This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft File: 0dMLd0soDDfhxe1dimnLmvZIsGU.mft (raw, json) Hash identifier: Hqt0zT5s7AxD40oEbYR1fRs6IZ+LXZPZl25Ng6XklfU= Subject key identifier: 34:E9:D8:69:C7:15:F5:30:DF:68:E7:01:FF:F6:DA:6D:D8:19:0F:67 Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65 Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065 Certificate serial: 019AF12D03F923124877881F7F8C5EE35456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft Manifest number: 0BCE Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: 0dMLd0soDDfhxe1dimnLmvZIsGU.crl (hash: P0kDiopkN4CssYQfJLALZT1RpstE2CPHtFmbaMrKSYA=) 2: Z6jijp-NqGecwIu65j-qEMAm0nw.roa (hash: 19TQbomnm0YTugnf3c9Z0fKykpuT1EtKWHuZ0GsZG+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:03:f9:23:12:48:77:88:1f:7f:8c:5e:e3:54:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065 Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=34e9d869c715f530df68e701fff6da6dd8190f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:95:f8:66:95:a7:c6:d6:1d:3b:1c:9b:db:bf: 8c:77:e0:98:73:60:75:e8:c4:dd:c2:6b:3a:73:c2: db:0e:77:1a:cc:fc:fc:5b:c6:3c:94:f1:c8:76:96: 45:9e:1f:e2:54:70:44:8f:45:5b:e8:56:61:a4:c4: e0:14:91:2f:ef:ed:20:7c:0e:f4:ec:c2:e1:82:84: 83:6d:f6:9c:3d:8d:2b:dc:bc:9c:98:0d:c1:13:c5: 42:16:b4:10:33:5d:36:03:f7:ca:34:36:d6:40:d1: a5:95:7a:42:ab:43:ae:fe:86:48:f8:e9:48:d0:70: a3:5f:55:5b:89:dd:52:6d:36:01:19:a7:50:bf:6c: 06:3d:0a:1f:77:4f:b8:49:cf:d4:a2:f0:a0:d3:e4: ec:04:36:7e:a2:f1:25:a1:3d:78:e0:60:3e:57:10: d2:14:42:77:af:1c:94:2a:25:76:5b:7e:2a:bf:3a: 17:41:31:85:05:b7:77:35:3c:54:73:ac:76:8f:6b: 84:ca:b0:c7:3a:1f:39:62:9f:0a:c2:74:90:85:96: 44:a5:15:dd:aa:1a:5c:7b:6a:29:f4:97:9f:4e:38: ed:e0:24:e7:52:ec:28:ef:c5:5f:92:c7:30:a7:a1: 78:43:a8:67:0f:5a:fa:6c:0a:76:8c:f2:1b:f8:d2: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E9:D8:69:C7:15:F5:30:DF:68:E7:01:FF:F6:DA:6D:D8:19:0F:67 X509v3 Authority Key Identifier: keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:3d:35:a7:63:48:29:27:34:93:ce:a3:3e:45:76:05:8d:cd: b6:89:12:11:a8:7a:f7:6c:ab:ec:e3:26:40:0d:4f:56:d1:21: f5:c0:6d:4f:d0:42:9a:aa:bb:18:4f:27:54:8e:48:31:91:0e: 56:90:30:11:62:67:66:9e:8f:59:fb:7e:7a:bc:12:e2:b0:44: df:de:96:6d:39:c0:d0:59:91:22:a8:90:9e:63:41:fe:20:4b: 15:52:26:07:b1:33:97:5b:80:b8:64:86:a8:04:7c:50:d9:a2: 4d:20:bb:1e:82:3f:34:60:88:50:14:df:ba:8f:dd:14:b4:f0: 77:89:bc:11:1f:84:f2:66:3b:38:23:83:a3:0e:9c:3d:65:8e: ed:2c:19:54:0d:b8:be:28:5d:af:ba:d3:31:be:e8:e5:ee:50: 73:41:d1:7b:30:e4:d5:79:87:16:f3:f3:c0:62:50:af:61:6a: 11:1a:81:a7:42:f7:86:69:3e:b3:70:aa:e0:38:44:16:38:4d: 7a:94:86:4b:db:4e:97:60:de:1e:14:fc:4e:b4:df:8e:46:92: cd:00:07:2e:d7:0a:ca:3e:67:6c:b1:6a:c5:a8:9f:bb:3e:00: c4:6f:74:ab:cd:74:cd:ad:08:cb:a9:ca:fd:73:78:b8:69:ea: cd:95:a8:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQP5IxJId4gff4xe41RWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZDMwYjc3NGIyODBjMzdlMWM1ZWQ1ZDhhNjljYjlhZjY0 OGIwNjUwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD EygzNGU5ZDg2OWM3MTVmNTMwZGY2OGU3MDFmZmY2ZGE2ZGQ4MTkwZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pX4ZpWnxtYdOxyb27+Md+CYc2B1 6MTdwms6c8LbDncazPz8W8Y8lPHIdpZFnh/iVHBEj0Vb6FZhpMTgFJEv7+0gfA70 7MLhgoSDbfacPY0r3LycmA3BE8VCFrQQM102A/fKNDbWQNGllXpCq0Ou/oZI+OlI 0HCjX1Vbid1SbTYBGadQv2wGPQofd0+4Sc/UovCg0+TsBDZ+ovEloT144GA+VxDS FEJ3rxyUKiV2W34qvzoXQTGFBbd3NTxUc6x2j2uEyrDHOh85Yp8KwnSQhZZEpRXd qhpce2op9JefTjjt4CTnUuwo78Vfkscwp6F4Q6hnD1r6bAp2jPIb+NJSswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTp2GnHFfUw32jnAf/22m3YGQ9nMB8GA1UdIwQY MBaAFNHTC3dLKAw34cXtXYppy5r2SLBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGRNTGQwc29ERGZoeGUxZGltbkxtdlpJc0dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iMDY5ZjktZjE0Ni00MjQ3LWJhY2Mt YmU2MzA0YzI1MmM3LzEvMGRNTGQwc29ERGZoeGUxZGltbkxtdlpJc0dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9iMDY5ZjktZjE0Ni00MjQ3LWJhY2MtYmU2MzA0YzI1MmM3 LzEvMGRNTGQwc29ERGZoeGUxZGltbkxtdlpJc0dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcz01p2NI KSc0k86jPkV2BY3NtokSEah692yr7OMmQA1PVtEh9cBtT9BCmqq7GE8nVI5IMZEO VpAwEWJnZp6PWft+erwS4rBE396WbTnA0FmRIqiQnmNB/iBLFVImB7Ezl1uAuGSG qAR8UNmiTSC7HoI/NGCIUBTfuo/dFLTwd4m8ER+E8mY7OCODow6cPWWO7SwZVA24 vihdr7rTMb7o5e5Qc0HRezDk1XmHFvPzwGJQr2FqERqBp0L3hmk+s3Cq4DhEFjhN epSGS9tOl2DeHhT8TrTfjkaSzQAHLtcKyj5nbLFqxaifuz4AxG90q810za0Iy6nK /XN4uGnqzZWozQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:52 2025 by rpki-client