This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft File: 0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json) Hash identifier: 7syf/gFFGQHIqFDuQR80KNaWRVYq+YJQG/gfLlOjQfs= Subject key identifier: BC:38:DE:27:91:3B:9A:AF:4D:01:0E:2B:14:4D:3C:B3:78:0A:BA:BF Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13 Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13 Certificate serial: 019AF3525DE9E0630E557F970B7C9212A869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:00:52 +0000 Manifest this update: Sat 06 Dec 2025 11:00:52 +0000 Manifest next update: Sun 07 Dec 2025 11:00:52 +0000 Files and hashes: 1: 0mHHxrKDuXooxqRJqM3AcObFutU.roa (hash: 0sIJmx7yyuOdBXcmte6YeWeL6TZg8JAjxBTze6wfptI=) 2: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: k0vwzyFF3hDc2e28th45dlm8zpGsDPonILDelZK9I7w=) 3: 7CJziOdAfq9jwl7KYFdQlPSS2HM.roa (hash: oYgf2+8vVMNQWr/UIAh3TmOHiKE3yvmzUsWvpHQBY4E=) 4: AA2twhj3JjqNeEtfXh_nvFIhwUI.roa (hash: 7pwyUMMRmENXJp1YdVN9DBuKjXp76GQ7r0RF+5Zw+oI=) 5: NKe-wrE2WicgBb0c0Ud-bVOtGPw.roa (hash: gADDqpEfldBNZqdg/FkPxqfMdnRA+6kZ643uxJ4620k=) 6: dV3eLvyh7dkJSKTfdErtuw7Jadc.roa (hash: NpVV1N+SDAUUoPHhUF4/SnqeySzcrRHlw0l3druFyDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:5d:e9:e0:63:0e:55:7f:97:0b:7c:92:12:a8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13 Validity Not Before: Dec 6 11:00:52 2025 GMT Not After : Dec 7 11:00:52 2025 GMT Subject: CN=bc38de27913b9aaf4d010e2b144d3cb3780ababf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:99:45:8b:ab:d1:2e:5a:06:9c:86:91:9a:0c: 1a:b8:c1:4a:f1:ad:6f:a9:81:26:2a:14:37:69:9a: e4:02:be:7c:6b:af:51:40:a2:2a:26:a6:ed:bc:e8: d4:f0:91:49:f1:ed:cd:7c:3b:fa:8c:b1:be:ce:b6: cb:aa:e4:98:1a:48:9f:06:b0:89:ef:ca:3c:4e:ea: 0d:60:48:b3:b6:6c:02:9c:b7:38:48:ef:3d:e0:c4: 37:4e:85:ea:f1:d3:be:8d:a6:e7:fc:7a:5b:38:65: 78:b4:53:3f:45:06:2e:b0:86:3b:88:65:59:e6:26: 27:53:f9:df:db:a7:af:c2:a5:45:db:e0:43:00:d4: be:a8:55:49:ab:c5:b7:be:83:ef:9b:dc:03:a2:ad: 75:ae:f5:bd:41:fe:f3:3b:ee:2c:27:1f:8a:08:7f: 81:0e:d8:e0:10:e6:40:54:4d:a7:a9:4f:c8:47:fd: 7b:36:f8:f5:fb:db:f0:f7:2c:8f:2a:ad:18:7d:82: eb:ad:2d:c7:ee:e8:bb:93:87:ed:6b:5a:9f:cd:19: 5f:f9:bd:a2:b7:1a:61:08:3a:40:e8:be:42:61:2a: 5e:02:8a:3e:7a:9f:50:dd:da:fb:f3:6f:3d:f1:e1: 93:ed:91:c1:b6:70:24:91:5f:d5:12:a9:cd:7c:58: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:38:DE:27:91:3B:9A:AF:4D:01:0E:2B:14:4D:3C:B3:78:0A:BA:BF X509v3 Authority Key Identifier: keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:aa:d8:ab:98:69:4e:a0:27:3c:70:f5:be:25:75:23:e4:1a: 4e:78:de:2b:70:48:1a:89:3d:a2:22:be:98:f9:33:ca:d3:20: cd:14:a1:6e:81:c1:c3:52:19:ac:6d:f0:15:58:c2:7e:02:0b: 45:c1:fd:4f:fe:45:cc:37:2e:6c:16:3e:9a:0c:47:f8:46:24: 22:c5:1e:fc:26:3b:b9:cc:66:44:d6:c0:31:30:37:7e:6f:90: 25:35:7d:86:92:58:6b:72:78:a6:36:a9:03:dd:66:dc:a9:93: 40:66:c3:64:74:c9:8e:93:b7:da:9c:d5:3e:b5:0c:bd:d4:90: 59:97:ec:c6:a1:78:8e:f2:66:4d:8c:9e:25:61:b3:83:3e:07: 93:d0:76:46:e3:86:90:ba:eb:d5:8c:fb:da:fc:95:c2:37:5e: 4b:9a:eb:6e:4d:32:03:92:3e:72:a8:7e:03:61:41:5d:4e:30: 4c:78:a1:22:49:7d:94:42:75:55:7c:c8:46:78:b6:34:8a:98: 75:53:fc:77:ff:65:01:5a:90:bd:9a:cb:31:90:4c:0a:93:05: 2f:73:83:65:b2:b7:32:96:33:34:74:2b:29:c0:81:8b:09:7e: 05:8b:71:b4:ad:31:34:4a:d5:27:6c:75:b6:cc:60:09:00:38: 4c:46:f5:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUl3p4GMOVX+XC3ySEqhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzJiMGVlMTg3OTI4NDA5MDY1ZDE5ZWU5YzA4NThlOGMx N2VhMTMwHhcNMjUxMjA2MTEwMDUyWhcNMjUxMjA3MTEwMDUyWjAzMTEwLwYDVQQD EyhiYzM4ZGUyNzkxM2I5YWFmNGQwMTBlMmIxNDRkM2NiMzc4MGFiYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoplFi6vRLloGnIaRmgwauMFK8a1v qYEmKhQ3aZrkAr58a69RQKIqJqbtvOjU8JFJ8e3NfDv6jLG+zrbLquSYGkifBrCJ 78o8TuoNYEiztmwCnLc4SO894MQ3ToXq8dO+jabn/HpbOGV4tFM/RQYusIY7iGVZ 5iYnU/nf26evwqVF2+BDANS+qFVJq8W3voPvm9wDoq11rvW9Qf7zO+4sJx+KCH+B DtjgEOZAVE2nqU/IR/17Nvj1+9vw9yyPKq0YfYLrrS3H7ui7k4fta1qfzRlf+b2i txphCDpA6L5CYSpeAoo+ep9Q3dr782898eGT7ZHBtnAkkV/VEqnNfFi34wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLw43ieRO5qvTQEOKxRNPLN4Crq/MB8GA1UdIwQY MBaAFNLCsO4YeShAkGXRnunAhY6MF+oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2Et YzhlODYzYzFhOGQxLzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2EtYzhlODYzYzFhOGQx LzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqrYq5hp TqAnPHD1viV1I+QaTnjeK3BIGok9oiK+mPkzytMgzRShboHBw1IZrG3wFVjCfgIL RcH9T/5FzDcubBY+mgxH+EYkIsUe/CY7ucxmRNbAMTA3fm+QJTV9hpJYa3J4pjap A91m3KmTQGbDZHTJjpO32pzVPrUMvdSQWZfsxqF4jvJmTYyeJWGzgz4Hk9B2RuOG kLrr1Yz72vyVwjdeS5rrbk0yA5I+cqh+A2FBXU4wTHihIkl9lEJ1VXzIRni2NIqY dVP8d/9lAVqQvZrLMZBMCpMFL3ODZbK3MpYzNHQrKcCBiwl+BYtxtK0xNErVJ2x1 tsxgCQA4TEb10w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:59 2025 by rpki-client