This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft File: b0hdoepm0fZhammw0CuaK8Gk_9M.mft (raw, json) Hash identifier: YbGrSzLTcyBHgme0Tu5wmbXwMc1m/pPwBg1UkI7piQg= Subject key identifier: 5A:F7:FE:F5:AD:1C:0E:30:FB:25:68:79:A1:83:20:2F:A2:09:CB:41 Authority key identifier: 6F:48:5D:A1:EA:66:D1:F6:61:6A:69:B0:D0:2B:9A:2B:C1:A4:FF:D3 Certificate issuer: /CN=6f485da1ea66d1f6616a69b0d02b9a2bc1a4ffd3 Certificate serial: 019AF23FCB310ACA573C2BFD7CB2BA0795B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft Manifest number: 0196 Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: b0hdoepm0fZhammw0CuaK8Gk_9M.crl (hash: gFgWNxAmbxXMhiYhvN5DlKYt+ZNFgK2Dew11rQjTnTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cb:31:0a:ca:57:3c:2b:fd:7c:b2:ba:07:95:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f485da1ea66d1f6616a69b0d02b9a2bc1a4ffd3 Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=5af7fef5ad1c0e30fb256879a183202fa209cb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:02:7c:da:ed:5e:99:a5:60:26:61:34:86: b5:97:0c:d6:0e:96:fe:6c:33:21:ea:70:43:6d:fe: 88:01:c1:81:26:28:b6:21:fd:cb:64:0c:c2:f0:77: 62:b0:39:ee:68:71:02:24:d5:34:a7:83:6c:7a:b1: 5b:0b:ae:c7:e2:39:ba:40:ba:ab:66:db:7c:f3:68: cb:66:8c:23:eb:e9:4d:f9:52:e0:c8:12:18:6b:30: 56:e9:42:75:cb:18:30:72:70:c0:e3:e1:a2:ed:67: 58:f7:f5:56:40:30:1b:e5:06:52:8b:7f:8b:ab:38: d9:7d:30:10:4a:ab:22:e8:d1:59:21:12:0b:f9:e1: 22:04:f1:c5:70:9a:5f:4c:08:eb:1e:28:92:8d:55: 09:f5:4e:13:73:f2:2d:72:b9:5e:51:57:4d:a2:a3: 63:89:49:89:11:62:7a:51:2a:7b:6a:8c:d0:45:52: b6:fe:e7:3b:74:d8:31:30:85:d0:44:99:e1:dd:93: bc:29:0a:b5:87:4f:f7:ca:c1:cb:47:bc:32:2b:10: c1:17:73:66:ca:6b:b8:26:5c:11:16:12:99:5a:04: 3c:15:b9:f3:77:b0:54:78:60:0b:c5:d0:01:80:e8: 4e:52:f7:20:57:35:5a:50:8d:9f:25:2a:04:85:38: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F7:FE:F5:AD:1C:0E:30:FB:25:68:79:A1:83:20:2F:A2:09:CB:41 X509v3 Authority Key Identifier: keyid:6F:48:5D:A1:EA:66:D1:F6:61:6A:69:B0:D0:2B:9A:2B:C1:A4:FF:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:73:09:29:b4:0e:aa:7d:73:b0:97:49:89:e9:f4:9c:51:af: 47:31:c6:2a:98:53:bd:95:ca:2d:38:a0:4b:c0:dc:9d:53:f4: b4:70:6f:47:9c:f9:0a:db:f7:73:36:43:c4:7a:07:d2:91:ef: 94:de:e9:b8:1e:3a:4b:f5:5d:7f:30:67:49:5f:82:97:4a:19: 3c:c7:1a:9c:39:67:07:40:e9:0d:42:39:bb:b6:fb:55:c3:86: d7:44:ae:1f:fb:88:12:24:93:e5:23:d2:44:eb:ca:e7:0c:86: 29:fe:64:4b:3a:5e:d1:3d:1f:92:8a:1f:7e:4f:8e:b7:b3:0e: 13:70:fa:18:0e:ab:3f:3b:31:8a:80:b7:7f:23:24:0e:74:eb: c9:4e:d9:d1:95:03:08:22:75:dd:2a:e7:3f:5a:bd:94:20:a4: 33:bd:1a:4f:0c:2b:35:f8:40:15:c1:d2:a9:b8:99:56:4b:fe: bc:c1:4a:1b:5b:26:c8:32:eb:4d:88:50:d1:35:05:df:01:60: f2:ef:f1:94:99:50:d0:3e:a3:ab:60:61:4d:54:9a:56:26:56: d7:87:32:78:b3:8d:fa:00:ed:b1:6c:db:65:a3:79:13:41:f8: 6a:b5:f5:92:1d:a9:59:c0:ac:0d:fb:25:6c:d3:ce:3a:80:6a: 30:f0:c9:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8sxCspXPCv9fLK6B5W1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDg1ZGExZWE2NmQxZjY2MTZhNjliMGQwMmI5YTJiYzFh NGZmZDMwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD Eyg1YWY3ZmVmNWFkMWMwZTMwZmIyNTY4NzlhMTgzMjAyZmEyMDljYjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg8CfNrtXpmlYCZhNIa1lwzWDpb+ bDMh6nBDbf6IAcGBJii2If3LZAzC8HdisDnuaHECJNU0p4NserFbC67H4jm6QLqr Ztt882jLZowj6+lN+VLgyBIYazBW6UJ1yxgwcnDA4+Gi7WdY9/VWQDAb5QZSi3+L qzjZfTAQSqsi6NFZIRIL+eEiBPHFcJpfTAjrHiiSjVUJ9U4Tc/ItcrleUVdNoqNj iUmJEWJ6USp7aozQRVK2/uc7dNgxMIXQRJnh3ZO8KQq1h0/3ysHLR7wyKxDBF3Nm ymu4JlwRFhKZWgQ8Fbnzd7BUeGALxdABgOhOUvcgVzVaUI2fJSoEhTjOgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFr3/vWtHA4w+yVoeaGDIC+iCctBMB8GA1UdIwQY MBaAFG9IXaHqZtH2YWppsNArmivBpP/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBoZG9lcG0wZlpoYW1tdzBDdWFLOEdrXzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NjZkZGItZGI4OS00NjdkLWIyMjUt ZmE4NjAxYjNiMGFkLzEvYjBoZG9lcG0wZlpoYW1tdzBDdWFLOEdrXzlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81NjZkZGItZGI4OS00NjdkLWIyMjUtZmE4NjAxYjNiMGFk LzEvYjBoZG9lcG0wZlpoYW1tdzBDdWFLOEdrXzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHMJKbQO qn1zsJdJien0nFGvRzHGKphTvZXKLTigS8DcnVP0tHBvR5z5Ctv3czZDxHoH0pHv lN7puB46S/VdfzBnSV+Cl0oZPMcanDlnB0DpDUI5u7b7VcOG10SuH/uIEiST5SPS ROvK5wyGKf5kSzpe0T0fkooffk+Ot7MOE3D6GA6rPzsxioC3fyMkDnTryU7Z0ZUD CCJ13SrnP1q9lCCkM70aTwwrNfhAFcHSqbiZVkv+vMFKG1smyDLrTYhQ0TUF3wFg 8u/xlJlQ0D6jq2BhTVSaViZW14cyeLON+gDtsWzbZaN5E0H4arX1kh2pWcCsDfsl bNPOOoBqMPDJfw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:42 2025 by rpki-client