This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json) Hash identifier: P791RXvrsynSA1qTk51SdS43yQkx4H2GNyu3InCcbvk= Subject key identifier: 1B:BA:DF:B4:6D:B2:3B:59:7D:8F:EF:83:B8:9C:72:A4:14:5D:2C:28 Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42 Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242 Certificate serial: 019B360DF36C07DBFB0A451ECDD8CE604EC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft Manifest number: 09D2 Signing time: Fri 19 Dec 2025 10:00:42 +0000 Manifest this update: Fri 19 Dec 2025 10:00:42 +0000 Manifest next update: Sat 20 Dec 2025 10:00:42 +0000 Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: 06CRMMQGFSdl0Wx+fe9atrcBkFj6NtIH1nfOXROlymw=) 2: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (hash: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0d:f3:6c:07:db:fb:0a:45:1e:cd:d8:ce:60:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242 Validity Not Before: Dec 19 10:00:42 2025 GMT Not After : Dec 20 10:00:42 2025 GMT Subject: CN=1bbadfb46db23b597d8fef83b89c72a4145d2c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:ae:31:75:02:14:93:e9:58:2b:e7:e4:4d: 3c:52:cc:78:88:18:cf:60:63:a4:ef:bb:0a:78:ea: 28:66:ea:4f:80:a2:39:e7:08:08:de:60:d3:8a:b2: 3d:3f:cb:81:b7:ea:92:52:87:ea:ff:02:0b:28:3b: 97:fd:f6:51:15:78:74:3d:0d:30:4c:35:ab:cf:54: dc:85:9c:f8:c8:27:6a:b3:8f:84:58:b7:f4:d4:06: 37:84:bd:86:9e:51:f3:2b:05:8a:58:d7:dc:cf:a1: f3:76:ae:7b:a0:c5:d2:27:cf:ee:bd:bf:06:84:a4: f6:c7:f5:14:4a:65:2e:fb:07:d0:dc:e8:1a:b4:c1: db:3e:bf:49:15:96:13:29:0a:54:2d:36:7a:2d:51: 43:9e:09:53:24:51:a7:d1:86:9b:7e:9e:62:3f:19: be:7b:01:c6:95:a3:0d:1d:52:90:65:62:1d:3c:90: bd:a7:96:e1:d3:c8:2a:18:53:01:79:71:b7:b0:22: 3f:6a:d2:9a:cf:19:c9:b2:8c:22:b3:cf:b3:3e:92: 11:df:92:ec:94:63:d9:a7:2b:b3:30:0f:af:77:b0: c5:42:ae:52:57:c9:24:17:12:18:cc:5c:96:fd:dc: 09:38:13:22:1c:ff:2c:ab:14:e7:b1:26:5b:1a:14: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BA:DF:B4:6D:B2:3B:59:7D:8F:EF:83:B8:9C:72:A4:14:5D:2C:28 X509v3 Authority Key Identifier: keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c5:df:34:81:f3:7d:1f:29:55:23:c2:b7:73:67:15:ac:24: f0:ab:48:c7:16:76:4b:c2:1e:42:fb:de:79:25:f2:fa:63:10: 63:f6:0c:09:0e:d9:51:f1:eb:cd:9c:e6:61:d2:fc:c0:0d:6a: e1:34:e0:52:73:05:6e:ea:68:86:5d:5f:fa:30:eb:2b:0f:7e: 78:56:7e:9b:78:0f:37:df:75:34:13:d5:5e:69:29:69:02:60: 54:bb:d2:96:63:2e:57:77:01:00:1b:de:af:e8:f8:5d:b5:98: af:35:84:cd:2e:f5:b9:47:72:15:7a:19:ee:73:a6:39:47:e6: f3:36:6a:72:ac:df:d0:9b:56:cf:56:e5:28:7c:0b:c3:13:ec: 31:f0:8d:82:19:17:bb:26:2b:8e:e2:44:1d:be:1a:c8:61:29: bd:f3:21:b7:94:b0:09:90:7a:78:f0:2a:a2:28:9d:ab:76:3c: 3d:a1:49:da:26:bf:fe:a9:e2:35:d5:85:bb:87:c7:27:ec:cd: f7:84:7f:c0:35:29:57:8e:69:63:d7:b2:b7:c3:72:cc:36:80: a7:7b:9e:a6:c6:2e:43:f6:d6:7e:03:04:24:37:8b:7b:e8:00: 39:ec:1f:bd:9c:c1:38:28:08:e7:02:11:cc:a6:39:f9:03:d9: e0:e6:37:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DfNsB9v7CkUezdjOYE7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjZkNDVmZDU2OTIxZDM0NjlkMTljNDc1NzJmMjc1Zjlk NTUyNDIwHhcNMjUxMjE5MTAwMDQyWhcNMjUxMjIwMTAwMDQyWjAzMTEwLwYDVQQD EygxYmJhZGZiNDZkYjIzYjU5N2Q4ZmVmODNiODljNzJhNDE0NWQyYzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsyuMXUCFJPpWCvn5E08Usx4iBjP YGOk77sKeOooZupPgKI55wgI3mDTirI9P8uBt+qSUofq/wILKDuX/fZRFXh0PQ0w TDWrz1TchZz4yCdqs4+EWLf01AY3hL2GnlHzKwWKWNfcz6Hzdq57oMXSJ8/uvb8G hKT2x/UUSmUu+wfQ3OgatMHbPr9JFZYTKQpULTZ6LVFDnglTJFGn0Yabfp5iPxm+ ewHGlaMNHVKQZWIdPJC9p5bh08gqGFMBeXG3sCI/atKazxnJsowis8+zPpIR35Ls lGPZpyuzMA+vd7DFQq5SV8kkFxIYzFyW/dwJOBMiHP8sqxTnsSZbGhSr+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBu637RtsjtZfY/vg7iccqQUXSwoMB8GA1UdIwQY MBaAFA4m1F/VaSHTRp0ZxHVy8nX51VJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQt NjY1YTY5Y2I4OTAwLzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQtNjY1YTY5Y2I4OTAw LzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8XfNIHz fR8pVSPCt3NnFawk8KtIxxZ2S8IeQvveeSXy+mMQY/YMCQ7ZUfHrzZzmYdL8wA1q 4TTgUnMFbupohl1f+jDrKw9+eFZ+m3gPN991NBPVXmkpaQJgVLvSlmMuV3cBABve r+j4XbWYrzWEzS71uUdyFXoZ7nOmOUfm8zZqcqzf0JtWz1blKHwLwxPsMfCNghkX uyYrjuJEHb4ayGEpvfMht5SwCZB6ePAqoiidq3Y8PaFJ2ia//qniNdWFu4fHJ+zN 94R/wDUpV45pY9eyt8NyzDaAp3uepsYuQ/bWfgMEJDeLe+gAOewfvZzBOCgI5wIR zKY5+QPZ4OY3Bw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:28:07 2025 by rpki-client