This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json) Hash identifier: csr/5Vvd86JtN3XTusGoM27Vi0auIjaiQbQgCdaHWAk= Subject key identifier: BC:22:22:DC:FB:54:5B:E7:8C:2B:7C:BC:D4:D8:6A:9D:C2:FD:34:AB Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad Certificate serial: 019AF12CF7F63DE7099007317543C738A407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft Manifest number: 0B6D Signing time: Sat 06 Dec 2025 01:00:47 +0000 Manifest this update: Sat 06 Dec 2025 01:00:47 +0000 Manifest next update: Sun 07 Dec 2025 01:00:47 +0000 Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: lyPvx0mpuaM+ATLs76o6oVmzm5TbvaLMMUdhhzE7oDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f7:f6:3d:e7:09:90:07:31:75:43:c7:38:a4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad Validity Not Before: Dec 6 01:00:47 2025 GMT Not After : Dec 7 01:00:47 2025 GMT Subject: CN=bc2222dcfb545be78c2b7cbcd4d86a9dc2fd34ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bb:68:f1:82:62:12:8c:ee:49:00:36:ef:f2: 2d:01:a5:4e:e7:cd:16:72:81:e1:41:bc:61:2c:01: d5:f0:a0:60:6c:3a:7c:50:73:fe:0e:8c:c7:a2:e1: 33:2b:8a:c3:78:9f:6d:a3:c7:b5:c0:c9:00:56:1e: 7c:88:36:3a:66:3e:93:c7:33:17:5b:70:72:e5:04: f2:76:8b:8c:99:d6:ff:b2:c7:d1:0c:5c:38:9f:64: 75:cb:bc:ab:3d:2d:a6:41:e1:65:6d:9d:5e:19:d3: 3a:98:43:cd:8c:2d:e6:ad:5a:2b:0f:fc:4a:9d:e7: eb:19:c8:07:a3:e7:e1:7c:a7:f0:7f:64:3e:f4:0e: b9:e2:bc:4d:56:a3:60:98:c9:dc:a5:52:2d:69:7c: 53:be:29:ca:f2:c0:1d:78:c7:86:81:ba:a0:c8:f1: eb:c3:10:1f:4e:fe:42:3e:c1:7c:54:e7:6e:98:17: fa:15:77:8d:88:3b:4e:1c:98:d6:79:a6:af:84:15: 7d:fb:9e:9d:a0:af:38:b8:13:73:5d:45:a3:83:58: d2:61:61:dc:54:7e:09:f3:c3:71:f9:ff:3a:fe:98: d2:20:0a:ae:bc:7f:ac:30:61:d2:bf:85:58:34:ef: b1:b3:b8:05:30:b0:3e:e5:26:99:5b:32:60:a5:64: 44:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:22:22:DC:FB:54:5B:E7:8C:2B:7C:BC:D4:D8:6A:9D:C2:FD:34:AB X509v3 Authority Key Identifier: keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e5:3d:10:1c:cc:04:20:9f:a7:94:54:5d:46:f3:cc:92:e9: d2:e4:75:09:1a:1c:69:c4:cb:5f:95:64:61:07:b2:a7:3c:63: 9c:6a:ac:b5:3d:10:7b:86:c0:a0:6d:5e:a4:40:f7:5d:c5:b4: a1:f9:07:91:04:6f:40:0d:d2:50:18:55:58:b9:d1:ef:0b:23: 61:2f:41:b9:eb:fd:56:26:91:ed:86:eb:55:72:00:2f:db:7f: 7b:ad:b0:39:38:9c:7b:d8:a1:8a:eb:a1:c2:dc:44:30:14:35: 3c:13:6f:44:4e:db:e2:eb:bc:61:14:6b:7f:3e:25:39:b2:b0: ff:71:fb:f9:e7:5d:72:a1:88:bb:9a:10:1a:fd:00:94:8d:91: b1:49:f7:03:6b:84:85:55:b3:e4:26:b3:7c:7f:65:45:a7:a0: 8d:2a:ac:35:a3:92:46:61:8a:ba:16:35:8a:78:4e:f7:4d:f2: bd:75:98:29:63:7b:82:ee:50:70:e3:69:18:52:62:68:78:57: 27:14:4d:17:36:03:cb:82:27:f9:21:4d:da:b4:df:2a:89:68: 64:b3:cd:c2:d8:1d:d6:5b:b9:1b:f9:67:26:19:53:35:97:5d: 96:89:bc:72:40:08:e7:b0:12:01:d5:2f:a3:25:22:a3:59:8f: 3c:fa:57:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPf2PecJkAcxdUPHOKQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZWQxYjZjY2E1MzA5MWY2ZjkwZDFhNTk1MGNlYjZkNTNi MDNhYWQwHhcNMjUxMjA2MDEwMDQ3WhcNMjUxMjA3MDEwMDQ3WjAzMTEwLwYDVQQD EyhiYzIyMjJkY2ZiNTQ1YmU3OGMyYjdjYmNkNGQ4NmE5ZGMyZmQzNGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLto8YJiEozuSQA27/ItAaVO580W coHhQbxhLAHV8KBgbDp8UHP+DozHouEzK4rDeJ9to8e1wMkAVh58iDY6Zj6TxzMX W3By5QTydouMmdb/ssfRDFw4n2R1y7yrPS2mQeFlbZ1eGdM6mEPNjC3mrVorD/xK nefrGcgHo+fhfKfwf2Q+9A654rxNVqNgmMncpVItaXxTvinK8sAdeMeGgbqgyPHr wxAfTv5CPsF8VOdumBf6FXeNiDtOHJjWeaavhBV9+56doK84uBNzXUWjg1jSYWHc VH4J88Nx+f86/pjSIAquvH+sMGHSv4VYNO+xs7gFMLA+5SaZWzJgpWRETQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwiItz7VFvnjCt8vNTYap3C/TSrMB8GA1UdIwQY MBaAFNLtG2zKUwkfb5DRpZUM621TsDqtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNjFkZGItYjNlNS00MGIwLWFiYmUt OTQzN2U1ZmU2ZGI0LzEvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9kNjFkZGItYjNlNS00MGIwLWFiYmUtOTQzN2U1ZmU2ZGI0 LzEvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+U9EBzM BCCfp5RUXUbzzJLp0uR1CRocacTLX5VkYQeypzxjnGqstT0Qe4bAoG1epED3XcW0 ofkHkQRvQA3SUBhVWLnR7wsjYS9Buev9ViaR7YbrVXIAL9t/e62wOTice9ihiuuh wtxEMBQ1PBNvRE7b4uu8YRRrfz4lObKw/3H7+eddcqGIu5oQGv0AlI2RsUn3A2uE hVWz5CazfH9lRaegjSqsNaOSRmGKuhY1inhO903yvXWYKWN7gu5QcONpGFJiaHhX JxRNFzYDy4In+SFN2rTfKoloZLPNwtgd1lu5G/lnJhlTNZddlom8ckAI57ASAdUv oyUio1mPPPpXWg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:54 2025 by rpki-client