This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json) Hash identifier: Y5kX5MXCwE/1Mvbn/YUe38ETL9cwLGmVKwAg4R2I8rE= Subject key identifier: 54:41:C2:3B:17:C4:AF:84:94:B8:99:DD:F3:CB:96:7B:32:5D:BA:08 Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7 Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7 Certificate serial: 019AF31BD7FD6FAFBB65666B811671F3A21C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft Manifest number: 05F8 Signing time: Sat 06 Dec 2025 10:01:19 +0000 Manifest this update: Sat 06 Dec 2025 10:01:19 +0000 Manifest next update: Sun 07 Dec 2025 10:01:19 +0000 Files and hashes: 1: 00FQiMdjUQle4zFwKcr67i8rD5o.roa (hash: vAwK94aBbQ1WLXSLlow/JuiTreizX+JgqV5lHzwa2Js=) 2: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: gQT1PceXIKgRMBCiSpktp74D8UpgvEixXQPy+rxW6Sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d7:fd:6f:af:bb:65:66:6b:81:16:71:f3:a2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7 Validity Not Before: Dec 6 10:01:19 2025 GMT Not After : Dec 7 10:01:19 2025 GMT Subject: CN=5441c23b17c4af8494b899ddf3cb967b325dba08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:d6:39:71:a6:8b:1c:81:11:06:a3:d6:4b: 72:37:46:ee:f0:7c:8a:b2:c2:03:97:08:cc:c0:de: b2:c8:33:d3:30:c4:cd:41:ef:2c:55:d6:46:48:09: 6f:9d:97:0e:49:15:49:d4:b5:23:4c:91:98:55:4a: db:ac:ed:b3:50:cd:3f:40:b5:4f:07:a6:21:f9:fd: 1a:f0:7c:c9:a9:d8:1a:b4:a4:9f:3f:16:75:aa:e5: fe:26:3b:20:5e:2c:8b:90:4d:a9:67:00:a9:0b:71: b5:7a:e1:67:00:15:85:37:d4:9b:cc:1f:9e:e2:90: 02:1c:33:b4:b3:5a:5d:b9:fd:ef:2f:0b:1f:bb:0f: c2:81:61:68:b3:89:e5:62:93:06:d5:2b:c6:84:38: 83:68:b7:38:b6:3b:98:f9:b2:e8:fa:ab:eb:26:b7: e8:35:b3:b2:56:39:9c:3f:55:17:9f:be:b0:b5:f6: 7b:8c:03:f9:54:2c:60:46:dd:bc:97:53:de:67:75: 66:04:8b:93:2a:b5:95:03:6a:0f:76:7e:89:03:c4: de:86:ff:7d:19:5b:5c:92:62:95:4d:05:ca:f9:89: bb:ce:8e:a0:ea:b7:dd:41:3a:cd:44:de:d1:79:fb: be:44:b7:b8:fa:f0:5e:4f:4d:19:e2:54:fe:87:3c: d8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:41:C2:3B:17:C4:AF:84:94:B8:99:DD:F3:CB:96:7B:32:5D:BA:08 X509v3 Authority Key Identifier: keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c5:e4:8f:a3:6e:e1:4e:c9:ff:ca:d7:ca:96:9f:69:9c:dd: eb:01:5f:b3:43:10:d4:ef:d1:7d:de:ca:d3:44:34:6d:e4:27: 65:85:2f:a9:6a:06:22:f6:5f:b0:56:6e:e4:e4:27:b7:63:14: df:76:56:5f:87:20:cf:51:91:7d:d1:82:f8:7e:fb:c2:da:e3: 49:aa:5b:84:00:44:ef:fc:ef:2e:7a:13:78:a0:50:8c:d6:ec: 3e:08:6d:46:34:f8:96:6b:38:87:9a:83:bd:7b:12:e5:d7:67: 1b:17:e4:4d:7a:d6:0e:18:a9:ba:d0:30:e7:9d:e6:7b:a4:c4: 75:c7:7d:81:67:1f:e4:d4:65:3e:fe:7c:35:86:b2:29:e2:43: fb:26:d6:ee:c1:8c:d7:a8:4f:18:14:b5:9a:53:22:10:c9:13: 60:7b:b2:e8:40:21:5d:dd:5b:7d:38:0a:cb:37:c0:c5:bd:cb: a9:c8:1b:50:a4:b9:f5:8d:70:14:18:85:60:ce:d8:79:e6:63: 53:76:f0:b5:7b:a0:d7:84:e0:cc:b2:bb:77:bf:93:4b:ac:22: b9:6f:f5:3e:5e:d5:cc:76:6d:cb:5e:c7:f5:13:32:83:c5:cc: b5:8b:64:16:6a:8b:13:60:b4:7c:b9:38:a2:e6:10:ba:0c:46: 98:60:7a:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9f9b6+7ZWZrgRZx86IcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzcwZjFmMzNjNTgxZGI3OGExNDliYzg2ZDczOWNkYzdj ZTI2YTcwHhcNMjUxMjA2MTAwMTE5WhcNMjUxMjA3MTAwMTE5WjAzMTEwLwYDVQQD Eyg1NDQxYzIzYjE3YzRhZjg0OTRiODk5ZGRmM2NiOTY3YjMyNWRiYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBTWOXGmixyBEQaj1ktyN0bu8HyK ssIDlwjMwN6yyDPTMMTNQe8sVdZGSAlvnZcOSRVJ1LUjTJGYVUrbrO2zUM0/QLVP B6Yh+f0a8HzJqdgatKSfPxZ1quX+JjsgXiyLkE2pZwCpC3G1euFnABWFN9SbzB+e 4pACHDO0s1pduf3vLwsfuw/CgWFos4nlYpMG1SvGhDiDaLc4tjuY+bLo+qvrJrfo NbOyVjmcP1UXn76wtfZ7jAP5VCxgRt28l1PeZ3VmBIuTKrWVA2oPdn6JA8Tehv99 GVtckmKVTQXK+Ym7zo6g6rfdQTrNRN7Refu+RLe4+vBeT00Z4lT+hzzYcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRBwjsXxK+ElLiZ3fPLlnsyXboIMB8GA1UdIwQY MBaAFNHHDx8zxYHbeKFJvIbXOc3HzianMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kM2QyNTctNmU0Yy00ZDYwLTljOTMt ZGZjYWUzNmEzZWY4LzEvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9kM2QyNTctNmU0Yy00ZDYwLTljOTMtZGZjYWUzNmEzZWY4 LzEvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMXkj6Nu 4U7J/8rXypafaZzd6wFfs0MQ1O/Rfd7K00Q0beQnZYUvqWoGIvZfsFZu5OQnt2MU 33ZWX4cgz1GRfdGC+H77wtrjSapbhABE7/zvLnoTeKBQjNbsPghtRjT4lms4h5qD vXsS5ddnGxfkTXrWDhiputAw553me6TEdcd9gWcf5NRlPv58NYayKeJD+ybW7sGM 16hPGBS1mlMiEMkTYHuy6EAhXd1bfTgKyzfAxb3LqcgbUKS59Y1wFBiFYM7YeeZj U3bwtXug14TgzLK7d7+TS6wiuW/1Pl7VzHZty17H9RMyg8XMtYtkFmqLE2C0fLk4 ouYQugxGmGB63A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:02 2025 by rpki-client