This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft File: 0PMTtkDG3nU1uB7GjEDubsmf_00.mft (raw, json) Hash identifier: HMevvNXiT9WHX27s9LK4i/tdGUAw5KHRuAt1xyYOO/Q= Subject key identifier: 4D:1D:68:B3:D7:6D:10:41:DA:88:98:4C:D6:F3:BA:53:28:E1:69:A4 Authority key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D Certificate issuer: /CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d Certificate serial: 019AF1D1ED44B08F316B8F660E4A0AD161A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft Manifest number: 0892 Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: 0PMTtkDG3nU1uB7GjEDubsmf_00.crl (hash: B94bNjsARxqaHTYvxxEBj79A+iGfDdUOTjyB38qro30=) 2: _tDyQl_V4oGcaoTQCOv_1tAVV5w.roa (hash: NfAtzjH7XpKV/Nx/c7iUxK0arZdAcmbSlWPMtQY58/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ed:44:b0:8f:31:6b:8f:66:0e:4a:0a:d1:61:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=4d1d68b3d76d1041da88984cd6f3ba5328e169a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fd:f0:a0:bc:5e:c7:44:c8:01:1a:d4:cf:d8: 41:3c:82:9e:b9:a5:68:bc:33:b8:96:a5:c6:2f:cf: db:14:fe:c2:ac:a0:11:61:5b:67:ac:8b:e0:3b:54: 65:64:e3:f2:65:fb:b6:76:64:5e:92:90:61:8e:c7: 1d:c3:96:fe:f8:9f:3b:71:4f:09:af:9b:e4:33:da: 41:0f:b5:61:45:1a:41:73:e2:b7:ce:36:4c:c4:f1: 66:e2:3c:d3:af:a5:71:d0:8c:4c:24:80:43:18:24: 9d:1c:06:d1:bd:66:67:af:73:5b:44:e0:ad:b4:29: 81:ab:b5:0d:55:dd:b1:94:1e:17:55:7d:3b:ac:cb: df:0f:cf:3f:5f:2d:87:0b:5f:d8:46:05:4d:27:07: ec:13:fb:b5:57:e9:94:7c:b4:23:3e:da:6d:3d:4d: f9:d2:df:6f:61:28:cd:47:69:96:27:1f:b9:12:32: 9c:96:c3:e6:b0:e3:4a:dc:8d:df:47:d0:42:8c:66: 69:d7:6b:fd:75:40:f1:f7:c9:4c:0b:16:62:92:7f: af:a2:a5:fe:14:7f:28:65:f5:7a:3c:d3:75:c6:dc: 1a:9e:59:e0:55:7b:ec:cb:aa:0d:d1:40:42:1f:bd: 85:e1:6b:c7:9e:87:67:29:cb:78:b3:7c:a1:fa:24: e1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1D:68:B3:D7:6D:10:41:DA:88:98:4C:D6:F3:BA:53:28:E1:69:A4 X509v3 Authority Key Identifier: keyid:D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:07:44:5f:71:a9:c0:70:7a:dc:fd:68:f8:5d:d4:09:b2:75: f9:63:bf:67:fd:df:b1:ba:e2:bc:6b:68:56:ee:54:6c:92:82: 6f:ac:69:49:30:35:f6:9a:28:a5:e8:7a:e8:7d:c6:96:e0:da: f4:53:68:87:aa:97:2d:53:3a:ae:fc:79:67:5c:d5:b6:35:c9: 35:b8:81:5d:3f:49:97:e4:cc:5a:38:39:83:0b:7c:22:0a:61: 84:ce:3f:0c:d8:c8:05:ac:de:2b:b8:e5:53:fa:41:ff:cd:d2: f1:f4:71:0c:b6:80:db:d5:c1:1f:ab:16:42:68:11:63:c0:34: d3:93:ec:c9:f8:f7:8d:5e:8b:be:64:0a:77:35:ec:7b:3d:ef: 02:b9:51:e2:79:c0:e9:1e:1b:ab:21:0d:24:46:53:b5:0b:58: 8b:97:23:e2:77:6f:e7:21:85:0b:1a:44:69:27:6a:7b:a2:ce: 2f:3c:f5:36:7c:6c:a6:7c:53:04:8b:14:89:50:bf:11:09:67: 29:bf:b1:3d:37:ee:85:f1:e7:a2:ec:7c:2e:80:ff:f8:03:62: 83:5e:8b:2f:54:83:43:e6:4d:29:6b:bf:27:d9:27:cd:27:c1: 4b:01:bd:2b:49:eb:05:ca:dd:cb:96:fe:ee:8f:b6:43:47:f1: 71:65:b6:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0e1EsI8xa49mDkoK0WGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjMxM2I2NDBjNmRlNzUzNWI4MWVjNjhjNDBlZTZlYzk5 ZmZmNGQwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD Eyg0ZDFkNjhiM2Q3NmQxMDQxZGE4ODk4NGNkNmYzYmE1MzI4ZTE2OWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf3woLxex0TIARrUz9hBPIKeuaVo vDO4lqXGL8/bFP7CrKARYVtnrIvgO1RlZOPyZfu2dmRekpBhjscdw5b++J87cU8J r5vkM9pBD7VhRRpBc+K3zjZMxPFm4jzTr6Vx0IxMJIBDGCSdHAbRvWZnr3NbROCt tCmBq7UNVd2xlB4XVX07rMvfD88/Xy2HC1/YRgVNJwfsE/u1V+mUfLQjPtptPU35 0t9vYSjNR2mWJx+5EjKclsPmsONK3I3fR9BCjGZp12v9dUDx98lMCxZikn+voqX+ FH8oZfV6PNN1xtwanlngVXvsy6oN0UBCH72F4WvHnodnKct4s3yh+iThxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0daLPXbRBB2oiYTNbzulMo4WmkMB8GA1UdIwQY MBaAFNDzE7ZAxt51NbgexoxA7m7Jn/9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBNVHRrREczblUxdUI3R2pFRHVic21mXzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85YTk5ZjktMmQ2Yy00YTRhLWEwOTYt MGM3M2JlYzUxMDdjLzEvMFBNVHRrREczblUxdUI3R2pFRHVic21mXzAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85YTk5ZjktMmQ2Yy00YTRhLWEwOTYtMGM3M2JlYzUxMDdj LzEvMFBNVHRrREczblUxdUI3R2pFRHVic21mXzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAdEX3Gp wHB63P1o+F3UCbJ1+WO/Z/3fsbrivGtoVu5UbJKCb6xpSTA19poopeh66H3GluDa 9FNoh6qXLVM6rvx5Z1zVtjXJNbiBXT9Jl+TMWjg5gwt8IgphhM4/DNjIBazeK7jl U/pB/83S8fRxDLaA29XBH6sWQmgRY8A005Psyfj3jV6LvmQKdzXsez3vArlR4nnA 6R4bqyENJEZTtQtYi5cj4ndv5yGFCxpEaSdqe6LOLzz1NnxspnxTBIsUiVC/EQln Kb+xPTfuhfHnoux8LoD/+ANig16LL1SDQ+ZNKWu/J9knzSfBSwG9K0nrBcrdy5b+ 7o+2Q0fxcWW2ZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:14 2025 by rpki-client