This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json) Hash identifier: 9JLgTo3r5ir9Nqd8/piLkUM+eR+qIEUcy6eO7uM3ArQ= Subject key identifier: F9:CF:35:99:EC:8D:65:AA:19:C5:F6:BC:A9:64:05:48:94:EB:5B:E7 Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da Certificate serial: 019AF2AD4E50701028BFE31D3C3C9A909224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 08:00:35 +0000 Manifest this update: Sat 06 Dec 2025 08:00:35 +0000 Manifest next update: Sun 07 Dec 2025 08:00:35 +0000 Files and hashes: 1: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: zLakp6IzoU8gP31Gd5LYxj4I1Pcwmx294NK2r7yKrFI=) 2: 4UNPQAXZu9JxwT2Sc4WzpO3LENE.roa (hash: anoqLUvcJa2b/lCeb6nl+knhRinVk56BkYJL3ws+r4E=) 3: HMJLEkPGlr7x44aeMyDl-iD3-H0.roa (hash: L+qMMZpme30javZoQJKYZdKfiPeTzWKpuVRpIrhWgDs=) 4: YMTxPOuM97EplT8sh2WGlcFfkOw.roa (hash: D8L0sd2jitS16w93ripM0wnGDM02PZl2ly5UPGD5e0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4e:50:70:10:28:bf:e3:1d:3c:3c:9a:90:92:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da Validity Not Before: Dec 6 08:00:35 2025 GMT Not After : Dec 7 08:00:35 2025 GMT Subject: CN=f9cf3599ec8d65aa19c5f6bca964054894eb5be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:94:33:57:83:3e:48:3c:1b:00:4c:8c:f1:6c: 43:45:7e:a6:ca:c1:5f:20:37:6a:41:62:78:ad:1c: 3d:43:33:4b:9f:42:70:92:49:6c:b5:0c:27:31:ab: 14:17:e6:60:8a:40:16:4a:f6:73:7d:90:0b:5e:a5: ce:b5:71:11:a6:77:81:27:bf:12:ff:1e:9d:3f:83: cb:f8:25:d4:68:f1:f3:81:c6:60:19:7e:b8:01:76: 93:16:f5:d2:e9:47:bc:8e:85:35:c5:1c:96:33:90: 0c:e4:b8:a9:c1:1d:5f:a0:06:d5:9b:17:e2:4b:08: b6:70:a0:e1:97:fc:85:42:a2:c2:eb:a5:59:94:56: 61:4b:ce:d2:9a:1f:2c:4c:6f:5a:33:26:67:df:6c: 68:72:39:f0:6b:61:f8:8e:cd:4e:b5:07:43:84:41: e9:07:d4:da:a3:81:2f:c2:f0:36:0e:a1:bb:f3:65: 24:7e:c1:cd:10:62:97:cd:23:82:4e:4e:2d:e8:f2: 89:63:45:14:ec:e6:00:18:ed:80:59:93:24:42:ff: 79:b0:e3:4d:6d:85:4e:f9:3e:8b:b4:6d:94:4a:87: a2:78:60:a5:83:82:79:78:d9:55:27:cd:d9:c2:ac: 18:8a:5b:ee:53:9d:94:47:94:13:c0:44:b8:f9:5d: 50:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:35:99:EC:8D:65:AA:19:C5:F6:BC:A9:64:05:48:94:EB:5B:E7 X509v3 Authority Key Identifier: keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:03:b1:65:e2:aa:dd:ba:58:36:6d:2a:da:b6:67:f5:3f:a6: 5c:06:15:a3:30:2a:0e:fd:73:40:5e:7b:3e:7d:12:54:20:11: d4:f5:2a:a3:44:d8:4c:c6:31:67:84:01:b2:55:44:59:87:17: f1:aa:d7:8d:b0:96:89:79:68:0c:7e:f6:3b:64:60:08:16:56: a5:ec:57:ad:15:14:02:d6:f9:6b:a1:8e:fb:7b:17:b0:97:eb: 6b:e1:79:6a:e5:cd:db:8e:a3:09:f7:3f:42:55:50:0c:cb:32: 60:4d:ff:53:8e:88:a9:38:17:eb:fd:48:9a:90:05:b3:c2:11: fe:9b:e3:ea:f0:4b:d8:90:6f:fe:28:c7:68:d6:3d:11:7a:52: 54:e2:c1:38:d9:c6:d0:be:f2:0e:b7:21:4d:1e:05:f8:79:ac: 78:36:73:64:22:9b:7c:5c:72:b4:3f:80:02:8b:74:51:60:61: 55:38:46:e1:ba:8e:48:8d:27:c9:93:89:ed:91:73:e9:07:aa: 9c:6e:c4:99:a4:24:7d:3f:e7:df:84:f5:48:07:8b:a7:72:ce: a1:e4:4a:55:55:30:ca:9d:ec:47:62:93:07:97:5b:b9:ea:22: 5e:42:d2:ea:0b:a4:83:e1:60:93:5c:86:33:d2:47:37:3d:4b: d1:1c:5e:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrU5QcBAov+MdPDyakJIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzVkN2E4YmFjMDQ3N2Y1NTA5ZGZmMTFiOTE5NWNhNjBk Zjg3ZGEwHhcNMjUxMjA2MDgwMDM1WhcNMjUxMjA3MDgwMDM1WjAzMTEwLwYDVQQD EyhmOWNmMzU5OWVjOGQ2NWFhMTljNWY2YmNhOTY0MDU0ODk0ZWI1YmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pQzV4M+SDwbAEyM8WxDRX6mysFf IDdqQWJ4rRw9QzNLn0JwkklstQwnMasUF+ZgikAWSvZzfZALXqXOtXERpneBJ78S /x6dP4PL+CXUaPHzgcZgGX64AXaTFvXS6Ue8joU1xRyWM5AM5LipwR1foAbVmxfi Swi2cKDhl/yFQqLC66VZlFZhS87Smh8sTG9aMyZn32xocjnwa2H4js1OtQdDhEHp B9Tao4EvwvA2DqG782UkfsHNEGKXzSOCTk4t6PKJY0UU7OYAGO2AWZMkQv95sONN bYVO+T6LtG2USoeieGClg4J5eNlVJ83ZwqwYilvuU52UR5QTwES4+V1QiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnPNZnsjWWqGcX2vKlkBUiU61vnMB8GA1UdIwQY MBaAFNJ116i6wEd/VQnf8RuRlcpg34faMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5YWHFMckFSMzlWQ2RfeEc1R1Z5bURmaDlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83YmViMDQtMzE3Yi00NDhhLTgyZWQt NTY1YjE0NDcwMzdiLzEvMG5YWHFMckFSMzlWQ2RfeEc1R1Z5bURmaDlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83YmViMDQtMzE3Yi00NDhhLTgyZWQtNTY1YjE0NDcwMzdi LzEvMG5YWHFMckFSMzlWQ2RfeEc1R1Z5bURmaDlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwOxZeKq 3bpYNm0q2rZn9T+mXAYVozAqDv1zQF57Pn0SVCAR1PUqo0TYTMYxZ4QBslVEWYcX 8arXjbCWiXloDH72O2RgCBZWpexXrRUUAtb5a6GO+3sXsJfra+F5auXN246jCfc/ QlVQDMsyYE3/U46IqTgX6/1ImpAFs8IR/pvj6vBL2JBv/ijHaNY9EXpSVOLBONnG 0L7yDrchTR4F+HmseDZzZCKbfFxytD+AAot0UWBhVThG4bqOSI0nyZOJ7ZFz6Qeq nG7EmaQkfT/n34T1SAeLp3LOoeRKVVUwyp3sR2KTB5dbueoiXkLS6gukg+Fgk1yG M9JHNz1L0Rxexw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:09 2025 by rpki-client