This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft File: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json) Hash identifier: hCjJCHorlsk4HYNoJZrmIUld32pJUpjxVQZ4PvgvdK0= Subject key identifier: 2B:13:FB:B3:50:0B:5A:79:EC:36:1F:5B:4A:A6:D3:BD:08:BE:11:60 Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D Certificate issuer: /CN=d03046d16cfc391b028b88743773ce005cf97b1d Certificate serial: 019B3D90F3F2B41A0677EDAF8B082899C187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 21:01:08 +0000 Manifest this update: Sat 20 Dec 2025 21:01:08 +0000 Manifest next update: Sun 21 Dec 2025 21:01:08 +0000 Files and hashes: 1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: BoB3PGzB3Bk/HUCiD52MS9yONajW48TeOwIShxZBCx4=) 2: 1-ZNTPcQUw8PaedWPij0FjBg6iOY.roa (hash: hVPLICluHooRq9Tlz1cpYKX47tdy3LL3+Q3QLkvNJ5E=) 3: 2Gw8QOnYAv2wXYmUeczArrriB1Q.roa (hash: scuEsz0Czk4jUI1o0fHWA1GaytybLeSIsLRXLL6rVAo=) 4: fXqeDNUF09E57BXRF0QIls-uZ44.roa (hash: hJ/0oVyr/hUhxK31bOGJWQ8EL165OcYQ6RwEzy2jKI8=) 5: uGd2svx2nM-ThRz4Z5ZLS4pryPE.roa (hash: miR6GHPuEFoodfHk/rc71EoG5Q+xZw/Ncoa5ppurE4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:f3:f2:b4:1a:06:77:ed:af:8b:08:28:99:c1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d Validity Not Before: Dec 20 21:01:08 2025 GMT Not After : Dec 21 21:01:08 2025 GMT Subject: CN=2b13fbb3500b5a79ec361f5b4aa6d3bd08be1160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:f2:a1:40:da:a9:3f:aa:08:8a:64:3a:ac: ab:3f:94:57:30:c6:9b:ff:c2:e1:83:fb:be:a8:bd: 4b:c5:78:0a:83:df:c0:86:e8:70:b4:39:42:09:fb: b0:20:ed:98:24:d5:a8:a9:1b:e3:e9:e8:15:9a:29: c1:a9:aa:ac:bf:c4:78:f4:1c:ff:c6:ce:c0:61:a4: ea:13:b6:d3:19:8d:53:e0:15:93:44:1b:ed:aa:89: 14:33:43:02:6e:55:59:4e:d8:72:e2:34:01:33:2c: ab:72:d6:5a:7d:4d:4c:1b:43:8c:6c:8d:f1:07:91: 46:14:5a:2e:4b:15:16:da:1b:49:d5:10:0c:d4:19: db:8e:14:9d:4a:65:9e:cf:b6:2c:39:c1:63:a2:84: 78:13:c5:e1:d7:47:ff:fb:93:c3:7d:9e:52:eb:5b: 10:da:3e:22:f9:e7:3c:14:d4:42:e4:fb:f8:6f:c9: b6:cb:ad:f0:49:f5:a1:db:aa:26:da:1c:da:a7:0c: 8c:06:16:ac:25:6d:3b:df:8c:f8:d4:95:9e:91:31: da:56:64:78:34:7b:16:01:ce:9a:81:57:fc:71:00: ac:fb:3e:d6:6f:98:a2:be:3f:c9:56:69:65:0c:29: 91:fe:45:22:d8:17:a5:33:96:15:66:1d:5c:19:9d: 31:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:13:FB:B3:50:0B:5A:79:EC:36:1F:5B:4A:A6:D3:BD:08:BE:11:60 X509v3 Authority Key Identifier: keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:6e:75:87:e6:66:77:23:61:9a:85:64:0c:5f:43:b1:48:4a: 51:1e:98:f4:3d:21:eb:9d:61:4b:3d:44:af:6e:5c:e7:9a:b1: 70:1f:83:a9:47:9c:ce:a4:03:4b:5b:14:f2:e9:cf:d1:c0:b3: 22:47:22:55:fb:df:ca:be:27:17:0b:48:fd:07:a2:33:88:9d: c9:f4:be:c2:11:0e:b0:48:a1:a1:f6:2c:a8:a7:09:19:b0:85: 8c:cc:f5:29:49:65:cb:36:e5:97:98:2c:71:cc:77:84:69:24: 6b:41:9b:db:1c:3b:42:0f:35:db:28:3f:7e:55:49:da:be:66: f0:f1:0e:4b:51:35:f9:8f:3e:9f:5a:88:41:41:3b:f2:34:f1: 98:7c:0e:21:f1:ab:99:a6:3f:a8:6a:3d:5c:13:1c:f0:be:b5: 9f:8a:5c:35:50:f7:d5:ca:65:83:2b:58:0e:a9:79:ba:b9:f0: 31:94:fe:ad:a4:ff:d5:5b:05:88:07:c2:b5:30:86:07:65:9a: 3e:8b:05:38:58:5b:4e:b2:72:7e:08:7c:ca:a6:69:af:a6:5c: 31:3e:9a:34:25:6d:0f:6d:db:80:bc:e2:46:36:18:13:38:1c: 5f:05:90:4d:64:b4:8e:dd:4c:5b:ad:bf:d6:9f:d4:b0:6c:05: ab:17:c4:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kPPytBoGd+2viwgomcGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMzA0NmQxNmNmYzM5MWIwMjhiODg3NDM3NzNjZTAwNWNm OTdiMWQwHhcNMjUxMjIwMjEwMTA4WhcNMjUxMjIxMjEwMTA4WjAzMTEwLwYDVQQD EygyYjEzZmJiMzUwMGI1YTc5ZWMzNjFmNWI0YWE2ZDNiZDA4YmUxMTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva/yoUDaqT+qCIpkOqyrP5RXMMab /8Lhg/u+qL1LxXgKg9/AhuhwtDlCCfuwIO2YJNWoqRvj6egVminBqaqsv8R49Bz/ xs7AYaTqE7bTGY1T4BWTRBvtqokUM0MCblVZTthy4jQBMyyrctZafU1MG0OMbI3x B5FGFFouSxUW2htJ1RAM1BnbjhSdSmWez7YsOcFjooR4E8Xh10f/+5PDfZ5S61sQ 2j4i+ec8FNRC5Pv4b8m2y63wSfWh26om2hzapwyMBhasJW0734z41JWekTHaVmR4 NHsWAc6agVf8cQCs+z7Wb5iivj/JVmllDCmR/kUi2BelM5YVZh1cGZ0xtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsT+7NQC1p57DYfW0qm070IvhFgMB8GA1UdIwQY MBaAFNAwRtFs/DkbAouIdDdzzgBc+XsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xOGQxMzItOTk1MS00MDU1LWI1YTYt ZGMwZTFhNzI1MjIxLzEvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xOGQxMzItOTk1MS00MDU1LWI1YTYtZGMwZTFhNzI1MjIx LzEvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWG51h+Zm dyNhmoVkDF9DsUhKUR6Y9D0h651hSz1Er25c55qxcB+DqUeczqQDS1sU8unP0cCz IkciVfvfyr4nFwtI/QeiM4idyfS+whEOsEihofYsqKcJGbCFjMz1KUllyzbll5gs ccx3hGkka0Gb2xw7Qg812yg/flVJ2r5m8PEOS1E1+Y8+n1qIQUE78jTxmHwOIfGr maY/qGo9XBMc8L61n4pcNVD31cplgytYDql5urnwMZT+raT/1VsFiAfCtTCGB2Wa PosFOFhbTrJyfgh8yqZpr6ZcMT6aNCVtD23bgLziRjYYEzgcXwWQTWS0jt1MW62/ 1p/UsGwFqxfEYw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:52 2025 by rpki-client