This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json) Hash identifier: D2ovYsfLpiZZYXXmDZe6WUchqlMa9sJi0DoZELVTT3g= Subject key identifier: 66:45:82:2F:97:B0:76:14:73:84:F8:BF:7E:3F:2B:9F:92:3A:9F:A6 Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf Certificate serial: 019B4626EB13E5F10E5750FD49121046CF4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft Manifest number: 09B6 Signing time: Mon 22 Dec 2025 13:01:54 +0000 Manifest this update: Mon 22 Dec 2025 13:01:54 +0000 Manifest next update: Tue 23 Dec 2025 13:01:54 +0000 Files and hashes: 1: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: Se5i/i2/F50xDzfeiNdWNSAwttySW3VUZNPNU1ihdyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:eb:13:e5:f1:0e:57:50:fd:49:12:10:46:cf:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf Validity Not Before: Dec 22 13:01:54 2025 GMT Not After : Dec 23 13:01:54 2025 GMT Subject: CN=6645822f97b076147384f8bf7e3f2b9f923a9fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:73:87:f1:62:38:7e:f4:7d:23:a6:68:fd: 19:de:a1:3d:d8:26:32:7d:5d:aa:bf:f2:f5:ac:c7: cc:13:65:f6:0c:cb:73:79:30:e5:01:ef:38:07:a5: 03:2d:91:4a:eb:f3:d5:1b:55:6d:fb:22:1a:4d:83: b8:ff:fe:9c:95:d9:ba:12:b5:ee:b1:9d:16:79:d9: 4a:f9:c1:4b:9e:af:fe:6c:96:c3:4f:57:a5:df:b3: ea:ae:6e:14:29:ac:db:50:84:9a:d9:ae:66:1f:3b: 92:d5:58:e1:c5:a4:6f:34:81:3f:e8:38:ac:9e:fa: 15:a4:68:f9:04:8e:d1:bd:6f:0c:c2:16:e4:d1:a4: 18:58:dc:99:c9:87:58:ad:19:59:36:76:8e:94:08: f0:e4:f0:98:9e:87:75:13:a4:48:da:e2:ff:97:69: a6:8e:2c:c2:41:cd:ab:31:a4:79:7d:5f:f2:af:5d: 51:86:3b:fb:dc:ff:8e:4d:85:28:96:04:a8:57:68: 57:73:3d:3b:16:e6:72:2a:74:b1:fd:3c:70:92:80: c9:3f:10:dd:ce:6f:b1:3a:d7:38:d5:b5:2c:ed:cb: 2d:ec:e4:77:33:55:90:0b:e1:10:2f:2f:4b:37:32: d9:c4:46:1d:10:7e:7d:a1:f0:03:90:06:05:d5:8a: 44:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:45:82:2F:97:B0:76:14:73:84:F8:BF:7E:3F:2B:9F:92:3A:9F:A6 X509v3 Authority Key Identifier: keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fe:16:bd:25:c1:19:01:26:a6:76:56:89:a9:a3:3e:f1:00: 9a:5c:f6:55:b5:d5:d5:cf:38:13:0c:00:49:d5:a9:1b:97:cf: c2:1f:d0:08:a8:00:7e:04:89:b7:82:0a:9b:b9:aa:14:46:ec: 7f:47:0e:ac:f7:97:02:03:da:05:c0:51:6b:6d:76:52:c0:a1: 01:25:4e:64:f8:28:3f:99:2a:62:62:bd:4b:b8:c2:da:54:b0: dd:d6:d2:18:0d:1d:68:5c:9c:d0:ac:78:f6:a3:5f:9d:7f:c7: 6a:ef:d1:fe:89:90:0f:1f:19:3d:c1:a0:95:61:23:8b:9f:88: 4f:c0:16:d3:e5:64:59:82:b1:7c:ab:ed:e0:3b:c1:64:34:19: cd:45:72:55:6f:5d:cd:f2:ac:5f:fd:07:a3:12:3f:a6:eb:e7: 10:9e:20:4b:73:8f:3c:17:ff:30:6a:41:4f:be:51:c1:e9:90: 8a:53:51:a9:f8:52:4f:e1:17:ed:06:2f:46:17:50:d7:d6:0d: f0:24:0c:10:ca:93:88:d3:ec:15:7f:bf:e5:fc:fe:54:37:5f: 05:76:7e:10:28:3f:29:ca:8d:c9:72:2e:58:de:f7:15:d9:2c: 0c:09:4e:d7:5e:d5:4a:e8:11:04:48:3f:15:5a:5d:ae:d6:cc: 9c:93:8a:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJusT5fEOV1D9SRIQRs9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YmNkOTFiMWIyZjlhZjRiNzQyMTRhNmQ2NzhjZTA3MTk2 OGUxY2YwHhcNMjUxMjIyMTMwMTU0WhcNMjUxMjIzMTMwMTU0WjAzMTEwLwYDVQQD Eyg2NjQ1ODIyZjk3YjA3NjE0NzM4NGY4YmY3ZTNmMmI5ZjkyM2E5ZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssBzh/FiOH70fSOmaP0Z3qE92CYy fV2qv/L1rMfME2X2DMtzeTDlAe84B6UDLZFK6/PVG1Vt+yIaTYO4//6cldm6ErXu sZ0WedlK+cFLnq/+bJbDT1el37Pqrm4UKazbUISa2a5mHzuS1VjhxaRvNIE/6Dis nvoVpGj5BI7RvW8Mwhbk0aQYWNyZyYdYrRlZNnaOlAjw5PCYnod1E6RI2uL/l2mm jizCQc2rMaR5fV/yr11Rhjv73P+OTYUolgSoV2hXcz07FuZyKnSx/TxwkoDJPxDd zm+xOtc41bUs7cst7OR3M1WQC+EQLy9LNzLZxEYdEH59ofADkAYF1YpE2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZFgi+XsHYUc4T4v34/K5+SOp+mMB8GA1UdIwQY MBaAFHW82RsbL5r0t0IUptZ4zgcZaOHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2Qt MWMwNTc1NTI2OTFlLzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2QtMWMwNTc1NTI2OTFl LzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATv4WvSXB GQEmpnZWiamjPvEAmlz2VbXV1c84EwwASdWpG5fPwh/QCKgAfgSJt4IKm7mqFEbs f0cOrPeXAgPaBcBRa212UsChASVOZPgoP5kqYmK9S7jC2lSw3dbSGA0daFyc0Kx4 9qNfnX/Hau/R/omQDx8ZPcGglWEji5+IT8AW0+VkWYKxfKvt4DvBZDQZzUVyVW9d zfKsX/0HoxI/puvnEJ4gS3OPPBf/MGpBT75RwemQilNRqfhST+EX7QYvRhdQ19YN 8CQMEMqTiNPsFX+/5fz+VDdfBXZ+ECg/KcqNyXIuWN73FdksDAlO117VSugRBEg/ FVpdrtbMnJOKOw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:28:36 2025 by rpki-client