This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json) Hash identifier: LaoHRuXnkW7K5Fyf1pCUzlbWnufVUMBIWVC+tHJ/2/g= Subject key identifier: A7:B1:0E:03:01:4D:96:C5:CE:97:90:25:7B:D5:63:DD:1D:1D:D0:76 Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65 Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865 Certificate serial: 019AF19B85D736CBCFB6559213F22C5ABF8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft Manifest number: 1417 Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: FrODroz/rYGdB0PJXIoHCK3+yHca6FPmugLeYKQpFao=) 2: l2z6jen0BvB90JFFcv4xMvXKDU4.roa (hash: 3LW90buItGbBk8vwyzdEvNmU4J6IAwriJoEjk0Q8hlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:85:d7:36:cb:cf:b6:55:92:13:f2:2c:5a:bf:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d031655023bd141731d56fb8453ff0514f728865 Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=a7b10e03014d96c5ce9790257bd563dd1d1dd076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:90:5e:36:0c:6f:dd:4c:66:d2:63:44:10: 02:14:52:7d:23:54:96:9d:8f:dd:5f:6e:06:09:42: d7:52:9e:1f:3f:23:15:76:33:35:cb:f5:2d:20:68: 8f:55:93:64:e1:09:f6:ab:5e:93:60:2c:1b:aa:2c: 0e:21:00:d2:8f:8c:28:84:17:57:56:bd:86:01:15: 49:1c:ca:82:0c:53:41:4f:de:a0:39:3f:0c:78:a1: 1b:54:06:cc:09:1b:b8:27:31:f4:94:1c:87:72:d9: d9:ec:85:33:5e:33:94:cb:ec:cc:28:65:2e:20:5f: 30:8b:4f:67:0e:66:3a:c6:a6:d0:2d:c0:48:66:a4: 13:2c:5a:14:12:a6:34:19:df:0a:eb:95:40:79:74: ee:62:10:2a:e4:93:55:09:36:a5:56:a2:5d:12:97: ea:6b:bd:26:99:08:5e:b7:36:e0:f0:87:63:cf:9d: 30:01:3c:0f:89:0f:1b:8c:16:0f:98:fb:26:2f:23: 25:e0:1b:fd:0a:c0:f2:20:53:4a:03:39:85:7c:1f: 86:ab:13:95:5e:31:1f:54:ab:17:4d:73:19:f4:34: 24:42:b9:56:dd:e4:f4:3f:11:c6:a0:d8:e4:bb:c0: c6:c3:27:7e:7a:37:3e:d1:c8:0d:ab:34:1e:d7:3b: e3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B1:0E:03:01:4D:96:C5:CE:97:90:25:7B:D5:63:DD:1D:1D:D0:76 X509v3 Authority Key Identifier: keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:10:5f:43:3d:63:ab:d0:9a:eb:b6:8f:de:90:15:25:c4:24: d1:4f:0e:61:c3:92:88:c3:cf:57:a9:ee:6d:77:48:3a:58:61: 93:bd:ad:a5:e5:e5:ad:3c:b0:c6:73:38:af:b7:0d:c2:af:1c: a0:c2:c5:6a:db:66:aa:d9:16:01:0b:21:57:a2:56:61:8d:1f: bb:3b:bb:0c:57:0c:62:6e:41:fe:33:11:02:ec:08:e9:a5:66: ba:c4:88:fa:41:dc:66:72:6d:b6:aa:a9:40:07:5b:b1:9f:dd: 90:f2:01:c0:ce:b0:55:99:b9:b1:57:25:1a:f7:6f:bd:0b:6b: 28:ad:6a:6c:db:38:08:e3:e9:55:5a:33:34:12:ae:0a:b0:5c: 9e:b2:93:5e:1d:46:5b:97:6e:73:85:13:20:90:af:a9:39:b9: c5:e9:e9:8c:b9:ba:f5:62:3b:63:fa:26:ab:4b:52:89:5f:55: 08:f7:3a:df:f0:dd:3c:9a:5b:5c:b6:41:4d:29:2b:11:0e:7f: 6a:54:c6:f3:99:aa:32:53:c9:b2:e4:ee:42:44:3d:fd:0a:84: f3:03:b3:ca:25:91:76:43:75:26:bd:75:7a:e0:73:f4:c9:fc: e8:bb:4b:53:31:b1:5f:22:02:40:52:be:ca:b0:ce:c8:60:8d: d0:6d:5c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4XXNsvPtlWSE/IsWr+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMzE2NTUwMjNiZDE0MTczMWQ1NmZiODQ1M2ZmMDUxNGY3 Mjg4NjUwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD EyhhN2IxMGUwMzAxNGQ5NmM1Y2U5NzkwMjU3YmQ1NjNkZDFkMWRkMDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPGQXjYMb91MZtJjRBACFFJ9I1SW nY/dX24GCULXUp4fPyMVdjM1y/UtIGiPVZNk4Qn2q16TYCwbqiwOIQDSj4wohBdX Vr2GARVJHMqCDFNBT96gOT8MeKEbVAbMCRu4JzH0lByHctnZ7IUzXjOUy+zMKGUu IF8wi09nDmY6xqbQLcBIZqQTLFoUEqY0Gd8K65VAeXTuYhAq5JNVCTalVqJdEpfq a70mmQhetzbg8Idjz50wATwPiQ8bjBYPmPsmLyMl4Bv9CsDyIFNKAzmFfB+GqxOV XjEfVKsXTXMZ9DQkQrlW3eT0PxHGoNjku8DGwyd+ejc+0cgNqzQe1zvjzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKexDgMBTZbFzpeQJXvVY90dHdB2MB8GA1UdIwQY MBaAFNAxZVAjvRQXMdVvuEU/8FFPcohlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5Nzkt ZDhiZDJmNTZiYzhjLzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5NzktZDhiZDJmNTZiYzhj LzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxBfQz1j q9Ca67aP3pAVJcQk0U8OYcOSiMPPV6nubXdIOlhhk72tpeXlrTywxnM4r7cNwq8c oMLFattmqtkWAQshV6JWYY0fuzu7DFcMYm5B/jMRAuwI6aVmusSI+kHcZnJttqqp QAdbsZ/dkPIBwM6wVZm5sVclGvdvvQtrKK1qbNs4COPpVVozNBKuCrBcnrKTXh1G W5duc4UTIJCvqTm5xenpjLm69WI7Y/omq0tSiV9VCPc63/DdPJpbXLZBTSkrEQ5/ alTG85mqMlPJsuTuQkQ9/QqE8wOzyiWRdkN1Jr11euBz9Mn86LtLUzGxXyICQFK+ yrDOyGCN0G1c9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:42 2025 by rpki-client