This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json) Hash identifier: 554IyDO88kVgbwKe0tvbo2DsyvDsIhjLab0xFGhukyg= Subject key identifier: 37:1A:35:C0:59:B9:B0:00:18:1E:9E:A0:7C:D7:A0:6B:08:67:00:EF Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9 Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9 Certificate serial: 019AF31BAFACAA3E3B07B2265DB63E2832AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:09 +0000 Manifest this update: Sat 06 Dec 2025 10:01:09 +0000 Manifest next update: Sun 07 Dec 2025 10:01:09 +0000 Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: wJd8SJ5P4esPVpgzU0x8RuSbw4XUrdLyc25AvvlfKqM=) 2: SqjmPfaLrtBpjmBn0-LK2-XYK6E.roa (hash: oP41hXDxiX++ad4HH6tMbCxCouHbTfiMX6JPBOFqfjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:af:ac:aa:3e:3b:07:b2:26:5d:b6:3e:28:32:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9 Validity Not Before: Dec 6 10:01:09 2025 GMT Not After : Dec 7 10:01:09 2025 GMT Subject: CN=371a35c059b9b000181e9ea07cd7a06b086700ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e8:b9:5e:6d:c4:a9:74:49:c8:5a:2c:76:8e: 28:42:2a:1e:52:66:81:b0:e2:5e:b6:d8:ff:3e:0b: b4:57:f9:f1:64:9d:3e:e7:c6:6c:64:e0:d3:d8:70: 25:d4:88:43:e2:69:f5:62:de:01:70:a0:28:33:a3: fc:7c:bb:29:5a:fc:3b:9a:53:b4:a3:e7:15:b5:d9: 0f:3c:be:27:6d:2a:5b:37:50:43:9a:c6:52:5d:1f: 6e:1f:5b:70:41:c8:73:ef:cb:4b:0c:cd:a0:ad:54: 7e:65:ad:45:05:a8:6b:df:ea:75:0d:b0:1d:32:06: 4a:dd:ee:43:de:ed:03:26:b3:9b:59:da:4f:1a:29: 36:08:ca:51:2f:87:7c:94:3d:26:de:05:0c:3f:a1: 3f:34:51:6b:12:f5:01:a5:dd:5d:55:dd:5a:7b:0c: 4f:9b:18:99:68:57:07:9e:40:43:e2:8e:2f:8a:59: f2:ff:27:86:75:ce:e3:23:f1:11:fc:3b:f1:3a:77: 09:d5:4c:c0:4e:45:79:d9:9d:30:a7:23:ea:d9:86: 36:aa:01:4b:9b:e0:3e:74:98:da:a4:bf:6e:8d:4b: 53:b3:9e:e6:33:49:04:19:f3:c7:e9:48:9a:c4:36: 8a:91:86:66:91:13:d1:f0:f3:9b:88:f8:7f:a5:2c: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1A:35:C0:59:B9:B0:00:18:1E:9E:A0:7C:D7:A0:6B:08:67:00:EF X509v3 Authority Key Identifier: keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b5:fb:78:f0:da:81:12:ca:e1:c6:7d:61:e4:f2:5c:3f:89: c4:78:12:79:84:44:36:7d:a9:c1:51:4c:98:6e:9a:96:ef:8c: 46:5f:51:77:b4:09:f6:79:b4:dc:ea:1a:af:c7:00:c1:5c:2f: ae:96:bf:01:0b:32:ca:fc:c5:7c:76:7b:3f:b5:8e:45:1b:67: ae:57:07:25:30:43:db:39:b2:37:b7:2e:59:7f:30:b3:91:19: 7b:af:5c:99:c3:3a:57:25:6b:7d:20:bc:76:dc:a7:0a:5f:43: 50:f2:5b:46:88:a3:8e:00:ac:86:87:14:a3:2c:71:76:f4:c1: 3b:a4:05:4d:7a:4b:54:b8:93:97:e5:af:53:7a:2e:83:0a:6d: 7b:1a:83:46:97:66:2e:6e:db:59:16:2f:d7:a7:eb:ae:5d:a8: 42:1c:31:e7:0d:cf:76:36:47:b5:b8:60:0d:57:ce:da:90:65: ed:7c:60:cb:d8:0a:f3:bc:5f:aa:87:5b:75:dc:6e:16:eb:17: 98:fd:6d:f6:b2:50:73:c6:66:2f:20:2c:dd:72:19:88:3b:65: 68:bd:21:38:be:5f:6c:97:4d:a7:39:b7:e1:4d:d5:02:4c:e6: 8b:bc:05:1f:a7:e2:24:78:2e:9d:e5:e4:a5:d8:05:48:99:43: 98:4a:e5:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6+sqj47B7ImXbY+KDKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNGJjZjIxMjdhZjBiMmUwYTI0NmFlNDU3NDMwNGM3YWU3 NzE1ZTkwHhcNMjUxMjA2MTAwMTA5WhcNMjUxMjA3MTAwMTA5WjAzMTEwLwYDVQQD EygzNzFhMzVjMDU5YjliMDAwMTgxZTllYTA3Y2Q3YTA2YjA4NjcwMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOi5Xm3EqXRJyFosdo4oQioeUmaB sOJettj/Pgu0V/nxZJ0+58ZsZODT2HAl1IhD4mn1Yt4BcKAoM6P8fLspWvw7mlO0 o+cVtdkPPL4nbSpbN1BDmsZSXR9uH1twQchz78tLDM2grVR+Za1FBahr3+p1DbAd MgZK3e5D3u0DJrObWdpPGik2CMpRL4d8lD0m3gUMP6E/NFFrEvUBpd1dVd1aewxP mxiZaFcHnkBD4o4vilny/yeGdc7jI/ER/DvxOncJ1UzATkV52Z0wpyPq2YY2qgFL m+A+dJjapL9ujUtTs57mM0kEGfPH6UiaxDaKkYZmkRPR8PObiPh/pSze8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcaNcBZubAAGB6eoHzXoGsIZwDvMB8GA1UdIwQY MBaAFNNLzyEnrwsuCiRq5FdDBMeudxXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYTRiYzQtZGE0Yi00ZjE4LWI0YmUt YWZjMWVlNDYxMWExLzEvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wYTRiYzQtZGE0Yi00ZjE4LWI0YmUtYWZjMWVlNDYxMWEx LzEvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbX7ePDa gRLK4cZ9YeTyXD+JxHgSeYRENn2pwVFMmG6alu+MRl9Rd7QJ9nm03Ooar8cAwVwv rpa/AQsyyvzFfHZ7P7WORRtnrlcHJTBD2zmyN7cuWX8ws5EZe69cmcM6VyVrfSC8 dtynCl9DUPJbRoijjgCshocUoyxxdvTBO6QFTXpLVLiTl+WvU3ougwptexqDRpdm Lm7bWRYv16frrl2oQhwx5w3PdjZHtbhgDVfO2pBl7Xxgy9gK87xfqodbddxuFusX mP1t9rJQc8ZmLyAs3XIZiDtlaL0hOL5fbJdNpzm34U3VAkzmi7wFH6fiJHguneXk pdgFSJlDmErlOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:29 2025 by rpki-client