This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft File: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft (raw, json) Hash identifier: wc37KPzsAUlXk9mSftyGuz0ydWA6S1O5F3atBqFKqOQ= Subject key identifier: DE:EC:BF:D9:B8:74:1B:4A:97:0C:24:74:73:0F:2E:B2:D2:4E:C2:2F Authority key identifier: D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02 Certificate issuer: /CN=d045cd00736e5a0ec23b908265870d560d551b02 Certificate serial: 019AF1D1A94A0ED37EA6A7E2326658B93079 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft Manifest number: 3C Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl (hash: wr6UztwqAWtoBcg2Imh8TTMj8aE9IUjVCLx6fLY61sc=) 2: vRgl5aaB7WLnSBVnT9hT0A-Qc-M.roa (hash: /TpUEH64vG4Rf0+hWMzI+LqO4MX4umAzDK7Dis8muic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a9:4a:0e:d3:7e:a6:a7:e2:32:66:58:b9:30:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d045cd00736e5a0ec23b908265870d560d551b02 Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=deecbfd9b8741b4a970c2474730f2eb2d24ec22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:68:10:7a:88:3e:a3:78:01:10:8a:c4:12:76: 7b:47:2a:0a:d1:f2:0d:65:e6:1d:5c:5c:7a:79:52: 10:30:db:59:99:3b:90:75:64:57:d4:ce:6c:ac:69: c2:ab:b3:96:4c:9a:12:6b:bd:2a:b4:11:a5:cb:31: f3:b5:7a:fe:9e:55:75:f0:f6:4d:62:b7:8c:39:94: f5:62:e2:23:7f:0d:0a:32:16:01:1e:4b:52:9a:be: ce:cd:17:05:af:19:05:41:6b:f7:bd:e5:61:ab:d8: 84:6b:0f:d3:6d:17:36:60:50:26:82:d8:ef:1a:9d: 90:1b:58:c8:f4:43:90:e1:0f:5a:61:25:de:d4:cc: c4:89:8f:3f:1c:c4:a0:59:8e:84:a6:97:ee:50:48: 4e:b9:33:7c:21:9f:b0:ad:6c:e9:4e:bb:e4:43:03: 60:16:57:0e:d5:0d:41:e2:b0:a1:cf:84:fc:91:60: 44:25:b3:ee:68:08:c1:5f:c7:13:3d:12:52:34:06: c2:32:88:51:34:3f:d5:3d:df:f8:66:0e:80:3b:23: 3b:f4:ee:96:f6:a7:51:cd:48:32:45:af:fb:32:fe: c0:71:1a:6a:d5:12:53:c1:70:cd:ac:e1:d7:c4:6d: d9:f8:11:d2:a0:96:08:3f:af:58:cc:ab:6e:d1:06: ac:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EC:BF:D9:B8:74:1B:4A:97:0C:24:74:73:0F:2E:B2:D2:4E:C2:2F X509v3 Authority Key Identifier: keyid:D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f9:6f:01:bf:8c:19:12:a4:a5:69:9b:fd:cb:3c:ab:4e:6c: 6d:c9:bb:f5:8a:03:8a:0e:4f:39:dc:23:6b:2a:92:07:44:3a: 12:28:2c:a9:24:f4:c4:b0:55:26:3e:98:44:33:b4:5a:ec:49: 65:e1:42:ec:08:f9:61:20:80:5e:43:e7:2b:60:bb:3f:b0:25: 7f:23:2b:d2:32:a6:b3:c9:96:b6:09:1d:00:59:7e:f1:38:74: 85:75:1f:70:47:99:4e:27:05:05:50:07:eb:34:e8:cd:88:5d: a9:68:24:ab:48:f7:b6:30:d4:a8:01:06:36:ad:8a:f5:1a:89: 6d:54:38:df:9d:20:2c:8d:5e:80:59:16:fe:37:66:37:55:8a: c2:89:a4:db:e3:fd:88:a4:37:62:c9:d1:3b:21:29:96:3a:dc: 5a:1f:cd:75:2a:62:2c:c2:d5:bf:48:7e:a6:09:da:cb:ef:ed: 1e:ca:e9:83:5d:a9:70:8f:7c:b8:a2:3d:66:70:e5:6a:ad:e2: 10:50:64:a7:cb:99:9a:cc:4b:c5:67:ed:ad:b9:64:d8:55:73: 78:d2:1e:62:39:97:b1:89:b7:05:dd:d1:bb:70:69:45:a6:84: 2b:eb:a5:26:23:48:c8:10:4b:17:00:b0:b8:27:2c:e1:02:d3: a5:84:32:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0alKDtN+pqfiMmZYuTB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNDVjZDAwNzM2ZTVhMGVjMjNiOTA4MjY1ODcwZDU2MGQ1 NTFiMDIwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD EyhkZWVjYmZkOWI4NzQxYjRhOTcwYzI0NzQ3MzBmMmViMmQyNGVjMjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GgQeog+o3gBEIrEEnZ7RyoK0fIN ZeYdXFx6eVIQMNtZmTuQdWRX1M5srGnCq7OWTJoSa70qtBGlyzHztXr+nlV18PZN YreMOZT1YuIjfw0KMhYBHktSmr7OzRcFrxkFQWv3veVhq9iEaw/TbRc2YFAmgtjv Gp2QG1jI9EOQ4Q9aYSXe1MzEiY8/HMSgWY6EppfuUEhOuTN8IZ+wrWzpTrvkQwNg FlcO1Q1B4rChz4T8kWBEJbPuaAjBX8cTPRJSNAbCMohRND/VPd/4Zg6AOyM79O6W 9qdRzUgyRa/7Mv7AcRpq1RJTwXDNrOHXxG3Z+BHSoJYIP69YzKtu0QasqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7sv9m4dBtKlwwkdHMPLrLSTsIvMB8GA1UdIwQY MBaAFNBFzQBzbloOwjuQgmWHDVYNVRsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEVYTkFITnVXZzdDTzVDQ1pZY05WZzFWR3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80NjI1ZGEtYTk4Mi00NTQ4LWJlZTEt OGUzZWYzOWVjYzEyLzEvMEVYTkFITnVXZzdDTzVDQ1pZY05WZzFWR3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80NjI1ZGEtYTk4Mi00NTQ4LWJlZTEtOGUzZWYzOWVjYzEy LzEvMEVYTkFITnVXZzdDTzVDQ1pZY05WZzFWR3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPlvAb+M GRKkpWmb/cs8q05sbcm79YoDig5POdwjayqSB0Q6EigsqST0xLBVJj6YRDO0WuxJ ZeFC7Aj5YSCAXkPnK2C7P7AlfyMr0jKms8mWtgkdAFl+8Th0hXUfcEeZTicFBVAH 6zTozYhdqWgkq0j3tjDUqAEGNq2K9RqJbVQ4350gLI1egFkW/jdmN1WKwomk2+P9 iKQ3YsnROyEpljrcWh/NdSpiLMLVv0h+pgnay+/tHsrpg12pcI98uKI9ZnDlaq3i EFBkp8uZmsxLxWftrblk2FVzeNIeYjmXsYm3Bd3Ru3BpRaaEK+ulJiNIyBBLFwCw uCcs4QLTpYQyXw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:27 2025 by rpki-client