This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json) Hash identifier: yaeFYEouguEDkxVW2vUA5miWfWVthhp0xxRHskcXoUI= Subject key identifier: F3:9C:9D:E3:97:B6:41:47:1F:FC:5E:11:35:A5:13:36:2B:AF:C3:8C Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90 Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90 Certificate serial: 019AF35255A4C6804462890B1882032168D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft Manifest number: 04C2 Signing time: Sat 06 Dec 2025 11:00:50 +0000 Manifest this update: Sat 06 Dec 2025 11:00:50 +0000 Manifest next update: Sun 07 Dec 2025 11:00:50 +0000 Files and hashes: 1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=) 2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: cib6bZqHeL8COK2dQqTkvEHyjvUlnXs/1qAy2CEUqjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:55:a4:c6:80:44:62:89:0b:18:82:03:21:68:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90 Validity Not Before: Dec 6 11:00:50 2025 GMT Not After : Dec 7 11:00:50 2025 GMT Subject: CN=f39c9de397b641471ffc5e1135a513362bafc38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:36:6e:8b:08:ad:2d:dc:67:bd:a3:4c:db:08: b0:7d:8f:15:f6:aa:81:8a:93:4a:4c:5a:24:fa:c4: d0:a2:96:03:9d:d5:fe:0f:6e:6f:24:df:4d:cf:70: d8:72:9b:a1:1b:33:b2:18:cf:3a:92:a5:7a:3b:6b: 87:10:6b:56:68:4b:60:9c:7c:20:04:e4:98:50:e2: 21:a7:5c:3f:81:7f:2f:f5:c9:20:ab:fe:14:79:a1: 4b:d7:ba:8f:99:d6:89:02:11:56:f2:2b:ec:bb:fa: 68:9e:d8:35:45:5d:8c:be:3e:f1:8e:7f:14:52:27: 4f:b9:e1:5c:5e:0f:2d:9d:88:02:3e:43:7f:43:e0: 37:13:44:f8:b1:b2:fa:09:fd:a7:96:b0:4c:35:30: 39:43:95:b5:c6:46:57:20:0e:fb:a1:d1:9c:48:21: 46:25:45:6b:2b:f2:2f:29:da:e4:79:b3:1d:0b:3d: 03:c3:e8:5e:51:88:18:a2:7b:af:b7:ec:24:84:b7: 6c:e7:fd:99:0e:ba:94:36:73:a8:d2:38:f7:3a:7c: 09:58:65:a4:4b:12:b3:57:31:6e:83:6e:1b:86:5c: 9f:15:05:f6:c5:59:b2:c8:61:26:ed:31:ec:e3:eb: 11:c0:10:c7:7b:02:a5:38:29:b0:ae:4c:2b:89:ac: 89:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9C:9D:E3:97:B6:41:47:1F:FC:5E:11:35:A5:13:36:2B:AF:C3:8C X509v3 Authority Key Identifier: keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:ac:b7:2d:75:72:1c:27:76:3f:43:80:f4:22:b1:91:14:1c: ae:42:7b:12:1a:7b:2d:10:0e:2d:9f:14:cb:b9:a8:ee:df:aa: 0a:f5:95:e5:cf:81:3b:35:5f:54:c6:8d:54:ad:c0:1e:4e:be: 70:57:09:4d:62:89:bc:2f:8c:63:0c:23:44:02:aa:fd:fb:9f: 0e:67:74:7f:6e:34:bf:db:6e:2e:d5:89:d0:9a:0a:fc:e5:31: 90:fd:df:ae:33:f2:01:5d:c1:a2:13:90:66:ab:d6:72:26:df: e4:a6:3c:5f:44:fd:87:5a:30:c8:7a:af:d2:f3:d9:ef:07:db: 5b:36:b5:06:9c:80:6e:35:74:6a:dd:59:ad:f5:9f:dd:7e:7e: d0:93:b7:26:b9:9f:32:68:4c:2a:0e:0c:7f:98:a7:de:42:e8: 41:84:b1:22:44:a0:9c:aa:23:ff:d6:ef:d1:74:03:5f:74:1a: 2f:51:2e:7c:bd:f4:52:96:67:76:2b:da:ed:76:94:3a:4d:b7: 41:17:35:8c:1e:3f:db:b1:bf:94:53:1c:e4:27:28:c2:54:87: 02:8d:57:30:f4:03:ca:b9:a9:af:76:b0:66:7d:3c:b9:4a:41: 90:44:70:c5:5c:84:aa:25:41:85:3c:f1:0c:8e:e4:46:f0:3b: e7:a9:04:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUlWkxoBEYokLGIIDIWjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmOGQ4NTQ3MzQyZTJmYzllY2ZhZGZjZWYwMGNmMjczZWY5 ZDZlOTAwHhcNMjUxMjA2MTEwMDUwWhcNMjUxMjA3MTEwMDUwWjAzMTEwLwYDVQQD EyhmMzljOWRlMzk3YjY0MTQ3MWZmYzVlMTEzNWE1MTMzNjJiYWZjMzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zZuiwitLdxnvaNM2wiwfY8V9qqB ipNKTFok+sTQopYDndX+D25vJN9Nz3DYcpuhGzOyGM86kqV6O2uHEGtWaEtgnHwg BOSYUOIhp1w/gX8v9ckgq/4UeaFL17qPmdaJAhFW8ivsu/pontg1RV2Mvj7xjn8U UidPueFcXg8tnYgCPkN/Q+A3E0T4sbL6Cf2nlrBMNTA5Q5W1xkZXIA77odGcSCFG JUVrK/IvKdrkebMdCz0Dw+heUYgYonuvt+wkhLds5/2ZDrqUNnOo0jj3OnwJWGWk SxKzVzFug24bhlyfFQX2xVmyyGEm7THs4+sRwBDHewKlOCmwrkwriayJsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOcneOXtkFHH/xeETWlEzYrr8OMMB8GA1UdIwQY MBaAFL+NhUc0Li/J7PrfzvAM8nPvnW6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjQyRlJ6UXVMOG5zLXRfTzhBenljLS1kYnBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNmY3MzQtYzY1NS00M2ExLTk5MzQt MWU3MTkzMGZjYzBmLzEvdjQyRlJ6UXVMOG5zLXRfTzhBenljLS1kYnBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNmY3MzQtYzY1NS00M2ExLTk5MzQtMWU3MTkzMGZjYzBm LzEvdjQyRlJ6UXVMOG5zLXRfTzhBenljLS1kYnBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyKy3LXVy HCd2P0OA9CKxkRQcrkJ7Ehp7LRAOLZ8Uy7mo7t+qCvWV5c+BOzVfVMaNVK3AHk6+ cFcJTWKJvC+MYwwjRAKq/fufDmd0f240v9tuLtWJ0JoK/OUxkP3frjPyAV3BohOQ ZqvWcibf5KY8X0T9h1owyHqv0vPZ7wfbWza1BpyAbjV0at1ZrfWf3X5+0JO3Jrmf MmhMKg4Mf5in3kLoQYSxIkSgnKoj/9bv0XQDX3QaL1EufL30UpZndiva7XaUOk23 QRc1jB4/27G/lFMc5CcowlSHAo1XMPQDyrmpr3awZn08uUpBkERwxVyEqiVBhTzx DI7kRvA756kExQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:23 2025 by rpki-client