This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json) Hash identifier: VmOKpZLcE6Wy/1TtehwqK1gMSOyLmrh/FFYd463xImQ= Subject key identifier: F3:7B:04:D5:1D:1A:34:FB:DF:EB:5F:1F:C4:D8:88:9D:74:56:66:21 Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68 Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68 Certificate serial: 019AF12E08B3CC51DDBAF33AD1D197E99AD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft Manifest number: 09E2 Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=) 2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: V0foi9/7R/7e2er+Q83jgyebYpN9fwIPOJGOEyMFPRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:08:b3:cc:51:dd:ba:f3:3a:d1:d1:97:e9:9a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=f37b04d51d1a34fbdfeb5f1fc4d8889d74566621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:41:4d:0e:2b:03:84:e6:12:cf:eb:ad:fb: e0:d7:d6:a4:36:98:31:69:a4:91:1e:da:b5:42:e0: d4:87:4b:67:83:42:58:04:4f:4c:6e:1c:a0:9d:c7: 85:68:ad:15:86:92:2b:0f:fd:3e:67:85:a2:74:60: 1f:81:1a:b6:f4:8e:3f:33:05:2a:0b:01:2f:6d:7b: 27:e7:d8:1b:26:fe:ba:3b:66:88:3f:af:93:02:33: cf:a7:fc:48:9d:bf:6e:17:e9:9d:6d:6a:6f:81:6c: af:fa:25:a7:c7:fe:2a:2d:0d:41:f6:f0:99:4c:25: e4:ce:db:3e:52:9e:0c:fc:3b:c6:07:44:86:f6:0d: 78:c5:2a:de:be:e1:50:6b:5d:5f:77:f8:f7:56:c2: c0:ed:ed:30:d3:61:3f:ba:3e:b3:37:af:7f:09:eb: 45:7d:e8:f5:4f:7f:8b:a7:24:ee:13:94:e4:42:8a: 3d:28:8f:f9:0d:f3:1f:9f:23:ec:26:0f:84:04:cd: c6:9e:8e:62:a0:ea:04:b3:92:4d:87:75:e9:6c:de: 76:30:00:e2:d4:4c:28:fd:00:c2:e5:62:18:cd:9b: a7:e7:12:b3:8e:56:1a:a8:83:7e:75:fa:fd:24:9c: 3b:ba:b9:af:4c:33:7d:bd:6b:5b:8a:c2:e0:ab:57: 30:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7B:04:D5:1D:1A:34:FB:DF:EB:5F:1F:C4:D8:88:9D:74:56:66:21 X509v3 Authority Key Identifier: keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f5:ac:de:5c:8d:94:63:37:9a:7c:fb:62:8b:95:8a:bb:1c: ed:8c:41:77:28:b8:84:7b:97:9d:83:a6:37:13:da:14:21:66: 29:06:6b:1c:06:ae:e9:1e:d8:02:04:40:d4:15:d8:8e:a9:1a: ff:75:58:ff:2a:2f:71:d4:d1:8c:06:bc:8f:18:0d:24:b3:fb: 95:c8:ab:35:d4:03:0d:78:6e:ff:44:3a:83:bc:de:42:bc:9f: 3f:f1:bf:46:57:2f:46:eb:ca:d2:41:35:c1:96:f8:14:1c:f2: 87:10:33:ad:f9:ed:7f:e7:3d:11:d6:20:b9:a5:68:a8:28:8e: 50:46:bb:62:dd:d9:3c:22:cd:96:db:cc:5a:06:15:7d:f5:bd: c8:55:72:c0:66:99:dc:fd:9e:57:26:be:ea:92:68:43:2f:6d: 42:22:3f:f2:94:05:0e:25:32:a6:af:00:40:b4:6e:dd:62:9b: 87:5b:00:e3:04:26:1c:14:ae:96:79:89:08:44:b3:74:2b:a2: 12:17:a7:1b:29:6a:cc:fd:26:9c:b0:df:80:19:1c:da:f8:ee: 45:75:c1:b3:b4:78:72:96:7a:f5:b0:41:0f:8c:2b:83:57:9a: 8c:2a:63:62:53:6c:b8:f0:20:b4:10:a8:25:e2:0c:cf:c8:db: 8e:2d:29:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgizzFHduvM60dGX6ZrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNDc4Y2NkYzA0ODBhNmI0M2JhY2Q4YWFlZTAwNzliMTZl YzJlNjgwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD EyhmMzdiMDRkNTFkMWEzNGZiZGZlYjVmMWZjNGQ4ODg5ZDc0NTY2NjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1xBTQ4rA4TmEs/rrfvg19akNpgx aaSRHtq1QuDUh0tng0JYBE9MbhygnceFaK0VhpIrD/0+Z4WidGAfgRq29I4/MwUq CwEvbXsn59gbJv66O2aIP6+TAjPPp/xInb9uF+mdbWpvgWyv+iWnx/4qLQ1B9vCZ TCXkzts+Up4M/DvGB0SG9g14xSrevuFQa11fd/j3VsLA7e0w02E/uj6zN69/CetF fej1T3+LpyTuE5TkQoo9KI/5DfMfnyPsJg+EBM3Gno5ioOoEs5JNh3XpbN52MADi 1Ewo/QDC5WIYzZun5xKzjlYaqIN+dfr9JJw7urmvTDN9vWtbisLgq1cwRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPN7BNUdGjT73+tfH8TYiJ10VmYhMB8GA1UdIwQY MBaAFK9HjM3ASAprQ7rNiq7gB5sW7C5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2Yt Y2M4YmYzZmJlZjk5LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2YtY2M4YmYzZmJlZjk5 LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPWs3lyN lGM3mnz7YouVirsc7YxBdyi4hHuXnYOmNxPaFCFmKQZrHAau6R7YAgRA1BXYjqka /3VY/yovcdTRjAa8jxgNJLP7lcirNdQDDXhu/0Q6g7zeQryfP/G/RlcvRuvK0kE1 wZb4FBzyhxAzrfntf+c9EdYguaVoqCiOUEa7Yt3ZPCLNltvMWgYVffW9yFVywGaZ 3P2eVya+6pJoQy9tQiI/8pQFDiUypq8AQLRu3WKbh1sA4wQmHBSulnmJCESzdCui EhenGylqzP0mnLDfgBkc2vjuRXXBs7R4cpZ69bBBD4wrg1eajCpjYlNsuPAgtBCo JeIMz8jbji0pIA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:07 2025 by rpki-client