This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json) Hash identifier: juseIE7hz7aa0wHANS8r+AwyUuaj9VpYnfIBReK1d/8= Subject key identifier: E9:DC:54:1A:D1:39:5D:FE:C3:4B:4B:2A:4B:90:B8:33:51:CA:46:43 Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5 Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5 Certificate serial: 019AF1D1C27628D4409DA0872878E7FF6617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: fq_1cNVhnRyKc2u6Tpi7nWrUD48.roa (hash: 03Y77SRPe3amrviIIQ+5UUog0n/DdIDUF4QQne3bPoA=) 2: joyVHpi7wMxjJ0s6ltsRCFgcXYU.roa (hash: OCQinmVLB46q3fla3T34H+fTxVsr8er+6b+WYrx3pLU=) 3: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: aXCr/DhowpwGlHS8i8kRwctnBGTut/4Ja0wR17RkKOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c2:76:28:d4:40:9d:a0:87:28:78:e7:ff:66:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5 Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=e9dc541ad1395dfec34b4b2a4b90b83351ca4643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:f6:23:b8:64:fd:1f:9e:e0:19:1a:69:72: e7:0d:ce:b8:9e:e9:76:cf:66:2d:6c:9d:18:ae:1e: b2:33:bc:e1:e7:73:bb:d3:6d:a5:da:ac:70:17:fc: 38:c1:4a:0b:b8:b3:af:50:ea:cf:0a:ad:c7:f9:54: a0:0f:71:cf:37:04:3a:bc:46:fd:de:a2:85:44:f2: 05:38:07:26:74:2f:a1:93:14:7b:0f:ce:2c:e9:2e: 7f:c3:c2:14:49:22:95:91:80:3f:f5:a0:85:eb:07: 95:34:db:0e:12:88:63:b9:54:0c:57:1c:75:7a:77: a1:22:d3:0c:b4:89:e9:e7:26:11:4d:c3:9a:0f:16: cb:09:21:78:21:2c:12:ee:d1:82:59:e4:53:de:93: 91:5a:a8:fd:05:43:6f:af:98:0e:e9:75:96:d7:e7: 62:5c:7b:b5:fb:9e:18:8f:f1:5e:08:d6:12:de:23: bc:d5:40:b3:bb:16:e5:42:04:90:fa:3b:fe:c5:20: 4d:b1:72:d1:2e:6d:b8:c1:e4:80:72:b5:37:0d:24: 30:2f:d0:30:ba:a4:a6:e0:87:11:72:42:41:c3:fe: 6a:c0:bd:df:81:8d:3b:9a:49:0a:aa:d5:5f:6a:b8: 14:d8:aa:69:42:de:fe:3d:0a:42:bf:bb:ca:1d:50: 2d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DC:54:1A:D1:39:5D:FE:C3:4B:4B:2A:4B:90:B8:33:51:CA:46:43 X509v3 Authority Key Identifier: keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b3:d1:79:b9:b8:53:54:95:d4:9d:56:6a:45:9d:d5:eb:f4: 71:01:d1:e9:fb:8f:e1:e9:63:a7:72:3f:87:6d:8a:62:a7:f4: cb:c3:54:b3:14:f2:e8:62:81:de:7d:70:f5:b2:c6:f1:eb:07: 7e:b8:58:6f:3e:7d:12:41:b8:98:aa:b2:c7:c6:c8:0a:5b:07: 9d:2d:65:f5:6b:a6:42:20:27:fc:97:72:9c:49:c4:27:6a:01: 7f:2f:6f:6b:50:1a:0d:55:ac:96:d1:fa:70:35:4b:9a:bf:28: f5:77:9a:b6:25:61:9d:29:75:f7:73:8c:5d:a1:fe:53:9d:3b: ba:db:33:e7:ed:3c:10:4a:23:6d:1b:4e:15:87:c5:bf:73:e3: 7e:87:72:b1:72:af:bb:fc:c3:67:a0:97:b9:81:5f:ad:37:9d: db:87:0a:e0:e5:a1:19:28:66:0f:38:d9:5a:35:d6:71:86:5f: 22:6b:ac:ba:a8:b8:0e:d4:bf:3a:e2:16:e4:1f:07:9e:99:02: 65:f4:58:a1:02:95:2e:86:49:f9:1a:82:5c:d5:f0:68:1b:32: 98:c7:e6:23:6c:dd:a5:c0:e9:4b:a8:e7:4a:dd:12:c8:c9:83: cf:e6:26:11:7f:af:6b:97:bf:e6:1d:29:7f:4d:a8:9f:93:28: 29:ad:76:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cJ2KNRAnaCHKHjn/2YXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNDZmYjhkNDFhNDcyNDJhZTNlZThjZTFmMGZhOGVmODEx Njk4YjUwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD EyhlOWRjNTQxYWQxMzk1ZGZlYzM0YjRiMmE0YjkwYjgzMzUxY2E0NjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseP2I7hk/R+e4BkaaXLnDc64nul2 z2YtbJ0Yrh6yM7zh53O7022l2qxwF/w4wUoLuLOvUOrPCq3H+VSgD3HPNwQ6vEb9 3qKFRPIFOAcmdC+hkxR7D84s6S5/w8IUSSKVkYA/9aCF6weVNNsOEohjuVQMVxx1 enehItMMtInp5yYRTcOaDxbLCSF4ISwS7tGCWeRT3pORWqj9BUNvr5gO6XWW1+di XHu1+54Yj/FeCNYS3iO81UCzuxblQgSQ+jv+xSBNsXLRLm24weSAcrU3DSQwL9Aw uqSm4IcRckJBw/5qwL3fgY07mkkKqtVfargU2KppQt7+PQpCv7vKHVAtiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOncVBrROV3+w0tLKkuQuDNRykZDMB8GA1UdIwQY MBaAFK9G+41BpHJCrj7ozh8PqO+BFpi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEt ZGE4OWVkMmViNTVlLzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEtZGE4OWVkMmViNTVl LzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbPRebm4 U1SV1J1WakWd1ev0cQHR6fuP4eljp3I/h22KYqf0y8NUsxTy6GKB3n1w9bLG8esH frhYbz59EkG4mKqyx8bIClsHnS1l9WumQiAn/JdynEnEJ2oBfy9va1AaDVWsltH6 cDVLmr8o9XeatiVhnSl193OMXaH+U507utsz5+08EEojbRtOFYfFv3PjfodysXKv u/zDZ6CXuYFfrTed24cK4OWhGShmDzjZWjXWcYZfImusuqi4DtS/OuIW5B8HnpkC ZfRYoQKVLoZJ+RqCXNXwaBsymMfmI2zdpcDpS6jnSt0SyMmDz+YmEX+va5e/5h0p f02on5MoKa12Pw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:38 2025 by rpki-client