This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json) Hash identifier: 4+ZI2xK1T0qvIVEukF05mEOQUmuMqovShhdYoxn0qrg= Subject key identifier: C6:7F:22:FE:AA:46:FA:E1:D8:7C:AD:62:A0:AE:FB:81:43:D4:8A:81 Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92 Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492 Certificate serial: 019AF3528670B9C62962AA689BDF2F0F2516 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft Manifest number: 0491 Signing time: Sat 06 Dec 2025 11:01:03 +0000 Manifest this update: Sat 06 Dec 2025 11:01:03 +0000 Manifest next update: Sun 07 Dec 2025 11:01:03 +0000 Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: 8bvSDcLQmAPUyUp44BqCDznIwgHeyRwG0KH+3R+rO5o=) 2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=) 3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:86:70:b9:c6:29:62:aa:68:9b:df:2f:0f:25:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492 Validity Not Before: Dec 6 11:01:03 2025 GMT Not After : Dec 7 11:01:03 2025 GMT Subject: CN=c67f22feaa46fae1d87cad62a0aefb8143d48a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:58:ed:3b:97:61:95:c5:7b:9b:16:0e:b2: 09:ef:cd:5e:99:6c:e1:31:17:98:e4:18:58:27:cf: 4d:72:9a:cc:41:29:f1:a6:7e:83:2e:bc:f3:dd:c3: eb:97:28:50:6a:d0:bb:e5:ae:dd:5b:93:71:20:cb: 34:a3:72:d1:57:cd:36:d5:5f:50:b0:1e:4b:96:2a: d1:e1:03:27:19:28:44:ac:b7:c4:1a:d8:2f:a7:1e: de:26:8d:89:64:a8:b9:28:68:ad:58:ad:66:77:8f: 11:fa:37:cc:f1:97:1c:f7:a2:ee:af:96:d1:8f:84: f0:85:0d:f6:57:f3:16:6e:4d:ec:a7:29:85:2f:fe: 80:bd:1d:91:38:e3:17:da:40:5b:d8:f0:92:8d:aa: ea:f6:23:0f:45:b1:45:e9:38:f6:60:a1:7f:d1:eb: c3:47:b8:e4:b6:bb:30:f6:34:8d:7c:86:3e:43:77: ab:f1:db:b3:65:9e:11:ac:73:b8:0e:fd:b2:9e:aa: af:3e:57:54:42:15:8d:62:63:f5:d8:b8:11:23:e3: 8f:2d:25:c0:95:86:61:2c:da:4b:7d:83:e8:d3:41: a0:9c:ac:a5:8e:56:35:fb:fe:0e:73:ac:50:01:59: 38:24:f8:0f:be:56:0e:8d:5f:70:8c:f2:f7:08:69: 80:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7F:22:FE:AA:46:FA:E1:D8:7C:AD:62:A0:AE:FB:81:43:D4:8A:81 X509v3 Authority Key Identifier: keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c9:d2:58:1c:ea:76:1b:b4:50:fa:0f:f8:e7:6a:83:37:88: cd:57:f9:b6:a7:79:39:6c:25:10:64:26:14:ca:da:22:cd:24: 68:98:bb:76:86:a8:28:73:71:b6:dd:e8:8e:07:34:d0:b9:c9: 6a:e8:ef:a6:c6:e9:86:26:4b:5b:2f:51:fe:79:51:a0:02:df: 0f:cd:c5:ac:dc:77:5f:cb:1d:01:46:23:75:dd:bb:24:1a:6d: 4e:28:c2:68:2b:92:f4:f8:07:94:d2:c6:a3:e4:16:3b:8d:87: 52:b3:9f:e2:de:5d:29:31:83:26:d3:3f:b2:b6:32:5c:49:68: d7:bd:75:87:3f:a5:19:f0:02:f2:98:d0:07:ce:f2:61:e5:36: 56:6c:45:c9:f6:35:fe:79:2d:a9:fd:9c:b8:88:dc:e5:b5:01: 12:c4:88:8d:2a:2a:e3:b9:2e:de:81:5d:30:35:99:18:e2:df: 70:a2:d5:67:c1:14:a2:38:00:9d:f9:45:e8:b4:a3:0b:a1:d3: 4c:21:68:fa:b5:bc:19:09:12:87:de:ec:26:67:bd:46:4a:7e: ce:5b:18:3d:b3:17:4f:fe:5b:2e:3d:f8:87:8b:28:ea:06:f6: 7d:dd:b2:c9:b3:f7:9f:6d:4f:b9:d4:db:b4:75:da:2a:77:a8: c0:61:e4:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoZwucYpYqpom98vDyUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw MzU0OTIwHhcNMjUxMjA2MTEwMTAzWhcNMjUxMjA3MTEwMTAzWjAzMTEwLwYDVQQD EyhjNjdmMjJmZWFhNDZmYWUxZDg3Y2FkNjJhMGFlZmI4MTQzZDQ4YTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynRY7TuXYZXFe5sWDrIJ781emWzh MReY5BhYJ89NcprMQSnxpn6DLrzz3cPrlyhQatC75a7dW5NxIMs0o3LRV8021V9Q sB5LlirR4QMnGShErLfEGtgvpx7eJo2JZKi5KGitWK1md48R+jfM8Zcc96Lur5bR j4TwhQ32V/MWbk3spymFL/6AvR2ROOMX2kBb2PCSjarq9iMPRbFF6Tj2YKF/0evD R7jktrsw9jSNfIY+Q3er8duzZZ4RrHO4Dv2ynqqvPldUQhWNYmP12LgRI+OPLSXA lYZhLNpLfYPo00GgnKyljlY1+/4Oc6xQAVk4JPgPvlYOjV9wjPL3CGmAFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZ/Iv6qRvrh2HytYqCu+4FD1IqBMB8GA1UdIwQY MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et MDYyYzg4ODJiYTcxLzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsnSWBzq dhu0UPoP+OdqgzeIzVf5tqd5OWwlEGQmFMraIs0kaJi7doaoKHNxtt3ojgc00LnJ aujvpsbphiZLWy9R/nlRoALfD83FrNx3X8sdAUYjdd27JBptTijCaCuS9PgHlNLG o+QWO42HUrOf4t5dKTGDJtM/srYyXElo1711hz+lGfAC8pjQB87yYeU2VmxFyfY1 /nktqf2cuIjc5bUBEsSIjSoq47ku3oFdMDWZGOLfcKLVZ8EUojgAnflF6LSjC6HT TCFo+rW8GQkSh97sJme9Rkp+zlsYPbMXT/5bLj34h4so6gb2fd2yybP3n21PudTb tHXaKneowGHkJg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:06 2025 by rpki-client