This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json) Hash identifier: m0Im7yJrDPzo13rOOCOWXbup77jJtjV9cib3h+SDdkg= Subject key identifier: D5:99:39:86:3B:1C:04:92:4B:48:40:49:8E:B3:59:C2:4E:23:F5:CA Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a Certificate serial: 019AF31C455E42A4D61C63484EDCE58B7F92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft Manifest number: 0C8D Signing time: Sat 06 Dec 2025 10:01:47 +0000 Manifest this update: Sat 06 Dec 2025 10:01:47 +0000 Manifest next update: Sun 07 Dec 2025 10:01:47 +0000 Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=) 2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: zelQy1aPpWQn2Vy8gg4tq/fFmZ3rY4r3OdtxbwsMKlI=) 3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:45:5e:42:a4:d6:1c:63:48:4e:dc:e5:8b:7f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a Validity Not Before: Dec 6 10:01:47 2025 GMT Not After : Dec 7 10:01:47 2025 GMT Subject: CN=d59939863b1c04924b4840498eb359c24e23f5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:be:ff:4e:11:08:50:3d:bc:e7:23:5f:eb: eb:e8:e8:44:9f:58:c7:a0:a1:0b:68:54:b5:65:81: 4a:b0:8d:2d:7d:a3:92:3d:4f:3d:aa:af:a0:87:9b: 58:68:a1:2c:62:d4:0f:7d:90:6f:cf:1a:86:47:e3: e9:21:3e:5d:e3:22:e5:3c:bb:2a:c5:16:e2:c4:50: 83:df:31:d6:37:09:15:a3:69:e7:b7:98:ea:97:4b: 1c:ef:ff:c5:e0:7e:0f:06:00:11:3c:4b:e4:f6:50: c1:ec:8c:a6:fc:d0:90:9c:49:10:24:72:a3:62:4e: 1a:4a:c0:1c:e6:0a:14:f3:96:c6:d8:e2:d3:5f:ec: 50:c8:7d:34:7a:94:dc:27:3f:6d:4e:a7:ab:68:79: 08:65:d5:60:db:39:2d:db:61:af:d1:2d:5f:b7:ea: f1:a0:06:22:d9:65:a2:0f:44:6e:f6:ed:79:62:04: bf:fd:0c:53:6a:f9:93:27:4f:e0:9d:0c:71:a9:cb: bd:03:d6:90:4e:f5:0a:0a:c2:bd:cf:20:e7:a9:82: 96:27:e2:27:42:9e:0e:91:fa:c3:1e:0b:dd:74:76: 80:6e:08:33:37:7d:b2:7e:62:5b:b5:81:42:98:73: 0c:b9:19:40:8f:e3:af:ae:49:3b:31:e0:05:63:55: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:99:39:86:3B:1C:04:92:4B:48:40:49:8E:B3:59:C2:4E:23:F5:CA X509v3 Authority Key Identifier: keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:20:96:37:1a:c5:c8:b1:45:23:10:58:28:55:7a:37:db:ae: cb:a9:08:36:3b:b1:04:30:b7:2d:bc:33:ec:bb:ab:77:66:16: 69:51:0e:ee:2a:af:3b:f8:1f:ad:ec:31:fa:65:01:bb:72:dc: e0:d9:a5:2e:77:f4:f7:59:1c:9b:aa:f1:17:2c:54:7e:05:ef: a9:79:81:b8:8b:cf:ef:05:a4:58:b9:97:62:ed:31:8c:b5:7e: aa:83:a8:b3:0d:d2:1d:16:81:8d:2d:11:fd:4d:88:7f:56:af: 3b:da:26:30:17:bc:b7:91:a8:5b:8c:3a:df:12:46:fb:57:7f: 87:47:e4:06:7f:fe:40:89:de:b7:91:fd:69:9e:d9:e6:b8:c4: 8e:e6:18:55:02:59:58:db:94:72:f7:7c:c5:a0:cc:06:e0:ab: b2:73:29:a8:fb:bb:9d:32:94:89:30:99:1a:e3:01:29:0a:cc: d3:97:3e:91:65:ae:c5:eb:1e:6f:3f:9d:ee:1f:23:38:b3:ce: e5:85:2f:82:47:05:8c:67:f4:98:e6:22:1d:00:9a:b3:b6:f1: 00:d9:65:06:9f:57:2d:d3:bd:18:8a:e4:01:3d:21:f2:b5:aa: db:cd:a9:2f:cc:6a:4a:31:94:64:91:24:2a:1c:f7:9e:69:fe: 06:77:f0:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEVeQqTWHGNITtzli3+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YmQxMGYxYjE0YmJiMjc2N2ZmZGNhZWM0YjQxNzI4ODBi YTQ2MWEwHhcNMjUxMjA2MTAwMTQ3WhcNMjUxMjA3MTAwMTQ3WjAzMTEwLwYDVQQD EyhkNTk5Mzk4NjNiMWMwNDkyNGI0ODQwNDk4ZWIzNTljMjRlMjNmNWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uy+/04RCFA9vOcjX+vr6OhEn1jH oKELaFS1ZYFKsI0tfaOSPU89qq+gh5tYaKEsYtQPfZBvzxqGR+PpIT5d4yLlPLsq xRbixFCD3zHWNwkVo2nnt5jql0sc7//F4H4PBgARPEvk9lDB7Iym/NCQnEkQJHKj Yk4aSsAc5goU85bG2OLTX+xQyH00epTcJz9tTqeraHkIZdVg2zkt22Gv0S1ft+rx oAYi2WWiD0Ru9u15YgS//QxTavmTJ0/gnQxxqcu9A9aQTvUKCsK9zyDnqYKWJ+In Qp4OkfrDHgvddHaAbggzN32yfmJbtYFCmHMMuRlAj+Ovrkk7MeAFY1VfXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWZOYY7HASSS0hASY6zWcJOI/XKMB8GA1UdIwQY MBaAFGi9EPGxS7snZ//crsS0FyiAukYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYt OWZlN2Q5MjhkOWJlLzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYtOWZlN2Q5MjhkOWJl LzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCCWNxrF yLFFIxBYKFV6N9uuy6kINjuxBDC3Lbwz7Lurd2YWaVEO7iqvO/gfrewx+mUBu3Lc 4NmlLnf091kcm6rxFyxUfgXvqXmBuIvP7wWkWLmXYu0xjLV+qoOosw3SHRaBjS0R /U2If1avO9omMBe8t5GoW4w63xJG+1d/h0fkBn/+QInet5H9aZ7Z5rjEjuYYVQJZ WNuUcvd8xaDMBuCrsnMpqPu7nTKUiTCZGuMBKQrM05c+kWWuxesebz+d7h8jOLPO 5YUvgkcFjGf0mOYiHQCas7bxANllBp9XLdO9GIrkAT0h8rWq282pL8xqSjGUZJEk Khz3nmn+BnfwhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:44 2025 by rpki-client