This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json) Hash identifier: d4mpC/OClfphB6B5peiliS9AIoru9wK2En9HOIcszrc= Subject key identifier: B8:86:54:94:BE:8C:E4:3D:CB:70:D6:8A:24:B9:E3:1B:C9:6B:D7:3A Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e Certificate serial: 019AF31C0CFCB74CAD0D0C0471CA4BC911D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:01:33 +0000 Manifest this update: Sat 06 Dec 2025 10:01:33 +0000 Manifest next update: Sun 07 Dec 2025 10:01:33 +0000 Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: Q5G2qnPdGvTzcZG9fjHmFiPv3X4BpC8T0c7aAmmxyVo=) 2: 8-GooV5TAxKdFjFhaWz2PUvGsuA.roa (hash: b6Xa2ccXpxI5otp+9VG+BLBYAPmLH8i33HGV6Lw4iJI=) 3: gQiZYCaIXeqAfyMrnz6-0UZTGpA.roa (hash: JWxyJtGpHCFniKAl8h4IcYF6FXj87lqG4HgwxnjAG2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:0c:fc:b7:4c:ad:0d:0c:04:71:ca:4b:c9:11:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e Validity Not Before: Dec 6 10:01:33 2025 GMT Not After : Dec 7 10:01:33 2025 GMT Subject: CN=b8865494be8ce43dcb70d68a24b9e31bc96bd73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:fe:13:d5:56:ea:03:5d:ae:fd:15:1a:f3: 92:fe:b4:42:d4:bb:91:a3:b1:9f:78:c2:11:40:e7: 23:a9:fe:e2:61:ea:48:78:46:0d:ce:bb:34:8f:9b: 87:26:57:7f:5a:ba:4e:e2:eb:f0:d8:ef:36:e5:89: 28:67:9a:62:63:bc:96:3c:cc:0d:70:32:a2:8d:fe: 24:a6:83:62:8b:da:eb:5e:38:bb:ac:0d:fd:ea:39: c2:b0:06:14:e5:ee:b2:93:de:e4:09:d8:76:c9:9c: bb:6e:e4:5d:cb:a4:a5:bb:fc:fa:74:b4:4d:49:7b: 44:cf:88:6d:c2:c6:78:16:ab:61:61:30:51:86:1c: 1c:a3:e7:bd:a9:ed:ef:3c:d6:12:2b:eb:d6:a6:92: c1:e8:7f:7d:91:59:f8:99:a3:e6:82:db:ba:ee:d7: 7b:3f:75:3f:f4:3f:79:54:e2:32:46:93:39:fa:99: 62:ec:49:19:a9:e4:09:ea:0e:3e:5d:ba:88:e0:ce: 50:0c:e3:a3:21:a4:a6:a6:87:47:15:58:77:01:8b: b2:14:ec:86:d3:38:59:15:90:46:9f:50:52:6e:c4: b9:ac:f6:50:55:f5:53:04:af:60:ed:61:6e:d5:1e: 1a:e1:05:11:cf:bb:79:86:7e:59:ca:5a:b6:27:5c: 5b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:86:54:94:BE:8C:E4:3D:CB:70:D6:8A:24:B9:E3:1B:C9:6B:D7:3A X509v3 Authority Key Identifier: keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c2:77:22:1c:89:17:a3:e1:30:35:32:74:92:75:05:aa:5a: 64:32:9d:03:8a:73:c6:b3:35:81:41:0a:68:ba:36:8a:2a:61: 33:22:2d:86:74:ce:cb:64:96:42:6f:e7:77:1b:58:9b:84:3a: 8b:4b:16:71:12:8d:3d:59:21:eb:e8:ec:37:8d:79:9e:e8:bd: 2e:64:d7:e4:ea:98:6f:42:db:bb:a1:7d:e4:a3:ae:93:00:c0: f0:f7:6b:7d:5d:aa:e2:92:50:2d:f8:ee:4c:12:ec:68:5e:bd: 86:fa:5f:6f:b2:40:d2:77:a1:6b:62:04:9c:e0:2c:d3:13:59: 74:d2:3c:9a:30:e0:b2:b6:fa:07:6a:26:5b:6e:d0:7a:b2:ed: cb:ab:8a:2b:dc:ec:d7:58:de:f1:c9:cc:8c:79:57:aa:e8:1f: 89:ae:92:a6:cc:da:ca:f1:e8:02:d1:6f:9c:82:92:98:b7:1d: e7:cb:f5:0f:2e:98:9d:df:1e:e1:b6:f4:11:c6:98:db:a5:e6: 1e:75:d7:a2:e4:29:c1:ae:de:c4:a1:4a:0e:71:c8:69:c0:b2: 05:c1:49:58:d3:b1:13:2b:61:d8:a4:0b:73:89:ef:ac:7a:ba: d5:fe:dd:87:0d:1f:67:ae:0c:98:45:a6:67:1c:30:f4:5d:22: d1:29:3a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAz8t0ytDQwEccpLyRHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMTIyYTVjYjA2NDNmNzM2YzdlYzc5NjE4MDlhMjU5Mzg2 NjhmMGUwHhcNMjUxMjA2MTAwMTMzWhcNMjUxMjA3MTAwMTMzWjAzMTEwLwYDVQQD EyhiODg2NTQ5NGJlOGNlNDNkY2I3MGQ2OGEyNGI5ZTMxYmM5NmJkNzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNX+E9VW6gNdrv0VGvOS/rRC1LuR o7GfeMIRQOcjqf7iYepIeEYNzrs0j5uHJld/WrpO4uvw2O825YkoZ5piY7yWPMwN cDKijf4kpoNii9rrXji7rA396jnCsAYU5e6yk97kCdh2yZy7buRdy6Slu/z6dLRN SXtEz4htwsZ4FqthYTBRhhwco+e9qe3vPNYSK+vWppLB6H99kVn4maPmgtu67td7 P3U/9D95VOIyRpM5+pli7EkZqeQJ6g4+XbqI4M5QDOOjIaSmpodHFVh3AYuyFOyG 0zhZFZBGn1BSbsS5rPZQVfVTBK9g7WFu1R4a4QURz7t5hn5Zylq2J1xb1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiGVJS+jOQ9y3DWiiS54xvJa9c6MB8GA1UdIwQY MBaAFNESKlywZD9zbH7HlhgJolk4Zo8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hY2NkMzgtMGFlNi00YjQzLWExNjgt MTE1MmY0MzkzMDIwLzEvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hY2NkMzgtMGFlNi00YjQzLWExNjgtMTE1MmY0MzkzMDIw LzEvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8J3IhyJ F6PhMDUydJJ1BapaZDKdA4pzxrM1gUEKaLo2iiphMyIthnTOy2SWQm/ndxtYm4Q6 i0sWcRKNPVkh6+jsN415nui9LmTX5OqYb0Lbu6F95KOukwDA8PdrfV2q4pJQLfju TBLsaF69hvpfb7JA0neha2IEnOAs0xNZdNI8mjDgsrb6B2omW27QerLty6uKK9zs 11je8cnMjHlXqugfia6SpszayvHoAtFvnIKSmLcd58v1Dy6Ynd8e4bb0EcaY26Xm HnXXouQpwa7exKFKDnHIacCyBcFJWNOxEyth2KQLc4nvrHq61f7dhw0fZ64MmEWm Zxww9F0i0Sk6Fw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:29 2025 by rpki-client