This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json) Hash identifier: x3q3MLw08j64OQ6jIcey63DoB0ldj3kWdIrHuJoyh20= Subject key identifier: AA:5F:9D:84:17:87:63:5C:5B:2F:AC:F6:06:B5:72:BC:17:6F:B9:C9 Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0 Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0 Certificate serial: 019B59769434B4B2C2F699913E1036799350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 07:01:41 +0000 Manifest this update: Fri 26 Dec 2025 07:01:41 +0000 Manifest next update: Sat 27 Dec 2025 07:01:41 +0000 Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: 9sRJknsbcgZ6CgTY/8g6Zvvzg3CpC3l9gb0ed2/fM20=) 2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:94:34:b4:b2:c2:f6:99:91:3e:10:36:79:93:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0 Validity Not Before: Dec 26 07:01:41 2025 GMT Not After : Dec 27 07:01:41 2025 GMT Subject: CN=aa5f9d841787635c5b2facf606b572bc176fb9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a2:79:d9:32:b6:d1:55:7e:40:d8:99:1f:9e: b4:6b:c6:ad:ca:01:ea:b3:2f:80:6e:9e:5b:74:32: 78:9e:94:46:fb:8a:d9:ff:7b:c6:09:5a:2b:a7:4a: b6:ec:17:24:41:48:0a:0b:8b:e8:3c:71:45:fd:1f: 13:67:85:22:16:33:9e:2b:ac:76:af:4c:96:3d:02: ea:2c:10:7a:7a:ab:fc:26:d9:37:20:50:25:db:b1: 6d:b1:25:95:55:fb:7e:2b:52:6d:e0:0c:bf:67:93: 74:f7:12:64:cd:57:78:c5:eb:88:ab:1e:d9:6b:45: af:83:0c:7a:27:6c:ee:62:1c:9b:74:f9:79:40:9a: 4c:84:91:81:ae:0a:1c:81:59:ef:cc:b1:a0:1a:88: 46:9c:c7:bc:9c:d6:48:8e:98:f9:d7:37:f2:d3:49: df:b6:04:35:ab:11:73:b4:d2:4f:01:ee:94:e9:e9: 02:86:af:4c:1b:35:99:e1:b6:be:2d:26:7b:c4:b8: 85:3d:65:8f:47:8b:58:c6:86:9f:ff:10:3f:7f:a3: 24:c7:83:13:b5:66:43:db:cf:50:12:b0:9b:0f:8a: 9e:3b:7b:46:b5:26:c7:c2:e0:1d:2c:5c:37:41:4c: d0:e0:83:ed:13:44:b2:e3:f3:2f:0f:ba:b4:0e:ec: 8b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5F:9D:84:17:87:63:5C:5B:2F:AC:F6:06:B5:72:BC:17:6F:B9:C9 X509v3 Authority Key Identifier: keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:13:d4:d7:91:d9:fe:58:ea:55:e2:36:f7:b0:f9:92:db:44: bf:32:24:ff:b0:ff:fe:65:df:d4:8a:1b:e6:e9:bc:b8:9b:f6: d7:3c:e6:54:e2:55:d1:49:5e:a3:01:51:95:70:92:5f:fc:b6: 51:50:09:58:98:10:af:f2:ee:19:5f:d7:d4:96:3f:b4:ca:26: 97:57:9d:b1:ee:da:15:ab:7d:70:5a:d6:f7:fb:7b:a2:f7:47: fe:70:4f:80:96:7d:36:03:49:a1:20:26:83:ef:66:15:a8:69: d6:7c:9e:7c:34:90:bc:f3:71:5f:af:11:e7:21:e1:c5:3f:66: c3:c3:d2:16:80:8b:91:09:f9:9b:4c:eb:97:70:6a:b9:7b:7b: b1:32:aa:f8:06:37:74:f9:61:e4:34:f8:1d:a1:31:1e:94:ec: 64:3b:71:cc:14:5a:01:b1:17:9e:13:7e:31:7f:30:d6:32:bb: f5:75:5d:e6:ea:f9:d2:f8:62:da:29:91:f9:3b:ce:7d:be:f9: 66:d1:fa:59:a5:3e:83:e7:a5:39:1c:92:ca:16:bb:62:03:11: 07:d9:87:d2:df:fb:91:bd:8e:86:71:6f:7c:4b:92:7e:01:25: 2f:82:b7:84:ed:3f:da:cf:0a:80:fe:05:1c:2c:cd:b6:47:1c: 09:e0:b4:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdpQ0tLLC9pmRPhA2eZNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjQ5MTIyZDllOWJiYWZhNTc3ZjY0NDdmMjFiOGJlYzc2 YzA1ZjAwHhcNMjUxMjI2MDcwMTQxWhcNMjUxMjI3MDcwMTQxWjAzMTEwLwYDVQQD EyhhYTVmOWQ4NDE3ODc2MzVjNWIyZmFjZjYwNmI1NzJiYzE3NmZiOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aJ52TK20VV+QNiZH560a8atygHq sy+Abp5bdDJ4npRG+4rZ/3vGCVorp0q27BckQUgKC4voPHFF/R8TZ4UiFjOeK6x2 r0yWPQLqLBB6eqv8Jtk3IFAl27FtsSWVVft+K1Jt4Ay/Z5N09xJkzVd4xeuIqx7Z a0Wvgwx6J2zuYhybdPl5QJpMhJGBrgocgVnvzLGgGohGnMe8nNZIjpj51zfy00nf tgQ1qxFztNJPAe6U6ekChq9MGzWZ4ba+LSZ7xLiFPWWPR4tYxoaf/xA/f6Mkx4MT tWZD289QErCbD4qeO3tGtSbHwuAdLFw3QUzQ4IPtE0Sy4/MvD7q0DuyLwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpfnYQXh2NcWy+s9ga1crwXb7nJMB8GA1UdIwQY MBaAFA20kSLZ6buvpXf2RH8huL7HbAXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2Et MTQ2MDBkNTc4MDhhLzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2EtMTQ2MDBkNTc4MDhh LzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBPU15HZ /ljqVeI297D5kttEvzIk/7D//mXf1Iob5um8uJv21zzmVOJV0UleowFRlXCSX/y2 UVAJWJgQr/LuGV/X1JY/tMoml1edse7aFat9cFrW9/t7ovdH/nBPgJZ9NgNJoSAm g+9mFahp1nyefDSQvPNxX68R5yHhxT9mw8PSFoCLkQn5m0zrl3BquXt7sTKq+AY3 dPlh5DT4HaExHpTsZDtxzBRaAbEXnhN+MX8w1jK79XVd5ur50vhi2imR+TvOfb75 ZtH6WaU+g+elORySyha7YgMRB9mH0t/7kb2OhnFvfEuSfgElL4K3hO0/2s8KgP4F HCzNtkccCeC0Xg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:04 2025 by rpki-client