This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json) Hash identifier: XtxbqO7ZcPViFBzKUp6jOn97B44YaqXb9M8lQpgFYgU= Subject key identifier: 59:EE:F4:37:BF:A1:99:3E:D8:E2:E4:F1:D8:4B:32:CF:95:2D:D0:0A Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58 Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58 Certificate serial: 019AF19B61331173EDB30C0EE1E37964D142 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft Manifest number: 15F6 Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: Jd1s+JsecJ/S0HtxPQUPla1x1lnrxxz7qCFz3+b3DMg=) 2: mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (hash: omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:61:33:11:73:ed:b3:0c:0e:e1:e3:79:64:d1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58 Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=59eef437bfa1993ed8e2e4f1d84b32cf952dd00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:3b:d4:43:21:9e:fd:cf:08:9e:b2:6b:e8: 1e:bf:73:dc:ae:8d:7a:e7:f8:61:02:a0:e9:a2:a6: f9:8b:6e:3d:99:45:a3:f3:60:55:ce:ef:03:e4:68: f4:be:59:d9:66:0b:fa:58:f3:18:81:1d:fb:90:6c: b9:a1:21:90:0c:81:fa:14:75:c6:65:bb:a0:f6:26: cf:1d:9a:5d:7b:6d:e6:10:9c:ca:09:71:44:12:73: d8:c6:70:44:17:6b:45:2e:ac:80:44:80:a4:4f:be: 31:da:55:e1:47:bb:a4:01:7c:07:6f:63:d7:17:85: d8:53:bc:9b:ca:5d:88:12:f9:71:04:a4:bc:70:4c: c2:22:e0:28:07:bf:30:0a:20:9e:10:19:58:be:8c: ae:bd:c7:cc:2d:57:07:70:78:44:a9:84:a7:bc:eb: 8b:5a:c4:9f:9a:5c:54:91:c2:e8:52:80:46:44:6b: 93:75:06:46:e6:19:87:14:a5:b3:04:91:cd:ca:61: 29:39:42:71:8f:49:56:4f:76:af:81:6c:cd:b2:e2: 16:43:77:cc:39:c4:0c:ee:54:74:71:fa:96:59:c8: 13:46:d9:58:18:3e:83:84:4a:24:d1:ca:83:12:44: c8:0d:b0:bb:db:1d:1c:8b:0f:d4:ac:4a:be:2a:99: b8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EE:F4:37:BF:A1:99:3E:D8:E2:E4:F1:D8:4B:32:CF:95:2D:D0:0A X509v3 Authority Key Identifier: keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:8b:f7:6a:fd:23:ac:9b:65:a6:6d:32:89:85:ca:28:98:b9: 5a:29:04:84:de:f4:f5:69:ce:a6:1c:56:b8:27:a9:d5:41:88: 43:8e:64:16:f5:23:c2:d8:2d:b5:d1:e7:e8:26:b7:69:77:18: 05:81:41:63:b7:e1:ec:a2:3f:4b:68:33:80:8f:ee:f4:12:11: eb:04:94:b8:29:04:66:cb:93:23:81:16:e1:d8:eb:00:55:7d: fa:27:33:a7:11:01:f2:28:4a:8c:f5:e4:10:06:71:81:23:8e: a1:5a:5a:18:a3:52:57:95:af:8f:dd:e9:fe:68:81:46:94:18: 64:e3:42:b4:63:45:27:b7:4d:86:17:b5:46:44:42:99:06:ce: 8e:f4:bb:c7:2a:f8:b4:c2:f6:de:d6:a4:9c:ec:8b:ef:ec:63: 63:e9:4f:18:5c:5b:22:dc:ec:f6:48:14:92:0c:f0:6e:e8:14: db:14:b8:19:f2:ac:6d:f3:c5:51:0c:74:49:18:77:5c:18:a0: a2:ac:4e:2d:d8:e5:fd:53:26:09:de:db:f8:e6:7c:a4:c2:78: 48:b2:8e:11:c0:28:97:50:69:3f:da:38:66:3f:da:26:b9:e4: 2b:e9:93:af:3a:cf:e7:dd:58:38:bc:0e:be:05:fc:a8:65:45: 62:26:b8:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2EzEXPtswwO4eN5ZNFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYmJjOTA1NTVkNmQwZDM0MzJiYWJiOTViNjBjZGVlZWE1 ODBmNTgwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD Eyg1OWVlZjQzN2JmYTE5OTNlZDhlMmU0ZjFkODRiMzJjZjk1MmRkMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXM71EMhnv3PCJ6ya+gev3Pcro16 5/hhAqDpoqb5i249mUWj82BVzu8D5Gj0vlnZZgv6WPMYgR37kGy5oSGQDIH6FHXG Zbug9ibPHZpde23mEJzKCXFEEnPYxnBEF2tFLqyARICkT74x2lXhR7ukAXwHb2PX F4XYU7ybyl2IEvlxBKS8cEzCIuAoB78wCiCeEBlYvoyuvcfMLVcHcHhEqYSnvOuL WsSfmlxUkcLoUoBGRGuTdQZG5hmHFKWzBJHNymEpOUJxj0lWT3avgWzNsuIWQ3fM OcQM7lR0cfqWWcgTRtlYGD6DhEok0cqDEkTIDbC72x0ciw/UrEq+Kpm4sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnu9De/oZk+2OLk8dhLMs+VLdAKMB8GA1UdIwQY MBaAFNK7yQVV1tDTQyuruVtgze7qWA9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82ZmZjZDItNWJmMS00MWUyLTg2YTgt N2JjMWU0ZjU2Yzg4LzEvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82ZmZjZDItNWJmMS00MWUyLTg2YTgtN2JjMWU0ZjU2Yzg4 LzEvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlov3av0j rJtlpm0yiYXKKJi5WikEhN709WnOphxWuCep1UGIQ45kFvUjwtgttdHn6Ca3aXcY BYFBY7fh7KI/S2gzgI/u9BIR6wSUuCkEZsuTI4EW4djrAFV9+iczpxEB8ihKjPXk EAZxgSOOoVpaGKNSV5Wvj93p/miBRpQYZONCtGNFJ7dNhhe1RkRCmQbOjvS7xyr4 tML23taknOyL7+xjY+lPGFxbItzs9kgUkgzwbugU2xS4GfKsbfPFUQx0SRh3XBig oqxOLdjl/VMmCd7b+OZ8pMJ4SLKOEcAol1BpP9o4Zj/aJrnkK+mTrzrP591YOLwO vgX8qGVFYia47Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:00 2025 by rpki-client