This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json) Hash identifier: 1AvhhqImve5QaknNJ7F5nTLJfTSKDSPDige2SfH2FJ0= Subject key identifier: 2F:86:AB:6E:04:11:E8:64:2A:91:61:04:FD:95:8E:2D:DA:9A:98:34 Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93 Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93 Certificate serial: 019AF12D61106D0574B5B85AF5AB468ACCC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft Manifest number: 0BA0 Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: rwpnbxDFThwM8fmXWM2nzS82FaODOAIO7XgPoCoG3/M=) 2: j5fTeizLnlg0u2Mo-sXKcy6aHzU.roa (hash: N7eKHafDgm+sPu3JQlpm/bB7Ce1uPT9byBM0H76oyj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:61:10:6d:05:74:b5:b8:5a:f5:ab:46:8a:cc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93 Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=2f86ab6e0411e8642a916104fd958e2dda9a9834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b3:d6:49:eb:a2:8b:9a:79:fc:f7:d2:86:e1: 1e:19:61:d5:04:fc:ee:97:5f:e1:9d:c0:08:b1:d1: 93:34:37:2b:15:fa:26:a5:71:96:9f:07:12:17:64: 77:b9:ea:54:56:67:c0:fb:a1:e2:b4:e5:54:49:a9: 99:8d:f0:b4:4a:31:50:ba:e5:f6:56:d2:ac:c8:ff: 64:aa:d8:b1:26:6c:75:2e:34:3f:df:0c:62:61:58: e0:e8:cb:4f:a9:40:15:04:bc:e7:05:38:10:4b:18: cc:b3:a5:94:7b:4a:f9:43:a5:77:af:18:d9:60:3b: 5b:2c:c3:0a:77:fc:bb:6e:04:ed:b0:0b:49:bc:60: a5:d0:a8:cc:3b:97:e3:b0:9f:b4:c1:b2:b6:53:6b: ea:d0:18:a2:19:12:29:49:2d:d3:c1:7a:84:28:53: 5c:11:0c:37:7d:ca:b7:5c:61:f9:39:e5:a1:da:bb: e3:82:9d:3d:4e:92:4c:ba:d8:aa:a1:ef:5c:bd:4d: 28:ee:c2:85:1e:6b:d2:2a:d3:e6:2a:f8:31:13:21: bb:26:9d:21:2a:4b:8b:8c:42:cf:4f:52:95:f9:68: 12:5b:79:ab:cc:5e:fb:c3:fb:d3:b1:a4:3d:d4:5d: 48:b7:cb:5e:6b:f0:da:1a:0a:78:81:ba:34:57:4a: ed:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:86:AB:6E:04:11:E8:64:2A:91:61:04:FD:95:8E:2D:DA:9A:98:34 X509v3 Authority Key Identifier: keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2c:1d:8e:3d:7a:cd:ff:6b:85:82:4c:a2:81:03:4d:80:0c: 8a:1c:64:66:17:63:20:a2:c8:82:85:db:63:51:0a:54:e5:d2: 69:e1:0f:7a:a3:23:32:8f:1e:b0:16:ff:5b:e9:08:f0:ef:1a: 97:b3:13:2f:d3:b0:7e:d0:fb:14:75:98:4b:aa:9b:30:8e:b2: bc:f3:e1:0c:da:e9:4d:34:46:60:73:28:1f:dd:80:69:01:ff: 32:34:83:65:07:a5:7e:e0:50:aa:d9:75:70:2a:36:8a:9c:f4: 77:a4:26:ae:dc:7a:c0:8a:fb:ee:78:cb:07:55:36:b1:bd:e5: 00:55:a2:75:81:4a:4f:a7:04:e9:24:bb:5a:e4:dc:e7:0b:b2: 0c:39:bd:64:4c:33:23:55:34:52:26:6b:2d:57:5c:b9:42:2a: 1e:68:ef:5d:e5:98:ee:ff:36:9b:04:54:89:1e:d9:b0:bd:3c: 6a:4e:86:bf:e8:ff:8b:3f:b2:83:b7:86:50:6d:26:f5:15:24: e8:ac:01:f7:da:a5:5b:c6:da:bb:5b:9a:50:c0:cb:ca:3c:a1: ed:cb:07:4a:04:43:96:72:d0:09:49:ba:8b:77:ca:c8:e6:71: 25:b7:ee:ac:e9:ae:22:92:64:f7:a2:f2:32:e1:e3:a0:6a:aa: 57:38:1a:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWEQbQV0tbha9atGiszJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYmQ1ZjU0OTA1ZWU4ZTRkMjgzMGM2Y2Y1MGY2MGQyNjQy MDFhOTMwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD EygyZjg2YWI2ZTA0MTFlODY0MmE5MTYxMDRmZDk1OGUyZGRhOWE5ODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7PWSeuii5p5/PfShuEeGWHVBPzu l1/hncAIsdGTNDcrFfompXGWnwcSF2R3uepUVmfA+6HitOVUSamZjfC0SjFQuuX2 VtKsyP9kqtixJmx1LjQ/3wxiYVjg6MtPqUAVBLznBTgQSxjMs6WUe0r5Q6V3rxjZ YDtbLMMKd/y7bgTtsAtJvGCl0KjMO5fjsJ+0wbK2U2vq0BiiGRIpSS3TwXqEKFNc EQw3fcq3XGH5OeWh2rvjgp09TpJMutiqoe9cvU0o7sKFHmvSKtPmKvgxEyG7Jp0h KkuLjELPT1KV+WgSW3mrzF77w/vTsaQ91F1It8tea/DaGgp4gbo0V0rtuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+Gq24EEehkKpFhBP2Vji3ampg0MB8GA1UdIwQY MBaAFA69X1SQXujk0oMMbPUPYNJkIBqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHIxZlZKQmU2T1RTZ3d4czlROWcwbVFnR3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNTkzOWItZGFhNy00ZjQ3LTk4NzMt NjRhMjdlOTc3ZmQ5LzEvRHIxZlZKQmU2T1RTZ3d4czlROWcwbVFnR3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iNTkzOWItZGFhNy00ZjQ3LTk4NzMtNjRhMjdlOTc3ZmQ5 LzEvRHIxZlZKQmU2T1RTZ3d4czlROWcwbVFnR3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCwdjj16 zf9rhYJMooEDTYAMihxkZhdjIKLIgoXbY1EKVOXSaeEPeqMjMo8esBb/W+kI8O8a l7MTL9OwftD7FHWYS6qbMI6yvPPhDNrpTTRGYHMoH92AaQH/MjSDZQelfuBQqtl1 cCo2ipz0d6Qmrtx6wIr77njLB1U2sb3lAFWidYFKT6cE6SS7WuTc5wuyDDm9ZEwz I1U0UiZrLVdcuUIqHmjvXeWY7v82mwRUiR7ZsL08ak6Gv+j/iz+yg7eGUG0m9RUk 6KwB99qlW8bau1uaUMDLyjyh7csHSgRDlnLQCUm6i3fKyOZxJbfurOmuIpJk96Ly MuHjoGqqVzgabw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:16 2025 by rpki-client