This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft File: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json) Hash identifier: hbHOsXvskNjq3f6vkK5xb+B0PME0Tqt3rq8Q5CEXM2Y= Subject key identifier: 0C:0C:EF:56:E7:00:C6:F4:19:AE:77:56:11:FA:F0:9A:93:39:C8:61 Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Certificate serial: 019AF12D56ADCF6F0C34CE1859C6A23927A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft Manifest number: 177A Signing time: Sat 06 Dec 2025 01:01:11 +0000 Manifest this update: Sat 06 Dec 2025 01:01:11 +0000 Manifest next update: Sun 07 Dec 2025 01:01:11 +0000 Files and hashes: 1: C_ziNaXKn4VDpbrAEu9weVF52JA.roa (hash: uW9Tu1YIQ5nRvRVJvhMOdJvsptWQiAhpmFSnfRGl4eY=) 2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: UNh/w4p5yIgLmWQT6qiDtJ/hpY6POjSNCaaaJhbWauY=) 3: MhkIG3M7fwR8fILw15Agvyj3QKI.roa (hash: FFjReexmd0K3X+SEM/x6XzG86nvZA19Vvp973XX9p0Q=) 4: X0VOPwSHvzkDEaI9vdnqoeKICu4.roa (hash: QYZRUmSjoVGFNA4mKmXvECcmo9Gvd4pgJxevI7UENLo=) 5: h8Rooww-YtXgZdj5PaYT_SFfSvw.roa (hash: u6xVJHYA1uzH6xbwrO/RW/GLLxj+VO2zqxgk0PQuKro=) 6: mrqVIwSDxW20lv8kvtQ7QFndJZU.roa (hash: J/buU17qNgp7OI4nvhA+Zkd2w7B/8zGPPbTTlXaLVUM=) 7: uqUylZbw2V7XHMMPlt0smOkdOBE.roa (hash: 3G9ODJS5eJVlImugW9SB7DFrUNhhTxGc7u4YCGLBIF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:56:ad:cf:6f:0c:34:ce:18:59:c6:a2:39:27:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Validity Not Before: Dec 6 01:01:11 2025 GMT Not After : Dec 7 01:01:11 2025 GMT Subject: CN=0c0cef56e700c6f419ae775611faf09a9339c861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:48:4d:00:cc:08:7a:54:81:16:e8:59:2f: db:70:ca:67:6e:27:06:97:2b:53:d3:a8:22:12:47: 0e:f5:a9:b1:e6:b4:24:6d:a4:fb:58:07:72:af:8a: 2b:5a:16:dc:dd:2e:78:e2:98:62:4e:ef:6f:13:2f: 08:6b:ef:2b:37:40:ea:bb:49:d4:d4:7d:b7:cf:01: bc:fa:60:a3:12:6e:3a:a9:c1:13:f9:fb:ad:b9:be: 41:ae:00:8f:87:49:a3:92:30:80:8c:33:18:58:1c: ce:53:79:00:ea:6e:dc:fa:3a:aa:a1:5e:d8:d9:30: 94:a5:3e:aa:05:5e:5e:7d:b5:c6:ce:5e:f1:a8:fd: 90:d9:cc:90:81:9c:3a:e9:8c:f9:14:3a:62:80:2c: 1f:77:2d:ce:ba:50:5a:1a:7f:10:cd:44:6e:39:2c: 91:a6:c7:49:32:39:eb:a5:4e:ee:f9:54:0e:9c:d6: db:f4:3d:c6:50:02:fc:68:b9:17:25:76:e0:aa:63: 4a:6c:c3:52:a8:e0:98:e9:81:78:3a:d5:b9:46:30: 36:78:f1:ed:6a:51:c7:8a:ae:d0:40:1c:ba:df:b8: b1:a5:54:c0:4f:8a:39:de:0e:45:26:ad:9f:1d:dd: ec:c1:86:3f:7c:63:5a:ca:a4:bc:78:3d:20:84:10: c9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0C:EF:56:E7:00:C6:F4:19:AE:77:56:11:FA:F0:9A:93:39:C8:61 X509v3 Authority Key Identifier: keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c8:8c:44:22:1b:a4:3e:95:2b:02:e7:30:9d:0b:01:17:be: 9f:64:68:7d:5d:de:54:2d:97:77:fd:51:19:26:65:37:04:e4: e3:86:7f:f5:a4:1f:fc:aa:3c:9a:28:4d:28:b1:bf:28:6b:d9: 04:2f:07:f8:0f:38:39:a1:df:a3:c8:65:8a:66:f3:eb:b9:c5: fd:85:b5:83:2f:61:b7:a8:c8:a2:32:ef:7a:0c:4b:cc:d7:91: a3:cc:48:54:c5:bf:f9:15:a3:5a:1e:84:9c:90:53:31:19:a3: 33:fb:e5:f5:98:7e:b3:80:41:65:33:d8:cb:1b:21:52:0d:cd: 90:e9:92:9e:e2:00:6a:07:b6:58:39:5b:ac:0b:85:80:5b:ea: 08:53:a4:8d:a3:90:d7:3e:88:1a:c9:3e:0b:36:d7:bd:d1:f4: d5:7f:80:18:d4:47:5e:9f:ef:2f:33:7f:a8:80:4e:a2:48:fb: f1:90:e2:5f:86:1b:42:e7:ce:6b:46:20:9a:e9:04:08:25:e7: d3:91:70:15:03:d5:fd:b3:49:cd:87:d5:98:af:b2:6d:fe:90: f6:bd:42:78:e0:38:c6:ed:2f:0a:98:41:1f:ab:74:84:1b:85: 9d:c7:87:ca:fb:af:7c:5a:99:a2:8e:24:d0:cc:63:04:1c:36: 40:ca:eb:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVatz28MNM4YWcaiOSeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2 YWEzMmUwHhcNMjUxMjA2MDEwMTExWhcNMjUxMjA3MDEwMTExWjAzMTEwLwYDVQQD EygwYzBjZWY1NmU3MDBjNmY0MTlhZTc3NTYxMWZhZjA5YTkzMzljODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEZITQDMCHpUgRboWS/bcMpnbicG lytT06giEkcO9amx5rQkbaT7WAdyr4orWhbc3S544phiTu9vEy8Ia+8rN0Dqu0nU 1H23zwG8+mCjEm46qcET+futub5BrgCPh0mjkjCAjDMYWBzOU3kA6m7c+jqqoV7Y 2TCUpT6qBV5efbXGzl7xqP2Q2cyQgZw66Yz5FDpigCwfdy3OulBaGn8QzURuOSyR psdJMjnrpU7u+VQOnNbb9D3GUAL8aLkXJXbgqmNKbMNSqOCY6YF4OtW5RjA2ePHt alHHiq7QQBy637ixpVTAT4o53g5FJq2fHd3swYY/fGNayqS8eD0ghBDJ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwM71bnAMb0Ga53VhH68JqTOchhMB8GA1UdIwQY MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt YjBiYWQxOGYwMmQwLzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMiMRCIb pD6VKwLnMJ0LARe+n2RofV3eVC2Xd/1RGSZlNwTk44Z/9aQf/Ko8mihNKLG/KGvZ BC8H+A84OaHfo8hlimbz67nF/YW1gy9ht6jIojLvegxLzNeRo8xIVMW/+RWjWh6E nJBTMRmjM/vl9Zh+s4BBZTPYyxshUg3NkOmSnuIAage2WDlbrAuFgFvqCFOkjaOQ 1z6IGsk+CzbXvdH01X+AGNRHXp/vLzN/qIBOokj78ZDiX4YbQufOa0YgmukECCXn 05FwFQPV/bNJzYfVmK+ybf6Q9r1CeOA4xu0vCphBH6t0hBuFnceHyvuvfFqZoo4k 0MxjBBw2QMrrEA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:30 2025 by rpki-client