This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json) Hash identifier: LtjdTIOA0nr3BsraOjDIxHoLArDSPslPowoyI+JhPSg= Subject key identifier: 6C:4F:43:FB:43:DF:B9:01:F9:F6:0E:0A:AB:BA:4E:35:8A:0E:57:04 Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd Certificate serial: 019AF19A9B69046D3C4441B33A38B3F89A3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft Manifest number: 0BC2 Signing time: Sat 06 Dec 2025 03:00:32 +0000 Manifest this update: Sat 06 Dec 2025 03:00:32 +0000 Manifest next update: Sun 07 Dec 2025 03:00:32 +0000 Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: OqPQH7CGJsyWdxTCuNo8rtcWaIdAmZjiNpjV3tLyF0Q=) 2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9b:69:04:6d:3c:44:41:b3:3a:38:b3:f8:9a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd Validity Not Before: Dec 6 03:00:32 2025 GMT Not After : Dec 7 03:00:32 2025 GMT Subject: CN=6c4f43fb43dfb901f9f60e0aabba4e358a0e5704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:e0:b2:64:d5:b1:83:15:e7:cd:6f:95:47: de:b5:f0:9b:93:e3:8e:ab:c2:ea:de:41:67:61:aa: fe:0e:4f:21:40:6a:69:ac:5a:ac:a4:6b:a1:8f:5f: cf:ef:da:76:ba:db:3c:e2:64:fa:62:c0:c4:ce:2c: 10:8a:31:1c:55:b0:b3:76:38:20:c1:57:4a:e1:d1: 28:56:10:7c:3d:2f:4c:d3:0e:29:9f:01:02:2d:b4: e2:e9:60:01:05:88:89:e1:3b:48:af:9b:ec:4c:b0: c4:78:1f:58:c9:e4:97:df:1a:b9:61:ca:20:66:b7: 62:d7:3a:d6:5d:30:42:a0:28:6c:ed:d8:3e:99:c3: dd:14:14:05:ef:c5:62:0b:68:7b:18:71:50:23:5e: 9e:6b:7a:03:25:ef:61:6a:e5:b5:57:3b:02:ca:c1: 12:6c:8c:06:6a:04:bc:f5:97:58:dd:82:80:38:d5: d9:51:d2:74:ff:23:1f:38:ca:d6:b6:8e:45:27:9c: d3:b9:70:44:b4:91:8d:44:a6:aa:96:ab:be:18:f2: c9:2f:69:68:30:75:5a:61:2e:0a:67:34:ba:9b:bd: 4b:02:e9:c4:cb:8d:6b:6c:2e:31:b0:ce:87:23:c7: f6:ac:a1:83:3a:50:39:29:22:8f:5b:90:71:9d:1b: 03:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4F:43:FB:43:DF:B9:01:F9:F6:0E:0A:AB:BA:4E:35:8A:0E:57:04 X509v3 Authority Key Identifier: keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:90:cc:3e:73:50:f8:ac:b0:f8:73:26:17:1d:48:b0:d0:9c: 34:f2:76:05:9f:1e:0d:b9:97:8a:3e:5f:7e:7c:3c:b7:84:48: dd:b4:d3:79:d7:ff:f0:6d:3b:b4:2f:91:1b:6d:af:29:87:a5: 95:10:ce:7c:51:88:97:4a:f8:81:c0:ba:92:70:21:3c:b9:5c: 85:c6:c4:d6:c2:ae:e6:53:7e:21:f6:16:af:ff:88:74:a8:29: 1d:00:4f:be:23:1c:f6:ac:4f:fa:7d:d4:03:1c:8f:47:4c:44: ad:3c:28:8f:8d:0b:a7:00:25:7d:c2:fa:fe:e6:8f:97:3a:e3: c8:32:47:53:3f:78:a2:17:db:ae:f8:c7:55:da:74:cd:b8:7c: 73:6b:a7:a5:5b:9d:d7:c6:a0:61:ed:c3:af:c5:a9:f4:51:52: 93:b3:2c:21:fc:04:e2:c6:51:b8:47:98:18:59:6d:2b:d6:e5: 8f:57:25:07:ff:92:49:a1:0a:15:02:37:3b:a0:29:88:05:c8: 9f:40:8d:59:ae:dd:80:a8:b1:0e:de:61:6c:ba:91:e6:bd:7a: c4:15:1c:c1:84:a7:98:97:88:c5:5a:56:9b:e3:dd:a3:cc:97: f1:40:eb:c2:ad:63:62:78:9c:fa:00:d6:fd:61:9f:37:04:aa: 2a:ac:d4:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmptpBG08REGzOjiz+Jo+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1 YmJjZGQwHhcNMjUxMjA2MDMwMDMyWhcNMjUxMjA3MDMwMDMyWjAzMTEwLwYDVQQD Eyg2YzRmNDNmYjQzZGZiOTAxZjlmNjBlMGFhYmJhNGUzNThhMGU1NzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsDgsmTVsYMV581vlUfetfCbk+OO q8Lq3kFnYar+Dk8hQGpprFqspGuhj1/P79p2uts84mT6YsDEziwQijEcVbCzdjgg wVdK4dEoVhB8PS9M0w4pnwECLbTi6WABBYiJ4TtIr5vsTLDEeB9YyeSX3xq5Ycog Zrdi1zrWXTBCoChs7dg+mcPdFBQF78ViC2h7GHFQI16ea3oDJe9hauW1VzsCysES bIwGagS89ZdY3YKAONXZUdJ0/yMfOMrWto5FJ5zTuXBEtJGNRKaqlqu+GPLJL2lo MHVaYS4KZzS6m71LAunEy41rbC4xsM6HI8f2rKGDOlA5KSKPW5BxnRsDTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxPQ/tD37kB+fYOCqu6TjWKDlcEMB8GA1UdIwQY MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt YmM1YWI4MTk4N2YwLzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAupDMPnNQ +Kyw+HMmFx1IsNCcNPJ2BZ8eDbmXij5ffnw8t4RI3bTTedf/8G07tC+RG22vKYel lRDOfFGIl0r4gcC6knAhPLlchcbE1sKu5lN+IfYWr/+IdKgpHQBPviMc9qxP+n3U AxyPR0xErTwoj40LpwAlfcL6/uaPlzrjyDJHUz94ohfbrvjHVdp0zbh8c2unpVud 18agYe3Dr8Wp9FFSk7MsIfwE4sZRuEeYGFltK9blj1clB/+SSaEKFQI3O6ApiAXI n0CNWa7dgKixDt5hbLqR5r16xBUcwYSnmJeIxVpWm+Pdo8yX8UDrwq1jYnic+gDW /WGfNwSqKqzU+g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:19 2025 by rpki-client