This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json) Hash identifier: 8fbIukb7NcZPqQ/xVE614/JlL7uFU+crxk6wa0V/Zpk= Subject key identifier: 08:30:CB:AC:22:99:56:59:43:8F:16:F7:E5:38:BF:A4:2A:4B:B4:68 Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70 Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370 Certificate serial: 019AF08895051C55C3BCCCDA6A3945D1EAEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft Manifest number: 07EF Signing time: Fri 05 Dec 2025 22:01:14 +0000 Manifest this update: Fri 05 Dec 2025 22:01:14 +0000 Manifest next update: Sat 06 Dec 2025 22:01:14 +0000 Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: dlPMlQZTm7DYyrEFg84Y3/S1jHuO/hwNFjq0DAtJnIk=) 2: lzWZkqskGdmxyou0z2qQw2KTqoY.roa (hash: AeWymtaVk051Pxp8CZX6BkiYok3D+PBMltMiLV1wiVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:95:05:1c:55:c3:bc:cc:da:6a:39:45:d1:ea:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370 Validity Not Before: Dec 5 22:01:14 2025 GMT Not After : Dec 6 22:01:14 2025 GMT Subject: CN=0830cbac22995659438f16f7e538bfa42a4bb468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:33:79:fb:0b:03:de:92:2a:9f:a4:a5:a9:27: cf:96:6a:a5:44:36:86:5b:b2:a3:ee:d4:94:70:c7: fa:86:2e:c5:83:39:30:91:c6:c0:8b:98:b5:7b:60: 2a:e7:f5:cd:c5:53:f8:04:2f:84:04:a2:ba:3d:4a: 89:5b:a7:30:68:8c:fa:ab:3f:6a:8a:f4:5f:00:1a: d6:5e:0b:92:ca:12:4d:01:17:e4:80:af:43:49:6a: 3e:49:c8:b6:28:ca:60:e9:02:8d:7c:42:de:cf:47: 34:e4:4b:d2:e2:c2:1c:1e:38:63:24:2e:73:93:fe: 38:ae:15:44:d3:2e:2a:d8:47:e5:44:e9:1e:05:5b: 26:70:40:b9:0c:4f:a5:d2:3d:93:49:49:10:18:16: 2c:f0:c3:98:bd:b5:20:20:61:6c:58:04:8e:6d:e2: 73:c6:c1:ba:98:0b:e9:57:7e:5c:3b:36:86:9c:77: a8:4a:3c:df:29:f3:66:85:60:ec:95:19:69:62:03: 68:1a:46:af:0e:b9:e6:59:9a:66:de:fb:fc:c6:35: 7f:be:50:94:c1:41:f0:0d:bb:63:e2:17:4a:64:75: 4a:b6:e1:79:35:0a:4c:61:39:ab:6b:5c:af:31:94: 3f:2a:9a:4e:40:73:c0:3f:02:3e:d3:34:95:be:72: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:30:CB:AC:22:99:56:59:43:8F:16:F7:E5:38:BF:A4:2A:4B:B4:68 X509v3 Authority Key Identifier: keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7e:9d:0b:f3:19:45:3a:fc:31:f3:2c:95:2a:a0:38:46:3b: 73:8b:12:c1:d3:29:a6:88:cc:c5:9b:62:73:d4:0b:26:ee:05: 36:c3:2f:04:9b:cc:27:40:28:67:a2:bc:3e:01:64:d7:f6:73: c7:e1:cd:0a:72:f9:a5:a6:35:ea:a8:f8:13:c2:fb:39:98:30: 08:34:aa:44:2a:20:19:8a:b6:3a:8b:6f:49:33:84:b0:0b:c4: fb:e7:1a:2f:0c:93:31:9f:d5:8b:ae:24:11:86:c0:50:0b:b8: ad:65:b2:d0:d2:89:28:7d:13:78:ac:4d:29:61:6d:09:f5:de: e5:38:78:b6:85:7d:af:02:9f:a9:1f:1e:18:be:37:8f:ec:bd: e8:c2:22:15:ca:05:39:ed:6a:af:1f:f1:28:08:53:45:4b:54: 71:25:d8:4d:3d:e7:93:a2:be:4c:49:c4:d9:86:a6:73:b7:b9: 5b:1f:4f:23:c4:82:3f:c2:fd:1d:88:cc:39:a4:df:62:ac:91: b1:9d:f7:b6:0a:7b:c9:eb:dc:e1:18:f1:b1:a4:3a:af:7f:ba: e0:02:8b:03:46:5b:82:04:52:b4:de:da:91:d0:41:f7:b6:bf: 4b:6b:43:70:a4:c8:f9:11:af:d2:51:c1:f0:4b:1c:0a:40:df: de:09:a2:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiJUFHFXDvMzaajlF0ervMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMzAxMTdhZTFjZGMyZGYxYzU4ODE2ZTAwZTU0NTFmODdl ZmIzNzAwHhcNMjUxMjA1MjIwMTE0WhcNMjUxMjA2MjIwMTE0WjAzMTEwLwYDVQQD EygwODMwY2JhYzIyOTk1NjU5NDM4ZjE2ZjdlNTM4YmZhNDJhNGJiNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzN5+wsD3pIqn6SlqSfPlmqlRDaG W7Kj7tSUcMf6hi7FgzkwkcbAi5i1e2Aq5/XNxVP4BC+EBKK6PUqJW6cwaIz6qz9q ivRfABrWXguSyhJNARfkgK9DSWo+Sci2KMpg6QKNfELez0c05EvS4sIcHjhjJC5z k/44rhVE0y4q2EflROkeBVsmcEC5DE+l0j2TSUkQGBYs8MOYvbUgIGFsWASObeJz xsG6mAvpV35cOzaGnHeoSjzfKfNmhWDslRlpYgNoGkavDrnmWZpm3vv8xjV/vlCU wUHwDbtj4hdKZHVKtuF5NQpMYTmra1yvMZQ/KppOQHPAPwI+0zSVvnKPpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgwy6wimVZZQ48W9+U4v6QqS7RoMB8GA1UdIwQY MBaAFNEwEXrhzcLfHFiBbgDlRR+H77NwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUt MjUwYTRkNzc3YmE2LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUtMjUwYTRkNzc3YmE2 LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACn6dC/MZ RTr8MfMslSqgOEY7c4sSwdMppojMxZtic9QLJu4FNsMvBJvMJ0AoZ6K8PgFk1/Zz x+HNCnL5paY16qj4E8L7OZgwCDSqRCogGYq2OotvSTOEsAvE++caLwyTMZ/Vi64k EYbAUAu4rWWy0NKJKH0TeKxNKWFtCfXe5Th4toV9rwKfqR8eGL43j+y96MIiFcoF Oe1qrx/xKAhTRUtUcSXYTT3nk6K+TEnE2Yamc7e5Wx9PI8SCP8L9HYjMOaTfYqyR sZ33tgp7yevc4RjxsaQ6r3+64AKLA0ZbggRStN7akdBB97a/S2tDcKTI+RGv0lHB 8EscCkDf3gmirw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:55 2025 by rpki-client