This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json) Hash identifier: pR+VRJODvTWIVL+OICWrd7/hDTIeOLJHFFujJ2Kb9C0= Subject key identifier: 85:89:71:A6:F8:CB:5C:DD:3B:FF:26:F2:83:60:C1:BB:EC:15:8E:58 Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73 Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773 Certificate serial: 019AF540A121EA947088E75F70597D67774C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft Manifest number: 1693 Signing time: Sat 06 Dec 2025 20:00:44 +0000 Manifest this update: Sat 06 Dec 2025 20:00:44 +0000 Manifest next update: Sun 07 Dec 2025 20:00:44 +0000 Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: oXKlLWTKFPRPcCLmb2qvMC9bu7M8ShVwrwIhbYTfeUE=) 2: TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa (hash: II597D7xa6PgwHa7AFUqvd8eYmaRnt2cxxVqhwKEKzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:a1:21:ea:94:70:88:e7:5f:70:59:7d:67:77:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773 Validity Not Before: Dec 6 20:00:44 2025 GMT Not After : Dec 7 20:00:44 2025 GMT Subject: CN=858971a6f8cb5cdd3bff26f28360c1bbec158e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:51:e1:81:83:86:77:02:73:8c:5c:e1:fc: 98:57:15:b5:db:70:60:02:b8:fa:c7:83:49:4f:4b: bf:97:ff:60:98:9a:30:84:6a:58:52:a7:a6:93:ee: 67:a6:ff:a9:e8:b0:ac:68:d4:d3:d0:80:29:b7:cd: 03:c1:55:07:1b:50:bc:cc:eb:44:8f:8f:16:8c:2f: 3a:9f:5c:98:b8:e7:4d:ae:e8:dc:a5:da:a5:d3:b0: d8:46:d5:2a:55:08:fb:d2:b0:37:73:0b:14:32:f1: 10:e8:e5:a8:c4:90:e5:69:f2:76:b2:56:bc:7b:98: 9c:3f:bb:30:05:06:e3:c7:5f:c7:03:3b:6d:ac:59: 95:9f:83:f4:91:6b:c6:e7:24:56:b0:e0:a0:d0:a9: 12:29:d7:51:eb:62:50:94:18:c3:82:c4:2f:b3:ce: 36:7a:0e:00:25:eb:b7:34:dd:49:d5:2e:e5:80:1c: a3:3c:a4:fb:83:78:86:80:7c:23:09:3f:d7:10:b2: ad:70:eb:e7:4e:5f:cc:70:e5:56:44:4d:18:7a:18: d2:af:be:36:d4:28:8a:e8:05:34:78:e4:da:ec:e8: 7c:25:91:73:0d:bf:85:6c:fe:b7:1c:eb:b7:a4:5b: cf:46:b6:0d:a4:b8:d3:7e:a3:00:a1:e0:7d:db:32: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:71:A6:F8:CB:5C:DD:3B:FF:26:F2:83:60:C1:BB:EC:15:8E:58 X509v3 Authority Key Identifier: keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d6:a4:6b:92:9c:bf:3d:af:97:05:7d:d8:d1:35:17:58:fd: 5a:83:92:9c:e2:06:5b:11:57:77:ed:e5:1c:28:43:5a:3e:fa: b0:ee:56:73:24:3e:3a:6e:5c:30:87:31:8b:cc:d0:fc:38:fc: bf:79:2f:9e:25:46:3d:13:48:fb:df:96:fc:1f:d6:82:61:17: 0f:82:b4:2b:14:2e:57:3e:4d:9d:e6:cb:3c:c2:88:e3:63:0c: 96:89:f7:98:55:01:67:ca:46:b1:03:21:93:32:0b:76:5c:de: 35:72:f1:f6:4c:4f:cf:af:94:ca:d6:1c:a0:72:c7:c0:51:31: 3f:e7:01:af:2f:26:b5:5c:e2:a3:04:f1:6a:48:b8:50:9f:bb: f2:ca:cc:a5:7d:3a:ba:97:33:db:6a:fa:4d:5d:d1:e5:81:c5: 39:15:44:85:e1:20:28:bb:b2:d5:e0:b0:d6:31:e8:5c:2c:10: 05:f4:78:24:60:e5:9e:43:c1:a0:e4:20:f5:17:24:53:b8:86: c8:b8:68:f5:6a:bb:50:c9:b1:a5:77:c4:f3:db:3b:2f:57:0f: b1:22:a8:c7:44:69:34:10:bc:ef:7c:b8:5c:96:11:a1:aa:ea: e2:00:7c:af:e7:da:83:39:68:dc:0a:98:4f:43:1a:37:77:f6: 38:b5:b4:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QKEh6pRwiOdfcFl9Z3dMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMjI3N2VhMzA0YjI4NDRhNzg2ODliM2FhMGQ5MjE5ZTMz NjY3NzMwHhcNMjUxMjA2MjAwMDQ0WhcNMjUxMjA3MjAwMDQ0WjAzMTEwLwYDVQQD Eyg4NTg5NzFhNmY4Y2I1Y2RkM2JmZjI2ZjI4MzYwYzFiYmVjMTU4ZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5dR4YGDhncCc4xc4fyYVxW123Bg Arj6x4NJT0u/l/9gmJowhGpYUqemk+5npv+p6LCsaNTT0IApt80DwVUHG1C8zOtE j48WjC86n1yYuOdNrujcpdql07DYRtUqVQj70rA3cwsUMvEQ6OWoxJDlafJ2sla8 e5icP7swBQbjx1/HAzttrFmVn4P0kWvG5yRWsOCg0KkSKddR62JQlBjDgsQvs842 eg4AJeu3NN1J1S7lgByjPKT7g3iGgHwjCT/XELKtcOvnTl/McOVWRE0YehjSr742 1CiK6AU0eOTa7Oh8JZFzDb+FbP63HOu3pFvPRrYNpLjTfqMAoeB92zIEeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWJcab4y1zdO/8m8oNgwbvsFY5YMB8GA1UdIwQY MBaAFNMid+owSyhEp4aJs6oNkhnjNmdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQt MzZjODczOTY5MjNhLzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQtMzZjODczOTY5MjNh LzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtaka5Kc vz2vlwV92NE1F1j9WoOSnOIGWxFXd+3lHChDWj76sO5WcyQ+Om5cMIcxi8zQ/Dj8 v3kvniVGPRNI+9+W/B/WgmEXD4K0KxQuVz5NnebLPMKI42MMlon3mFUBZ8pGsQMh kzILdlzeNXLx9kxPz6+UytYcoHLHwFExP+cBry8mtVziowTxaki4UJ+78srMpX06 upcz22r6TV3R5YHFORVEheEgKLuy1eCw1jHoXCwQBfR4JGDlnkPBoOQg9RckU7iG yLho9Wq7UMmxpXfE89s7L1cPsSKox0RpNBC873y4XJYRoarq4gB8r+fagzlo3AqY T0MaN3f2OLW0tA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:36:15 2025 by rpki-client