This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft File: 0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json) Hash identifier: 1QElFPOeKNP+N7O2USB2rKiX89JJGvhXHYCVvFb1lDc= Subject key identifier: 76:E8:0A:DE:63:59:B3:F1:68:36:0D:22:23:9D:A1:09:C9:BF:4C:52 Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77 Certificate issuer: /CN=d0cbf6ba097a76b610c856035bc18de797c2a677 Certificate serial: 019AF3F743BB0D709DB696E4D47AE7D2C579 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft Manifest number: 094B Signing time: Sat 06 Dec 2025 14:00:59 +0000 Manifest this update: Sat 06 Dec 2025 14:00:59 +0000 Manifest next update: Sun 07 Dec 2025 14:00:59 +0000 Files and hashes: 1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: g/XkKhxjxuZBA0avb1QG6b/R+XxKbD5SkhuWDk7DLPc=) 2: kAhsl83sRH6W4s8jtU8YJb8qwhQ.roa (hash: +uG81eC9noWL3YdfTYPyy1nu/3IN2ObXCeDG/BCSpTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:43:bb:0d:70:9d:b6:96:e4:d4:7a:e7:d2:c5:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677 Validity Not Before: Dec 6 14:00:59 2025 GMT Not After : Dec 7 14:00:59 2025 GMT Subject: CN=76e80ade6359b3f168360d22239da109c9bf4c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:8c:35:52:5a:1f:f7:0f:76:78:19:be:a6: 1b:f9:76:1d:6b:f4:24:be:6a:e0:32:1e:ea:44:dd: b1:ae:5a:79:d5:62:3f:69:cd:13:7e:38:67:37:df: c6:8d:f8:87:ca:ec:79:17:43:3a:0a:16:eb:43:08: 19:d0:f9:91:de:ab:a6:0e:c1:5b:71:45:81:84:65: 6c:ee:4f:6b:20:fb:48:c1:0b:06:56:82:5d:2c:92: 16:9f:c3:e3:86:0b:07:43:a3:8f:b5:d9:e8:14:5b: 56:83:8a:fe:e3:bf:22:bc:ff:51:e4:4e:9b:5c:0e: 77:13:59:51:c8:ef:27:98:ee:47:1d:02:1e:d3:01: ec:eb:30:64:fe:1a:53:e1:34:cc:a3:d0:df:03:4f: 4a:a4:92:72:9f:ed:03:08:57:97:51:3d:e5:5c:f3: 0e:a9:bc:bd:5f:89:32:73:ab:7d:d7:51:bd:03:21: e5:bb:71:d0:72:0b:b3:6e:04:57:58:71:14:3e:22: db:9c:fd:41:5a:1b:8d:96:6f:ca:69:b0:b5:2d:64: 4f:8e:9e:50:94:bd:7b:8a:a4:15:eb:a6:97:52:e1: e8:75:e2:e0:c9:37:33:6f:80:cb:db:16:91:8e:c7: b8:fe:c3:00:78:13:fd:11:ce:a2:ea:fc:fb:26:9b: 4a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E8:0A:DE:63:59:B3:F1:68:36:0D:22:23:9D:A1:09:C9:BF:4C:52 X509v3 Authority Key Identifier: keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:26:13:ac:f6:e8:a0:e0:2e:c1:5c:01:c1:b4:6c:b6:d8:70: be:d6:49:67:9b:32:1f:0b:72:95:12:71:08:aa:f9:7f:48:71: a9:6a:7b:70:5f:1c:9d:27:0f:e3:e1:73:7a:88:7a:22:d4:85: db:0f:2a:f2:c6:3e:ba:17:69:fe:33:cc:2a:48:80:64:c0:74: c2:4f:55:0d:dc:e2:b7:b7:43:e5:fc:1f:21:f3:26:7e:21:fd: e9:80:da:81:4d:98:16:a0:74:f0:74:6b:63:21:9f:81:b6:78: 7f:c6:a9:38:98:21:69:f9:fe:47:93:74:bb:3e:95:4b:43:df: 92:43:87:01:59:92:94:ce:6e:33:0d:99:45:65:4f:3f:5b:4e: 06:b7:b8:45:59:cc:9e:fa:ca:ca:48:45:b5:b5:1c:e7:b7:1d: fd:72:77:a8:26:cf:11:8d:b5:35:19:66:62:50:43:eb:e1:6c: 8b:4e:d9:4a:c0:6f:67:aa:b2:e9:13:31:97:4f:5a:5a:34:b0: b7:63:e7:8d:75:b1:69:bb:94:97:b6:4b:9b:37:72:a0:04:10: 56:30:3a:f4:63:21:4e:7d:ef:db:35:54:98:86:1f:20:cc:bd: a2:b3:67:1d:0f:c2:10:db:f2:bc:9a:59:31:68:af:2f:a5:83: 14:4c:48:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90O7DXCdtpbk1Hrn0sV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwY2JmNmJhMDk3YTc2YjYxMGM4NTYwMzViYzE4ZGU3OTdj MmE2NzcwHhcNMjUxMjA2MTQwMDU5WhcNMjUxMjA3MTQwMDU5WjAzMTEwLwYDVQQD Eyg3NmU4MGFkZTYzNTliM2YxNjgzNjBkMjIyMzlkYTEwOWM5YmY0YzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQqMNVJaH/cPdngZvqYb+XYda/Qk vmrgMh7qRN2xrlp51WI/ac0TfjhnN9/GjfiHyux5F0M6ChbrQwgZ0PmR3qumDsFb cUWBhGVs7k9rIPtIwQsGVoJdLJIWn8PjhgsHQ6OPtdnoFFtWg4r+478ivP9R5E6b XA53E1lRyO8nmO5HHQIe0wHs6zBk/hpT4TTMo9DfA09KpJJyn+0DCFeXUT3lXPMO qby9X4kyc6t911G9AyHlu3HQcguzbgRXWHEUPiLbnP1BWhuNlm/KabC1LWRPjp5Q lL17iqQV66aXUuHodeLgyTczb4DL2xaRjse4/sMAeBP9Ec6i6vz7JptK0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHboCt5jWbPxaDYNIiOdoQnJv0xSMB8GA1UdIwQY MBaAFNDL9roJena2EMhWA1vBjeeXwqZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYt ZDY2OGM1M2Y2NjEyLzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYtZDY2OGM1M2Y2NjEy LzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaiYTrPbo oOAuwVwBwbRstthwvtZJZ5syHwtylRJxCKr5f0hxqWp7cF8cnScP4+Fzeoh6ItSF 2w8q8sY+uhdp/jPMKkiAZMB0wk9VDdzit7dD5fwfIfMmfiH96YDagU2YFqB08HRr YyGfgbZ4f8apOJghafn+R5N0uz6VS0PfkkOHAVmSlM5uMw2ZRWVPP1tOBre4RVnM nvrKykhFtbUc57cd/XJ3qCbPEY21NRlmYlBD6+Fsi07ZSsBvZ6qy6RMxl09aWjSw t2PnjXWxabuUl7ZLmzdyoAQQVjA69GMhTn3v2zVUmIYfIMy9orNnHQ/CENvyvJpZ MWivL6WDFExINg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:04 2025 by rpki-client