This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft File: 0GmJqc1r0vLDwN7GCKKL49O6ToE.mft (raw, json) Hash identifier: 97ZVocmUgnP7mV/NP6RYYY8pd4IcYwwXxs4py/Bd8Wc= Subject key identifier: 84:E5:8D:85:32:BD:EC:04:2B:B4:BC:8C:9C:BD:78:E0:B8:2D:C7:62 Authority key identifier: D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81 Certificate issuer: /CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81 Certificate serial: 019AF54087099536014AFF39D734938240B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 20:00:38 +0000 Manifest this update: Sat 06 Dec 2025 20:00:38 +0000 Manifest next update: Sun 07 Dec 2025 20:00:38 +0000 Files and hashes: 1: 0GmJqc1r0vLDwN7GCKKL49O6ToE.crl (hash: zrVdk/rg0trdfxcd9nDCJEq/MUIeSKCHDHXajb5zaqU=) 2: QxqcS0TVGSUgUZVV2ZivYzu4jmI.roa (hash: ZdHOHVJoAbkKGlM6IZatNPTQ3rdTLS0gUgU+DGM3k0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:87:09:95:36:01:4a:ff:39:d7:34:93:82:40:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81 Validity Not Before: Dec 6 20:00:38 2025 GMT Not After : Dec 7 20:00:38 2025 GMT Subject: CN=84e58d8532bdec042bb4bc8c9cbd78e0b82dc762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:3a:a4:2f:34:21:d6:60:01:ad:8e:06:c2: e7:c0:a3:f7:d9:37:90:94:0a:62:30:da:73:61:0d: cb:f7:86:b1:ad:42:73:8e:9b:f4:93:b3:60:fd:c5: 9b:c8:f4:05:2b:b1:17:81:ec:e0:1e:71:4f:d5:08: ea:bb:24:71:92:a2:5f:10:e8:39:df:fc:94:3a:c5: 4c:74:f4:52:d0:33:a4:14:79:84:f2:e7:cf:62:4a: 3b:12:f5:d4:24:52:2d:89:b3:b6:bf:49:c6:fa:e7: 10:3a:cf:f5:d2:d2:67:73:e8:00:c6:e7:d3:e9:e4: b7:04:d3:51:04:67:18:e3:ec:eb:77:d6:73:d9:f7: fb:94:f9:71:56:e5:a3:2d:54:a6:4e:53:fa:76:e4: 2c:0b:7f:82:d2:f5:ff:26:28:6c:46:98:3d:8d:05: 8d:d5:59:9b:07:e9:d1:7f:78:6f:7f:25:cb:e5:2d: cc:02:18:2b:af:e8:dd:ea:47:71:c1:32:15:4e:cc: e4:45:5c:21:92:9a:91:2d:6a:11:2d:42:0b:7c:7a: 41:83:e1:6f:52:2b:1a:92:f8:aa:f1:f8:85:0f:01: 9a:c6:d8:91:fb:d5:c9:2e:f9:00:80:01:af:6f:58: fb:73:54:cc:97:52:42:15:91:f7:83:bd:5c:f4:97: f4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E5:8D:85:32:BD:EC:04:2B:B4:BC:8C:9C:BD:78:E0:B8:2D:C7:62 X509v3 Authority Key Identifier: keyid:D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4d:6c:a1:71:63:5e:76:0f:1a:be:78:03:eb:91:99:0d:b4: e9:28:72:ea:05:ae:42:28:0d:5c:a7:39:42:51:a5:09:6c:04: 52:3f:dc:60:d3:cb:95:6b:e4:8f:0f:7d:aa:a7:93:b2:41:c8: 97:d4:91:ee:9f:86:86:a8:34:20:1d:9f:cc:4f:c2:c4:31:11: f6:32:86:bb:b8:28:2c:ce:7b:d5:d3:5b:1b:c2:a0:08:41:16: b5:a9:d5:94:11:47:a3:4d:64:bc:9c:a2:04:47:22:3a:21:13: c7:b3:cb:96:20:4b:6a:3e:3d:f9:16:e5:4c:04:79:04:5f:cb: ad:3f:b8:71:71:94:23:1a:ac:58:8a:8c:93:ae:0e:94:11:a5: 3e:81:75:94:49:fc:43:f3:1b:85:63:d3:1f:16:df:08:7d:75: 75:ca:7d:02:70:9d:46:3e:2b:64:61:c5:c4:0e:68:e4:ae:49: 6c:1f:ae:68:69:90:19:75:68:7a:dd:82:a2:ca:24:9d:b2:50: 01:dc:29:70:de:e1:7a:c9:f2:c4:87:c9:10:81:63:9c:fd:ac: c8:4e:0c:d5:8a:d2:ff:28:65:6f:97:7d:0b:91:18:c7:5a:8b: 9e:a6:e7:64:67:6a:bd:db:b1:02:44:21:a3:f3:4d:c3:76:c0: 0c:19:fe:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QIcJlTYBSv851zSTgkCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNjk4OWE5Y2Q2YmQyZjJjM2MwZGVjNjA4YTI4YmUzZDNi YTRlODEwHhcNMjUxMjA2MjAwMDM4WhcNMjUxMjA3MjAwMDM4WjAzMTEwLwYDVQQD Eyg4NGU1OGQ4NTMyYmRlYzA0MmJiNGJjOGM5Y2JkNzhlMGI4MmRjNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+k6pC80IdZgAa2OBsLnwKP32TeQ lApiMNpzYQ3L94axrUJzjpv0k7Ng/cWbyPQFK7EXgezgHnFP1QjquyRxkqJfEOg5 3/yUOsVMdPRS0DOkFHmE8ufPYko7EvXUJFItibO2v0nG+ucQOs/10tJnc+gAxufT 6eS3BNNRBGcY4+zrd9Zz2ff7lPlxVuWjLVSmTlP6duQsC3+C0vX/JihsRpg9jQWN 1VmbB+nRf3hvfyXL5S3MAhgrr+jd6kdxwTIVTszkRVwhkpqRLWoRLUILfHpBg+Fv Uisakviq8fiFDwGaxtiR+9XJLvkAgAGvb1j7c1TMl1JCFZH3g71c9Jf05QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITljYUyvewEK7S8jJy9eOC4LcdiMB8GA1UdIwQY MBaAFNBpianNa9Lyw8Dexgiii+PTuk6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEdtSnFjMXIwdkxEd043R0NLS0w0OU82VG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZTZmZDMtNjdlZi00NWFiLWE0MjAt NDg3N2ZjNTlkMzE5LzEvMEdtSnFjMXIwdkxEd043R0NLS0w0OU82VG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZTZmZDMtNjdlZi00NWFiLWE0MjAtNDg3N2ZjNTlkMzE5 LzEvMEdtSnFjMXIwdkxEd043R0NLS0w0OU82VG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj01soXFj XnYPGr54A+uRmQ206Shy6gWuQigNXKc5QlGlCWwEUj/cYNPLlWvkjw99qqeTskHI l9SR7p+Ghqg0IB2fzE/CxDER9jKGu7goLM571dNbG8KgCEEWtanVlBFHo01kvJyi BEciOiETx7PLliBLaj49+RblTAR5BF/LrT+4cXGUIxqsWIqMk64OlBGlPoF1lEn8 Q/MbhWPTHxbfCH11dcp9AnCdRj4rZGHFxA5o5K5JbB+uaGmQGXVoet2CosoknbJQ AdwpcN7hesnyxIfJEIFjnP2syE4M1YrS/yhlb5d9C5EYx1qLnqbnZGdqvduxAkQh o/NNw3bADBn+8w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:45:41 2025 by rpki-client