This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft File: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft (raw, json) Hash identifier: 0YVH5qTB1cStv/2JYK9F5g1WeWfmK1opaSr51RnCYDs= Subject key identifier: 37:CD:7A:BB:4D:1D:1C:9A:90:67:D8:1C:E2:27:F0:E4:E7:79:DE:18 Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5 Certificate issuer: /CN=d32d000368c1d54f08a7782c07673b68a93edfc5 Certificate serial: 019AF2400E7BC5EEBE881D1E3D6517914842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft Manifest number: 136B Signing time: Sat 06 Dec 2025 06:01:15 +0000 Manifest this update: Sat 06 Dec 2025 06:01:15 +0000 Manifest next update: Sun 07 Dec 2025 06:01:15 +0000 Files and hashes: 1: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl (hash: dRoi4Zug0VG2C1ueJIM9bm1e/qP/9Ljcmn/pWELpOAc=) 2: jQ4CExkfR5inS0zDHfJTtnlJ6V8.roa (hash: GXyBOWfkGPF9vLeodoo4anr9TA244Yte3dkyFGm9PtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0e:7b:c5:ee:be:88:1d:1e:3d:65:17:91:48:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5 Validity Not Before: Dec 6 06:01:15 2025 GMT Not After : Dec 7 06:01:15 2025 GMT Subject: CN=37cd7abb4d1d1c9a9067d81ce227f0e4e779de18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c5:05:1d:44:9e:da:c1:e4:cc:47:86:29:91: ba:f7:73:ad:2c:f4:d3:34:1e:f3:58:83:89:49:f3: 5b:6f:12:d3:61:dd:94:4a:bb:6b:ca:fe:84:9d:a8: 14:a5:17:08:1f:b8:ba:b9:22:89:2e:65:39:ec:18: 3d:e8:0b:4b:08:43:08:bc:4f:97:4e:1f:21:d8:72: 02:e3:b2:22:19:32:53:e8:8c:f0:fc:e2:ff:e3:35: 0f:bb:e6:08:63:43:3f:5d:3d:27:1b:17:16:72:3d: 0b:32:5f:fc:ed:8d:06:fb:75:92:ec:ca:ef:cf:20: 69:ef:a1:a2:26:f1:d9:38:25:47:7c:ac:67:5c:bc: 38:a7:ad:65:4e:c8:ec:19:64:95:1c:77:c2:00:3b: 15:21:e2:af:70:eb:ca:bb:8d:b9:82:3c:48:e8:ab: 9c:de:dd:83:e7:0f:d4:11:47:71:74:b9:fc:92:fb: 77:18:9b:ec:4b:4f:f4:57:cb:24:b3:e8:98:c5:ab: 53:ef:c0:92:7c:0b:86:b6:e0:95:a5:ca:02:4c:99: fa:ef:33:bc:04:37:a5:5a:53:ed:ab:ba:8c:9d:03: 06:ae:1a:a8:35:45:52:54:81:e3:fb:7d:20:4f:10: fb:ae:fb:6b:74:ae:cc:29:3d:16:3e:45:0f:f2:c1: 3e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CD:7A:BB:4D:1D:1C:9A:90:67:D8:1C:E2:27:F0:E4:E7:79:DE:18 X509v3 Authority Key Identifier: keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:5b:a7:14:d6:67:17:a1:46:5a:36:37:5a:0f:e0:68:6d:12: af:a7:7d:b6:9e:1a:92:3b:f5:b2:9b:3d:50:35:19:1f:74:84: fd:c7:ff:ca:ca:3c:7a:76:58:94:b4:89:59:13:c9:28:63:f2: 69:c4:21:14:91:11:8e:df:02:27:8d:65:14:f0:43:52:69:4a: a6:9a:ae:4d:03:14:f6:09:f2:13:9b:d2:ee:ef:96:53:7e:9f: 2b:eb:c7:50:05:7d:f6:e2:4b:23:63:3c:d1:6b:bf:a2:64:dd: 8a:ba:29:ad:0d:99:f3:83:dc:2e:66:19:ed:88:9a:73:f6:da: 49:4c:a1:c1:9a:87:19:66:c5:61:35:46:bd:13:41:d8:48:31: b4:d1:c8:4a:68:b6:c2:27:09:9c:85:60:95:a9:fa:07:85:e3: 1d:70:3d:5f:c0:fd:25:53:c2:30:c3:db:10:e2:69:64:99:2a: 45:00:be:4b:24:37:2e:1c:7e:1b:b9:14:05:07:bc:30:ec:b7: 6b:86:16:82:74:2e:c6:fa:ed:3f:a1:c3:93:6b:68:19:0c:f3: d3:e6:67:77:ae:ac:85:68:e8:5c:83:7f:f0:92:3f:68:be:e7: 05:17:64:b0:4e:58:3d:8d:31:4a:b8:72:fd:28:0f:9f:95:1c: bd:7e:03:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQA57xe6+iB0ePWUXkUhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMmQwMDAzNjhjMWQ1NGYwOGE3NzgyYzA3NjczYjY4YTkz ZWRmYzUwHhcNMjUxMjA2MDYwMTE1WhcNMjUxMjA3MDYwMTE1WjAzMTEwLwYDVQQD EygzN2NkN2FiYjRkMWQxYzlhOTA2N2Q4MWNlMjI3ZjBlNGU3NzlkZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48UFHUSe2sHkzEeGKZG693OtLPTT NB7zWIOJSfNbbxLTYd2USrtryv6EnagUpRcIH7i6uSKJLmU57Bg96AtLCEMIvE+X Th8h2HIC47IiGTJT6Izw/OL/4zUPu+YIY0M/XT0nGxcWcj0LMl/87Y0G+3WS7Mrv zyBp76GiJvHZOCVHfKxnXLw4p61lTsjsGWSVHHfCADsVIeKvcOvKu425gjxI6Kuc 3t2D5w/UEUdxdLn8kvt3GJvsS0/0V8sks+iYxatT78CSfAuGtuCVpcoCTJn67zO8 BDelWlPtq7qMnQMGrhqoNUVSVIHj+30gTxD7rvtrdK7MKT0WPkUP8sE+lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfNertNHRyakGfYHOIn8OTned4YMB8GA1UdIwQY MBaAFNMtAANowdVPCKd4LAdnO2ipPt/FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHkwQUEyakIxVThJcDNnc0IyYzdhS2stMzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NjgwNjUtMjIzMy00ZGM3LWI5NWMt YTdiYjM4YTFhNTNkLzEvMHkwQUEyakIxVThJcDNnc0IyYzdhS2stMzhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NjgwNjUtMjIzMy00ZGM3LWI5NWMtYTdiYjM4YTFhNTNk LzEvMHkwQUEyakIxVThJcDNnc0IyYzdhS2stMzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy1unFNZn F6FGWjY3Wg/gaG0Sr6d9tp4akjv1sps9UDUZH3SE/cf/yso8enZYlLSJWRPJKGPy acQhFJERjt8CJ41lFPBDUmlKppquTQMU9gnyE5vS7u+WU36fK+vHUAV99uJLI2M8 0Wu/omTdiroprQ2Z84PcLmYZ7Yiac/baSUyhwZqHGWbFYTVGvRNB2EgxtNHISmi2 wicJnIVglan6B4XjHXA9X8D9JVPCMMPbEOJpZJkqRQC+SyQ3Lhx+G7kUBQe8MOy3 a4YWgnQuxvrtP6HDk2toGQzz0+Znd66shWjoXIN/8JI/aL7nBRdksE5YPY0xSrhy /SgPn5UcvX4D1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:17 2025 by rpki-client