This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json) Hash identifier: X3GS4iU5CoEdXFParulcwEC9lsAOw8Y6p+zdV7ElSew= Subject key identifier: F9:D7:1B:62:0C:7F:99:04:4D:54:33:DF:00:53:F2:D0:B8:CE:BE:CC Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00 Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800 Certificate serial: 019AF276F9F7DAF557BA165E775AAB307888 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft Manifest number: 0CD9 Signing time: Sat 06 Dec 2025 07:01:14 +0000 Manifest this update: Sat 06 Dec 2025 07:01:14 +0000 Manifest next update: Sun 07 Dec 2025 07:01:14 +0000 Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: vFPFkc16OFWXpBFpKX1cqljHWwkXVATSLVaa09hnST8=) 2: 2Bx_ZuBj3ywzIO5mlvk2Okv22hQ.roa (hash: guPg5C9izx8vPW7Ld4+sGxeIZUZPSLOzjQE1liVIecw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f9:f7:da:f5:57:ba:16:5e:77:5a:ab:30:78:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800 Validity Not Before: Dec 6 07:01:14 2025 GMT Not After : Dec 7 07:01:14 2025 GMT Subject: CN=f9d71b620c7f99044d5433df0053f2d0b8cebecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:1d:15:e4:6d:7a:94:b7:cc:01:bd:7e:17: 95:f7:da:f5:3d:78:05:64:a1:2c:4c:d8:ef:fe:49: 60:52:6a:90:6d:45:56:c5:f5:c3:60:b1:95:f1:50: 0c:e5:a5:a9:13:90:6c:45:52:e5:f9:ac:9a:9f:e0: 44:37:67:2a:29:28:cf:55:ef:ce:9f:20:95:22:a1: 2e:a4:2e:d7:55:a5:55:e2:a0:eb:1b:b1:b3:4a:00: 6e:67:2d:f4:f7:af:d3:15:3d:05:ce:6d:26:d5:53: d8:a3:6f:83:a3:b3:4c:e6:11:1c:5e:a0:b1:e9:1d: 79:ce:e2:cb:dd:f4:da:e6:3b:5e:3e:05:a4:52:31: 91:cf:39:99:62:24:cc:91:43:01:6b:d0:f1:57:37: 27:07:a8:39:01:23:f3:6e:1b:81:48:75:c4:07:62: 31:f5:9b:34:5a:e5:1b:c6:5a:1a:ab:70:f8:3d:7d: 6f:7a:e3:63:bd:05:20:d2:6a:4d:9f:e6:ba:cd:f7: 27:4d:11:5d:cd:96:da:fe:40:00:4b:ad:69:ee:0a: 60:c9:e2:fe:4f:d1:15:fe:10:88:44:54:be:c2:b6: 5b:02:9f:e7:9b:d3:a7:0e:5d:71:dd:c7:1e:b0:77: 09:ad:a5:25:42:e1:e4:f2:13:66:72:96:d5:bc:53: cc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D7:1B:62:0C:7F:99:04:4D:54:33:DF:00:53:F2:D0:B8:CE:BE:CC X509v3 Authority Key Identifier: keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:58:49:47:de:5f:50:32:4f:98:27:3d:c0:cd:06:38:af:8e: 4d:aa:73:f0:da:60:54:a8:bf:7c:ed:2e:95:a4:5c:9d:84:76: e4:6f:7b:50:08:0a:16:06:11:97:b3:d8:a5:fa:07:3f:10:d6: be:a6:64:5c:c9:0d:8c:56:b5:e0:5f:5f:f3:b5:d3:1d:d7:7f: 4f:8d:7d:91:99:fe:d1:90:5d:9a:4b:72:f7:c8:cc:9e:d7:21: e6:09:f2:0f:88:d6:0c:be:e8:63:b5:1a:c3:d6:a9:b5:e8:1f: 00:06:41:9e:75:9e:33:72:c9:0c:e2:d4:03:a0:b4:89:82:22: a6:e2:66:ee:85:38:6e:9d:7e:79:fb:78:b9:3d:05:40:08:0c: d6:26:33:eb:a8:3f:4e:46:18:f0:b1:bd:1e:72:04:ec:a9:5c: bb:6b:8c:bb:9b:a8:55:7f:02:5c:74:45:06:2d:61:43:1f:a7: 47:b2:31:e2:77:6b:5e:47:e9:77:f8:df:59:15:d7:26:ea:ec: 88:48:b7:02:cc:60:47:ed:e8:ec:4f:a7:ed:74:ee:1d:f0:37: 13:d4:10:96:e3:4f:26:8f:df:3b:11:0b:71:cf:09:8a:27:7d: eb:20:ee:96:a2:4d:37:56:44:88:5a:da:99:ef:fb:3c:ef:f7: e8:ff:ce:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvn32vVXuhZed1qrMHiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTZkZGRhNDBkNzgyNTU5ZWU2NWU1MGY5MDhlMTY4OWE2 NWE4MDAwHhcNMjUxMjA2MDcwMTE0WhcNMjUxMjA3MDcwMTE0WjAzMTEwLwYDVQQD EyhmOWQ3MWI2MjBjN2Y5OTA0NGQ1NDMzZGYwMDUzZjJkMGI4Y2ViZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4gdFeRtepS3zAG9fheV99r1PXgF ZKEsTNjv/klgUmqQbUVWxfXDYLGV8VAM5aWpE5BsRVLl+ayan+BEN2cqKSjPVe/O nyCVIqEupC7XVaVV4qDrG7GzSgBuZy3096/TFT0Fzm0m1VPYo2+Do7NM5hEcXqCx 6R15zuLL3fTa5jtePgWkUjGRzzmZYiTMkUMBa9DxVzcnB6g5ASPzbhuBSHXEB2Ix 9Zs0WuUbxloaq3D4PX1veuNjvQUg0mpNn+a6zfcnTRFdzZba/kAAS61p7gpgyeL+ T9EV/hCIRFS+wrZbAp/nm9OnDl1x3ccesHcJraUlQuHk8hNmcpbVvFPMPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnXG2IMf5kETVQz3wBT8tC4zr7MMB8GA1UdIwQY MBaAFNLm3dpA14JVnuZeUPkI4WiaZagAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHViZDJrRFhnbFdlNWw1US1RamhhSnBscUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83MzM1ZDItM2MzZi00ZmNhLTgwMDAt Y2NmOWI4OWUyMmUyLzEvMHViZDJrRFhnbFdlNWw1US1RamhhSnBscUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi83MzM1ZDItM2MzZi00ZmNhLTgwMDAtY2NmOWI4OWUyMmUy LzEvMHViZDJrRFhnbFdlNWw1US1RamhhSnBscUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlhJR95f UDJPmCc9wM0GOK+OTapz8NpgVKi/fO0ulaRcnYR25G97UAgKFgYRl7PYpfoHPxDW vqZkXMkNjFa14F9f87XTHdd/T419kZn+0ZBdmkty98jMntch5gnyD4jWDL7oY7Ua w9aptegfAAZBnnWeM3LJDOLUA6C0iYIipuJm7oU4bp1+eft4uT0FQAgM1iYz66g/ TkYY8LG9HnIE7Klcu2uMu5uoVX8CXHRFBi1hQx+nR7Ix4ndrXkfpd/jfWRXXJurs iEi3AsxgR+3o7E+n7XTuHfA3E9QQluNPJo/fOxELcc8Jiid96yDulqJNN1ZEiFra me/7PO/36P/O7g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:56 2025 by rpki-client