This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft File: dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json) Hash identifier: rywcps4w/zDyzVPMFoPhtkwNcGMo49GuCVGR3CnC9BU= Subject key identifier: 23:25:8C:06:50:BC:BC:8F:CD:00:65:61:17:BE:72:FE:77:F8:B3:87 Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D Certificate issuer: /CN=75b72215ae3a618305c123142b349df26672a14d Certificate serial: 019B597589719F3519ECA222CF849DEEF6A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft Manifest number: 0488 Signing time: Fri 26 Dec 2025 07:00:33 +0000 Manifest this update: Fri 26 Dec 2025 07:00:33 +0000 Manifest next update: Sat 27 Dec 2025 07:00:33 +0000 Files and hashes: 1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: 7VkHOhkIkaWVHbnfVo3ZC1lQ7xPE5RI1bgHBbt2LNcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:89:71:9f:35:19:ec:a2:22:cf:84:9d:ee:f6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b72215ae3a618305c123142b349df26672a14d Validity Not Before: Dec 26 07:00:33 2025 GMT Not After : Dec 27 07:00:33 2025 GMT Subject: CN=23258c0650bcbc8fcd00656117be72fe77f8b387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:ab:a8:be:46:66:e9:ca:5e:e1:2e:03:b5: 62:bd:d5:04:e3:44:10:f9:de:af:d7:df:29:72:2e: 33:42:54:1e:7e:d4:07:30:ac:f7:d6:14:19:82:9a: e2:7b:a7:ed:af:aa:05:b3:9b:e1:e9:c3:28:46:4b: 16:ae:3a:b4:d5:d9:2d:be:bd:89:50:15:64:6b:1e: 1a:55:b4:ee:c2:77:8e:1a:eb:0e:94:e3:1d:51:6d: a8:bb:11:70:48:a6:58:30:03:d2:11:4b:b9:be:36: a6:19:af:bc:95:20:cf:f5:4c:de:9b:0e:0e:77:a9: 6d:59:40:14:60:09:87:8c:5a:0f:06:58:db:d8:c3: 2f:43:f8:70:af:b8:d4:95:00:3d:d9:99:3d:b9:3a: 32:58:d3:14:b6:5d:0f:22:98:e6:19:a7:86:ed:26: 9a:7d:ba:29:ee:02:ac:0b:72:c9:a1:a7:b9:fe:ef: 1c:f5:0a:ab:a0:da:bb:56:d1:c3:7d:48:6f:15:40: 9f:59:65:55:fe:71:e8:0f:97:01:1d:52:df:22:e0: 0f:da:d3:97:b1:61:62:b8:f7:26:6c:69:68:6c:2c: 29:ca:c6:92:26:0a:5e:e9:60:db:01:bc:17:f9:36: 93:6f:94:01:89:e1:b1:5c:bb:c1:bb:d0:fd:58:f3: d8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:25:8C:06:50:BC:BC:8F:CD:00:65:61:17:BE:72:FE:77:F8:B3:87 X509v3 Authority Key Identifier: keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:15:76:f3:75:c4:11:71:37:8b:a2:0e:29:65:02:8e:7b:98: 27:a6:eb:24:bf:3f:69:9e:55:bb:a0:d5:db:3e:16:57:20:a6: 44:f7:48:5b:4d:49:8b:2d:45:fa:97:84:96:81:96:1e:71:b9: 0c:32:c4:f7:83:bd:41:20:56:23:ef:09:3a:c5:f3:52:db:03: 76:a0:39:0b:d3:e7:c8:c8:e4:27:47:6d:53:b4:ff:f7:54:fb: 3b:ae:12:98:cd:d5:dc:05:39:cb:9c:fe:ef:14:7e:45:6a:b7: c9:51:5b:26:c5:cd:7c:ba:8f:9c:76:f9:8e:e9:48:6a:6e:a5: 1c:77:91:3c:74:d6:0d:13:6c:c3:95:4a:95:28:5a:cf:8b:fa: 7a:7c:60:8a:b3:b0:18:c5:2a:10:7f:b3:70:28:40:55:a0:d0: 93:0e:8b:02:0e:86:17:18:c6:48:b3:6e:04:6b:a4:8e:15:b2: a9:44:78:b4:4a:19:e7:6b:66:3d:e4:6f:2b:2f:18:76:a7:e0: f9:a8:f3:b0:83:a1:0f:39:c6:d3:66:8c:37:41:a6:d9:23:4e: db:30:c5:1c:0d:fa:84:b0:6b:70:fa:d0:82:1c:44:f4:6c:54: a4:8e:91:b7:a8:9c:17:88:ce:db:74:2a:f6:a5:7d:ab:08:77: 28:33:6d:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdYlxnzUZ7KIiz4Sd7valMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YjcyMjE1YWUzYTYxODMwNWMxMjMxNDJiMzQ5ZGYyNjY3 MmExNGQwHhcNMjUxMjI2MDcwMDMzWhcNMjUxMjI3MDcwMDMzWjAzMTEwLwYDVQQD EygyMzI1OGMwNjUwYmNiYzhmY2QwMDY1NjExN2JlNzJmZTc3ZjhiMzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0arqL5GZunKXuEuA7VivdUE40QQ +d6v198pci4zQlQeftQHMKz31hQZgprie6ftr6oFs5vh6cMoRksWrjq01dktvr2J UBVkax4aVbTuwneOGusOlOMdUW2ouxFwSKZYMAPSEUu5vjamGa+8lSDP9Uzemw4O d6ltWUAUYAmHjFoPBljb2MMvQ/hwr7jUlQA92Zk9uToyWNMUtl0PIpjmGaeG7Saa fbop7gKsC3LJoae5/u8c9QqroNq7VtHDfUhvFUCfWWVV/nHoD5cBHVLfIuAP2tOX sWFiuPcmbGlobCwpysaSJgpe6WDbAbwX+TaTb5QBieGxXLvBu9D9WPPY4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMljAZQvLyPzQBlYRe+cv53+LOHMB8GA1UdIwQY MBaAFHW3IhWuOmGDBcEjFCs0nfJmcqFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iZWE5ZGItMWI5Mi00NGNiLThmZDMt YmRiZTViN2E3NjgwLzEvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9iZWE5ZGItMWI5Mi00NGNiLThmZDMtYmRiZTViN2E3Njgw LzEvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhV283XE EXE3i6IOKWUCjnuYJ6brJL8/aZ5Vu6DV2z4WVyCmRPdIW01Jiy1F+peEloGWHnG5 DDLE94O9QSBWI+8JOsXzUtsDdqA5C9PnyMjkJ0dtU7T/91T7O64SmM3V3AU5y5z+ 7xR+RWq3yVFbJsXNfLqPnHb5julIam6lHHeRPHTWDRNsw5VKlShaz4v6enxgirOw GMUqEH+zcChAVaDQkw6LAg6GFxjGSLNuBGukjhWyqUR4tEoZ52tmPeRvKy8Ydqfg +ajzsIOhDznG02aMN0Gm2SNO2zDFHA36hLBrcPrQghxE9GxUpI6Rt6icF4jO23Qq 9qV9qwh3KDNt9Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:05 2025 by rpki-client