This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json) Hash identifier: 3Rn7NaxqSYABuKKWtHVd3QvHHBHo7DBv1sIwkYKqB3s= Subject key identifier: 90:DD:D6:0D:36:44:5F:CA:1A:31:88:4E:E3:15:8B:58:92:A8:88:36 Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb Certificate serial: 019AF12ECC493F663EA28629DE8DE6A028AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft Manifest number: 0DFC Signing time: Sat 06 Dec 2025 01:02:47 +0000 Manifest this update: Sat 06 Dec 2025 01:02:47 +0000 Manifest next update: Sun 07 Dec 2025 01:02:47 +0000 Files and hashes: 1: DLstc3U0rg1XJMzpW3kLJk6bWww.roa (hash: aRJQLolF5fKnY48Uu+tEP6pfOTPeicajt7bpyIpZajQ=) 2: hw5zWhZ37cy3fl-F4c6L7KinXWA.roa (hash: JVVK2E4Q0U9kLmKrr7lDfe4ry5wJQg7f4zL2c9LIRlo=) 3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: l3vz8KeewMkI1FRI0ji7S3vwSk5KWLOUT1n/faMRz9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:cc:49:3f:66:3e:a2:86:29:de:8d:e6:a0:28:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb Validity Not Before: Dec 6 01:02:47 2025 GMT Not After : Dec 7 01:02:47 2025 GMT Subject: CN=90ddd60d36445fca1a31884ee3158b5892a88836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:36:72:04:ae:f0:a8:71:b1:49:4a:0f:97: bb:95:63:d3:af:03:f1:a0:28:05:47:2e:01:8f:d1: bc:79:1f:65:bc:2d:e9:9e:6e:25:7e:ad:10:95:5d: bc:36:d4:56:12:7d:45:f8:e0:8d:d9:67:51:e7:18: 05:91:fc:52:c6:ed:b0:a9:28:74:27:cd:67:d8:27: dd:30:66:6f:59:47:cc:23:ca:0b:8b:9b:cd:ae:41: d4:5e:c0:10:04:1b:9f:fa:00:b8:c6:1f:69:28:9c: ac:74:2d:eb:d3:74:53:ae:1c:15:11:01:b8:f5:ae: cf:1f:4e:d3:7f:4b:75:09:0c:a0:ff:44:67:06:d2: 8b:35:d1:f9:a2:49:d6:ab:a2:3d:0f:14:7f:5b:4e: a7:3a:ae:79:24:62:b4:e9:c9:85:24:a5:b4:25:2f: 83:a1:50:d6:26:2e:91:47:af:3e:c9:1a:d4:3d:5b: b8:1f:57:6e:81:3f:ba:15:43:df:3d:d2:8b:7c:77: 6a:35:9c:78:45:65:15:a5:78:86:e3:42:4b:ee:2d: 4d:ec:11:cc:61:03:b5:4b:4a:de:a4:b9:be:b7:59: cc:36:89:c5:0a:cf:5d:a2:65:f4:78:b2:4b:ba:21: 54:fb:e9:41:92:a5:ff:3f:de:1c:ad:9c:21:24:2a: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DD:D6:0D:36:44:5F:CA:1A:31:88:4E:E3:15:8B:58:92:A8:88:36 X509v3 Authority Key Identifier: keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ef:41:6b:2f:f1:e9:f2:ee:58:fe:ab:94:e0:34:cd:eb:31: aa:b1:22:f4:67:0c:90:8e:2b:88:93:a5:18:47:bc:d5:2e:51: 17:18:ec:cd:32:b9:80:a3:45:ad:fb:d1:7c:13:f3:a7:fa:a4: b6:e4:15:61:e1:10:a7:19:d3:1d:4a:8c:60:3d:c0:65:9b:5d: f9:f2:37:c0:b7:74:ea:34:97:9f:7c:dd:d5:94:af:c4:4c:99: 02:a0:89:2f:59:81:c4:d8:6e:56:b1:26:a3:5d:27:01:30:91: 5e:a5:f5:85:d5:48:84:d5:e6:61:82:86:e7:12:6b:87:9a:61: 93:13:31:a8:e9:c8:e9:1b:96:da:58:15:f2:42:20:c1:ba:e5: ab:eb:d0:5f:c2:23:d6:fc:6e:fb:57:ca:5a:9d:38:5c:79:63: e4:fd:34:29:c0:e7:d9:dc:29:f6:7f:82:ab:84:9f:fe:88:86: 59:c5:50:21:b6:59:22:d4:2c:25:75:ca:04:71:1c:a9:6c:d9: b9:dc:a1:de:3d:0c:5e:15:aa:98:e7:4f:25:cc:4b:ca:e2:8b: 79:f5:94:dd:66:60:70:76:7e:2c:a5:ce:4a:bd:8c:96:36:01: f1:af:be:ce:00:85:a2:03:57:71:ed:e9:6f:a3:ac:6d:89:93: 8e:7f:e2:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsxJP2Y+ooYp3o3moCiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MzM4MTY4Y2Q5ZDVhZjA2MDQwMTNmYzQyNzQxMjZmYzU4 MWYzY2IwHhcNMjUxMjA2MDEwMjQ3WhcNMjUxMjA3MDEwMjQ3WjAzMTEwLwYDVQQD Eyg5MGRkZDYwZDM2NDQ1ZmNhMWEzMTg4NGVlMzE1OGI1ODkyYTg4ODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3k2cgSu8KhxsUlKD5e7lWPTrwPx oCgFRy4Bj9G8eR9lvC3pnm4lfq0QlV28NtRWEn1F+OCN2WdR5xgFkfxSxu2wqSh0 J81n2CfdMGZvWUfMI8oLi5vNrkHUXsAQBBuf+gC4xh9pKJysdC3r03RTrhwVEQG4 9a7PH07Tf0t1CQyg/0RnBtKLNdH5oknWq6I9DxR/W06nOq55JGK06cmFJKW0JS+D oVDWJi6RR68+yRrUPVu4H1dugT+6FUPfPdKLfHdqNZx4RWUVpXiG40JL7i1N7BHM YQO1S0repLm+t1nMNonFCs9domX0eLJLuiFU++lBkqX/P94crZwhJCrbIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDd1g02RF/KGjGITuMVi1iSqIg2MB8GA1UdIwQY MBaAFKQzgWjNnVrwYEAT/EJ0Em/FgfPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjIt YzlkYjk4MWEyYTJmLzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjItYzlkYjk4MWEyYTJm LzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtu9Bay/x 6fLuWP6rlOA0zesxqrEi9GcMkI4riJOlGEe81S5RFxjszTK5gKNFrfvRfBPzp/qk tuQVYeEQpxnTHUqMYD3AZZtd+fI3wLd06jSXn3zd1ZSvxEyZAqCJL1mBxNhuVrEm o10nATCRXqX1hdVIhNXmYYKG5xJrh5phkxMxqOnI6RuW2lgV8kIgwbrlq+vQX8Ij 1vxu+1fKWp04XHlj5P00KcDn2dwp9n+Cq4Sf/oiGWcVQIbZZItQsJXXKBHEcqWzZ udyh3j0MXhWqmOdPJcxLyuKLefWU3WZgcHZ+LKXOSr2MljYB8a++zgCFogNXce3p b6OsbYmTjn/iJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:05 2025 by rpki-client