This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json) Hash identifier: fDP2v3uj75cloZga1Qb6qNfqtC1R2VhMbuVbBUpFm7c= Subject key identifier: 19:0F:B2:8C:74:92:34:FF:9A:FA:A9:1B:1C:42:A4:86:B5:06:B7:23 Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c Certificate serial: 019AF3522150F920A1E15754FB1518AD8B0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft Manifest number: 072E Signing time: Sat 06 Dec 2025 11:00:37 +0000 Manifest this update: Sat 06 Dec 2025 11:00:37 +0000 Manifest next update: Sun 07 Dec 2025 11:00:37 +0000 Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: GbpEcrrW5XXBQBRPtHmz6N6vcDrgWUtUDWVcb8N8wIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:21:50:f9:20:a1:e1:57:54:fb:15:18:ad:8b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c Validity Not Before: Dec 6 11:00:37 2025 GMT Not After : Dec 7 11:00:37 2025 GMT Subject: CN=190fb28c749234ff9afaa91b1c42a486b506b723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:90:87:c0:7e:e6:9a:99:0b:1e:ab:dc:bb:b8: c1:69:e5:4d:87:46:45:22:dd:88:9c:dd:09:8b:aa: 44:d1:16:82:29:8e:a0:eb:4e:08:20:7a:4e:90:80: 26:e4:70:7f:49:d5:99:7b:53:e6:88:ad:98:f6:60: 3c:a3:b3:fa:cc:eb:8a:54:28:32:5a:d7:77:ea:6a: 2d:23:35:46:52:35:31:78:59:af:1a:ce:7b:e5:30: 1c:2c:32:3b:52:7b:f5:90:58:ca:e1:bf:13:a8:d3: 2e:c4:25:47:59:f6:9a:36:8e:0d:ff:ab:2b:b8:24: c3:f8:57:53:3c:32:db:aa:12:56:56:75:b4:c2:ab: 2e:ba:8c:60:d8:57:eb:8a:42:13:70:ff:31:f2:23: 80:79:4b:82:f3:4d:d6:84:49:60:04:f6:83:03:57: 6e:d7:2f:0b:a8:25:26:24:2b:ff:40:07:4d:8b:3b: d3:10:d4:70:ec:a3:0e:cd:c9:74:35:d4:c8:18:56: 5e:f2:bf:44:d1:15:44:66:72:4e:a4:62:af:65:c2: b4:31:c7:50:48:73:34:d0:f0:6b:e5:38:07:4a:f3: 5e:fd:35:4f:2e:5e:b2:2e:fe:61:25:83:66:98:0d: 32:68:28:46:d2:49:1a:7e:8c:0d:df:be:41:f1:df: 50:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0F:B2:8C:74:92:34:FF:9A:FA:A9:1B:1C:42:A4:86:B5:06:B7:23 X509v3 Authority Key Identifier: keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1f:ee:ac:ba:79:e0:4e:ac:50:c1:6f:ca:d5:a0:4a:c4:07: 72:d7:b8:45:42:72:a7:35:3f:4a:32:51:f6:25:e3:e1:9d:42: 96:43:cc:36:ab:f5:c1:0b:f5:c0:c3:09:f0:14:a2:00:7c:87: 32:42:4a:74:53:01:29:3c:07:7c:4a:97:4c:74:21:8a:7b:49: 72:c0:5c:9a:54:ec:0e:72:c8:d7:1c:0d:0c:11:80:55:fb:44: c7:16:77:0f:c1:d5:8d:fa:31:ef:d5:0a:61:7f:42:27:9e:b3: d4:62:b7:b0:51:9c:4d:9a:aa:0f:d6:d0:7e:85:1c:a8:03:85: 86:68:96:75:48:53:d7:97:f5:fe:e7:de:41:60:42:eb:b4:6f: 0b:1a:2b:2a:44:92:1a:53:86:ba:a3:27:ad:be:c2:b2:09:b6: f4:b5:fa:6d:fe:99:36:c9:5d:9f:f3:d7:4e:46:3e:4b:26:52: 60:8d:35:eb:1a:9f:fc:9b:50:9f:e9:38:3e:ed:4f:67:2a:85: 7c:73:17:e5:de:ca:4a:31:96:c2:74:45:47:9e:98:2d:4a:ad: bc:cf:d0:0f:78:15:fc:c3:37:ae:ef:7b:aa:6f:68:4d:cf:aa: 32:00:31:04:a8:66:e2:66:64:2c:d4:89:32:f7:a6:df:20:10: d3:96:48:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUiFQ+SCh4VdU+xUYrYsLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZGYzMzA5YjNmMThmYmJlYzk5OWM0MTJmZGVmMWRjNDQy MGU0MmMwHhcNMjUxMjA2MTEwMDM3WhcNMjUxMjA3MTEwMDM3WjAzMTEwLwYDVQQD EygxOTBmYjI4Yzc0OTIzNGZmOWFmYWE5MWIxYzQyYTQ4NmI1MDZiNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJCHwH7mmpkLHqvcu7jBaeVNh0ZF It2InN0Ji6pE0RaCKY6g604IIHpOkIAm5HB/SdWZe1PmiK2Y9mA8o7P6zOuKVCgy Wtd36motIzVGUjUxeFmvGs575TAcLDI7Unv1kFjK4b8TqNMuxCVHWfaaNo4N/6sr uCTD+FdTPDLbqhJWVnW0wqsuuoxg2FfrikITcP8x8iOAeUuC803WhElgBPaDA1du 1y8LqCUmJCv/QAdNizvTENRw7KMOzcl0NdTIGFZe8r9E0RVEZnJOpGKvZcK0McdQ SHM00PBr5TgHSvNe/TVPLl6yLv5hJYNmmA0yaChG0kkafowN375B8d9QBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkPsox0kjT/mvqpGxxCpIa1BrcjMB8GA1UdIwQY MBaAFNDfMwmz8Y+77JmcQS/e8dxEIOQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME44ekNiUHhqN3ZzbVp4Qkw5N3gzRVFnNUN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yZjcxNWItY2RhZi00MDJjLTkyMDkt MWZmOTE1YmZlZDk5LzEvME44ekNiUHhqN3ZzbVp4Qkw5N3gzRVFnNUN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8yZjcxNWItY2RhZi00MDJjLTkyMDktMWZmOTE1YmZlZDk5 LzEvME44ekNiUHhqN3ZzbVp4Qkw5N3gzRVFnNUN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALh/urLp5 4E6sUMFvytWgSsQHcte4RUJypzU/SjJR9iXj4Z1ClkPMNqv1wQv1wMMJ8BSiAHyH MkJKdFMBKTwHfEqXTHQhintJcsBcmlTsDnLI1xwNDBGAVftExxZ3D8HVjfox79UK YX9CJ56z1GK3sFGcTZqqD9bQfoUcqAOFhmiWdUhT15f1/ufeQWBC67RvCxorKkSS GlOGuqMnrb7Csgm29LX6bf6ZNsldn/PXTkY+SyZSYI016xqf/JtQn+k4Pu1PZyqF fHMX5d7KSjGWwnRFR56YLUqtvM/QD3gV/MM3ru97qm9oTc+qMgAxBKhm4mZkLNSJ Mvem3yAQ05ZIAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:28 2025 by rpki-client