This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft File: 59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json) Hash identifier: cplivc7zsJlYwK/B7y1NqMbiNZv2vaA7mW7v5o+HnX4= Subject key identifier: E9:63:19:8F:8A:F5:23:15:FA:28:F7:50:00:8E:C8:B2:72:D2:4D:4D Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7 Certificate issuer: /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7 Certificate serial: 019B1080C9A79B8B198F55C5E4FCDC077800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft Manifest number: 128F Signing time: Fri 12 Dec 2025 03:00:34 +0000 Manifest this update: Fri 12 Dec 2025 03:00:34 +0000 Manifest next update: Sat 13 Dec 2025 03:00:34 +0000 Files and hashes: 1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: 1dLg7KClaMNGKeMRwBM07MUauP9zUA5djk9q4WAh7gQ=) 2: doaBFCoAi9PMEGjDVkL2tXpIeqk.roa (hash: Z98ogMYuCRCB/EUQ20sK/eyL2P/vgOy7W+oSu1U5VEE=) 3: uRo2bMOeIiH8StyfjDXOPHZmCRc.roa (hash: /c4Qcmm44bZ40YwEJJpcK2loOF7YWT9F41wjJC1v0Vc=) 4: xOWUW0bOewUorU3PuzR6cnv41Ec.roa (hash: z/ye3u1sqtlYcBf/GAFPNRmAn23AockZVnADhLIPFmU=) 5: ygDMNPZB6ioJh9v1SV5ZJ0aINDg.roa (hash: 0bPn18ewCwFlle0D4D1zaFp/YvFhdd8pfg8oWQqwtM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:80:c9:a7:9b:8b:19:8f:55:c5:e4:fc:dc:07:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7 Validity Not Before: Dec 12 03:00:34 2025 GMT Not After : Dec 13 03:00:34 2025 GMT Subject: CN=e963198f8af52315fa28f750008ec8b272d24d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:02:45:15:e9:ad:f0:3a:f1:8e:34:98:1b:f7: 10:7f:47:c2:63:69:1d:c5:4e:78:2f:60:fe:a0:b9: 1d:27:39:3a:a6:24:44:f5:68:71:34:f8:7b:6d:30: 42:0d:fb:2e:70:ee:47:2a:1a:8f:4e:4c:7b:d7:c5: 92:f0:33:da:51:0f:aa:34:ea:fd:79:04:26:a3:0d: 12:26:89:3d:25:3f:7d:f5:26:fb:68:b8:b0:85:7a: 57:94:43:e3:5b:45:ff:ac:3c:f2:50:17:9a:15:ad: 07:27:80:65:02:b5:fb:94:72:f6:18:03:fc:f6:3d: 48:35:96:d1:c4:ad:b4:ed:99:13:f4:f9:27:13:03: 76:77:06:c8:b7:a3:c4:ce:3c:cd:d5:d6:13:7c:15: e4:5f:bb:45:85:b4:02:0c:10:20:9b:f3:10:02:19: b0:8b:77:40:39:14:54:17:14:5c:4b:2c:8d:6e:4a: e1:d9:ef:42:3a:1a:86:ce:c0:54:88:cd:f1:03:b1: 07:a2:f2:04:36:85:f4:a2:4d:d3:80:c9:26:64:fa: 9f:31:05:c9:75:9e:3b:52:89:43:0b:b0:53:2b:0d: 4c:e7:fd:d2:19:e0:62:14:37:8f:17:02:4f:b4:ca: b1:e8:be:e7:29:b0:75:fb:52:1e:8c:47:95:41:01: f6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:63:19:8F:8A:F5:23:15:FA:28:F7:50:00:8E:C8:B2:72:D2:4D:4D X509v3 Authority Key Identifier: keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:95:47:5d:50:4e:db:a2:3d:4b:b6:3c:5d:ec:91:a6:62:ef: c3:9c:d3:ee:20:9e:62:3a:16:95:09:39:1f:95:07:41:c0:4c: e4:89:89:0e:56:13:bb:12:e4:7b:50:99:71:5c:8d:08:e3:64: f7:62:23:1b:d5:65:5a:04:68:05:ba:88:0a:59:78:2b:8b:08: 7d:17:b9:c6:c6:67:76:7c:c9:30:a7:da:39:f2:f7:1d:58:02: 2b:d1:40:93:a3:33:d7:da:e9:b7:bf:e1:22:b8:e2:dc:f7:1a: b6:e2:1b:ad:cd:43:8b:01:bf:39:20:38:81:3c:8e:e8:17:79: 61:a5:bd:c0:17:bd:15:7f:21:69:cd:30:36:e3:23:68:82:8c: b9:94:62:87:41:a1:78:57:78:61:f1:28:a2:06:f4:ad:2c:71: 9c:65:d1:1a:9e:bf:67:4b:a0:e8:8d:ca:86:b5:95:d2:bc:50: 9e:7c:c6:20:31:0e:11:c0:7e:19:c2:95:21:40:3b:93:c0:60: d3:c6:13:93:57:4e:57:bc:4c:31:81:b2:47:65:91:55:d6:3f: 78:46:d6:33:ff:f2:11:d8:d8:63:d5:e4:03:09:73:76:08:25: 39:92:ad:11:74:7c:b3:4a:83:16:dd:76:ca:d5:36:41:0c:73: 24:6b:76:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgMmnm4sZj1XF5PzcB3gAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDljZmIwNzhlZGE1ODE2ZmM4MDllOThjMjVjYjcxOTYz ZTc1YjcwHhcNMjUxMjEyMDMwMDM0WhcNMjUxMjEzMDMwMDM0WjAzMTEwLwYDVQQD EyhlOTYzMTk4ZjhhZjUyMzE1ZmEyOGY3NTAwMDhlYzhiMjcyZDI0ZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gJFFemt8DrxjjSYG/cQf0fCY2kd xU54L2D+oLkdJzk6piRE9WhxNPh7bTBCDfsucO5HKhqPTkx718WS8DPaUQ+qNOr9 eQQmow0SJok9JT999Sb7aLiwhXpXlEPjW0X/rDzyUBeaFa0HJ4BlArX7lHL2GAP8 9j1INZbRxK207ZkT9PknEwN2dwbIt6PEzjzN1dYTfBXkX7tFhbQCDBAgm/MQAhmw i3dAORRUFxRcSyyNbkrh2e9COhqGzsBUiM3xA7EHovIENoX0ok3TgMkmZPqfMQXJ dZ47UolDC7BTKw1M5/3SGeBiFDePFwJPtMqx6L7nKbB1+1IejEeVQQH2JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOljGY+K9SMV+ij3UACOyLJy0k1NMB8GA1UdIwQY MBaAFOfZz7B47aWBb8gJ6Ywly3GWPnW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wMDBlYTctYzlmNC00ZWJiLWI5YjEt ZmVlZTdjMjlkNGRlLzEvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wMDBlYTctYzlmNC00ZWJiLWI5YjEtZmVlZTdjMjlkNGRl LzEvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5VHXVBO 26I9S7Y8XeyRpmLvw5zT7iCeYjoWlQk5H5UHQcBM5ImJDlYTuxLke1CZcVyNCONk 92IjG9VlWgRoBbqICll4K4sIfRe5xsZndnzJMKfaOfL3HVgCK9FAk6Mz19rpt7/h Irji3PcatuIbrc1DiwG/OSA4gTyO6Bd5YaW9wBe9FX8hac0wNuMjaIKMuZRih0Gh eFd4YfEoogb0rSxxnGXRGp6/Z0ug6I3KhrWV0rxQnnzGIDEOEcB+GcKVIUA7k8Bg 08YTk1dOV7xMMYGyR2WRVdY/eEbWM//yEdjYY9XkAwlzdgglOZKtEXR8s0qDFt12 ytU2QQxzJGt2zw== -----END CERTIFICATE-----Generated at Fri Dec 12 09:23:44 2025 by rpki-client