This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json) Hash identifier: Sbd7/UbmpC1iFyZPTtzLfTzbYf10ChKIt6GWMA3R2Yw= Subject key identifier: 23:B9:B7:D6:F4:6C:53:35:D8:D0:77:61:7A:CC:B0:E8:0C:0C:BF:7E Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d Certificate serial: 019AF1D23BFF4CA1D411A94D87CF190A2BF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft Manifest number: 0653 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: sem0GPmiaYnl+bGXLf4rtJWiYZwoHVX5njIs8Xp0d4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3b:ff:4c:a1:d4:11:a9:4d:87:cf:19:0a:2b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=23b9b7d6f46c5335d8d077617accb0e80c0cbf7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:f4:49:48:67:7a:c7:cb:6f:66:23:0d:ad: b2:65:f6:55:b1:20:b4:94:21:af:27:ec:46:74:d7: b8:07:7b:89:5d:be:c6:af:a7:ad:62:c0:da:3e:22: 5f:8b:b9:d0:6d:b2:fe:96:8a:10:f3:03:5a:f1:33: 6f:46:f5:56:96:df:56:5d:29:a5:3f:a5:7f:b4:69: 1b:68:b5:06:e0:a6:de:55:b1:86:35:78:3f:27:2d: 32:f7:c4:5e:c4:8d:69:e8:f7:92:f8:36:35:57:a7: ca:c9:29:d9:26:04:1c:8b:a7:b3:a3:2c:07:26:0c: 28:db:73:a7:78:ed:29:3b:df:98:eb:b0:b6:ae:2f: ce:81:e9:9f:22:99:33:97:64:57:09:7d:aa:5b:91: ed:71:a9:f2:7f:66:11:3d:45:fc:f4:db:f8:af:49: 9e:42:1b:67:54:91:36:43:66:81:30:9d:14:af:11: 43:31:98:7b:fa:02:cf:e9:81:c1:56:ad:77:23:e2: 44:a2:bb:aa:dd:5e:a0:d1:40:e2:1e:ed:b6:92:7f: 90:e1:f3:24:12:d7:99:70:48:30:00:af:53:f0:48: 4d:21:57:3b:b8:82:cc:73:bc:5a:93:ec:ed:38:cb: 2f:32:c4:e1:eb:8a:4d:4c:91:ad:3c:e5:9e:8e:8d: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B9:B7:D6:F4:6C:53:35:D8:D0:77:61:7A:CC:B0:E8:0C:0C:BF:7E X509v3 Authority Key Identifier: keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:92:3f:08:23:bf:4d:5d:be:2f:ba:50:69:6e:e2:04:92:d5: f7:75:5d:ff:6e:c8:b6:d8:bb:e4:63:97:e1:56:25:df:45:f0: e2:fa:12:32:aa:8f:f0:0b:2d:7a:cb:cd:41:39:5b:85:7d:98: f1:cf:3c:ba:66:a2:b9:ec:8e:bb:44:ee:fe:4f:3e:05:c0:76: bf:e9:3c:dd:f2:7c:33:e2:3c:30:26:da:49:8c:fe:f4:cb:66: 17:c0:a1:86:cf:56:66:b6:5d:56:ec:d4:b3:8e:71:17:0e:19: c5:59:12:11:60:bf:fd:66:f8:0a:96:ca:78:cd:11:b0:62:4b: 1b:de:3a:82:da:12:ea:12:4c:c3:5a:33:be:c0:99:21:53:cf: 57:77:d3:a6:bf:b1:3a:ea:eb:31:b3:0a:fb:da:18:c1:a0:3a: 35:dc:28:46:30:6c:fc:3c:1c:87:4a:1f:9a:71:e7:e0:4e:f3: 92:d2:5a:e2:a2:f1:6d:00:78:96:6c:ec:7a:87:eb:7f:20:de: 44:02:1b:b3:23:8b:48:0d:3c:26:82:72:25:8a:da:4b:de:d7: 3e:a5:03:a5:5e:bb:86:50:72:8c:4f:8d:33:08:94:d3:8c:ea: 3f:9c:13:d9:e9:8f:9d:c5:90:32:2c:92:1c:e8:19:aa:80:ac: f6:9c:ec:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jv/TKHUEalNh88ZCivzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYWI4OTQ3YTg2MDFmNGJhMWE4NWJkMWMwN2IzZjM4NGY3 OTYxMWQwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD EygyM2I5YjdkNmY0NmM1MzM1ZDhkMDc3NjE3YWNjYjBlODBjMGNiZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHr0SUhnesfLb2YjDa2yZfZVsSC0 lCGvJ+xGdNe4B3uJXb7Gr6etYsDaPiJfi7nQbbL+looQ8wNa8TNvRvVWlt9WXSml P6V/tGkbaLUG4KbeVbGGNXg/Jy0y98RexI1p6PeS+DY1V6fKySnZJgQci6ezoywH Jgwo23OneO0pO9+Y67C2ri/OgemfIpkzl2RXCX2qW5Htcanyf2YRPUX89Nv4r0me QhtnVJE2Q2aBMJ0UrxFDMZh7+gLP6YHBVq13I+JEoruq3V6g0UDiHu22kn+Q4fMk EteZcEgwAK9T8EhNIVc7uILMc7xak+ztOMsvMsTh64pNTJGtPOWejo1y7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCO5t9b0bFM12NB3YXrMsOgMDL9+MB8GA1UdIwQY MBaAFNGriUeoYB9Loahb0cB7PzhPeWEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MThlMzYtZTBjMy00MjhhLWFmZDEt NDNjYzkwMTE3YWFjLzEvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82MThlMzYtZTBjMy00MjhhLWFmZDEtNDNjYzkwMTE3YWFj LzEvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5I/CCO/ TV2+L7pQaW7iBJLV93Vd/27Itti75GOX4VYl30Xw4voSMqqP8AstesvNQTlbhX2Y 8c88umaiueyOu0Tu/k8+BcB2v+k83fJ8M+I8MCbaSYz+9MtmF8Chhs9WZrZdVuzU s45xFw4ZxVkSEWC//Wb4CpbKeM0RsGJLG946gtoS6hJMw1ozvsCZIVPPV3fTpr+x OurrMbMK+9oYwaA6NdwoRjBs/Dwch0ofmnHn4E7zktJa4qLxbQB4lmzseofrfyDe RAIbsyOLSA08JoJyJYraS97XPqUDpV67hlByjE+NMwiU04zqP5wT2emPncWQMiyS HOgZqoCs9pzs7g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:32 2025 by rpki-client