This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: 18Y1uY43G0/7q0u1O2+2BrtlQSKp0R3NL7DXdo2tmtk= Subject key identifier: 2B:FB:57:AE:49:1C:07:1A:DB:56:FC:90:C3:07:2B:73:F8:7F:35:41 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019B09359F58A84CD9581AA1C4B0400906E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 113A Signing time: Wed 10 Dec 2025 17:01:07 +0000 Manifest this update: Wed 10 Dec 2025 17:01:07 +0000 Manifest next update: Thu 11 Dec 2025 17:01:07 +0000 Files and hashes: 1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=) 2: 4SJGO0ahyGrj6_wgUycRPIM87rQ.roa (hash: KKyfxNUe79UZQMGD42WojNOLaLKHp+8lyvcAmB4f9dM=) 3: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 4: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 5: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: 8YB8LNSwGDSFU9DaTRHtCijMgsm0j7lt1RROLLPvU8o=) 6: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 7: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 8: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 9: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 10: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 11: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 12: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 13: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:35:9f:58:a8:4c:d9:58:1a:a1:c4:b0:40:09:06:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Dec 10 17:01:07 2025 GMT Not After : Dec 11 17:01:07 2025 GMT Subject: CN=2bfb57ae491c071adb56fc90c3072b73f87f3541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:13:92:45:00:22:88:6e:a4:41:fe:b5:b5:96: 55:1d:d6:45:b5:0d:83:4d:68:74:75:9a:49:bb:f0: 5c:c2:92:9a:05:f1:7c:73:a7:a2:d7:e2:bc:ce:dd: a0:38:00:94:bd:80:2c:95:64:0c:77:3f:67:5e:20: ea:27:72:37:6c:46:6c:03:d2:59:a8:2f:bf:86:7a: 4b:a9:24:c5:34:a0:34:b5:6a:fe:98:84:51:88:de: 89:06:61:49:f2:ba:cb:b7:d8:f5:18:fe:d0:88:07: f2:6d:be:cf:c3:d7:ce:99:00:a0:b1:b5:23:90:b8: 77:2d:40:46:39:cd:ff:5d:ed:27:0d:59:07:83:3e: 74:dc:c4:b3:b0:3b:2b:20:ce:9b:9b:5e:c8:62:f0: e8:9b:61:06:1a:6b:8d:db:c2:0c:85:ab:44:76:5f: 52:9f:15:2b:a0:44:fd:1f:43:31:ca:18:20:1e:96: 0c:a0:a8:af:bf:fd:f5:f8:ff:68:ce:09:af:39:9e: b0:2a:71:be:37:13:75:cb:e0:5a:d8:0c:1f:f0:91: db:fe:52:31:a9:ee:d3:f2:0d:be:f8:75:7c:96:ed: ce:46:95:c1:61:de:34:bf:85:52:d0:c6:1b:d0:5b: 3d:8f:a1:97:48:72:0c:81:5c:5d:65:2c:7a:88:e4: 36:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FB:57:AE:49:1C:07:1A:DB:56:FC:90:C3:07:2B:73:F8:7F:35:41 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:bd:84:5e:a0:1f:c0:f9:81:4e:d0:26:6d:c8:bd:a7:66:bb: e2:9f:39:d5:39:27:12:07:dc:26:ea:7c:ab:23:be:25:9a:6b: ce:05:cb:c2:56:8c:1c:1b:08:e8:fb:08:59:8c:b7:e3:6b:67: 61:ef:7f:be:64:27:44:55:98:60:8f:73:53:0f:5a:f5:9e:64: 0e:47:0c:f3:42:13:24:91:a1:42:cf:75:f1:71:d8:98:4e:90: d4:ec:c4:52:b9:13:65:8d:94:76:ce:58:1e:e6:cc:3b:72:dd: 38:c6:2c:d2:cf:63:7b:29:b7:4b:d6:19:21:9e:df:77:df:a1: 33:19:59:33:0a:86:e6:32:89:80:6c:db:48:4d:eb:dc:0d:1e: c0:6b:9c:c9:60:62:5e:43:54:bd:27:d7:c8:ee:f0:c2:7a:1b: 5d:c1:ae:55:c9:31:71:d0:31:af:22:cc:4b:bf:ef:0d:52:a7: 66:e3:f0:05:32:ef:38:40:34:62:73:94:dc:fd:1e:1c:21:95: 45:52:43:fd:8c:2a:bb:31:73:47:34:93:08:16:02:73:eb:a8: c0:ee:44:b3:3e:78:6a:3a:c5:4d:4f:22:62:85:f0:e2:5d:62: f4:90:64:54:6d:d8:e4:27:f2:bd:2d:db:b5:81:60:35:68:b9: 4e:df:01:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJNZ9YqEzZWBqhxLBACQbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUxMjEwMTcwMTA3WhcNMjUxMjExMTcwMTA3WjAzMTEwLwYDVQQD EygyYmZiNTdhZTQ5MWMwNzFhZGI1NmZjOTBjMzA3MmI3M2Y4N2YzNTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBOSRQAiiG6kQf61tZZVHdZFtQ2D TWh0dZpJu/BcwpKaBfF8c6ei1+K8zt2gOACUvYAslWQMdz9nXiDqJ3I3bEZsA9JZ qC+/hnpLqSTFNKA0tWr+mIRRiN6JBmFJ8rrLt9j1GP7QiAfybb7Pw9fOmQCgsbUj kLh3LUBGOc3/Xe0nDVkHgz503MSzsDsrIM6bm17IYvDom2EGGmuN28IMhatEdl9S nxUroET9H0MxyhggHpYMoKivv/31+P9ozgmvOZ6wKnG+NxN1y+Ba2Awf8JHb/lIx qe7T8g2++HV8lu3ORpXBYd40v4VS0MYb0Fs9j6GXSHIMgVxdZSx6iOQ2+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCv7V65JHAca21b8kMMHK3P4fzVBMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnL2EXqAf wPmBTtAmbci9p2a74p851TknEgfcJup8qyO+JZprzgXLwlaMHBsI6PsIWYy342tn Ye9/vmQnRFWYYI9zUw9a9Z5kDkcM80ITJJGhQs918XHYmE6Q1OzEUrkTZY2Uds5Y HubMO3LdOMYs0s9jeym3S9YZIZ7fd9+hMxlZMwqG5jKJgGzbSE3r3A0ewGucyWBi XkNUvSfXyO7wwnobXcGuVckxcdAxryLMS7/vDVKnZuPwBTLvOEA0YnOU3P0eHCGV RVJD/YwquzFzRzSTCBYCc+uowO5Esz54ajrFTU8iYoXw4l1i9JBkVG3Y5CfyvS3b tYFgNWi5Tt8B1g== -----END CERTIFICATE-----Generated at Wed Dec 10 18:39:19 2025 by rpki-client