This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json) Hash identifier: 07tGH7CakpgIcAsymKfWSZ76z/HOTUWtnUQooN9kDQQ= Subject key identifier: 59:35:40:3A:34:CB:99:EF:89:AC:E7:18:78:6B:16:8B:FA:5F:6D:C3 Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb Certificate serial: 019AF31BCC6B68C5C5E5669024CED35CD5D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft Manifest number: 0C6D Signing time: Sat 06 Dec 2025 10:01:16 +0000 Manifest this update: Sat 06 Dec 2025 10:01:16 +0000 Manifest next update: Sun 07 Dec 2025 10:01:16 +0000 Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: cRFhuW+UWEecebNsZF8VMtPXjhYXLi3rnl8VHCkRVhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:cc:6b:68:c5:c5:e5:66:90:24:ce:d3:5c:d5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb Validity Not Before: Dec 6 10:01:16 2025 GMT Not After : Dec 7 10:01:16 2025 GMT Subject: CN=5935403a34cb99ef89ace718786b168bfa5f6dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:0d:19:dd:8e:ed:04:2a:50:15:ff:c3:a1: fc:a9:e7:c3:0e:15:45:5d:c9:dc:74:8a:6e:c7:20: 04:c4:ad:84:ee:d6:e2:c3:6b:d0:0e:f4:a6:60:dd: 53:d9:2d:d9:80:a9:4c:78:06:29:87:9b:ed:1b:35: 38:30:79:28:53:af:2d:ee:0a:55:47:91:91:1b:e2: 8f:17:58:41:42:c9:16:b7:7f:df:3a:68:0a:d6:4c: b2:79:90:0f:dd:d1:3b:63:ce:8d:b5:73:8e:42:52: 70:93:e0:92:93:b0:24:fe:f8:4c:a8:05:b4:b5:ea: a1:80:b8:f2:7c:01:b1:53:d1:12:fa:18:cb:0f:82: ee:29:ff:c2:42:3f:1a:d3:4d:12:a5:71:49:c9:54: 49:5c:df:67:a1:3b:e5:4b:83:ed:4d:53:f7:72:35: 17:39:bb:8d:e7:e8:02:00:15:a6:bf:fd:d5:30:ee: 97:e9:3a:16:a6:21:99:18:31:ca:e0:0e:8d:5f:92: d3:cf:2d:24:60:92:0f:af:1a:42:b6:28:3e:35:ee: 3f:86:29:59:30:1e:3e:87:e3:a2:e8:81:bc:b8:4e: d6:f0:d8:f2:ad:72:d1:f2:8e:8e:8c:36:8d:d5:bd: 93:a9:ed:b9:8c:c6:b7:84:4a:a6:48:e3:6c:30:43: b9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:35:40:3A:34:CB:99:EF:89:AC:E7:18:78:6B:16:8B:FA:5F:6D:C3 X509v3 Authority Key Identifier: keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4e:56:2f:10:b3:31:f2:12:c5:71:82:6a:cf:48:e9:6a:eb: 19:af:da:4c:23:e8:19:1a:6f:55:11:f6:73:b7:7e:92:af:54: ea:84:e1:60:6a:55:03:11:4d:26:2c:6e:2b:cb:84:2d:5f:8d: ba:a8:9f:61:f1:0d:ae:af:f0:fe:58:ae:42:d9:bb:be:42:0d: 68:d1:69:74:ed:3d:a9:a5:16:82:85:44:45:3f:57:e4:b2:ee: 41:68:f9:c5:71:02:b7:4c:79:48:5b:c6:0a:04:de:34:c4:d1: f9:91:92:7a:22:9c:9c:b1:13:2b:84:25:26:71:0e:92:85:b6: fe:ce:3d:f9:2c:7c:35:3e:1b:04:c4:0e:ea:a9:f7:87:d7:48: bd:5a:45:30:a0:ad:47:19:6f:07:99:04:3b:cd:e2:85:d3:66: a7:a4:73:8a:98:74:ee:02:05:9c:ed:83:bf:48:af:3d:41:9f: 9e:61:5a:c2:40:76:a9:7d:be:7f:c5:71:d8:1a:8d:27:59:fa: 6a:3c:30:76:1e:d0:11:41:02:b6:6f:90:03:6f:07:04:4d:c0: 6d:b2:2d:15:9a:e8:aa:9e:a1:d0:f5:c0:09:02:90:84:fb:82: 80:db:45:83:2d:01:1b:87:8a:79:76:ea:4c:96:d4:66:c7:64: c0:ff:1d:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8xraMXF5WaQJM7TXNXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNDljNDlhNzVjZjZlMjQ4YzliNTFjNzA1NGRiMmY4ZDlk Y2VkY2IwHhcNMjUxMjA2MTAwMTE2WhcNMjUxMjA3MTAwMTE2WjAzMTEwLwYDVQQD Eyg1OTM1NDAzYTM0Y2I5OWVmODlhY2U3MTg3ODZiMTY4YmZhNWY2ZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGYNGd2O7QQqUBX/w6H8qefDDhVF XcncdIpuxyAExK2E7tbiw2vQDvSmYN1T2S3ZgKlMeAYph5vtGzU4MHkoU68t7gpV R5GRG+KPF1hBQskWt3/fOmgK1kyyeZAP3dE7Y86NtXOOQlJwk+CSk7Ak/vhMqAW0 teqhgLjyfAGxU9ES+hjLD4LuKf/CQj8a000SpXFJyVRJXN9noTvlS4PtTVP3cjUX ObuN5+gCABWmv/3VMO6X6ToWpiGZGDHK4A6NX5LTzy0kYJIPrxpCtig+Ne4/hilZ MB4+h+Oi6IG8uE7W8NjyrXLR8o6OjDaN1b2Tqe25jMa3hEqmSONsMEO5RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFk1QDo0y5nviaznGHhrFov6X23DMB8GA1UdIwQY MBaAFA9JxJp1z24kjJtRxwVNsvjZ3O3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZWExNjEtY2I1Yy00ZTQxLWI4MzYt ZDgwMDc3ZTEyYjVkLzEvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9jZWExNjEtY2I1Yy00ZTQxLWI4MzYtZDgwMDc3ZTEyYjVk LzEvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANU5WLxCz MfISxXGCas9I6WrrGa/aTCPoGRpvVRH2c7d+kq9U6oThYGpVAxFNJixuK8uELV+N uqifYfENrq/w/liuQtm7vkINaNFpdO09qaUWgoVERT9X5LLuQWj5xXECt0x5SFvG CgTeNMTR+ZGSeiKcnLETK4QlJnEOkoW2/s49+Sx8NT4bBMQO6qn3h9dIvVpFMKCt RxlvB5kEO83ihdNmp6Rziph07gIFnO2Dv0ivPUGfnmFawkB2qX2+f8Vx2BqNJ1n6 ajwwdh7QEUECtm+QA28HBE3AbbItFZroqp6h0PXACQKQhPuCgNtFgy0BG4eKeXbq TJbUZsdkwP8drA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:30 2025 by rpki-client