This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json) Hash identifier: 0YxjtLf9hBqPVJSFXbss35wmC4whBhQ9IBwOEd6vh9k= Subject key identifier: 8B:19:4B:A2:F6:9F:D2:10:5B:41:CB:65:6B:91:C9:21:81:D4:BD:2B Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7 Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7 Certificate serial: 019AF12EC46DAED457702AD1023A9BFF09FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft Manifest number: 163A Signing time: Sat 06 Dec 2025 01:02:45 +0000 Manifest this update: Sat 06 Dec 2025 01:02:45 +0000 Manifest next update: Sun 07 Dec 2025 01:02:45 +0000 Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: DBkgl0s6Knvxpj24nvWOEmy795yShtLkUm6J/iZY/jo=) 2: FIvNNxujkeosaQmK-8zL99U8I-8.roa (hash: xdptKNwYHkOXesPFH1LxyuhIbU4UE4ZRfmuf1MyhTcI=) 3: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (hash: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c4:6d:ae:d4:57:70:2a:d1:02:3a:9b:ff:09:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7 Validity Not Before: Dec 6 01:02:45 2025 GMT Not After : Dec 7 01:02:45 2025 GMT Subject: CN=8b194ba2f69fd2105b41cb656b91c92181d4bd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:71:44:72:8f:99:1d:95:f7:42:24:c2:74: b5:5b:7a:06:65:39:ea:88:45:b9:8c:7f:fe:c5:ee: bf:35:96:5b:13:70:dc:d9:fb:e7:09:0a:8b:b7:74: 5c:29:7b:f7:c0:21:9c:80:05:14:98:59:1d:e1:3e: 9a:28:ab:5b:74:fd:f6:71:28:f5:b3:71:4c:e9:ec: 7e:40:39:36:48:2a:70:2f:0a:30:a3:be:88:df:bd: b0:3c:4e:25:2d:86:e7:7e:5e:07:3b:dc:64:7c:92: e9:69:39:88:16:50:c2:25:45:62:b3:8e:07:f5:5e: 5a:d8:3b:0c:ec:ad:e1:65:b5:ea:89:c1:17:7a:4c: 34:ee:bf:5f:31:0f:70:17:d8:da:6e:dd:86:42:76: 45:53:5a:0f:0a:b9:3c:54:1b:6f:0a:04:0e:fc:b3: 94:f1:ea:49:9c:ea:74:89:51:a7:2b:44:f2:cb:8f: 12:76:61:31:c6:7c:9c:31:4d:97:cc:4e:08:72:d3: 1b:42:34:ee:6e:8a:61:c6:25:60:88:c8:23:94:8c: 20:33:e7:43:50:aa:6f:75:90:d1:f3:df:a6:5a:d8: c0:54:7d:df:1a:23:f4:99:55:ff:fb:4d:f9:47:50: 22:76:1a:7a:5a:c5:62:e9:f8:48:1b:27:03:24:4f: 72:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:19:4B:A2:F6:9F:D2:10:5B:41:CB:65:6B:91:C9:21:81:D4:BD:2B X509v3 Authority Key Identifier: keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:48:5f:18:01:94:dc:fe:da:6e:76:ac:2c:dd:7b:c1:15:13: 14:d1:b3:89:53:d0:20:cd:f1:9a:88:df:cf:9f:3b:41:a0:e2: 97:7a:a6:89:48:23:94:d5:b9:a2:25:84:d3:27:da:42:bd:56: ac:ba:40:bc:c4:48:74:0b:51:1f:86:57:33:97:7d:cb:5c:b0: 56:3a:88:a6:03:64:d4:14:b6:95:64:22:27:83:b4:c0:cc:33: 55:3d:ff:17:6c:6b:6e:37:32:2a:92:57:f9:ce:de:3f:36:c5: ff:48:5a:7c:7a:6d:df:4e:d7:73:70:62:7c:8f:84:64:62:53: a3:de:dc:6e:f6:9e:9b:87:b1:00:19:19:32:cb:9b:55:75:7b: 9e:e8:10:c6:c1:76:ec:f1:19:17:b7:51:1d:41:e0:6b:99:44: 70:f5:4c:f3:a0:c1:36:d8:23:9d:9d:6d:44:4f:d8:51:9d:7e: 13:4f:12:42:9d:b6:fd:a8:c5:f6:a3:59:23:ca:51:18:27:c7: 33:c4:4b:fd:e6:d9:ac:cb:cb:c1:fe:52:35:2e:8a:c7:2f:f0: 49:ab:5f:31:7f:19:37:eb:5a:16:64:80:88:d3:88:b0:3b:fe: 15:f2:bd:82:7d:b7:1c:0b:01:77:d7:e7:3c:ef:9a:07:c9:01: 34:39:e1:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsRtrtRXcCrRAjqb/wn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzQ5MTMwOTRhMjEyNjhjNzNhNjc2NTNhMzczOGQ3M2U1 YzU5YTcwHhcNMjUxMjA2MDEwMjQ1WhcNMjUxMjA3MDEwMjQ1WjAzMTEwLwYDVQQD Eyg4YjE5NGJhMmY2OWZkMjEwNWI0MWNiNjU2YjkxYzkyMTgxZDRiZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDFxRHKPmR2V90IkwnS1W3oGZTnq iEW5jH/+xe6/NZZbE3Dc2fvnCQqLt3RcKXv3wCGcgAUUmFkd4T6aKKtbdP32cSj1 s3FM6ex+QDk2SCpwLwowo76I372wPE4lLYbnfl4HO9xkfJLpaTmIFlDCJUVis44H 9V5a2DsM7K3hZbXqicEXekw07r9fMQ9wF9jabt2GQnZFU1oPCrk8VBtvCgQO/LOU 8epJnOp0iVGnK0Tyy48SdmExxnycMU2XzE4IctMbQjTubophxiVgiMgjlIwgM+dD UKpvdZDR89+mWtjAVH3fGiP0mVX/+035R1Aidhp6WsVi6fhIGycDJE9yOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsZS6L2n9IQW0HLZWuRySGB1L0rMB8GA1UdIwQY MBaAFNHEkTCUohJoxzpnZTo3ONc+XFmnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAt MzNhODJhYjVmNTEzLzEvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAtMzNhODJhYjVmNTEz LzEvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUhfGAGU 3P7abnasLN17wRUTFNGziVPQIM3xmojfz587QaDil3qmiUgjlNW5oiWE0yfaQr1W rLpAvMRIdAtRH4ZXM5d9y1ywVjqIpgNk1BS2lWQiJ4O0wMwzVT3/F2xrbjcyKpJX +c7ePzbF/0hafHpt307Xc3BifI+EZGJTo97cbvaem4exABkZMsubVXV7nugQxsF2 7PEZF7dRHUHga5lEcPVM86DBNtgjnZ1tRE/YUZ1+E08SQp22/ajF9qNZI8pRGCfH M8RL/ebZrMvLwf5SNS6Kxy/wSatfMX8ZN+taFmSAiNOIsDv+FfK9gn23HAsBd9fn PO+aB8kBNDnhTw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:37 2025 by rpki-client