This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft File: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft (raw, json) Hash identifier: WNX8lKo9zMIIA9gUi5YNHoZuYho0NzPxpatHOYtQXpI= Subject key identifier: 32:A9:2A:2F:45:D5:45:54:E4:85:FD:E9:90:9F:72:7F:9F:42:90:54 Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8 Certificate issuer: /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8 Certificate serial: 019AF276B4C97734FA40FB4054F8ADA91C76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:57 +0000 Manifest this update: Sat 06 Dec 2025 07:00:57 +0000 Manifest next update: Sun 07 Dec 2025 07:00:57 +0000 Files and hashes: 1: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl (hash: qeL7S+vAfFMoC82IQEdWntQLso5TBR55/EGUTR7E7VA=) 2: OCcJDhB4OQ1X-MIeEHbwYqPSbys.roa (hash: bYb4Alf329H7/hgxf3+yXtwxwALKiQ1xJi7nvHZupTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b4:c9:77:34:fa:40:fb:40:54:f8:ad:a9:1c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8 Validity Not Before: Dec 6 07:00:57 2025 GMT Not After : Dec 7 07:00:57 2025 GMT Subject: CN=32a92a2f45d54554e485fde9909f727f9f429054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:99:4f:b9:79:23:26:7a:c9:01:18:83:94:f0: e5:64:f6:b5:e9:73:77:56:7e:a2:c4:1c:64:fd:fa: a9:17:1e:4e:16:18:3c:02:d1:1f:eb:de:91:30:a0: cc:3d:aa:d9:34:ef:cf:93:be:cd:d0:fc:9c:06:ee: 5b:e5:0e:d6:67:bc:92:01:d5:87:d2:e3:c9:55:af: 90:58:2f:db:d4:0e:e3:d5:d5:06:12:5f:74:ff:bc: 73:c1:48:69:06:23:65:59:9c:6a:3a:ff:fb:60:4b: 8c:4b:96:64:43:a2:c1:7c:f9:3f:07:d2:43:d3:87: 22:28:1e:76:32:b1:f1:a6:40:70:fd:83:ae:0f:91: ea:d6:06:30:b3:02:b1:dd:5b:26:6d:4d:fc:97:1f: 06:68:69:91:0d:46:c8:2a:87:ce:38:2d:1d:40:1c: e9:41:8a:38:53:08:25:60:a5:14:fd:86:44:07:b9: 50:01:25:eb:92:16:20:b2:da:cc:2d:21:6e:08:d8: 06:c8:47:73:67:67:bc:9e:60:85:1d:9f:48:d3:a0: a5:97:4e:35:60:48:7c:d9:b5:5f:65:c2:f3:d6:cf: 6d:d1:aa:57:7f:ba:7a:60:21:83:fb:d0:02:10:e2: 5a:bd:26:30:73:c4:f3:4b:4c:b9:ce:2f:0b:8d:71: 56:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:2A:2F:45:D5:45:54:E4:85:FD:E9:90:9F:72:7F:9F:42:90:54 X509v3 Authority Key Identifier: keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:24:68:68:e0:e3:b2:73:cc:a1:a4:2e:64:0a:7f:62:df:ff: 11:cc:27:72:11:af:3e:22:40:3a:f0:98:49:34:4d:3e:93:ae: 04:f2:94:fa:f5:99:15:fa:aa:41:6a:a0:ba:d3:60:5f:86:fc: 71:47:4a:0b:96:66:d0:2d:21:4a:eb:59:30:3a:cd:40:bf:1f: be:08:a8:ac:dd:ec:c9:a3:e4:00:68:fd:28:06:fe:87:b4:43: 4d:b8:19:9e:79:2c:eb:5a:2d:9d:21:95:72:a2:da:fe:5f:18: 9a:19:bc:bd:59:ed:44:a6:11:1b:c5:2d:af:5b:49:9c:46:56: 2c:98:8b:43:6a:bb:7f:ab:43:4e:70:3f:b5:aa:da:50:1b:a9: ae:a2:88:5c:cb:a1:92:dc:04:0b:09:52:09:00:5d:50:c5:33: 4c:0c:c5:24:92:af:3e:74:60:cc:0f:48:47:ec:02:c2:30:18: cc:3c:9b:ca:8d:36:a5:dc:59:8d:f8:e9:ea:ed:d1:7b:c4:ba: 5e:c3:a3:7e:79:dc:78:3b:fa:37:b0:db:26:d1:98:cb:64:43: ef:5e:b1:a8:fe:bd:cb:fc:91:fc:4d:b9:8b:14:34:4a:8d:b1: d6:1d:d8:08:fc:4d:30:73:6d:b7:03:4e:52:2d:c5:03:bd:21: ae:59:b9:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrTJdzT6QPtAVPitqRx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMGM4OGQ4MmQyZmFjODIyMDNkNDJhMjQyZDZlYjc2M2Qx M2JiZjgwHhcNMjUxMjA2MDcwMDU3WhcNMjUxMjA3MDcwMDU3WjAzMTEwLwYDVQQD EygzMmE5MmEyZjQ1ZDU0NTU0ZTQ4NWZkZTk5MDlmNzI3ZjlmNDI5MDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZlPuXkjJnrJARiDlPDlZPa16XN3 Vn6ixBxk/fqpFx5OFhg8AtEf696RMKDMParZNO/Pk77N0PycBu5b5Q7WZ7ySAdWH 0uPJVa+QWC/b1A7j1dUGEl90/7xzwUhpBiNlWZxqOv/7YEuMS5ZkQ6LBfPk/B9JD 04ciKB52MrHxpkBw/YOuD5Hq1gYwswKx3VsmbU38lx8GaGmRDUbIKofOOC0dQBzp QYo4UwglYKUU/YZEB7lQASXrkhYgstrMLSFuCNgGyEdzZ2e8nmCFHZ9I06Cll041 YEh82bVfZcLz1s9t0apXf7p6YCGD+9ACEOJavSYwc8TzS0y5zi8LjXFWdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKpKi9F1UVU5IX96ZCfcn+fQpBUMB8GA1UdIwQY MBaAFNEMiNgtL6yCID1CokLW63Y9E7v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFF5STJDMHZySUlnUFVLaVF0YnJkajBUdV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84ZWQwMTgtMDhmMy00Nzc3LTlkZDQt ZGUyNDVhZjRmYWNiLzEvMFF5STJDMHZySUlnUFVLaVF0YnJkajBUdV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS84ZWQwMTgtMDhmMy00Nzc3LTlkZDQtZGUyNDVhZjRmYWNi LzEvMFF5STJDMHZySUlnUFVLaVF0YnJkajBUdV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiRoaODj snPMoaQuZAp/Yt//EcwnchGvPiJAOvCYSTRNPpOuBPKU+vWZFfqqQWqgutNgX4b8 cUdKC5Zm0C0hSutZMDrNQL8fvgiorN3syaPkAGj9KAb+h7RDTbgZnnks61otnSGV cqLa/l8Ymhm8vVntRKYRG8Utr1tJnEZWLJiLQ2q7f6tDTnA/taraUBuprqKIXMuh ktwECwlSCQBdUMUzTAzFJJKvPnRgzA9IR+wCwjAYzDybyo02pdxZjfjp6u3Re8S6 XsOjfnnceDv6N7DbJtGYy2RD716xqP69y/yR/E25ixQ0So2x1h3YCPxNMHNttwNO Ui3FA70hrlm5EQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:20 2025 by rpki-client