This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json) Hash identifier: 7WxR6gIu2AlLj1Lcqqkm4d2Noxs1mT6QESJKtNKDfJs= Subject key identifier: BB:2C:FB:3A:C3:21:F9:F5:EB:0E:F9:A0:AF:4F:6C:59:B3:F2:7B:57 Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08 Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108 Certificate serial: 019B2E1DE3699E4B74F0F3F9B66337FF5DB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft Manifest number: 1534 Signing time: Wed 17 Dec 2025 21:01:09 +0000 Manifest this update: Wed 17 Dec 2025 21:01:09 +0000 Manifest next update: Thu 18 Dec 2025 21:01:09 +0000 Files and hashes: 1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: R+wj9nnnynyzQjJmm/S1sq8l5OrDDDuuEYT25SwSR7A=) 2: vHnKRxUajbywNAqL6nOx-jDQRUM.roa (hash: 9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:e3:69:9e:4b:74:f0:f3:f9:b6:63:37:ff:5d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108 Validity Not Before: Dec 17 21:01:09 2025 GMT Not After : Dec 18 21:01:09 2025 GMT Subject: CN=bb2cfb3ac321f9f5eb0ef9a0af4f6c59b3f27b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:84:dc:be:a3:13:41:9e:bf:27:ad:02:4d: 35:89:58:92:39:3a:5c:89:2b:61:3b:13:02:85:62: 24:d1:ee:20:2b:2f:24:0c:bb:6f:bd:72:2e:39:98: 69:b9:c6:b7:20:ac:42:8d:37:21:84:eb:d0:eb:9b: 0f:ac:5a:be:cf:f8:17:c8:2b:45:b5:99:d5:4d:0c: c1:f6:5f:7e:d8:19:86:9e:b8:57:7b:98:c6:68:54: 81:37:41:dd:47:7f:da:6e:88:ac:6a:16:f3:de:30: 52:36:4a:1e:4e:db:7b:df:bc:a1:6d:bd:44:61:18: 0d:99:cb:af:8c:8f:20:af:3d:fa:f9:42:96:23:10: e2:dc:2e:ed:e1:3c:4b:21:17:63:4f:a7:ea:45:20: 16:0e:62:91:84:0c:f6:6d:e2:61:c9:6a:11:cc:fe: 4e:3e:e7:04:48:e2:ba:42:d8:35:70:a9:22:7a:30: c2:d4:1b:5c:2c:7c:dd:03:fb:8c:70:c5:71:05:c4: 9c:c2:cf:38:8d:c8:9e:cd:ca:81:18:3d:79:00:8b: 15:d1:6e:eb:33:1f:8d:c7:d3:0c:c2:37:fc:19:40: 03:7d:b5:93:7d:3b:bb:3b:66:b2:ab:e1:4f:1c:54: ca:4d:89:f3:f1:c2:2e:34:15:c3:bc:5b:66:bc:02: cd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2C:FB:3A:C3:21:F9:F5:EB:0E:F9:A0:AF:4F:6C:59:B3:F2:7B:57 X509v3 Authority Key Identifier: keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:58:57:29:3e:de:87:d1:2b:f9:16:34:7c:2d:da:71:23:bf: cf:97:c2:6b:1a:f6:bf:2c:26:a8:db:55:a7:ce:0c:6d:74:a1: 74:ba:b3:b9:7e:27:4d:27:8d:ef:7d:40:27:86:49:23:0e:52: ad:29:5b:e8:8e:ce:96:bd:8c:93:00:0b:e1:17:b8:39:30:3c: b3:98:dd:12:79:d4:fa:7f:cf:ad:ae:21:c5:47:2b:09:67:8c: 86:0c:94:01:48:2c:db:57:7b:de:f1:6e:af:63:fe:80:96:ed: a0:40:e1:dd:2d:7c:bf:85:9c:71:14:4f:9c:a0:85:38:a6:4e: 0f:c4:e7:3f:e0:60:04:30:ef:9b:48:92:dc:71:88:be:b7:4c: fa:c1:5d:97:2b:bc:ba:a2:fe:0a:79:e2:c5:f9:3a:c8:f7:a2: 7a:12:2b:e7:26:87:b2:07:50:46:5d:6d:40:30:85:fb:ea:07: 30:c2:82:9d:66:1a:a3:2f:cb:ff:d9:97:e2:e3:aa:97:4e:de: bc:59:51:19:5d:c3:ad:0d:53:e4:25:62:e7:ab:0f:8b:36:c1: 91:4b:e1:14:50:35:da:d6:9b:88:f6:a1:0c:45:0d:2a:e7:61: 90:00:10:52:92:05:86:a0:75:0f:50:77:0a:1c:58:33:53:41: 08:0e:8f:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHeNpnkt08PP5tmM3/12xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZjZlNmI1YTM0ZmQxOGI0MzUzODVkYjg3YmIzYWU5NzQ3 ODUxMDgwHhcNMjUxMjE3MjEwMTA5WhcNMjUxMjE4MjEwMTA5WjAzMTEwLwYDVQQD EyhiYjJjZmIzYWMzMjFmOWY1ZWIwZWY5YTBhZjRmNmM1OWIzZjI3YjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd6E3L6jE0GevyetAk01iViSOTpc iSthOxMChWIk0e4gKy8kDLtvvXIuOZhpuca3IKxCjTchhOvQ65sPrFq+z/gXyCtF tZnVTQzB9l9+2BmGnrhXe5jGaFSBN0HdR3/aboisahbz3jBSNkoeTtt737yhbb1E YRgNmcuvjI8grz36+UKWIxDi3C7t4TxLIRdjT6fqRSAWDmKRhAz2beJhyWoRzP5O PucESOK6Qtg1cKkiejDC1BtcLHzdA/uMcMVxBcScws84jciezcqBGD15AIsV0W7r Mx+Nx9MMwjf8GUADfbWTfTu7O2ayq+FPHFTKTYnz8cIuNBXDvFtmvALNUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLss+zrDIfn16w75oK9PbFmz8ntXMB8GA1UdIwQY MBaAFNL25rWjT9GLQ1OF24e7Oul0eFEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85YjBjNzctODA4NS00YTVhLWJhY2Ut MTQzYzNkMzhkMTdjLzEvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85YjBjNzctODA4NS00YTVhLWJhY2UtMTQzYzNkMzhkMTdj LzEvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFhXKT7e h9Er+RY0fC3acSO/z5fCaxr2vywmqNtVp84MbXShdLqzuX4nTSeN731AJ4ZJIw5S rSlb6I7Olr2MkwAL4Re4OTA8s5jdEnnU+n/Pra4hxUcrCWeMhgyUAUgs21d73vFu r2P+gJbtoEDh3S18v4WccRRPnKCFOKZOD8TnP+BgBDDvm0iS3HGIvrdM+sFdlyu8 uqL+Cnnixfk6yPeiehIr5yaHsgdQRl1tQDCF++oHMMKCnWYaoy/L/9mX4uOql07e vFlRGV3DrQ1T5CVi56sPizbBkUvhFFA12tabiPahDEUNKudhkAAQUpIFhqB1D1B3 ChxYM1NBCA6PbA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:40:13 2025 by rpki-client