This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json) Hash identifier: 9CSxZtvTRrjVyX5wPc9YoI3ahBcZBqkZIoJHHfiwYx0= Subject key identifier: C9:87:43:D8:EE:5D:7A:EA:C8:94:8A:AE:1B:42:A1:EB:DB:88:7B:DB Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83 Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183 Certificate serial: 019AF19B2FA128F0BBF81FFFA987F863539F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft Manifest number: 0592 Signing time: Sat 06 Dec 2025 03:01:10 +0000 Manifest this update: Sat 06 Dec 2025 03:01:10 +0000 Manifest next update: Sun 07 Dec 2025 03:01:10 +0000 Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: M0RVPtx2iPkRhLqCUEteIc9Ho4V5qnnSEld9vdoiTdQ=) 2: IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa (hash: /4IVw0ESBk+fPfscovcApWNjH6K3fkBcjRs0stf1FDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2f:a1:28:f0:bb:f8:1f:ff:a9:87:f8:63:53:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183 Validity Not Before: Dec 6 03:01:10 2025 GMT Not After : Dec 7 03:01:10 2025 GMT Subject: CN=c98743d8ee5d7aeac8948aae1b42a1ebdb887bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:8f:5b:e7:09:cc:87:33:66:64:5b:0f:41: b7:cf:4b:64:91:f2:f8:99:6e:75:7b:f1:e0:f3:c5: a9:a6:13:bd:ad:89:e4:e5:e2:8a:1b:a2:f2:94:17: a5:93:d2:47:24:dc:20:96:f5:73:b2:de:60:e8:65: 87:10:23:76:2e:66:7d:b6:b9:cf:b5:40:5a:12:1b: f0:44:41:59:f6:8a:c6:db:ea:4a:ca:90:47:6f:72: 58:dd:32:f7:6b:7a:54:b7:46:16:e9:cb:07:b1:de: 61:70:db:5b:d6:c4:dc:38:9e:ce:bd:11:4c:36:9b: 9b:9a:17:d8:18:65:db:88:19:cc:a1:a0:ba:80:84: 5d:a3:d3:3c:95:12:1f:1d:d1:c3:38:59:d4:89:73: 68:d6:be:50:2d:ff:40:ba:02:90:2a:7e:65:9c:04: 9e:cd:eb:d7:05:b7:e0:71:d0:13:8c:8d:5e:f8:da: 8d:6e:df:68:43:36:37:bc:b1:0d:65:38:5b:ca:5d: ed:e6:3b:6a:2a:08:57:fe:72:5c:32:6e:f2:d3:0b: 65:43:d1:cc:b8:8c:7e:c9:08:59:ea:a3:fa:6c:e1: 69:58:92:3a:6c:d7:7d:98:b3:7f:d4:93:d8:f6:1b: cd:0d:3d:a9:8f:08:f7:6f:8e:9c:d2:85:22:c5:a8: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:87:43:D8:EE:5D:7A:EA:C8:94:8A:AE:1B:42:A1:EB:DB:88:7B:DB X509v3 Authority Key Identifier: keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:6c:be:96:f6:ce:d5:23:9a:d4:f0:21:aa:88:21:53:1f:19: b4:7b:9e:86:4a:46:f4:d8:49:a1:69:9c:fc:de:81:71:41:2d: 0b:0c:ef:63:7d:47:18:61:d1:41:7a:f6:72:0c:eb:36:7f:66: 43:7f:17:71:f5:e9:a0:99:ef:fd:93:7a:17:76:34:d7:e2:e5: 64:1c:46:94:14:93:42:c0:f2:88:27:72:8c:80:71:6b:1c:63: b6:68:94:c2:2f:61:bd:28:32:55:9b:da:9b:26:9c:de:cb:fa: 56:d0:ae:4a:f9:7c:3b:7b:0a:d1:a0:30:e5:fa:98:c7:6b:72: bd:ef:9b:16:6f:94:fd:bb:ff:b1:18:23:0e:14:45:1c:43:2c: 3e:5b:85:1f:95:e7:5c:88:34:9d:8b:21:85:e0:fd:07:04:81: 41:15:f2:36:a4:74:c8:c1:f3:ad:60:4c:96:2b:78:98:dd:ca: ce:00:39:cf:bd:1d:fa:70:37:fe:77:65:85:02:f7:33:d0:73: 13:b4:87:72:be:47:2c:7c:03:31:8e:f2:2a:e5:44:ee:ce:42: 92:bd:6b:86:c4:8a:45:e0:aa:13:9b:8e:81:ce:31:f8:b4:9a: 70:93:4c:a6:9d:5c:63:a2:a3:fa:a2:71:a9:88:34:6e:27:4b: 8a:6f:33:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmy+hKPC7+B//qYf4Y1OfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTM0YzcyODhhMGMxN2EzM2I4YjVmZThjNTgwNjZiNDQ0 MmYxODMwHhcNMjUxMjA2MDMwMTEwWhcNMjUxMjA3MDMwMTEwWjAzMTEwLwYDVQQD EyhjOTg3NDNkOGVlNWQ3YWVhYzg5NDhhYWUxYjQyYTFlYmRiODg3YmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5aPW+cJzIczZmRbD0G3z0tkkfL4 mW51e/Hg88WpphO9rYnk5eKKG6LylBelk9JHJNwglvVzst5g6GWHECN2LmZ9trnP tUBaEhvwREFZ9orG2+pKypBHb3JY3TL3a3pUt0YW6csHsd5hcNtb1sTcOJ7OvRFM NpubmhfYGGXbiBnMoaC6gIRdo9M8lRIfHdHDOFnUiXNo1r5QLf9AugKQKn5lnASe zevXBbfgcdATjI1e+NqNbt9oQzY3vLENZThbyl3t5jtqKghX/nJcMm7y0wtlQ9HM uIx+yQhZ6qP6bOFpWJI6bNd9mLN/1JPY9hvNDT2pjwj3b46c0oUixahKqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmHQ9juXXrqyJSKrhtCoevbiHvbMB8GA1UdIwQY MBaAFNITTHKIoMF6M7i1/oxYBmtEQvGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kZGFmNDctNGU2ZC00OTk0LTg3N2It MmE4OWRmMWFmMTZhLzEvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kZGFmNDctNGU2ZC00OTk0LTg3N2ItMmE4OWRmMWFmMTZh LzEvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmy+lvbO 1SOa1PAhqoghUx8ZtHuehkpG9NhJoWmc/N6BcUEtCwzvY31HGGHRQXr2cgzrNn9m Q38XcfXpoJnv/ZN6F3Y01+LlZBxGlBSTQsDyiCdyjIBxaxxjtmiUwi9hvSgyVZva myac3sv6VtCuSvl8O3sK0aAw5fqYx2tyve+bFm+U/bv/sRgjDhRFHEMsPluFH5Xn XIg0nYshheD9BwSBQRXyNqR0yMHzrWBMlit4mN3KzgA5z70d+nA3/ndlhQL3M9Bz E7SHcr5HLHwDMY7yKuVE7s5Ckr1rhsSKReCqE5uOgc4x+LSacJNMpp1cY6Kj+qJx qYg0bidLim8zWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:18 2025 by rpki-client