This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft File: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json) Hash identifier: iMHQ9Hz5jTFzS2R0/sBXCJTDbn3BEwEpEbVgiwWssrY= Subject key identifier: FA:C6:19:4F:2F:45:60:1A:69:48:7A:EE:7F:A9:1D:14:A2:39:B2:DA Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32 Certificate issuer: /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632 Certificate serial: 019AF31CD54F8C42FCA0F8D089093DE7EB35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft Manifest number: 1431 Signing time: Sat 06 Dec 2025 10:02:24 +0000 Manifest this update: Sat 06 Dec 2025 10:02:24 +0000 Manifest next update: Sun 07 Dec 2025 10:02:24 +0000 Files and hashes: 1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: ueUevkcIkJ2FS1uDK/VMfxowBrh6cNzWNd2qblTIjNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d5:4f:8c:42:fc:a0:f8:d0:89:09:3d:e7:eb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632 Validity Not Before: Dec 6 10:02:24 2025 GMT Not After : Dec 7 10:02:24 2025 GMT Subject: CN=fac6194f2f45601a69487aee7fa91d14a239b2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:99:ae:00:c8:fa:23:31:93:69:7a:1a:d1:2b: 36:fa:d2:6d:7a:e8:59:1f:65:dd:6c:d0:63:26:6c: 69:03:e2:71:1a:5d:38:15:57:0a:eb:ce:8d:85:75: 58:d9:6b:83:21:32:3d:6e:dd:13:7c:15:01:de:ba: 55:01:e1:96:22:4d:08:ca:59:88:b9:d2:54:df:96: 1f:2a:64:32:ee:ae:2a:54:34:ba:bc:d4:73:37:6e: cc:7d:89:b8:15:48:10:35:e1:e7:fd:2f:18:25:66: 9d:d5:81:fc:49:39:76:71:15:7b:5a:55:ae:9e:1d: b0:d8:78:08:31:2f:a2:46:ba:58:c0:1a:b1:07:8c: 10:55:02:65:dc:d7:65:5c:d4:1f:9e:52:0d:cb:ad: 74:01:c3:13:bb:5a:68:0a:37:14:16:f9:6c:3b:d7: 00:dc:4a:5b:44:29:97:6b:a2:03:75:9d:21:a0:44: 86:6d:36:92:13:af:78:55:f8:49:be:d4:b1:80:da: bc:a9:74:5f:1a:52:87:00:eb:4c:8a:8d:3e:b7:58: 81:00:47:88:87:9c:49:2f:25:8c:60:c5:68:14:a8: 74:bc:ab:9b:1d:f1:fa:ff:88:33:e0:07:71:c4:29: 9f:dd:1e:e2:9e:17:3f:58:d5:a0:3c:4f:ec:e2:69: af:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C6:19:4F:2F:45:60:1A:69:48:7A:EE:7F:A9:1D:14:A2:39:B2:DA X509v3 Authority Key Identifier: keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:97:25:20:ed:00:0d:56:05:05:11:33:23:33:96:02:30:79: 79:41:fe:48:9d:e0:ce:ec:e7:8a:1e:08:d3:37:d8:d8:c1:8f: 78:cc:ab:e9:eb:a1:63:fe:bc:fd:de:6f:f0:6c:7e:45:d2:5d: 92:49:61:e5:8b:c0:5f:63:5a:e4:87:50:6f:5d:a5:e1:0c:9f: ea:3e:3b:4f:e3:58:1d:6a:41:44:a1:da:37:46:8f:85:1b:55: d8:5e:de:ea:9a:48:7a:4f:54:8c:d3:d2:9e:da:b3:77:87:e4: 8c:75:e2:b5:7c:18:a3:60:b7:1c:1f:6d:42:2c:d2:97:4a:01: b3:32:3e:35:10:40:d9:1d:99:07:84:e9:89:9e:6c:c8:a7:6c: 42:eb:a9:04:72:bc:e8:3a:57:e5:f7:b9:55:a9:16:4c:ec:ee: f9:92:c4:05:7a:e7:1d:a6:51:61:1a:af:e7:a8:03:39:46:f8: 41:f9:8a:57:4e:fd:58:34:71:98:64:dc:4d:09:82:fb:a0:67: ea:4f:04:1b:2a:6c:66:c1:e0:bf:8b:02:32:da:f1:69:8d:fb: 14:23:cb:cb:01:13:2c:9c:ed:88:53:73:9b:1e:ac:38:cd:f2: 48:d1:d4:9c:f6:1e:cd:4f:e6:e3:c6:e7:a9:95:24:c4:a9:2c: 96:1d:a2:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNVPjEL8oPjQiQk95+s1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTBiZDEzYjliNDY2YzMyZTEzNzY1ODA4OGQyODJhM2I3 ZDU2MzIwHhcNMjUxMjA2MTAwMjI0WhcNMjUxMjA3MTAwMjI0WjAzMTEwLwYDVQQD EyhmYWM2MTk0ZjJmNDU2MDFhNjk0ODdhZWU3ZmE5MWQxNGEyMzliMmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5muAMj6IzGTaXoa0Ss2+tJteuhZ H2XdbNBjJmxpA+JxGl04FVcK686NhXVY2WuDITI9bt0TfBUB3rpVAeGWIk0IylmI udJU35YfKmQy7q4qVDS6vNRzN27MfYm4FUgQNeHn/S8YJWad1YH8STl2cRV7WlWu nh2w2HgIMS+iRrpYwBqxB4wQVQJl3NdlXNQfnlINy610AcMTu1poCjcUFvlsO9cA 3EpbRCmXa6IDdZ0hoESGbTaSE694VfhJvtSxgNq8qXRfGlKHAOtMio0+t1iBAEeI h5xJLyWMYMVoFKh0vKubHfH6/4gz4AdxxCmf3R7inhc/WNWgPE/s4mmvOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrGGU8vRWAaaUh67n+pHRSiObLaMB8GA1UdIwQY MBaAFNLgvRO5tGbDLhN2WAiNKCo7fVYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHVDOUU3bTBac011RTNaWUNJMG9LanQ5VmpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZDc5OWYtYzVlYi00NGJjLWE0Mzkt NmYzYTIzZmYwYzU4LzEvMHVDOUU3bTBac011RTNaWUNJMG9LanQ5VmpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS85ZDc5OWYtYzVlYi00NGJjLWE0MzktNmYzYTIzZmYwYzU4 LzEvMHVDOUU3bTBac011RTNaWUNJMG9LanQ5VmpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw5clIO0A DVYFBREzIzOWAjB5eUH+SJ3gzuznih4I0zfY2MGPeMyr6euhY/68/d5v8Gx+RdJd kklh5YvAX2Na5IdQb12l4Qyf6j47T+NYHWpBRKHaN0aPhRtV2F7e6ppIek9UjNPS ntqzd4fkjHXitXwYo2C3HB9tQizSl0oBszI+NRBA2R2ZB4TpiZ5syKdsQuupBHK8 6DpX5fe5VakWTOzu+ZLEBXrnHaZRYRqv56gDOUb4QfmKV079WDRxmGTcTQmC+6Bn 6k8EGypsZsHgv4sCMtrxaY37FCPLywETLJztiFNzmx6sOM3ySNHUnPYezU/m48bn qZUkxKkslh2ibg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:44:05 2025 by rpki-client