This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json) Hash identifier: QvTDxV6K48ZIEnR4BnUQZEuARVC7ek3a2OF5ipHyCLI= Subject key identifier: 94:7E:73:0B:79:FC:AF:A0:37:C5:27:92:83:62:4C:55:77:22:AF:75 Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a Certificate serial: 019B19BCC4B5D6A6F2A5939D981DAE9484AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft Manifest number: 0BC6 Signing time: Sat 13 Dec 2025 22:02:40 +0000 Manifest this update: Sat 13 Dec 2025 22:02:40 +0000 Manifest next update: Sun 14 Dec 2025 22:02:40 +0000 Files and hashes: 1: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=) 2: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: Lpr4Mb2sdiYHhHg7uJDpPJkD+QBkKz9YO4sER/OZKlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:c4:b5:d6:a6:f2:a5:93:9d:98:1d:ae:94:84:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a Validity Not Before: Dec 13 22:02:40 2025 GMT Not After : Dec 14 22:02:40 2025 GMT Subject: CN=947e730b79fcafa037c5279283624c557722af75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:91:9a:bf:67:c8:60:18:f8:3a:de:0d:62:b8: 09:e7:68:c2:a9:ef:e4:4a:b1:31:27:66:93:ae:92: d6:60:5f:62:42:be:ee:53:51:1c:63:96:09:8e:f1: 20:5e:f9:c2:92:8a:e3:80:b2:07:c8:fa:6c:b4:d7: 09:23:9b:1d:39:59:58:52:77:8e:b1:33:d8:00:52: 7b:ef:3a:52:e3:d2:c3:f8:35:7b:b5:d6:75:83:10: 31:ed:b5:05:01:ca:d9:84:0a:dc:c3:3f:9a:94:1c: 95:4e:f1:4a:98:9a:93:e9:5e:60:5c:8c:b3:b5:a2: 8e:28:c9:38:0a:43:bb:fe:3e:3a:b9:16:93:88:b2: 63:33:b1:23:da:f1:7e:7f:5b:ba:e6:68:af:1b:05: ba:0b:51:ee:90:a3:d8:78:42:ed:d0:c7:ed:11:ab: cc:01:02:70:e9:a9:6f:70:d1:71:ed:c3:67:9d:93: 53:2c:1b:23:94:57:05:f2:f6:2f:a2:93:33:e0:a2: 89:17:d9:69:57:f4:9c:1c:38:44:2a:94:87:4b:7a: 80:87:a3:c5:f3:3b:74:ec:1b:12:ba:48:3e:89:fe: c7:da:14:86:a7:42:ec:49:6f:5f:e1:d5:c6:aa:f6: d5:8a:8c:eb:8b:6d:84:5a:d2:25:b5:a1:8d:36:0d: 2b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7E:73:0B:79:FC:AF:A0:37:C5:27:92:83:62:4C:55:77:22:AF:75 X509v3 Authority Key Identifier: keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:90:70:93:0d:65:3d:6f:33:7e:78:cd:f3:86:dc:8d:8a:35: 18:0e:aa:d6:69:f8:1b:cc:7f:9f:0c:50:9f:b6:71:0f:68:ff: 26:e3:7e:66:16:93:c0:f8:a4:ef:ce:4c:2a:b7:26:df:66:5e: c7:9a:ed:44:a6:4b:8c:ec:56:11:9e:91:c7:69:8c:c1:36:f4: e2:4b:c0:5b:0a:02:57:f0:93:bf:b1:44:af:0e:0c:be:dd:20: bc:36:0e:72:be:3b:bb:80:cf:dc:3c:69:7a:7e:ce:34:24:7f: 3c:2d:2b:e3:9d:f3:e5:53:43:75:59:24:b9:a8:50:c9:d5:55: 33:61:2c:e7:4d:f7:85:ef:ea:a2:36:22:8a:9c:4e:44:87:60: 25:92:a6:3d:0b:b9:75:72:66:02:2a:ae:06:07:e0:f6:b9:5b: 1a:ae:59:f9:d1:74:c0:15:e8:da:0c:83:5e:fd:af:0f:10:ec: 47:c4:c3:13:b8:d7:43:92:6f:f0:f4:50:92:12:0e:a5:96:af: b8:88:ed:1d:cb:3f:ff:31:bf:29:78:45:25:a3:d5:29:95:e5: 21:38:90:52:de:4c:c1:61:ef:bc:bf:02:04:75:44:5c:74:a4: af:9c:30:04:9f:85:7f:ac:62:92:e1:df:c4:60:51:2a:17:b5: 77:6c:42:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvMS11qbypZOdmB2ulISuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0 MDA0NGEwHhcNMjUxMjEzMjIwMjQwWhcNMjUxMjE0MjIwMjQwWjAzMTEwLwYDVQQD Eyg5NDdlNzMwYjc5ZmNhZmEwMzdjNTI3OTI4MzYyNGM1NTc3MjJhZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5Gav2fIYBj4Ot4NYrgJ52jCqe/k SrExJ2aTrpLWYF9iQr7uU1EcY5YJjvEgXvnCkorjgLIHyPpstNcJI5sdOVlYUneO sTPYAFJ77zpS49LD+DV7tdZ1gxAx7bUFAcrZhArcwz+alByVTvFKmJqT6V5gXIyz taKOKMk4CkO7/j46uRaTiLJjM7Ej2vF+f1u65mivGwW6C1HukKPYeELt0MftEavM AQJw6alvcNFx7cNnnZNTLBsjlFcF8vYvopMz4KKJF9lpV/ScHDhEKpSHS3qAh6PF 8zt07BsSukg+if7H2hSGp0LsSW9f4dXGqvbViozri22EWtIltaGNNg0r+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJR+cwt5/K+gN8UnkoNiTFV3Iq91MB8GA1UdIwQY MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5Bwkw1l PW8zfnjN84bcjYo1GA6q1mn4G8x/nwxQn7ZxD2j/JuN+ZhaTwPik785MKrcm32Ze x5rtRKZLjOxWEZ6Rx2mMwTb04kvAWwoCV/CTv7FErw4Mvt0gvDYOcr47u4DP3Dxp en7ONCR/PC0r453z5VNDdVkkuahQydVVM2Es5033he/qojYiipxORIdgJZKmPQu5 dXJmAiquBgfg9rlbGq5Z+dF0wBXo2gyDXv2vDxDsR8TDE7jXQ5Jv8PRQkhIOpZav uIjtHcs//zG/KXhFJaPVKZXlITiQUt5MwWHvvL8CBHVEXHSkr5wwBJ+Ff6xikuHf xGBRKhe1d2xCww== -----END CERTIFICATE-----Generated at Sun Dec 14 05:13:53 2025 by rpki-client