This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json) Hash identifier: zOq7Pf/F5B6WmLtM6PxrenWGuq0BEe26kB5Dyj11gZs= Subject key identifier: C6:08:B5:92:95:50:42:A6:E7:A8:38:81:8B:3D:EF:66:AA:01:E4:F9 Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c Certificate serial: 019AF164567C4796A2C440297625B6C460E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft Manifest number: 1487 Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: gi24Q3rJmKUYZJbNn+5WHg/O4lUuRxje4OZ7KTPNnss=) 2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=) 3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:56:7c:47:96:a2:c4:40:29:76:25:b6:c4:60:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=c608b592955042a6e7a838818b3def66aa01e4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:0e:e7:9d:b2:47:ea:cd:84:08:c5:a2:49: 5c:1c:c0:10:54:f6:42:5d:aa:f2:bc:31:30:0e:a9: 72:1f:d6:1b:ab:c8:09:0f:7c:89:36:0a:61:0d:9f: fd:ed:70:b7:ee:b2:ea:64:98:e0:c7:90:ea:da:77: a4:8a:4f:85:15:52:fa:d9:e1:31:a0:94:35:97:b3: cb:d2:79:49:0e:03:22:41:04:d9:37:b7:21:95:0a: 31:32:8e:91:00:78:7e:3e:a6:7f:5d:1a:6f:0e:c8: 0a:6c:57:b1:df:b1:d1:f5:d8:b4:e9:7f:04:36:9e: cb:a0:36:8e:09:a8:77:bd:66:a1:68:93:de:d5:81: af:86:8b:bd:1f:6b:77:7e:d0:76:f9:82:59:22:aa: 30:7a:65:0f:35:e1:61:30:bd:6d:56:bc:d0:fb:97: 60:25:db:80:58:fa:a6:14:ba:fe:a5:1b:1a:cf:2c: 7d:e8:68:68:d9:2c:b3:f6:e3:bf:07:c5:ce:5d:fe: b3:c7:a4:cf:ba:50:c2:32:6d:d2:e2:5f:a1:b2:03: 11:7e:53:82:05:58:8b:7a:51:93:8a:12:22:9e:c3: a2:11:69:c3:31:fc:8e:45:af:6d:e7:c5:b7:5f:62: c5:f1:84:69:b2:25:82:da:7e:61:44:b6:ce:d4:1f: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:08:B5:92:95:50:42:A6:E7:A8:38:81:8B:3D:EF:66:AA:01:E4:F9 X509v3 Authority Key Identifier: keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c9:6d:72:f4:b2:80:a3:4f:c7:05:de:f1:8d:b6:52:c4:81: 77:5c:92:8a:ab:66:d0:c8:f3:b1:a4:1a:5f:80:2e:02:fc:68: 16:69:b7:f1:78:a1:67:d8:17:49:f6:82:ec:1a:d8:ce:85:61: fc:e5:9a:21:39:cf:bc:6a:11:8a:1d:8e:1d:dd:06:4e:e1:be: 41:56:b6:bd:76:a5:8e:31:ac:5e:0e:59:9e:8b:8c:e6:23:b1: c7:54:c4:05:69:44:06:36:9e:f4:39:89:cf:1a:ae:a9:7f:55: 38:00:07:d4:bf:36:de:a0:d3:a4:6c:57:e7:6d:34:df:a5:ad: 5d:4b:5e:18:4e:3d:f2:94:01:4c:e4:f6:e4:0a:33:8d:e1:56: 43:a0:e9:c1:ef:e8:73:83:11:49:8c:57:bc:51:12:13:7d:16: f4:72:d8:28:e1:80:22:68:04:c2:d2:ec:e6:6d:0f:f0:51:37: fc:46:66:7f:33:37:2b:c2:10:14:78:f0:0b:46:97:0a:59:44: 4b:e0:b9:f7:bf:e5:d8:42:08:e7:07:82:08:66:3e:d8:02:a1: 00:73:a0:2b:71:c7:30:8e:dd:86:94:ac:f0:9f:8a:65:4e:e0: a4:21:91:0d:95:b4:fd:d7:d1:54:21:25:81:8c:cc:f5:d4:50: b2:05:fb:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFZ8R5aixEApdiW2xGDnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMmQ0ZDJmYjc1YTc1NTlhMjBmNzk1NDhjNDU4NTQyZmQw YTlhNGMwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD EyhjNjA4YjU5Mjk1NTA0MmE2ZTdhODM4ODE4YjNkZWY2NmFhMDFlNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NkO552yR+rNhAjFoklcHMAQVPZC XaryvDEwDqlyH9Ybq8gJD3yJNgphDZ/97XC37rLqZJjgx5Dq2nekik+FFVL62eEx oJQ1l7PL0nlJDgMiQQTZN7chlQoxMo6RAHh+PqZ/XRpvDsgKbFex37HR9di06X8E Np7LoDaOCah3vWahaJPe1YGvhou9H2t3ftB2+YJZIqowemUPNeFhML1tVrzQ+5dg JduAWPqmFLr+pRsazyx96Gho2Syz9uO/B8XOXf6zx6TPulDCMm3S4l+hsgMRflOC BViLelGTihIinsOiEWnDMfyORa9t58W3X2LF8YRpsiWC2n5hRLbO1B+LtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYItZKVUEKm56g4gYs972aqAeT5MB8GA1UdIwQY MBaAFNEtTS+3WnVZog95VIxFhUL9CppMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUt MWVlY2Q1ODVkYjhjLzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUtMWVlY2Q1ODVkYjhj LzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsltcvSy gKNPxwXe8Y22UsSBd1ySiqtm0MjzsaQaX4AuAvxoFmm38XihZ9gXSfaC7BrYzoVh /OWaITnPvGoRih2OHd0GTuG+QVa2vXaljjGsXg5ZnouM5iOxx1TEBWlEBjae9DmJ zxquqX9VOAAH1L823qDTpGxX520036WtXUteGE498pQBTOT25AozjeFWQ6Dpwe/o c4MRSYxXvFESE30W9HLYKOGAImgEwtLs5m0P8FE3/EZmfzM3K8IQFHjwC0aXCllE S+C597/l2EII5weCCGY+2AKhAHOgK3HHMI7dhpSs8J+KZU7gpCGRDZW0/dfRVCEl gYzM9dRQsgX7LA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:00 2025 by rpki-client