This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json) Hash identifier: EnLC8+8iqdVDN2pF3JGiqE/DUAzt5qaIWkLEHxeOA38= Subject key identifier: 68:FE:E0:0A:AA:7B:76:E8:58:7B:23:39:22:EE:6A:11:49:05:8C:0F Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13 Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13 Certificate serial: 019AF5AEDF1A812C607758FDFF80AD22D3B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft Manifest number: 14A5 Signing time: Sat 06 Dec 2025 22:01:09 +0000 Manifest this update: Sat 06 Dec 2025 22:01:09 +0000 Manifest next update: Sun 07 Dec 2025 22:01:09 +0000 Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: cbW27haOXVDFYiPWIHHn/gMFuNyez0NTCSOKBrARsEw=) 2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:df:1a:81:2c:60:77:58:fd:ff:80:ad:22:d3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13 Validity Not Before: Dec 6 22:01:09 2025 GMT Not After : Dec 7 22:01:09 2025 GMT Subject: CN=68fee00aaa7b76e8587b233922ee6a1149058c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:ef:9b:88:bd:13:e7:94:83:1a:4e:c7:e8: d2:a7:7f:7a:09:21:0e:ae:9f:2d:58:eb:5f:33:ab: c7:45:bd:aa:ee:72:36:a0:27:b2:63:96:a8:f9:e2: 0f:71:8b:8f:b3:c9:d2:98:43:3c:ef:23:09:fa:b9: 81:e8:8d:9d:ab:8c:e8:cb:b6:34:0f:60:aa:bc:84: 65:c2:08:ca:32:83:e3:a2:97:1d:74:ed:5c:f9:7f: a0:7d:c3:88:03:34:04:7c:da:a2:96:27:be:01:66: 2f:4b:c2:a8:6f:8a:32:61:92:21:e9:24:ae:ae:de: 8d:99:2a:1a:68:99:37:3c:ea:c3:7b:6d:8f:4c:c6: 1e:27:1d:84:74:7c:8f:c5:d9:eb:ff:e8:59:c4:46: 57:7e:da:eb:5f:ac:a9:1c:af:c2:d7:bc:65:5f:de: 9b:b0:6a:4a:b1:ef:eb:53:6b:3a:0d:2b:d0:6c:6d: f7:1d:d4:97:e5:27:ee:13:d2:28:9d:cb:b3:ae:06: 3a:00:99:60:a5:91:e5:fb:63:6f:19:53:97:de:5e: ef:44:48:c0:22:ab:ab:1c:10:18:58:62:f8:63:63: 44:9e:ad:c7:97:85:d4:8d:5b:7d:b8:ea:c9:69:97: b5:6a:10:29:35:3d:6f:b7:48:fb:e9:f7:a6:6f:bd: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FE:E0:0A:AA:7B:76:E8:58:7B:23:39:22:EE:6A:11:49:05:8C:0F X509v3 Authority Key Identifier: keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f3:e8:93:09:a7:37:5c:cd:a7:ba:91:ce:41:bf:a7:43:c6: 8d:45:d8:4e:93:4f:5e:d9:ef:28:ef:3d:76:83:8d:33:35:04: a7:cc:ac:b1:5f:9d:79:cb:6f:b2:8b:f2:34:65:15:5a:fb:b7: 5e:9a:82:40:da:e4:26:a7:cc:60:87:a1:27:9d:3e:a2:c9:e0: bd:e2:98:3e:63:4b:4d:dc:ff:64:ee:3a:a7:e5:13:25:d3:0a: 20:b6:8f:b5:52:6a:f1:cb:0a:be:65:56:b8:0e:93:85:0c:f5: 73:99:a4:da:ee:f2:4c:ec:da:f2:a1:34:5e:c0:a2:eb:63:92: b8:53:99:d7:ee:3d:1c:4c:fe:7c:55:37:22:8d:9b:b4:50:af: 63:87:2e:8c:e2:91:67:aa:44:3d:fe:89:e3:21:40:bb:b3:de: 0b:0f:6c:b9:67:41:e9:a4:1b:ce:72:4a:5b:34:eb:d9:60:10: d8:b4:5f:dc:2d:72:58:02:da:e4:ca:42:c8:3e:c3:4b:1f:06: c0:b4:92:ef:d4:02:2d:3a:a3:2c:3d:6d:fc:48:76:8e:1c:2b: 56:d4:1b:ff:b2:12:71:75:30:9e:49:0b:a9:6f:a1:3c:ab:36: 7a:c3:2c:51:f2:c4:ad:5b:db:4c:9d:b3:f3:d9:2c:d7:e4:7b: fb:57:f4:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rt8agSxgd1j9/4CtItO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZWY0NmE0MTM0MTk0ZTcyNDIzZDU3MmExYjY2ZDRhOWQy ZTRjMTMwHhcNMjUxMjA2MjIwMTA5WhcNMjUxMjA3MjIwMTA5WjAzMTEwLwYDVQQD Eyg2OGZlZTAwYWFhN2I3NmU4NTg3YjIzMzkyMmVlNmExMTQ5MDU4YzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYPvm4i9E+eUgxpOx+jSp396CSEO rp8tWOtfM6vHRb2q7nI2oCeyY5ao+eIPcYuPs8nSmEM87yMJ+rmB6I2dq4zoy7Y0 D2CqvIRlwgjKMoPjopcddO1c+X+gfcOIAzQEfNqilie+AWYvS8Kob4oyYZIh6SSu rt6NmSoaaJk3POrDe22PTMYeJx2EdHyPxdnr/+hZxEZXftrrX6ypHK/C17xlX96b sGpKse/rU2s6DSvQbG33HdSX5SfuE9IoncuzrgY6AJlgpZHl+2NvGVOX3l7vREjA IqurHBAYWGL4Y2NEnq3Hl4XUjVt9uOrJaZe1ahApNT1vt0j76femb72xMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGj+4Aqqe3boWHsjOSLuahFJBYwPMB8GA1UdIwQY MBaAFNLvRqQTQZTnJCPVcqG2bUqdLkwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMt YTg4YmI3ODA1YjA5LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMtYTg4YmI3ODA1YjA5 LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevPokwmn N1zNp7qRzkG/p0PGjUXYTpNPXtnvKO89doONMzUEp8yssV+dectvsovyNGUVWvu3 XpqCQNrkJqfMYIehJ50+osngveKYPmNLTdz/ZO46p+UTJdMKILaPtVJq8csKvmVW uA6ThQz1c5mk2u7yTOza8qE0XsCi62OSuFOZ1+49HEz+fFU3Io2btFCvY4cujOKR Z6pEPf6J4yFAu7PeCw9suWdB6aQbznJKWzTr2WAQ2LRf3C1yWALa5MpCyD7DSx8G wLSS79QCLTqjLD1t/Eh2jhwrVtQb/7IScXUwnkkLqW+hPKs2esMsUfLErVvbTJ2z 89ks1+R7+1f0Sw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:21 2025 by rpki-client