This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json) Hash identifier: 8ziKHEKcNkxnmcES+sE/RRSOsnc3hzDyR7BApwn9SVc= Subject key identifier: 45:DE:E5:49:71:4E:51:54:B8:B3:50:DF:5F:99:67:2F:0E:3D:FE:1F Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08 Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108 Certificate serial: 019AF23FEFFF73994241E4406218E2966662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft Manifest number: 1515 Signing time: Sat 06 Dec 2025 06:01:07 +0000 Manifest this update: Sat 06 Dec 2025 06:01:07 +0000 Manifest next update: Sun 07 Dec 2025 06:01:07 +0000 Files and hashes: 1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: TVEHZw+rbmlG+L+RQqsqPSyXK/0q/84JdPsBZrJGhDo=) 2: vHnKRxUajbywNAqL6nOx-jDQRUM.roa (hash: 9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ef:ff:73:99:42:41:e4:40:62:18:e2:96:66:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108 Validity Not Before: Dec 6 06:01:07 2025 GMT Not After : Dec 7 06:01:07 2025 GMT Subject: CN=45dee549714e5154b8b350df5f99672f0e3dfe1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:74:00:cd:9c:0c:e3:62:63:44:32:c6:db: 55:2d:68:a7:fb:31:f4:aa:80:39:ed:bb:92:b2:73: 71:2f:e2:be:50:23:28:e8:a2:6d:4f:0b:1e:c7:64: 49:34:d5:11:1f:b8:86:16:5e:18:f2:3d:3e:4b:68: 91:5c:13:be:9f:c6:4f:70:4c:64:fc:d0:79:59:f5: bb:ab:5d:e7:58:0d:fd:14:0b:6e:59:7c:59:dc:8a: 6e:58:a1:4c:19:cf:d1:1f:72:74:4e:59:5c:13:51: 9c:84:33:5a:e1:5b:df:57:32:0a:a3:fd:79:a9:7f: f4:8e:bc:fc:84:66:8b:63:8f:ae:ff:8f:c3:e2:3a: 7a:f6:ac:3e:b5:72:58:31:2e:d4:d0:6d:8f:5c:16: 72:28:91:ea:bf:a9:a8:ea:c9:1c:b2:33:ca:8d:78: 34:33:56:20:1f:f2:9b:8e:54:5f:51:07:d5:e7:60: e6:3b:26:17:f3:02:75:d8:63:51:c1:70:53:c1:67: 1a:52:0e:f4:1d:31:40:1b:92:cb:5c:d6:0c:a6:60: a1:c9:8e:86:c3:eb:c2:e2:0e:9c:3b:fd:ef:97:c2: c3:86:3c:5f:0e:99:07:6f:bd:5f:4d:29:e6:63:05: 46:fd:ef:96:2b:66:0c:4f:83:05:41:27:00:45:ed: 2b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DE:E5:49:71:4E:51:54:B8:B3:50:DF:5F:99:67:2F:0E:3D:FE:1F X509v3 Authority Key Identifier: keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0f:b5:30:bc:cf:28:61:19:81:c1:d1:d6:d6:ee:81:13:c1: f6:32:5c:65:b0:a3:a0:a3:70:7b:05:86:54:2d:84:fd:25:8b: 69:59:75:dd:8c:26:7a:ce:34:f6:58:9c:fd:11:0f:20:8c:22: 8f:a8:9b:df:97:ff:68:5d:12:75:e2:84:79:e5:4f:d8:e7:46: 53:0b:63:c5:a3:04:ac:e8:56:fb:65:1a:ac:e5:8b:52:86:26: 03:2f:67:1a:fb:4e:e4:da:7d:e4:0a:a6:d1:93:25:b1:bf:c9: bd:e4:7b:d2:a3:9c:b6:c4:d9:bd:dc:c2:72:70:76:13:ba:ba: 43:80:e7:9c:5e:78:0f:f8:28:9f:ff:9c:cf:dd:cf:93:09:44: d7:8c:f1:6c:b9:6d:0f:45:cc:17:af:5d:f0:35:cb:74:42:bb: dd:ac:02:fb:81:b7:c2:92:cf:ea:01:5f:f3:bf:3e:c7:55:bd: 5e:e5:23:8c:1f:d7:bd:52:60:58:fd:04:99:de:d2:11:66:b6: 62:f4:dc:62:b2:52:e0:53:95:7f:7e:87:c8:ef:71:47:56:24: 29:b8:7e:50:5c:c3:01:e1:6b:89:fa:09:46:89:46:71:eb:75: cc:a1:2a:86:dd:8e:6d:72:95:cd:0c:2a:cd:fc:d1:be:46:63: cd:d2:4e:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+//c5lCQeRAYhjilmZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZjZlNmI1YTM0ZmQxOGI0MzUzODVkYjg3YmIzYWU5NzQ3 ODUxMDgwHhcNMjUxMjA2MDYwMTA3WhcNMjUxMjA3MDYwMTA3WjAzMTEwLwYDVQQD Eyg0NWRlZTU0OTcxNGU1MTU0YjhiMzUwZGY1Zjk5NjcyZjBlM2RmZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbt0AM2cDONiY0QyxttVLWin+zH0 qoA57buSsnNxL+K+UCMo6KJtTwsex2RJNNURH7iGFl4Y8j0+S2iRXBO+n8ZPcExk /NB5WfW7q13nWA39FAtuWXxZ3IpuWKFMGc/RH3J0TllcE1GchDNa4VvfVzIKo/15 qX/0jrz8hGaLY4+u/4/D4jp69qw+tXJYMS7U0G2PXBZyKJHqv6mo6skcsjPKjXg0 M1YgH/KbjlRfUQfV52DmOyYX8wJ12GNRwXBTwWcaUg70HTFAG5LLXNYMpmChyY6G w+vC4g6cO/3vl8LDhjxfDpkHb71fTSnmYwVG/e+WK2YMT4MFQScARe0rlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXe5UlxTlFUuLNQ31+ZZy8OPf4fMB8GA1UdIwQY MBaAFNL25rWjT9GLQ1OF24e7Oul0eFEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85YjBjNzctODA4NS00YTVhLWJhY2Ut MTQzYzNkMzhkMTdjLzEvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85YjBjNzctODA4NS00YTVhLWJhY2UtMTQzYzNkMzhkMTdj LzEvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADA+1MLzP KGEZgcHR1tbugRPB9jJcZbCjoKNwewWGVC2E/SWLaVl13Ywmes409lic/REPIIwi j6ib35f/aF0SdeKEeeVP2OdGUwtjxaMErOhW+2UarOWLUoYmAy9nGvtO5Np95Aqm 0ZMlsb/JveR70qOctsTZvdzCcnB2E7q6Q4DnnF54D/gon/+cz93PkwlE14zxbLlt D0XMF69d8DXLdEK73awC+4G3wpLP6gFf878+x1W9XuUjjB/XvVJgWP0Emd7SEWa2 YvTcYrJS4FOVf36HyO9xR1YkKbh+UFzDAeFrifoJRolGcet1zKEqht2ObXKVzQwq zfzRvkZjzdJOmg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:29 2025 by rpki-client