This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft File: 0Dxztg8hA-47Kiw8vpIOISqS7mU.mft (raw, json) Hash identifier: GSYYQ1kZk7jIcm+V2iotAOcpWMdaH1KgokQucOep11s= Subject key identifier: 5C:25:F0:64:C2:CF:61:5C:18:5D:EC:21:8D:7C:27:86:F7:E2:CD:ED Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65 Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65 Certificate serial: 019AF509969AACE662559C1E2F7F070F877E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft Manifest number: 06D0 Signing time: Sat 06 Dec 2025 19:00:37 +0000 Manifest this update: Sat 06 Dec 2025 19:00:37 +0000 Manifest next update: Sun 07 Dec 2025 19:00:37 +0000 Files and hashes: 1: 0Dxztg8hA-47Kiw8vpIOISqS7mU.crl (hash: sY8XgTJaPP9Jrmtwmg3PxXg/4Qr/fYc8lhbzfidQKpI=) 2: tDVvrqtQQCwl2jE6yV_v8vBSPyI.roa (hash: qiENM6J31Gqa4rOEk4JnN/zBbLfxSy0s2Ydx5h5QGk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:96:9a:ac:e6:62:55:9c:1e:2f:7f:07:0f:87:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65 Validity Not Before: Dec 6 19:00:37 2025 GMT Not After : Dec 7 19:00:37 2025 GMT Subject: CN=5c25f064c2cf615c185dec218d7c2786f7e2cded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:57:39:1f:3e:48:f6:6d:ed:0a:5a:07:7b: a8:95:fe:6d:b5:bb:23:02:fa:9b:c0:7a:cd:0e:a2: 60:7d:d6:b4:06:f8:51:f2:77:81:4b:a0:05:8f:da: 1e:ff:a6:64:56:b8:4e:ba:45:53:5c:94:d8:00:bc: 37:ea:41:cb:99:dd:e9:c3:e7:a5:18:7d:75:da:17: 0f:9a:40:d2:b7:d2:69:c0:11:2a:74:27:07:89:99: 5d:46:70:24:fe:39:92:4e:ea:c0:d0:dc:f1:51:5f: 92:0d:38:72:42:84:0a:d5:0d:57:b1:00:00:b4:21: 75:92:19:1c:91:53:56:d8:11:ea:8e:b0:aa:a0:91: a7:55:f6:5d:da:23:c7:0e:26:61:7c:5c:4c:e6:24: b4:e3:33:ca:23:aa:4b:cc:a6:1b:88:6e:a0:04:a4: c7:4d:57:1f:3d:a2:60:05:ba:93:f1:fa:22:14:83: 7b:8f:ef:d3:a3:0e:3c:3e:15:a2:95:96:9a:7e:e5: 79:23:ba:c6:36:cb:d4:1f:9e:ac:bf:77:3c:fe:09: 28:8a:84:a7:ef:54:e0:53:af:60:96:f9:f6:0e:b6: a9:a7:bb:51:ed:54:43:2d:a2:c7:cc:a0:56:a5:8b: 9a:ca:5a:33:12:99:5e:e3:7b:92:49:be:87:01:a1: ea:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:25:F0:64:C2:CF:61:5C:18:5D:EC:21:8D:7C:27:86:F7:E2:CD:ED X509v3 Authority Key Identifier: keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:4d:18:21:a5:8d:ab:51:fc:4d:d3:4e:43:6c:88:cd:4b:75: 7c:ee:9b:ca:c3:d7:77:51:20:8d:d0:0d:99:1c:e5:e1:c6:53: 4e:c5:c3:72:42:43:25:e9:43:0b:72:1a:4e:f4:e9:30:d2:16: 3f:8f:a5:04:08:e4:5b:c5:6d:43:75:a5:7a:3b:40:ca:17:89: ff:58:23:8e:6c:c5:c2:a3:d3:f9:0e:4e:7c:c2:b0:19:99:d8: b4:65:2e:5d:15:66:d7:d0:05:fc:ee:8a:d8:30:69:4f:34:bd: 1f:65:aa:8c:68:2c:58:8e:ac:a6:5c:8a:2c:12:03:23:04:e1: f5:62:a8:82:86:b0:4d:c6:a8:72:2c:9b:be:2f:e9:6e:f6:c1: ea:a4:86:8d:27:bb:ba:b6:5f:fa:bf:2f:21:a8:d6:f5:2d:c4: af:4e:fb:d5:9c:f3:7b:40:bd:60:fb:f4:68:1f:08:15:e6:37: 5f:33:2e:9e:9b:43:c8:09:d6:ff:69:03:53:45:3c:11:b0:de: 8a:f5:20:25:7c:eb:3e:56:34:71:db:b9:80:9a:ef:07:ec:88: c7:da:46:05:d1:ca:f5:b5:71:e1:6a:0f:ec:d2:f7:8a:e4:2a: ff:7f:3c:cc:2a:6e:3d:63:18:bc:d8:b8:f8:08:e8:0e:78:f2: 21:a0:b4:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZaarOZiVZweL38HD4d+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwM2M3M2I2MGYyMTAzZWUzYjJhMmMzY2JlOTIwZTIxMmE5 MmVlNjUwHhcNMjUxMjA2MTkwMDM3WhcNMjUxMjA3MTkwMDM3WjAzMTEwLwYDVQQD Eyg1YzI1ZjA2NGMyY2Y2MTVjMTg1ZGVjMjE4ZDdjMjc4NmY3ZTJjZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PlXOR8+SPZt7QpaB3uolf5ttbsj AvqbwHrNDqJgfda0BvhR8neBS6AFj9oe/6ZkVrhOukVTXJTYALw36kHLmd3pw+el GH112hcPmkDSt9JpwBEqdCcHiZldRnAk/jmSTurA0NzxUV+SDThyQoQK1Q1XsQAA tCF1khkckVNW2BHqjrCqoJGnVfZd2iPHDiZhfFxM5iS04zPKI6pLzKYbiG6gBKTH TVcfPaJgBbqT8foiFIN7j+/Tow48PhWilZaafuV5I7rGNsvUH56sv3c8/gkoioSn 71TgU69glvn2Drapp7tR7VRDLaLHzKBWpYuaylozEple43uSSb6HAaHqkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwl8GTCz2FcGF3sIY18J4b34s3tMB8GA1UdIwQY MBaAFNA8c7YPIQPuOyosPL6SDiEqku5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAt NDZmMDA0YTE5NTkxLzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAtNDZmMDA0YTE5NTkx LzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN00YIaWN q1H8TdNOQ2yIzUt1fO6bysPXd1EgjdANmRzl4cZTTsXDckJDJelDC3IaTvTpMNIW P4+lBAjkW8VtQ3WlejtAyheJ/1gjjmzFwqPT+Q5OfMKwGZnYtGUuXRVm19AF/O6K 2DBpTzS9H2WqjGgsWI6splyKLBIDIwTh9WKogoawTcaociybvi/pbvbB6qSGjSe7 urZf+r8vIajW9S3Er0771Zzze0C9YPv0aB8IFeY3XzMunptDyAnW/2kDU0U8EbDe ivUgJXzrPlY0cdu5gJrvB+yIx9pGBdHK9bVx4WoP7NL3iuQq/388zCpuPWMYvNi4 +AjoDnjyIaC0rg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:58 2025 by rpki-client