This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft File: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json) Hash identifier: KKJ7QMa+yPYkR6mwt0olVgxm9wV8Qgp5B4RADhokbiY= Subject key identifier: B0:BD:8E:C4:72:58:F2:96:39:EC:02:81:C8:83:32:97:FD:8D:F7:58 Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F Certificate issuer: /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f Certificate serial: 019AF31C52B5B7D5E5F4D4672F845E6E2422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:50 +0000 Manifest this update: Sat 06 Dec 2025 10:01:50 +0000 Manifest next update: Sun 07 Dec 2025 10:01:50 +0000 Files and hashes: 1: KfVGrrJYfyAf1ioL1wUbST77ZGc.roa (hash: 6wDGYAdbjHeb0jIyTRUSvJfvhrmfOqr3R3ir+lFRzkY=) 2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: lbgGYUJ8Vu4pql4nXLZIzcMSkmwzjIxGjBTt1DT8XfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:52:b5:b7:d5:e5:f4:d4:67:2f:84:5e:6e:24:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f Validity Not Before: Dec 6 10:01:50 2025 GMT Not After : Dec 7 10:01:50 2025 GMT Subject: CN=b0bd8ec47258f29639ec0281c8833297fd8df758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:00:54:93:df:e2:56:99:fa:0f:4e:bb:b6: e5:e9:ce:fb:ef:d0:4d:22:57:ca:98:1b:9a:d1:61: ee:e5:14:c8:5e:d4:8f:b8:95:04:a2:df:cc:ba:c4: 42:b1:7a:a2:b7:62:70:38:a1:14:9e:6e:76:0a:9d: ab:eb:74:cc:de:d8:d3:3a:aa:d0:e2:11:a2:c2:fd: 3e:db:54:51:39:e2:13:8f:55:5c:93:8e:62:60:29: e4:79:0b:8c:42:86:33:74:12:99:88:9a:dd:15:01: ac:65:a8:69:4d:5d:d1:a1:ee:0e:76:05:1d:9a:d5: fa:73:15:0e:5e:25:39:89:a7:68:f8:37:66:97:b9: d5:6d:b0:fe:25:af:a6:6a:ce:61:67:68:09:cb:35: 95:41:0a:ef:70:fc:0a:84:1f:cb:3d:a3:41:6b:52: de:19:85:5a:37:dc:69:31:32:a9:53:f8:23:7f:69: d6:fe:a4:0f:bd:e7:05:2d:b7:20:35:07:c3:01:1a: 94:10:a9:93:6f:a7:c7:cf:d4:37:e3:3a:60:4b:aa: ce:00:32:53:01:02:76:5b:2e:3a:a2:1b:32:79:30: c5:54:de:f5:cb:93:48:28:b7:86:9e:84:d1:14:cd: c7:5a:a7:ae:b6:db:ee:04:e7:de:c3:6a:bd:cc:7f: 75:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BD:8E:C4:72:58:F2:96:39:EC:02:81:C8:83:32:97:FD:8D:F7:58 X509v3 Authority Key Identifier: keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3f:09:b1:62:79:44:83:80:e4:5e:34:45:4c:56:ad:05:24: cd:86:de:24:c5:07:f0:74:f4:9f:b9:91:03:d6:33:c1:1a:5f: 5a:05:19:63:31:5b:d9:ff:87:6b:a0:a6:63:36:a0:4f:cb:a8: 91:08:05:65:b9:01:b4:3b:4d:ef:a8:7d:53:4f:2d:e4:76:39: e0:39:31:72:2a:84:57:ad:78:78:5c:20:0d:9a:0d:8a:6f:06: c0:9b:f7:55:d1:8a:c0:92:3f:33:de:ac:e9:70:5e:8d:ba:a0: 9b:37:a0:86:d3:14:72:20:34:64:c8:ac:05:e6:02:46:16:aa: ec:82:80:ee:06:ec:26:6a:73:18:b9:95:7b:74:89:29:b4:c6: dd:69:d1:21:c6:26:2f:4e:af:06:3b:c1:ee:09:2b:88:53:27: 58:29:1e:72:b0:19:b7:ca:6f:31:a4:57:42:32:ce:2a:09:ce: 3e:21:87:59:44:1f:3f:0b:13:58:e3:e5:b8:6d:82:5a:b4:c7: a4:93:23:41:20:b8:9c:ea:dc:c8:86:f1:e5:47:d4:75:58:12: ea:ae:26:f7:35:51:0e:55:15:1a:06:cf:c1:45:bd:f3:8c:57: 70:2f:24:81:e6:fc:72:b3:ce:0b:d9:48:92:a4:c9:bf:d8:6d: dd:32:a3:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFK1t9Xl9NRnL4RebiQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NDAyZmY4MTVlZWJjNjFhOTNjZjFiMGQwYmNkY2VjN2Ey OWYxOWYwHhcNMjUxMjA2MTAwMTUwWhcNMjUxMjA3MTAwMTUwWjAzMTEwLwYDVQQD EyhiMGJkOGVjNDcyNThmMjk2MzllYzAyODFjODgzMzI5N2ZkOGRmNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsgAVJPf4laZ+g9Ou7bl6c7779BN IlfKmBua0WHu5RTIXtSPuJUEot/MusRCsXqit2JwOKEUnm52Cp2r63TM3tjTOqrQ 4hGiwv0+21RROeITj1Vck45iYCnkeQuMQoYzdBKZiJrdFQGsZahpTV3Roe4OdgUd mtX6cxUOXiU5iado+Ddml7nVbbD+Ja+mas5hZ2gJyzWVQQrvcPwKhB/LPaNBa1Le GYVaN9xpMTKpU/gjf2nW/qQPvecFLbcgNQfDARqUEKmTb6fHz9Q34zpgS6rOADJT AQJ2Wy46ohsyeTDFVN71y5NIKLeGnoTRFM3HWqeuttvuBOfew2q9zH91iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLC9jsRyWPKWOewCgciDMpf9jfdYMB8GA1UdIwQY MBaAFHdAL/gV7rxhqTzxsNC83Ox6KfGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDBBdi1CWHV2R0dwUFBHdzBMemM3SG9wOFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZGZiZjAtMGMwNy00YTA3LTg5NTQt OWQ4YTE4ZTdiMjUyLzEvZDBBdi1CWHV2R0dwUFBHdzBMemM3SG9wOFo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hZGZiZjAtMGMwNy00YTA3LTg5NTQtOWQ4YTE4ZTdiMjUy LzEvZDBBdi1CWHV2R0dwUFBHdzBMemM3SG9wOFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOz8JsWJ5 RIOA5F40RUxWrQUkzYbeJMUH8HT0n7mRA9YzwRpfWgUZYzFb2f+Ha6CmYzagT8uo kQgFZbkBtDtN76h9U08t5HY54DkxciqEV614eFwgDZoNim8GwJv3VdGKwJI/M96s 6XBejbqgmzeghtMUciA0ZMisBeYCRhaq7IKA7gbsJmpzGLmVe3SJKbTG3WnRIcYm L06vBjvB7gkriFMnWCkecrAZt8pvMaRXQjLOKgnOPiGHWUQfPwsTWOPluG2CWrTH pJMjQSC4nOrcyIbx5UfUdVgS6q4m9zVRDlUVGgbPwUW984xXcC8kgeb8crPOC9lI kqTJv9ht3TKjYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:44:16 2025 by rpki-client