: 63:f0:56:e0:28:7b:30:f7:99:ee:cb:a6:96:a0:2a: 6a:96:f1:ef:12:04:dc:bd:ed:7f:ee:c8:d3:03:a3: 7b:5d:58:21:1e:6a:fb:f0:77:4b:91:32:60:91:98: 43:f5:6b:00:9f:a6:00:3d:ed:9b:0c:8b:f5:cd:48: 58:fb:0b:73:10:70:58:f8:ea:22:74:a1:46:ef:06: 2c:8d:d6:46:0e:1e:d2:62:44:33:06:6c:db:5d:54: b1:39:38:30:49:33:49:97:fc:c5:2e:5e:9f:dc:cd: ac:eb:e5:ab:1c:81:35:33:d8:8a:94:30:cc:1a:ad: 1b:1b:0f:b9:7f:1b:47:fa:8d:87:61:a6:86:89:6b: 7e:5c:75:fb:8e:54:8a:70:12:76:72:10:e6:a9:02: 36:f1:2d:61:95:89:2f:d5:bf:cf:0b:3b:01:ff:83: 66:ff:80:a7:45:5b:87:39:64:41:00:e4:6d:36:7f: fd:c2:01:f0:a6:9c:46:90:4f:48:94:03:c4:c1:f3: b5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8A:D5:EA:FE:E3:93:3B:94:1B:E1:B3:E4:6C:C3:B6:6B:77:DB:DA X509v3 Authority Key Identifier: keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:57:9d:ae:b5:8a:36:0e:a1:f1:70:78:b8:43:17:71:41:31: fd:8f:7d:22:f2:06:02:b4:7b:5d:51:ae:3f:c9:a1:0a:4f:ff: cd:bc:9c:48:39:0b:f1:42:72:84:3b:c3:3b:58:1c:37:c8:19: 39:dc:0c:2a:05:77:df:ea:08:9f:03:e0:c9:46:97:d6:da:7b: e3:2f:a8:38:47:1d:d5:6b:4f:10:29:01:16:e4:f6:61:62:d7: ea:a1:f0:6a:3a:a4:e2:c6:a1:fe:6f:ba:eb:dd:89:68:0e:2d: f6:ed:80:bf:77:aa:82:8a:97:5e:e5:3e:82:67:0a:84:c8:3c: 35:15:32:fd:c9:94:62:e9:9d:d3:cb:26:20:eb:52:fb:49:5f: e3:e4:59:dc:fb:30:7e:5b:2f:77:27:33:ee:78:33:df:18:4d: a7:9f:a9:bb:7d:44:e7:ee:63:9f:51:ed:73:31:ba:c3:1b:01: 33:38:e8:89:91:6c:27:63:52:2d:6c:b8:38:f7:79:f1:4f:87: af:20:f1:65:67:2f:3d:57:3f:bb:e8:3e:4c:b0:fe:28:db:0d: 08:a4:25:1b:78:5d:22:0d:02:90:f7:f5:c1:ae:05:17:19:18: 89:27:bf:42:2c:d1:fc:2e:8b:42:a0:b7:f3:1a:97:c2:0b:07: c1:e2:82:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk1qzZm7Rsa8Irc0hBt+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjNjMzE2NGQzZDhjMjY0NGNmMjliMzIzNjc2MWE1NzFl ZTU4YmEwHhcNMjUxMjExMTgwMTM2WhcNMjUxMjEyMTgwMTM2WjAzMTEwLwYDVQQD Eyg0YThhZDVlYWZlZTM5MzNiOTQxYmUxYjNlNDZjYzNiNjZiNzdkYmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWYfZTMLREEHhQLZNRkpzVcUUkml LzP8FPLOBPDUSzUmXzcSzGuJDBngZqFu0eoX7vtWdBYCiuy0SpRj8FbgKHsw95nu y6aWoCpqlvHvEgTcve1/7sjTA6N7XVghHmr78HdLkTJgkZhD9WsAn6YAPe2bDIv1 zUhY+wtzEHBY+OoidKFG7wYsjdZGDh7SYkQzBmzbXVSxOTgwSTNJl/zFLl6f3M2s 6+WrHIE1M9iKlDDMGq0bGw+5fxtH+o2HYaaGiWt+XHX7jlSKcBJ2chDmqQI28S1h lYkv1b/PCzsB/4Nm/4CnRVuHOWRBAORtNn/9wgHwppxGkE9IlAPEwfO16wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqK1er+45M7lBvhs+Rsw7Zrd9vaMB8GA1UdIwQY MBaAFA2zwxZNPYwmRM8psyNnYaVx7li6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82Y2QzNjYtMzU1Ny00MmIyLTg4NWIt M2Q0NjQzOWFhNDFjLzEvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi82Y2QzNjYtMzU1Ny00MmIyLTg4NWItM2Q0NjQzOWFhNDFj LzEvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVedrrWK Ng6h8XB4uEMXcUEx/Y99IvIGArR7XVGuP8mhCk//zbycSDkL8UJyhDvDO1gcN8gZ OdwMKgV33+oInwPgyUaX1tp74y+oOEcd1WtPECkBFuT2YWLX6qHwajqk4sah/m+6 692JaA4t9u2Av3eqgoqXXuU+gmcKhMg8NRUy/cmUYumd08smIOtS+0lf4+RZ3Psw flsvdycz7ngz3xhNp5+pu31E5+5jn1HtczG6wxsBMzjoiZFsJ2NSLWy4OPd58U+H ryDxZWcvPVc/u+g+TLD+KNsNCKQlG3hdIg0CkPf1wa4FFxkYiSe/QizR/C6LQqC3 8xqXwgsHweKCLQ== -----END CERTIFICATE-----Generated at Fri Dec 12 03:05:59 2025 by rpki-client