This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json) Hash identifier: P5VA7MSBxw8Qapko3+thygGPfjJ0fbEXaUvE2Dt4DrM= Subject key identifier: 38:11:45:8B:8A:9A:30:FB:C9:76:2A:90:69:61:47:99:88:04:E4:95 Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a Certificate serial: 019AF2401ED5326D36F8C851C8DFAA38976F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft Manifest number: 149E Signing time: Sat 06 Dec 2025 06:01:19 +0000 Manifest this update: Sat 06 Dec 2025 06:01:19 +0000 Manifest next update: Sun 07 Dec 2025 06:01:19 +0000 Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: e2WpbNXzz1EJ8NT1A0kyA9AYtO/Q9T9IyZNULUGJbpA=) 2: YV4mxnesnEqsoXEgOeVxrXzaM2I.roa (hash: cQ3+oKEwuuiKGHKe3AeYP28TBOd1C3qmRH0uqKxLNb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1e:d5:32:6d:36:f8:c8:51:c8:df:aa:38:97:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a Validity Not Before: Dec 6 06:01:19 2025 GMT Not After : Dec 7 06:01:19 2025 GMT Subject: CN=3811458b8a9a30fbc9762a90696147998804e495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:98:35:c2:af:26:c0:bd:06:68:23:84:3a:1b: 72:76:ab:7e:ee:a9:05:85:04:3d:a4:3a:87:3c:7a: 85:15:94:f7:57:9a:76:5d:91:34:5e:27:85:3e:03: 71:62:24:bb:ce:e0:21:8b:0a:f2:c0:83:1e:09:14: 50:02:01:7c:e6:fe:1d:69:1c:1b:c9:c0:29:58:75: 75:12:7d:c0:98:82:2c:42:f0:91:f8:25:1f:51:f0: ae:f4:bc:17:ec:1e:c3:a2:36:ad:0a:f9:be:8d:b0: 1c:f5:7f:82:94:e6:d3:b5:9a:82:2f:83:69:47:72: 24:57:ed:6a:7c:d3:29:71:3a:a6:8c:00:47:4e:ed: ce:1e:bd:18:bb:ef:36:1a:a8:18:bd:8e:b8:4e:65: 94:40:ec:7b:32:a3:67:fe:5d:12:fa:17:93:5a:05: de:65:2f:47:28:6e:fd:d1:2d:9c:2b:fe:04:43:84: 9d:20:48:e6:b7:52:58:d5:81:8d:cd:50:c8:78:ec: 33:49:93:c0:1a:be:b3:e9:c9:50:d6:dd:d4:0f:e6: 43:1b:d7:27:88:cb:86:63:71:7c:8e:09:5d:14:0c: 57:7e:cc:38:87:42:bc:68:37:1f:ef:5a:e2:ef:08: 64:75:cb:8c:bd:77:70:ca:56:5e:46:80:41:19:e9: b8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:11:45:8B:8A:9A:30:FB:C9:76:2A:90:69:61:47:99:88:04:E4:95 X509v3 Authority Key Identifier: keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:50:06:e2:fa:b3:24:2b:c7:79:e2:ac:67:36:97:e4:33:94: 44:86:73:bd:d9:7e:de:de:dd:c2:82:d5:25:1a:97:45:e9:e5: 20:80:d5:f5:63:a5:8c:af:6a:b0:b3:27:6d:02:1f:ea:6c:f0: e9:58:b4:b5:1a:9c:6d:74:3a:7d:1a:9d:13:d0:25:8b:0f:eb: 6f:5c:15:da:a2:09:41:81:af:18:8f:98:2a:8b:c3:ed:13:5c: 89:7a:11:3f:86:a4:35:a8:dd:9a:32:b9:aa:1d:ad:a4:5d:8e: d8:e2:5a:34:3f:dc:68:11:21:f1:41:63:ab:fb:51:c6:dd:67: f0:8e:b7:7b:0b:06:34:f3:9f:ff:72:20:7c:0d:64:3c:aa:70: 12:7a:ff:8a:60:71:e0:1e:7b:ed:62:7d:05:da:38:e4:29:ad: db:e5:31:3c:5f:93:3d:8b:b7:83:3a:c7:4b:2f:18:4d:d3:2f: 6c:f3:12:60:93:96:f7:30:bf:47:83:8b:f7:0f:b0:b1:4e:d2: 0a:1c:6a:69:ec:3d:b0:33:6b:71:d2:f6:06:e1:85:0a:c7:ce: de:e6:49:09:40:aa:ac:cb:00:32:57:dd:94:29:08:41:32:7f: a2:72:43:05:12:b0:f5:8f:6a:2f:b5:df:d6:20:40:40:bb:fa: 73:da:ae:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQB7VMm02+MhRyN+qOJdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNWIyNjIzYTM5ZDU1NmM1MGI3MDQ2ZDM2NDQ3ZmI2MjFh Zjk3NGEwHhcNMjUxMjA2MDYwMTE5WhcNMjUxMjA3MDYwMTE5WjAzMTEwLwYDVQQD EygzODExNDU4YjhhOWEzMGZiYzk3NjJhOTA2OTYxNDc5OTg4MDRlNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJg1wq8mwL0GaCOEOhtydqt+7qkF hQQ9pDqHPHqFFZT3V5p2XZE0XieFPgNxYiS7zuAhiwrywIMeCRRQAgF85v4daRwb ycApWHV1En3AmIIsQvCR+CUfUfCu9LwX7B7DojatCvm+jbAc9X+ClObTtZqCL4Np R3IkV+1qfNMpcTqmjABHTu3OHr0Yu+82GqgYvY64TmWUQOx7MqNn/l0S+heTWgXe ZS9HKG790S2cK/4EQ4SdIEjmt1JY1YGNzVDIeOwzSZPAGr6z6clQ1t3UD+ZDG9cn iMuGY3F8jgldFAxXfsw4h0K8aDcf71ri7whkdcuMvXdwylZeRoBBGem4KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgRRYuKmjD7yXYqkGlhR5mIBOSVMB8GA1UdIwQY MBaAFNBbJiOjnVVsULcEbTZEf7Yhr5dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEZzbUk2T2RWV3hRdHdSdE5rUl90aUd2bDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMGNhNzYtZTI2NC00MGYxLTlkOGEt MDY1Y2ExZjM2MzEwLzEvMEZzbUk2T2RWV3hRdHdSdE5rUl90aUd2bDBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hMGNhNzYtZTI2NC00MGYxLTlkOGEtMDY1Y2ExZjM2MzEw LzEvMEZzbUk2T2RWV3hRdHdSdE5rUl90aUd2bDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlAG4vqz JCvHeeKsZzaX5DOURIZzvdl+3t7dwoLVJRqXRenlIIDV9WOljK9qsLMnbQIf6mzw 6Vi0tRqcbXQ6fRqdE9Aliw/rb1wV2qIJQYGvGI+YKovD7RNciXoRP4akNajdmjK5 qh2tpF2O2OJaND/caBEh8UFjq/tRxt1n8I63ewsGNPOf/3IgfA1kPKpwEnr/imBx 4B577WJ9Bdo45Cmt2+UxPF+TPYu3gzrHSy8YTdMvbPMSYJOW9zC/R4OL9w+wsU7S Chxqaew9sDNrcdL2BuGFCsfO3uZJCUCqrMsAMlfdlCkIQTJ/onJDBRKw9Y9qL7Xf 1iBAQLv6c9qu0A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:03 2025 by rpki-client