This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json) Hash identifier: 5XImGDJcrbVNn8J061/KD5zOJ5yS0MGPR9vzyuaFI9k= Subject key identifier: 91:F9:76:24:62:66:1C:26:58:12:51:56:AE:16:82:7C:F6:0E:EF:04 Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f Certificate serial: 019AF276E51D18C977225DDB6A4D1983F8D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft Manifest number: 041C Signing time: Sat 06 Dec 2025 07:01:09 +0000 Manifest this update: Sat 06 Dec 2025 07:01:09 +0000 Manifest next update: Sun 07 Dec 2025 07:01:09 +0000 Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: yCrCjdsS84Agc4YbPgX1bRjpR3+K9w7O/LEwd4ummmQ=) 2: GqXg2NC5IUxRI1mWcJNsyZxesng.roa (hash: wIFPJcYLl1DLySOyYumJerZ6TcbUU8g29XL5Yzwhz2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e5:1d:18:c9:77:22:5d:db:6a:4d:19:83:f8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f Validity Not Before: Dec 6 07:01:09 2025 GMT Not After : Dec 7 07:01:09 2025 GMT Subject: CN=91f9762462661c2658125156ae16827cf60eef04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:6e:74:27:f4:c9:c4:3c:20:85:71:9f:60: 0f:b6:81:b9:c8:fb:e3:fd:f9:62:f4:2d:ca:77:98: ad:70:89:e1:e4:a2:69:83:c6:33:36:4f:34:b3:46: 03:74:6f:11:f5:13:35:bf:27:c4:38:81:0e:41:44: d0:62:df:a3:28:25:f4:01:ce:f5:dd:3b:6a:27:88: 44:ca:64:e0:55:b4:56:44:79:58:0f:de:28:d4:03: fb:dd:8f:c0:48:55:cc:f7:88:c6:9d:f0:5a:a2:86: ab:8b:9f:b7:c6:2e:97:f7:b3:5f:3d:e4:c3:cc:79: c1:2b:71:d4:dc:b9:70:67:8f:62:8a:d0:49:37:f7: 94:cf:ee:b8:61:86:35:a5:34:a3:41:f3:d4:3a:67: 75:72:e5:10:cf:1e:8b:b5:87:3e:15:11:02:6a:73: 90:51:cf:fa:e3:b4:1c:49:f2:0b:91:ef:5c:ab:cd: 19:11:c5:56:ac:0f:e4:16:41:25:43:18:cb:12:d0: 8d:15:89:06:4c:8d:16:93:f7:fe:fe:72:0f:3b:ed: 85:d1:eb:c4:8e:dd:9e:29:1e:48:c4:53:f2:48:7d: b3:aa:bd:9d:81:f0:e5:2a:b0:89:47:f0:e5:46:7a: 12:9e:e1:8c:15:be:30:16:2c:2a:f7:c2:5d:a5:81: b6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F9:76:24:62:66:1C:26:58:12:51:56:AE:16:82:7C:F6:0E:EF:04 X509v3 Authority Key Identifier: keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d6:45:98:df:ba:96:e2:75:5c:14:4d:af:b6:4d:df:30:44: 18:d7:32:0a:e6:09:25:46:7c:6e:ee:86:19:47:3f:01:69:57: 1a:fc:0e:00:96:15:ba:1a:d7:10:a3:cd:0b:47:54:93:dd:fb: 1a:a6:10:9e:36:3a:92:33:8a:ed:24:ee:80:25:10:16:d7:48: d4:da:3c:fc:c3:01:77:63:3a:7d:b2:54:a6:75:82:cb:80:a5: 8c:d1:98:d0:2e:78:8f:e6:46:da:d1:ca:ad:20:a0:36:2f:0e: 64:15:d7:4b:cf:cf:9f:eb:b2:81:30:dc:e2:8e:6d:78:73:d5: ff:e9:53:77:7f:47:b2:ea:c7:9d:df:81:aa:04:37:e4:6d:f0: 4c:f2:0f:81:d5:05:9f:4c:80:c4:47:1d:4c:42:2d:70:d5:b8: 01:d7:d4:70:36:85:3b:93:4c:17:f8:a3:87:b5:e8:49:5c:9f: 93:d4:b8:73:3c:4b:62:67:fb:39:80:25:88:69:f6:f8:3d:d9: c5:e2:a0:1f:10:59:a0:fa:f4:2a:78:f8:93:cd:19:6b:3d:67: c3:21:7b:59:d4:8b:3d:4d:ce:b1:17:b9:2a:90:3f:83:9b:29: 93:54:c0:82:2a:d2:d4:b4:c5:52:ba:21:2f:76:bb:b0:67:26: 93:11:a7:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduUdGMl3Il3bak0Zg/jUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZTVlYjc1MzY2MjBiNTg1N2QxYmY1OTAxODNkNjUwY2Ey MzIyN2YwHhcNMjUxMjA2MDcwMTA5WhcNMjUxMjA3MDcwMTA5WjAzMTEwLwYDVQQD Eyg5MWY5NzYyNDYyNjYxYzI2NTgxMjUxNTZhZTE2ODI3Y2Y2MGVlZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdhudCf0ycQ8IIVxn2APtoG5yPvj /fli9C3Kd5itcInh5KJpg8YzNk80s0YDdG8R9RM1vyfEOIEOQUTQYt+jKCX0Ac71 3TtqJ4hEymTgVbRWRHlYD94o1AP73Y/ASFXM94jGnfBaooari5+3xi6X97NfPeTD zHnBK3HU3LlwZ49iitBJN/eUz+64YYY1pTSjQfPUOmd1cuUQzx6LtYc+FRECanOQ Uc/647QcSfILke9cq80ZEcVWrA/kFkElQxjLEtCNFYkGTI0Wk/f+/nIPO+2F0evE jt2eKR5IxFPySH2zqr2dgfDlKrCJR/DlRnoSnuGMFb4wFiwq98JdpYG2ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJH5diRiZhwmWBJRVq4Wgnz2Du8EMB8GA1UdIwQY MBaAFNHl63U2YgtYV9G/WQGD1lDKIyJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82NWZhM2MtMDE3NS00Y2VlLTk5MzAt NTljZmQ0NTNkZDE3LzEvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82NWZhM2MtMDE3NS00Y2VlLTk5MzAtNTljZmQ0NTNkZDE3 LzEvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9ZFmN+6 luJ1XBRNr7ZN3zBEGNcyCuYJJUZ8bu6GGUc/AWlXGvwOAJYVuhrXEKPNC0dUk937 GqYQnjY6kjOK7STugCUQFtdI1No8/MMBd2M6fbJUpnWCy4CljNGY0C54j+ZG2tHK rSCgNi8OZBXXS8/Pn+uygTDc4o5teHPV/+lTd39HsurHnd+BqgQ35G3wTPIPgdUF n0yAxEcdTEItcNW4AdfUcDaFO5NMF/ijh7XoSVyfk9S4czxLYmf7OYAliGn2+D3Z xeKgHxBZoPr0Knj4k80Zaz1nwyF7WdSLPU3OsRe5KpA/g5spk1TAgirS1LTFUroh L3a7sGcmkxGnBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:20 2025 by rpki-client