This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json) Hash identifier: 8XPMICdAt34Zr0F6Dp1rIaNk3WgIqtkzeKr3sfFJ21I= Subject key identifier: AA:5F:CE:2F:F1:51:4A:CF:21:6E:87:4E:2D:E2:8A:6A:44:6B:3D:94 Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06 Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06 Certificate serial: 019AFC1F030317A7AB56953704AB45CA090F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft Manifest number: 1767 Signing time: Mon 08 Dec 2025 04:01:22 +0000 Manifest this update: Mon 08 Dec 2025 04:01:22 +0000 Manifest next update: Tue 09 Dec 2025 04:01:22 +0000 Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: NW9SHiggMc6cUYhof42LjU4IZ7StQTXxDT47AtM5jbw=) 2: 9-3CRoQW_QjusaOMGpyHscSTGa0.roa (hash: hSgLJd/C+rhopgNVHjf6fxNZLuf8+Okfp+V4kR/UeS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:1f:03:03:17:a7:ab:56:95:37:04:ab:45:ca:09:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06 Validity Not Before: Dec 8 04:01:22 2025 GMT Not After : Dec 9 04:01:22 2025 GMT Subject: CN=aa5fce2ff1514acf216e874e2de28a6a446b3d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:8c:00:cf:81:df:34:4f:95:52:9b:a0:ac: a2:6c:88:9c:68:8c:f9:49:15:36:bc:c5:f7:53:a6: aa:6f:69:5e:0b:4b:9f:75:2f:0b:de:a9:ad:8e:cf: 65:35:6d:3f:7b:ba:44:c8:68:53:82:d5:a4:50:e4: 20:ed:b8:82:94:dd:26:90:56:54:28:dc:58:47:42: a6:d3:55:4a:05:eb:28:f5:54:aa:95:d5:5c:96:35: 0f:e2:bd:56:4b:f7:74:8d:e7:67:e3:08:8a:37:bb: a9:db:0b:0a:82:f7:bb:5f:f6:91:86:d8:7a:66:1e: b9:05:80:16:a1:45:b6:26:dc:e8:0f:43:9e:85:7d: 7c:7c:32:68:a5:10:58:d6:6c:f8:17:66:b1:0c:57: c1:1d:33:70:17:fe:b0:60:22:e8:10:a0:90:ea:9a: e4:56:d4:d2:c8:0a:14:d7:43:fa:21:50:a0:b6:4c: b0:bc:4f:e9:46:94:9d:da:5c:12:78:79:01:2f:5e: dd:a3:85:7a:35:cb:71:80:a3:97:09:00:cc:e3:66: b9:df:1b:2c:6b:5b:9f:58:97:28:94:6e:0e:90:d7: 6f:a0:3e:7c:ec:69:bd:7e:bd:d4:77:c6:25:f3:aa: fc:3a:62:11:9e:bb:57:58:d2:3a:0f:69:36:57:8f: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5F:CE:2F:F1:51:4A:CF:21:6E:87:4E:2D:E2:8A:6A:44:6B:3D:94 X509v3 Authority Key Identifier: keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3b:bd:5b:31:15:ad:ba:e7:10:f8:96:31:25:b0:9c:98:9e: 4f:42:65:27:ba:6e:7f:c1:19:5d:32:bf:f5:7a:cb:84:3e:c7: b4:20:57:4a:73:ae:47:f0:b6:fc:06:23:8f:d0:f7:e4:83:f4: 58:4a:bb:a2:19:f0:91:2a:d1:d7:77:45:92:fa:1e:14:0e:c1: c8:d9:55:19:55:da:5c:ad:f6:05:d8:f4:50:11:4b:f0:d6:f2: 84:45:59:1d:86:1c:27:07:e8:a0:19:5d:b5:f2:9f:8b:d8:7d: a1:e1:d2:26:ec:00:0c:55:a9:f7:ab:44:fd:15:55:da:38:55: c6:6c:77:1a:6e:98:ec:b8:8a:93:98:2b:c5:3d:39:64:51:9e: 56:b0:7b:56:82:fc:eb:cc:7d:1b:a1:54:4f:6e:88:01:bf:d0: 05:2c:44:61:57:61:c6:4d:63:46:e1:d1:bd:22:14:90:39:ab: 40:c3:3e:23:e2:60:76:46:a6:01:c4:9f:f2:d5:71:42:89:b1: c3:4a:33:f0:6f:c3:35:30:c1:82:54:b9:db:cf:ad:78:77:3e: 09:7f:44:e3:c4:60:22:62:ca:89:32:78:f5:d7:1d:0f:6c:9d: da:01:61:70:9d:5a:7e:cc:b1:ae:f1:4f:99:c1:48:71:e3:14: 30:ee:b4:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8HwMDF6erVpU3BKtFygkPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzRjMzgwNmUxZjg4ZTk5YmQ4YzVlNDkwMDc3ZjhkZTVk N2NmMDYwHhcNMjUxMjA4MDQwMTIyWhcNMjUxMjA5MDQwMTIyWjAzMTEwLwYDVQQD EyhhYTVmY2UyZmYxNTE0YWNmMjE2ZTg3NGUyZGUyOGE2YTQ0NmIzZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBiMAM+B3zRPlVKboKyibIicaIz5 SRU2vMX3U6aqb2leC0ufdS8L3qmtjs9lNW0/e7pEyGhTgtWkUOQg7biClN0mkFZU KNxYR0Km01VKBeso9VSqldVcljUP4r1WS/d0jedn4wiKN7up2wsKgve7X/aRhth6 Zh65BYAWoUW2JtzoD0OehX18fDJopRBY1mz4F2axDFfBHTNwF/6wYCLoEKCQ6prk VtTSyAoU10P6IVCgtkywvE/pRpSd2lwSeHkBL17do4V6NctxgKOXCQDM42a53xss a1ufWJcolG4OkNdvoD587Gm9fr3Ud8Yl86r8OmIRnrtXWNI6D2k2V49psQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpfzi/xUUrPIW6HTi3iimpEaz2UMB8GA1UdIwQY MBaAFNLEw4BuH4jpm9jF5JAHf43l188GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMmIwYTItOTVlMy00MWEwLThjZGYt ZmY4MDllN2RhZWNhLzEvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kMmIwYTItOTVlMy00MWEwLThjZGYtZmY4MDllN2RhZWNh LzEvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTu9WzEV rbrnEPiWMSWwnJieT0JlJ7puf8EZXTK/9XrLhD7HtCBXSnOuR/C2/AYjj9D35IP0 WEq7ohnwkSrR13dFkvoeFA7ByNlVGVXaXK32Bdj0UBFL8NbyhEVZHYYcJwfooBld tfKfi9h9oeHSJuwADFWp96tE/RVV2jhVxmx3Gm6Y7LiKk5grxT05ZFGeVrB7VoL8 68x9G6FUT26IAb/QBSxEYVdhxk1jRuHRvSIUkDmrQMM+I+JgdkamAcSf8tVxQomx w0oz8G/DNTDBglS528+teHc+CX9E48RgImLKiTJ49dcdD2yd2gFhcJ1afsyxrvFP mcFIceMUMO60ig== -----END CERTIFICATE-----Generated at Mon Dec 8 10:23:25 2025 by rpki-client