This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft File: kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft (raw, json) Hash identifier: sY1EvNMawZ7KdAjKXs3AvVbhLUfBINBd1BiksmjoiKk= Subject key identifier: CB:1D:B2:8A:52:EA:BA:72:E2:B2:FD:61:BB:C5:E4:76:19:BD:8B:B0 Authority key identifier: 91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C Certificate issuer: /CN=91dd0e48d9011adf376665ad4d62cf31ce63058c Certificate serial: 019AF24021106B43654F454B3B81C78FA77B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft Manifest number: 0E81 Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: O0T2HbDDLXToVBgQvakFVm0WBM8.roa (hash: j4M5mhMKjocJHlnRMyKx/Jo55Alu9WqNqQzzA+GKZ+8=) 2: WPrYk3ZFYryhbXNF2_g_QVCy5G0.roa (hash: 1/VFn2v02knd9dSenNmn42s5XXg6Yfw+0bFY3ogbnpY=) 3: kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl (hash: nVJmthDkTlwrwOGBEbZ7zPfIGVsPOiN8zYgVGAKIpkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:21:10:6b:43:65:4f:45:4b:3b:81:c7:8f:a7:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91dd0e48d9011adf376665ad4d62cf31ce63058c Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=cb1db28a52eaba72e2b2fd61bbc5e47619bd8bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:1c:27:37:e5:a3:f1:bd:9b:6a:f1:88:c9: 21:25:89:bb:a3:19:32:c4:d9:aa:b2:ab:5f:1a:ce: f4:64:64:29:9a:3c:74:e1:ac:69:ae:50:0e:00:c0: dd:74:81:fb:69:c7:a7:64:ad:b3:34:ac:39:8b:ea: 65:ec:35:67:ac:2b:6b:af:80:5e:10:35:3b:7f:fe: f9:54:1b:49:57:66:be:a8:b9:93:f3:e4:f1:b6:b0: a4:c0:8c:13:c1:a9:94:4d:26:d5:98:c9:8e:36:56: 13:85:93:bc:da:59:c6:3b:2d:59:01:83:b4:6c:df: 5e:3b:43:fb:ef:79:b1:0b:76:2f:99:81:66:f2:ab: 4a:24:35:f6:db:17:7f:a7:1a:19:fe:77:43:e0:11: 16:75:8b:aa:67:63:39:83:ed:2c:40:35:4b:de:f0: 9f:69:90:a8:0c:85:0e:38:c6:84:64:34:7f:7b:79: f2:a5:cb:e4:19:bf:c4:e0:48:44:c9:5c:8c:6d:8e: 93:a1:42:89:77:3d:9e:9b:93:f7:5e:38:b5:18:7f: 86:8c:54:25:89:6a:a2:02:b7:f8:94:23:13:3e:75: f1:1f:54:9d:25:fd:4e:b6:7c:39:d7:9e:ab:b5:85: 03:e1:c7:42:99:ba:89:93:7a:e3:c3:a0:66:8e:0b: e5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1D:B2:8A:52:EA:BA:72:E2:B2:FD:61:BB:C5:E4:76:19:BD:8B:B0 X509v3 Authority Key Identifier: keyid:91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:49:9a:db:4b:7c:7b:99:ca:5a:39:49:2e:ec:61:ae:bc:22: 8b:40:77:6b:a5:9f:a8:2f:52:38:8a:54:62:9f:88:37:d7:c2: 56:a7:aa:cb:be:c1:16:be:1d:76:dc:6d:9f:c2:8e:a0:74:6a: b8:56:10:99:97:53:8d:95:84:d0:c8:fc:2f:f4:09:d4:39:3e: 33:d2:1f:9b:6b:74:b4:14:02:cd:fa:af:18:96:c7:d7:a2:ca: 7b:92:12:46:c5:db:84:56:12:a5:20:9c:ff:99:e9:02:d6:f7: e4:7f:c3:cd:42:91:28:26:3e:9f:31:e0:e0:b4:22:0e:8d:1d: b4:58:6b:c6:81:fc:ba:60:3d:a4:e1:ff:ea:fa:d9:68:be:3c: 7c:77:b9:8f:8c:7b:5c:14:c3:14:e6:29:de:4c:ba:ee:d7:9a: a7:ee:d0:cf:95:87:d7:2a:21:72:7a:20:de:1c:96:6a:0f:15: 6c:83:83:e7:3a:64:ac:39:8c:c2:19:a1:e0:68:73:8a:7f:79: be:e5:36:76:83:e1:68:5b:8c:55:fc:a6:b1:f7:83:60:dc:92: 75:c0:e9:fe:dd:b9:dd:58:be:81:d8:cd:f8:16:bb:04:7d:a0: 1b:76:a2:66:0d:67:3c:48:bf:1f:99:a3:e9:b1:ab:90:92:0d: 29:ee:ea:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCEQa0NlT0VLO4HHj6d7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZGQwZTQ4ZDkwMTFhZGYzNzY2NjVhZDRkNjJjZjMxY2U2 MzA1OGMwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD EyhjYjFkYjI4YTUyZWFiYTcyZTJiMmZkNjFiYmM1ZTQ3NjE5YmQ4YmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYEcJzflo/G9m2rxiMkhJYm7oxky xNmqsqtfGs70ZGQpmjx04axprlAOAMDddIH7acenZK2zNKw5i+pl7DVnrCtrr4Be EDU7f/75VBtJV2a+qLmT8+TxtrCkwIwTwamUTSbVmMmONlYThZO82lnGOy1ZAYO0 bN9eO0P773mxC3YvmYFm8qtKJDX22xd/pxoZ/ndD4BEWdYuqZ2M5g+0sQDVL3vCf aZCoDIUOOMaEZDR/e3nypcvkGb/E4EhEyVyMbY6ToUKJdz2em5P3Xji1GH+GjFQl iWqiArf4lCMTPnXxH1SdJf1Otnw5156rtYUD4cdCmbqJk3rjw6Bmjgvl+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsdsopS6rpy4rL9YbvF5HYZvYuwMB8GA1UdIwQY MBaAFJHdDkjZARrfN2ZlrU1izzHOYwWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2QwT1NOa0JHdDgzWm1XdFRXTFBNYzVqQll3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xZTlkMDQtZDk0Zi00ZjEzLWJlM2Mt MTBmMzRmNTU4MzYzLzEva2QwT1NOa0JHdDgzWm1XdFRXTFBNYzVqQll3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xZTlkMDQtZDk0Zi00ZjEzLWJlM2MtMTBmMzRmNTU4MzYz LzEva2QwT1NOa0JHdDgzWm1XdFRXTFBNYzVqQll3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0ma20t8 e5nKWjlJLuxhrrwii0B3a6WfqC9SOIpUYp+IN9fCVqeqy77BFr4ddtxtn8KOoHRq uFYQmZdTjZWE0Mj8L/QJ1Dk+M9Ifm2t0tBQCzfqvGJbH16LKe5ISRsXbhFYSpSCc /5npAtb35H/DzUKRKCY+nzHg4LQiDo0dtFhrxoH8umA9pOH/6vrZaL48fHe5j4x7 XBTDFOYp3ky67teap+7Qz5WH1yohcnog3hyWag8VbIOD5zpkrDmMwhmh4Ghzin95 vuU2doPhaFuMVfymsfeDYNySdcDp/t253Vi+gdjN+Ba7BH2gG3aiZg1nPEi/H5mj 6bGrkJINKe7q1g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:28 2025 by rpki-client