This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json) Hash identifier: BGDuvB8+0HUqiofCVsscc2uJNhbcQA8SuYks7hRy2bE= Subject key identifier: FB:13:DD:A0:1C:12:1A:8B:59:C1:53:8E:50:42:FE:18:52:FA:88:7D Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Certificate serial: 019AFCC355923F2383BBA4CE4839707C1594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft Manifest number: 1767 Signing time: Mon 08 Dec 2025 07:00:51 +0000 Manifest this update: Mon 08 Dec 2025 07:00:51 +0000 Manifest next update: Tue 09 Dec 2025 07:00:51 +0000 Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: 6cwkfKHnQb70ChakbRnLYT8UHejnxFosAapmadJASF8=) 2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:55:92:3f:23:83:bb:a4:ce:48:39:70:7c:15:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Validity Not Before: Dec 8 07:00:51 2025 GMT Not After : Dec 9 07:00:51 2025 GMT Subject: CN=fb13dda01c121a8b59c1538e5042fe1852fa887d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:50:43:93:26:7e:6a:ef:2c:6e:2f:e8:23: 05:97:97:b2:d7:43:9a:03:45:0f:11:dc:c9:9c:31: f9:f5:b9:50:eb:4e:f4:ba:2f:7a:8a:52:2e:28:b5: 7b:c7:7b:4b:db:52:50:92:93:7f:2c:9b:d5:61:d4: fe:c4:0c:c2:31:47:37:87:3d:91:cc:c1:3c:6b:87: 41:ff:33:ee:aa:70:28:bb:28:c9:35:fe:f1:47:3e: 58:7c:f5:4b:10:e5:b6:84:79:21:94:eb:34:af:2f: d2:d5:fd:ea:82:c9:21:48:2d:ce:7a:d3:e4:a8:97: 36:53:96:83:ac:73:a3:0f:d6:39:e2:12:67:93:aa: 38:f1:0b:07:9f:6a:a9:e4:36:04:a6:b6:06:8a:3c: ce:10:7a:8e:00:b9:f3:fc:a1:e9:f2:41:2a:0e:b6: 53:b6:35:56:33:60:5b:a7:84:ae:82:00:ac:fd:49: f1:d5:ce:2e:b4:1a:0a:82:de:f1:ed:4f:48:c8:c7: bc:5a:4c:2d:8a:37:3d:9a:2a:fd:47:19:c7:91:b2: 11:b6:f8:46:4a:67:ec:68:c4:fa:b5:07:06:d5:0e: 06:30:2c:7d:a2:04:08:e1:eb:a5:9e:5a:a2:d8:47: 4e:6a:27:2f:1b:9c:56:bc:58:6a:ba:a9:af:ac:91: a4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:13:DD:A0:1C:12:1A:8B:59:C1:53:8E:50:42:FE:18:52:FA:88:7D X509v3 Authority Key Identifier: keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:80:ae:70:25:01:9a:fe:a8:57:5e:14:c8:ec:f4:87:03:d1: 50:d0:2e:4e:65:f5:75:6a:c6:c9:d3:88:7f:15:c8:36:de:0e: 38:46:89:fa:a8:2b:54:78:b0:22:48:1f:c8:1c:82:20:62:f9: 81:5a:4b:bb:36:dd:d4:19:b9:ff:3f:1f:c6:ab:68:f0:31:6f: da:6a:bd:79:1b:31:a6:58:88:f1:ed:b6:13:26:8c:d8:1d:3d: 7a:db:09:10:85:25:23:ac:c9:84:7d:a5:2c:47:8e:b2:c9:ce: 5e:b7:43:58:b0:8d:1c:7b:dd:8c:c0:ab:92:ea:6a:1c:22:4c: 9e:77:1c:17:dd:65:90:3d:46:bf:09:7c:6a:21:cb:e0:7a:da: 06:56:de:ed:6f:4f:a5:11:15:c9:b6:b2:45:9e:48:cf:17:fd: 06:c6:24:df:ed:32:3d:ba:79:e6:d3:0a:b9:9e:ed:c4:b7:20: 90:c5:4a:6c:f2:40:8a:9f:05:94:ca:bc:e8:2e:16:f1:c6:bd: ea:54:10:e7:09:7f:d0:d7:be:b6:74:8d:10:cb:8b:37:74:43: 8a:5c:0a:a1:62:18:ce:75:78:27:f0:ce:7f:c7:0d:d6:65:ff: 8d:18:b5:59:95:62:63:02:94:fb:6a:4a:ab:35:c5:60:3e:f2: 4f:02:e5:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8w1WSPyODu6TOSDlwfBWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMmU5NWM0NTE5ZGU5MjA4ZTNkMjIzMzJhYWJlYzZiMWEy ZWE3NTYwHhcNMjUxMjA4MDcwMDUxWhcNMjUxMjA5MDcwMDUxWjAzMTEwLwYDVQQD EyhmYjEzZGRhMDFjMTIxYThiNTljMTUzOGU1MDQyZmUxODUyZmE4ODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA1QQ5MmfmrvLG4v6CMFl5ey10Oa A0UPEdzJnDH59blQ6070ui96ilIuKLV7x3tL21JQkpN/LJvVYdT+xAzCMUc3hz2R zME8a4dB/zPuqnAouyjJNf7xRz5YfPVLEOW2hHkhlOs0ry/S1f3qgskhSC3OetPk qJc2U5aDrHOjD9Y54hJnk6o48QsHn2qp5DYEprYGijzOEHqOALnz/KHp8kEqDrZT tjVWM2Bbp4SuggCs/Unx1c4utBoKgt7x7U9IyMe8Wkwtijc9mir9RxnHkbIRtvhG SmfsaMT6tQcG1Q4GMCx9ogQI4eulnlqi2EdOaicvG5xWvFhquqmvrJGkWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsT3aAcEhqLWcFTjlBC/hhS+oh9MB8GA1UdIwQY MBaAFNIulcRRnekgjj0iMyqr7GsaLqdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQt ZjJlNTRkZGVhM2IzLzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQtZjJlNTRkZGVhM2Iz LzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoCucCUB mv6oV14UyOz0hwPRUNAuTmX1dWrGydOIfxXINt4OOEaJ+qgrVHiwIkgfyByCIGL5 gVpLuzbd1Bm5/z8fxqto8DFv2mq9eRsxpliI8e22EyaM2B09etsJEIUlI6zJhH2l LEeOssnOXrdDWLCNHHvdjMCrkupqHCJMnnccF91lkD1Gvwl8aiHL4HraBlbe7W9P pREVybayRZ5Izxf9BsYk3+0yPbp55tMKuZ7txLcgkMVKbPJAip8FlMq86C4W8ca9 6lQQ5wl/0Ne+tnSNEMuLN3RDilwKoWIYznV4J/DOf8cN1mX/jRi1WZViYwKU+2pK qzXFYD7yTwLl6w== -----END CERTIFICATE-----Generated at Mon Dec 8 09:12:15 2025 by rpki-client