This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft File: 0seIZkHuEBvHspX9hvGSP8KD89A.mft (raw, json) Hash identifier: 7Pl3gNUePm+izPgrtm1s/2KCFtLhyypVT7iHQPgTwRk= Subject key identifier: BE:BE:F7:94:86:DB:30:87:EE:02:46:89:7F:C1:D1:61:DE:A1:54:53 Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0 Certificate issuer: /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0 Certificate serial: 019AF0F5E697ED5F4FF3E297EF6BCB1B38D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft Manifest number: 0AA5 Signing time: Sat 06 Dec 2025 00:00:38 +0000 Manifest this update: Sat 06 Dec 2025 00:00:38 +0000 Manifest next update: Sun 07 Dec 2025 00:00:38 +0000 Files and hashes: 1: 0seIZkHuEBvHspX9hvGSP8KD89A.crl (hash: DQOtBn8oryV4xRykEUO2amlPII1EG512mrtrcsy74gU=) 2: wBQJvFifdoJgqtUNKdp3wlo8l_8.roa (hash: 5Lsfd9g+UNfdFLBlgH3vEAe0fksX3TCnFsgxtR55Zwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e6:97:ed:5f:4f:f3:e2:97:ef:6b:cb:1b:38:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0 Validity Not Before: Dec 6 00:00:38 2025 GMT Not After : Dec 7 00:00:38 2025 GMT Subject: CN=bebef79486db3087ee0246897fc1d161dea15453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:f0:96:a4:2f:4e:5a:67:c2:d5:02:b0:5f: f0:96:2b:a3:75:65:9c:3b:62:6e:68:eb:07:07:a6: 43:60:61:70:e6:33:42:34:e4:b9:db:70:18:d2:cc: b6:ac:e5:2d:52:c6:bc:5c:ac:5f:b8:d0:17:6c:6a: d7:06:7b:28:17:6d:ae:f3:89:72:56:19:83:34:75: 9e:31:20:08:78:a1:6f:fe:b0:b4:42:b3:c0:bc:80: 1f:9c:d1:04:ff:63:52:63:2c:8b:25:d2:06:3c:b5: 70:02:9d:df:c9:65:05:53:32:0f:73:19:57:a8:b7: f0:e9:dd:1d:1a:3a:35:4a:fe:3a:49:b2:5b:df:6e: e7:2a:ed:d2:bf:89:b9:5d:d5:82:89:74:e4:a8:16: 42:9e:75:9c:bb:b7:8f:33:97:4d:b8:7b:8d:ae:7e: 14:87:c3:ac:26:5e:92:b9:1e:27:04:3e:93:39:fd: 10:fb:0d:06:7c:f8:e8:1b:26:f1:06:7d:00:4b:e2: 62:92:7f:86:04:7e:df:7e:51:a8:88:fd:4a:58:2e: a1:96:5f:bb:58:a9:f0:fb:09:33:af:c6:97:51:91: 13:ad:bb:92:65:47:49:f0:db:a4:f1:89:e8:f0:b5: fb:f8:98:da:c2:b4:cb:ed:5d:9f:91:e9:f6:2f:37: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BE:F7:94:86:DB:30:87:EE:02:46:89:7F:C1:D1:61:DE:A1:54:53 X509v3 Authority Key Identifier: keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:d2:c7:ad:9d:c6:32:a1:4b:b7:01:b7:56:53:60:e4:73:a2: 2b:2e:82:51:52:cd:cc:01:8e:6e:8b:51:2c:71:14:f2:05:82: f0:21:06:28:79:b7:6e:bd:e9:a6:af:7a:88:4e:38:f1:69:05: 59:e8:74:56:76:ea:e8:3c:b6:76:75:39:00:80:01:31:a2:11: fe:f1:52:71:54:33:60:de:04:db:3b:7f:95:42:f6:76:35:3b: 3c:42:ca:8f:7c:17:b9:6f:51:42:af:18:8d:56:43:e2:2a:9c: 25:1d:c3:d6:eb:a3:fa:dc:13:e6:5c:00:e0:08:43:bb:bc:67: 45:4a:36:50:f6:f6:c4:03:b9:6e:2a:97:e4:d2:18:51:60:06: 15:23:41:ce:92:0f:7a:81:ac:33:a9:b7:f7:e3:5a:b2:f2:1f: 10:79:63:9e:01:5f:6f:12:96:40:59:05:b3:cd:a4:8e:ff:c4: 1c:ec:b8:42:2a:0e:a5:b5:a9:d7:ec:0c:29:c6:89:99:90:de: 14:45:26:a8:9e:97:ac:17:d7:6a:dd:c0:22:bd:18:d9:7b:b1: 14:c7:a1:8e:6f:4c:18:22:84:3b:70:2a:c7:5e:30:96:43:8b: cf:ff:32:0d:78:ed:62:0f:18:0f:9e:a7:37:25:85:24:ab:4a: 4a:7c:aa:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eaX7V9P8+KX72vLGzjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzc4ODY2NDFlZTEwMWJjN2IyOTVmZDg2ZjE5MjNmYzI4 M2YzZDAwHhcNMjUxMjA2MDAwMDM4WhcNMjUxMjA3MDAwMDM4WjAzMTEwLwYDVQQD EyhiZWJlZjc5NDg2ZGIzMDg3ZWUwMjQ2ODk3ZmMxZDE2MWRlYTE1NDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBvwlqQvTlpnwtUCsF/wliujdWWc O2JuaOsHB6ZDYGFw5jNCNOS523AY0sy2rOUtUsa8XKxfuNAXbGrXBnsoF22u84ly VhmDNHWeMSAIeKFv/rC0QrPAvIAfnNEE/2NSYyyLJdIGPLVwAp3fyWUFUzIPcxlX qLfw6d0dGjo1Sv46SbJb327nKu3Sv4m5XdWCiXTkqBZCnnWcu7ePM5dNuHuNrn4U h8OsJl6SuR4nBD6TOf0Q+w0GfPjoGybxBn0AS+Jikn+GBH7fflGoiP1KWC6hll+7 WKnw+wkzr8aXUZETrbuSZUdJ8Nuk8Yno8LX7+JjawrTL7V2fken2LzdTgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6+95SG2zCH7gJGiX/B0WHeoVRTMB8GA1UdIwQY MBaAFNLHiGZB7hAbx7KV/Ybxkj/Cg/PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNlSVprSHVFQnZIc3BYOWh2R1NQOEtEODlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NzAyZDgtM2VhZi00ZDdiLWEzZmUt ZDg5NzU4Y2FkMjJhLzEvMHNlSVprSHVFQnZIc3BYOWh2R1NQOEtEODlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80NzAyZDgtM2VhZi00ZDdiLWEzZmUtZDg5NzU4Y2FkMjJh LzEvMHNlSVprSHVFQnZIc3BYOWh2R1NQOEtEODlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9LHrZ3G MqFLtwG3VlNg5HOiKy6CUVLNzAGObotRLHEU8gWC8CEGKHm3br3ppq96iE448WkF Weh0Vnbq6Dy2dnU5AIABMaIR/vFScVQzYN4E2zt/lUL2djU7PELKj3wXuW9RQq8Y jVZD4iqcJR3D1uuj+twT5lwA4AhDu7xnRUo2UPb2xAO5biqX5NIYUWAGFSNBzpIP eoGsM6m39+NasvIfEHljngFfbxKWQFkFs82kjv/EHOy4QioOpbWp1+wMKcaJmZDe FEUmqJ6XrBfXat3AIr0Y2XuxFMehjm9MGCKEO3Aqx14wlkOLz/8yDXjtYg8YD56n NyWFJKtKSnyqeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:44 2025 by rpki-client