This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json) Hash identifier: Zjw08I9KH7LDuYoqjtuiWU0dSp+kjmjhaJHD2BLkNZo= Subject key identifier: 75:5E:67:54:E8:D2:8B:A1:09:76:48:93:CA:34:E5:F1:66:D6:77:8E Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127 Certificate serial: 019AF12E6570578230908E00E6440C55B03C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft Manifest number: 0B78 Signing time: Sat 06 Dec 2025 01:02:20 +0000 Manifest this update: Sat 06 Dec 2025 01:02:20 +0000 Manifest next update: Sun 07 Dec 2025 01:02:20 +0000 Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: wYQQnD/QkmaoxbDxOtE1Db9hNvn8WLVCVGJkukX93Kk=) 2: Ve2RrvNi_87VDfl21Lq8fKe-sYc.roa (hash: Bwg7wRCqbsHk5Pn4Ah5pnRiyg8rpwcrSFyOQ2YGllyY=) 3: nc0QnNEGuF1kLi9w3egLsBhEL6Y.roa (hash: KWBWDWBG7Sj1CyJ1paoXUYeG29P/pnqgE+4DRW4DIYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:65:70:57:82:30:90:8e:00:e6:44:0c:55:b0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127 Validity Not Before: Dec 6 01:02:20 2025 GMT Not After : Dec 7 01:02:20 2025 GMT Subject: CN=755e6754e8d28ba109764893ca34e5f166d6778e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:1d:b9:d8:e0:7f:b1:e2:46:b2:6e:b3:78: be:0b:6b:f7:c6:44:f7:e7:81:84:5e:9a:7f:41:87: 23:4b:21:3a:43:50:65:55:5a:e1:dd:e5:fd:4d:0a: bf:0c:1c:34:78:25:2a:e8:5b:8a:aa:b8:6c:a3:60: ad:4d:01:32:87:a3:a0:0d:fa:d9:2d:6f:9c:d4:50: 9c:80:46:bb:1e:86:5e:08:21:5e:41:64:31:ea:b6: cd:be:7a:19:76:37:d1:7b:8c:1c:ee:d4:b2:f2:4d: 39:e8:55:6e:ca:da:9d:42:ff:d1:d2:bf:29:ee:10: 78:82:ac:4b:12:3d:00:dd:66:a9:cb:41:5a:a9:69: 29:a9:94:7c:a1:bb:a1:79:30:95:81:d8:91:01:eb: c8:8c:50:19:cd:e0:d1:1b:3a:b7:65:71:87:2e:63: b5:15:d6:3c:f9:ed:67:0f:5c:87:d5:b1:ab:92:5d: 60:10:bf:1c:f1:a4:7a:7b:99:99:f6:1f:cc:5d:ae: e1:c3:60:f8:5b:72:fe:8f:6c:da:6a:b5:d4:e5:03: 64:0c:1e:c7:04:96:f0:f6:27:34:a6:82:c6:cd:3d: 5c:52:1a:db:e1:66:b6:6d:9f:83:6a:c6:52:9d:96: 99:e3:1d:b2:10:4d:47:dd:68:e6:0a:d7:f2:49:e4: 6f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5E:67:54:E8:D2:8B:A1:09:76:48:93:CA:34:E5:F1:66:D6:77:8E X509v3 Authority Key Identifier: keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:39:57:4d:89:26:6a:a6:62:b0:22:0b:48:86:d9:8e:af:0f: d6:89:b1:94:d8:7b:ef:d1:94:64:67:88:52:95:16:e2:56:3a: 18:3e:48:5a:ed:af:77:cc:70:a5:6e:17:61:e5:d9:bd:59:c2: c9:e4:60:43:08:a1:fb:70:30:5b:20:09:59:8c:f0:e0:fa:c2: b7:03:c8:1b:25:ea:2d:1f:57:e3:a3:32:ff:e0:89:24:e0:67: a3:fc:90:f3:d5:77:82:8c:59:b9:a4:9e:d8:46:1c:d2:d3:c7: c0:71:f8:7d:b2:03:73:58:f5:61:68:35:19:d2:74:15:90:ce: 4c:95:16:76:50:1c:82:b2:a8:99:7f:44:65:ad:74:50:53:3f: 88:54:dc:41:7b:e4:67:a4:3c:2a:f2:34:91:85:7a:f0:75:ed: f0:dd:f3:d6:dd:5f:a4:53:07:88:5e:a8:ff:17:c8:e6:9f:77: 7b:f6:0a:11:6a:74:56:0b:2b:30:94:31:89:52:d0:cf:9a:bb: bb:3d:36:19:51:22:d5:f4:fd:08:6c:c0:fa:c2:cb:c0:17:6e: 2d:99:02:9b:15:06:f8:ba:67:ea:5a:7d:7e:01:4f:06:eb:77: 5b:75:41:01:52:61:db:6d:9d:26:cd:4c:2f:ab:b2:09:11:b9: ae:8f:53:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmVwV4IwkI4A5kQMVbA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMTY4MzVkMDM3Nzg2NjIwYTllOWY3YTBlMzYwNDk4YmI2 NTQxMjcwHhcNMjUxMjA2MDEwMjIwWhcNMjUxMjA3MDEwMjIwWjAzMTEwLwYDVQQD Eyg3NTVlNjc1NGU4ZDI4YmExMDk3NjQ4OTNjYTM0ZTVmMTY2ZDY3NzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllsdudjgf7HiRrJus3i+C2v3xkT3 54GEXpp/QYcjSyE6Q1BlVVrh3eX9TQq/DBw0eCUq6FuKqrhso2CtTQEyh6OgDfrZ LW+c1FCcgEa7HoZeCCFeQWQx6rbNvnoZdjfRe4wc7tSy8k056FVuytqdQv/R0r8p 7hB4gqxLEj0A3Wapy0FaqWkpqZR8obuheTCVgdiRAevIjFAZzeDRGzq3ZXGHLmO1 FdY8+e1nD1yH1bGrkl1gEL8c8aR6e5mZ9h/MXa7hw2D4W3L+j2zaarXU5QNkDB7H BJbw9ic0poLGzT1cUhrb4Wa2bZ+DasZSnZaZ4x2yEE1H3WjmCtfySeRv0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVeZ1To0ouhCXZIk8o05fFm1neOMB8GA1UdIwQY MBaAFNEWg10Dd4ZiCp6feg42BJi7ZUEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMt MTZhN2Q2MGQ1YmVhLzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMtMTZhN2Q2MGQ1YmVh LzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDlXTYkm aqZisCILSIbZjq8P1omxlNh779GUZGeIUpUW4lY6GD5IWu2vd8xwpW4XYeXZvVnC yeRgQwih+3AwWyAJWYzw4PrCtwPIGyXqLR9X46My/+CJJOBno/yQ89V3goxZuaSe 2EYc0tPHwHH4fbIDc1j1YWg1GdJ0FZDOTJUWdlAcgrKomX9EZa10UFM/iFTcQXvk Z6Q8KvI0kYV68HXt8N3z1t1fpFMHiF6o/xfI5p93e/YKEWp0VgsrMJQxiVLQz5q7 uz02GVEi1fT9CGzA+sLLwBduLZkCmxUG+Lpn6lp9fgFPBut3W3VBAVJh222dJs1M L6uyCRG5ro9TZA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:49 2025 by rpki-client