This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft File: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json) Hash identifier: SVzxqYs+gVkgjmi2Hzdnzi03bshuiVeNVKh08vn5Lxc= Subject key identifier: E2:B2:FC:33:E6:12:1E:51:79:26:05:46:D6:17:2A:5D:90:D2:4D:89 Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B Certificate issuer: /CN=d2c17db099bd419eba552a37704deeed3b2e303b Certificate serial: 019AF23F79FD5C3EE38882FC50F5BB4D50DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft Manifest number: 054E Signing time: Sat 06 Dec 2025 06:00:37 +0000 Manifest this update: Sat 06 Dec 2025 06:00:37 +0000 Manifest next update: Sun 07 Dec 2025 06:00:37 +0000 Files and hashes: 1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: iDENIuCtcaKyFWcKbT7afa6BwykUiWsJwhVqW+hwm78=) 2: yAFTVipgzUq2JehlyXdlgvk4lGA.roa (hash: 4JLBxrRXaq9Ej5PAfStMaFMw5Cw8Ln+aMWKMUmNE/iE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:79:fd:5c:3e:e3:88:82:fc:50:f5:bb:4d:50:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b Validity Not Before: Dec 6 06:00:37 2025 GMT Not After : Dec 7 06:00:37 2025 GMT Subject: CN=e2b2fc33e6121e5179260546d6172a5d90d24d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:f8:97:56:6b:a5:ec:a3:f1:4a:e9:f3:e8: 8f:33:81:dd:f6:08:87:a5:19:24:61:a4:b1:a2:ec: 71:fe:01:a4:4a:54:49:0d:a3:7a:f0:53:f2:e0:33: 75:3c:69:3f:f0:9c:41:da:0b:74:dc:f8:08:df:58: dc:de:79:8d:7f:db:fa:8c:ae:bb:5e:b0:cb:dc:9a: 68:d5:d5:eb:87:ae:db:7f:a2:84:0f:72:09:13:3b: 76:3f:0e:95:af:17:90:cd:57:b7:02:9d:f3:c9:33: df:e1:d0:fe:b9:59:18:6d:7a:de:ca:d0:f2:0d:b1: f2:c8:8e:ea:83:77:d8:1c:dc:66:96:90:c4:56:7e: 3a:fe:b2:32:0e:86:0b:52:11:db:d7:7e:4d:33:61: c9:6c:ef:89:22:cb:c5:53:78:d6:30:26:8a:1d:b8: af:4e:e5:3f:2f:9a:92:48:67:00:a6:61:20:72:9b: 95:93:c8:fc:26:2e:6d:a6:22:d5:fb:8d:81:c4:b9: 25:fd:07:47:75:c5:43:1b:b7:a1:7e:42:25:c8:93: ae:42:9d:75:34:b6:2f:b7:5a:f8:76:1e:b3:7b:3a: c5:a6:70:15:c6:40:76:dc:83:32:71:3f:73:b2:a4: bd:fe:7a:d4:fe:3d:22:c6:df:e8:4f:bd:48:28:e0: 26:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B2:FC:33:E6:12:1E:51:79:26:05:46:D6:17:2A:5D:90:D2:4D:89 X509v3 Authority Key Identifier: keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2a:6c:18:63:97:16:30:ea:a8:e1:6d:b9:52:84:f1:f5:2e: 7d:06:e5:bf:00:d4:f7:da:8a:c4:6d:d5:52:c1:76:e2:79:d6: 41:c1:92:8b:a1:6c:c0:43:0d:07:85:a3:98:bd:b0:27:39:d5: 13:59:29:1e:f1:0f:3a:d8:ab:97:ff:34:e5:10:b0:da:a8:df: 1f:52:d4:ab:81:51:ff:0f:65:75:b3:b4:39:15:3c:cb:9a:b7: e6:e9:9f:17:d2:e5:a5:f7:d2:3b:05:54:73:63:93:09:07:0b: 9f:61:f8:f3:5b:f2:95:73:74:bc:7f:fe:93:64:04:c8:7e:39: ed:ba:dc:99:8a:9e:71:1b:34:c9:5d:a1:b7:16:e4:3b:0f:04: 43:cc:84:bf:2f:0f:a4:4f:ea:0b:a0:a4:26:0a:41:c9:4c:6d: b2:95:96:58:d5:bf:56:c7:c9:1d:a4:76:a6:1b:04:d3:ea:f1: b5:39:ab:be:93:e1:9a:39:4c:f8:78:a1:1f:ba:3d:83:14:e3: 62:78:22:23:8d:03:9a:d8:6b:20:33:79:00:eb:cc:a1:5f:e3: 8c:44:18:d4:f9:9a:bb:10:b9:96:27:51:ff:d3:1f:a3:24:c8: bf:57:fb:b8:00:b6:6e:00:7e:73:69:75:5c:0a:8f:ab:75:fb: c5:7e:e8:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3n9XD7jiIL8UPW7TVDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzE3ZGIwOTliZDQxOWViYTU1MmEzNzcwNGRlZWVkM2Iy ZTMwM2IwHhcNMjUxMjA2MDYwMDM3WhcNMjUxMjA3MDYwMDM3WjAzMTEwLwYDVQQD EyhlMmIyZmMzM2U2MTIxZTUxNzkyNjA1NDZkNjE3MmE1ZDkwZDI0ZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtL4l1Zrpeyj8Urp8+iPM4Hd9giH pRkkYaSxouxx/gGkSlRJDaN68FPy4DN1PGk/8JxB2gt03PgI31jc3nmNf9v6jK67 XrDL3Jpo1dXrh67bf6KED3IJEzt2Pw6VrxeQzVe3Ap3zyTPf4dD+uVkYbXreytDy DbHyyI7qg3fYHNxmlpDEVn46/rIyDoYLUhHb135NM2HJbO+JIsvFU3jWMCaKHbiv TuU/L5qSSGcApmEgcpuVk8j8Ji5tpiLV+42BxLkl/QdHdcVDG7ehfkIlyJOuQp11 NLYvt1r4dh6zezrFpnAVxkB23IMycT9zsqS9/nrU/j0ixt/oT71IKOAmOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKy/DPmEh5ReSYFRtYXKl2Q0k2JMB8GA1UdIwQY MBaAFNLBfbCZvUGeulUqN3BN7u07LjA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUt YTEwNzZkMTI3ZWM2LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUtYTEwNzZkMTI3ZWM2 LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCpsGGOX FjDqqOFtuVKE8fUufQblvwDU99qKxG3VUsF24nnWQcGSi6FswEMNB4WjmL2wJznV E1kpHvEPOtirl/805RCw2qjfH1LUq4FR/w9ldbO0ORU8y5q35umfF9LlpffSOwVU c2OTCQcLn2H481vylXN0vH/+k2QEyH457brcmYqecRs0yV2htxbkOw8EQ8yEvy8P pE/qC6CkJgpByUxtspWWWNW/VsfJHaR2phsE0+rxtTmrvpPhmjlM+HihH7o9gxTj YngiI40DmthrIDN5AOvMoV/jjEQY1PmauxC5lidR/9MfoyTIv1f7uAC2bgB+c2l1 XAqPq3X7xX7o4A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:43 2025 by rpki-client