This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json) Hash identifier: rw8GnKnJTL8u9NxR3XZCJHguWSxdF+unfjvDs4YwrEs= Subject key identifier: AF:CC:4B:B5:EB:D6:BE:81:A7:A4:65:64:F9:FE:A9:EA:A6:6F:44:1A Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa Certificate serial: 019AF208B35F850C92F8A9FB712EADFECF77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: vPniqDTSAcnEjnxGfA75CDBhJNrH9tePj4lmW/2q+6s=) 2: ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa (hash: +H0qLZUs9MIqoA3GO45JQCdAhU27Z3D/QbaTtfRGmIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b3:5f:85:0c:92:f8:a9:fb:71:2e:ad:fe:cf:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=afcc4bb5ebd6be81a7a46564f9fea9eaa66f441a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:3d:46:87:d9:51:15:4e:7c:be:c0:61:73: 60:1e:3d:06:0f:9a:62:22:b5:de:72:51:45:64:0e: 76:dd:38:83:a9:fa:d6:63:eb:82:45:b1:a4:b3:f5: 31:e0:f9:c6:67:1c:9c:53:bc:b8:71:7a:d2:9e:b7: 54:7b:35:54:23:4b:f6:f1:e8:f7:c9:9d:f0:b2:05: eb:59:15:82:8d:2e:ee:56:35:44:2e:50:78:4b:cc: a5:04:1e:61:eb:fc:f2:10:1b:8a:49:6f:78:78:a0: 35:5b:3e:2f:e5:91:4d:23:64:e3:b1:13:8b:f3:f5: 64:d2:62:9a:40:3a:a4:4e:7b:62:17:2c:d8:72:b6: ea:40:18:df:49:8f:76:ac:5e:70:72:a4:23:eb:24: 34:23:d4:d8:7d:24:3e:52:bd:4e:54:5d:37:c1:0d: 2c:80:2c:36:34:e1:b9:a2:c9:4d:a3:b8:d8:ba:82: 9b:e4:fc:3a:04:97:e6:79:59:07:c2:57:90:82:5c: fe:8e:86:97:42:dc:17:73:72:30:96:a9:d5:1f:06: 79:f9:68:42:ad:7b:e6:9c:1b:af:43:58:c1:e9:6e: eb:7e:e2:7d:cc:70:79:e1:46:dc:99:74:9b:a2:ca: ef:0b:21:34:01:19:4d:40:eb:6c:ef:d6:19:22:90: 3f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CC:4B:B5:EB:D6:BE:81:A7:A4:65:64:F9:FE:A9:EA:A6:6F:44:1A X509v3 Authority Key Identifier: keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b4:fd:d2:5b:6d:f1:21:f5:58:55:28:bb:b5:53:d3:3f:47: 31:7f:0f:9e:bf:76:5a:3a:cd:65:3f:56:8a:5d:6d:1d:3d:ed: d9:8c:55:54:23:cf:e5:5b:b0:92:91:c5:2e:83:51:e4:83:71: 4a:2c:df:c4:b7:17:e2:92:82:e3:cc:d6:33:9b:61:c4:7f:7d: 0a:bb:c5:4e:66:cd:58:af:67:bf:79:75:3f:46:e7:ac:e3:e2: 76:16:e4:2e:0f:99:79:84:93:3b:79:91:18:4d:2f:cd:a2:d6: 8c:d3:51:c4:e0:d8:7f:5e:35:18:db:78:7a:72:b1:7a:d6:7d: f7:8d:dd:02:ef:ce:0e:59:d8:d0:dc:8f:b3:6b:e8:18:f3:92: 02:e4:7c:6d:83:17:cd:30:9c:cc:44:e7:d9:12:b3:63:3f:81: ac:92:ec:a8:d8:53:0d:7b:f3:08:e0:c6:c4:94:74:fc:9e:ee: 35:e4:76:4d:32:bc:f6:d3:77:8b:f6:fa:97:bf:7f:f2:bb:60: 68:17:68:e0:de:72:b8:c0:7e:e4:f0:d2:b4:32:9d:fe:de:eb: b4:0a:09:e4:b4:99:5d:dd:d8:23:e6:94:28:66:ab:ac:90:af: 48:96:89:9a:e4:b1:00:ad:3f:d6:8f:fa:5c:05:37:28:77:1d: 0b:e0:49:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLNfhQyS+Kn7cS6t/s93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZjM4ZDRhZWI0ZDAyODhkYmI4NTRkMWVhZTBiZDhhZDNm ODQxZmEwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD EyhhZmNjNGJiNWViZDZiZTgxYTdhNDY1NjRmOWZlYTllYWE2NmY0NDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro89RofZURVOfL7AYXNgHj0GD5pi IrXeclFFZA523TiDqfrWY+uCRbGks/Ux4PnGZxycU7y4cXrSnrdUezVUI0v28ej3 yZ3wsgXrWRWCjS7uVjVELlB4S8ylBB5h6/zyEBuKSW94eKA1Wz4v5ZFNI2TjsROL 8/Vk0mKaQDqkTntiFyzYcrbqQBjfSY92rF5wcqQj6yQ0I9TYfSQ+Ur1OVF03wQ0s gCw2NOG5oslNo7jYuoKb5Pw6BJfmeVkHwleQglz+joaXQtwXc3IwlqnVHwZ5+WhC rXvmnBuvQ1jB6W7rfuJ9zHB54UbcmXSbosrvCyE0ARlNQOts79YZIpA/qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/MS7Xr1r6Bp6RlZPn+qeqmb0QaMB8GA1UdIwQY MBaAFNLzjUrrTQKI27hU0ergvYrT+EH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZPTlN1dE5Bb2pidUZUUjZ1QzlpdFA0UWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS80OGVmMjctNTg1OC00MjRiLWFkZDEt MGY2NDU1ZjA1Mjc2LzEvMHZPTlN1dE5Bb2pidUZUUjZ1QzlpdFA0UWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS80OGVmMjctNTg1OC00MjRiLWFkZDEtMGY2NDU1ZjA1Mjc2 LzEvMHZPTlN1dE5Bb2pidUZUUjZ1QzlpdFA0UWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErT90ltt 8SH1WFUou7VT0z9HMX8Pnr92WjrNZT9Wil1tHT3t2YxVVCPP5VuwkpHFLoNR5INx SizfxLcX4pKC48zWM5thxH99CrvFTmbNWK9nv3l1P0bnrOPidhbkLg+ZeYSTO3mR GE0vzaLWjNNRxODYf141GNt4enKxetZ9943dAu/ODlnY0NyPs2voGPOSAuR8bYMX zTCczETn2RKzYz+BrJLsqNhTDXvzCODGxJR0/J7uNeR2TTK89tN3i/b6l79/8rtg aBdo4N5yuMB+5PDStDKd/t7rtAoJ5LSZXd3YI+aUKGarrJCvSJaJmuSxAK0/1o/6 XAU3KHcdC+BJ9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:11 2025 by rpki-client