This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft File: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft (raw, json) Hash identifier: R+wkJVJg3gSHodjUtfVbe00SBWLsIa3JnhCc62HG990= Subject key identifier: 53:4D:33:57:DA:2D:79:FA:69:5B:72:FA:0A:7D:10:C7:43:76:59:AB Authority key identifier: D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B Certificate issuer: /CN=d02ea90148d4e688c9492d9467159cd10575591b Certificate serial: 019AF31D08AE310FDD8EC63903CD063649DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft Manifest number: 0891 Signing time: Sat 06 Dec 2025 10:02:37 +0000 Manifest this update: Sat 06 Dec 2025 10:02:37 +0000 Manifest next update: Sun 07 Dec 2025 10:02:37 +0000 Files and hashes: 1: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl (hash: kVwo65ZLZ1ttahJt3nHIz23DZBnK4usf8wWxf4NAqdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:08:ae:31:0f:dd:8e:c6:39:03:cd:06:36:49:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02ea90148d4e688c9492d9467159cd10575591b Validity Not Before: Dec 6 10:02:37 2025 GMT Not After : Dec 7 10:02:37 2025 GMT Subject: CN=534d3357da2d79fa695b72fa0a7d10c7437659ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4e:87:4c:2d:f0:85:ed:7d:e8:2c:16:82:8f: 05:dd:6e:8c:e3:28:97:e0:fb:2c:d3:94:f8:0c:dd: 32:be:f3:bc:c7:42:88:1f:1d:69:80:c1:6a:08:05: 22:cb:74:5d:bc:64:e3:c3:a0:cf:25:c7:fb:4e:d9: f1:42:ad:06:d8:57:73:ef:d5:d6:96:af:d3:c9:08: a4:dd:3a:c0:8b:07:4b:35:f7:10:a8:0b:28:7d:a5: 61:e7:f3:d0:bb:89:82:10:50:55:74:5b:7d:9a:72: d5:e3:0f:e7:b5:9a:55:cb:11:4f:ac:c7:f7:e8:2a: 9d:de:be:da:a4:07:ab:32:c7:ab:53:39:e9:e4:db: b0:79:e2:d0:84:6c:fe:ed:9c:45:39:e6:8e:79:d4: 98:b3:91:e8:12:35:9a:66:60:e2:85:0d:a8:8f:8d: fa:a7:ae:98:f6:84:24:88:f0:ea:8f:ae:89:c7:bf: c4:b6:85:e5:0b:38:45:f0:29:bb:ca:f1:31:59:d3: 31:50:f0:2a:d4:28:55:0a:5b:a9:eb:0d:34:76:03: 7f:eb:25:1e:6a:7f:d9:ac:b2:0a:ce:e7:4b:5b:d9: ac:85:0d:72:78:35:1c:09:05:c3:b6:63:51:79:96: 2f:c5:2e:e1:d3:bd:85:f1:ac:de:6b:29:05:ea:51: 60:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4D:33:57:DA:2D:79:FA:69:5B:72:FA:0A:7D:10:C7:43:76:59:AB X509v3 Authority Key Identifier: keyid:D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e5:53:14:8c:24:19:40:34:97:06:74:c9:12:72:d0:88:69: e8:7c:00:6c:0e:c4:3f:75:03:c5:da:9d:af:7f:49:63:63:a2: 47:6b:72:27:73:f4:87:66:8b:a5:43:46:a7:ec:a2:73:dc:54: 1f:0d:e1:be:e8:88:8d:20:5e:2b:f4:14:aa:b2:a7:67:77:90: 6a:fa:39:45:05:96:87:71:95:1a:2c:8d:f6:ec:3d:2f:c9:37: 3d:2c:5b:bd:3e:fd:14:36:c5:2d:89:4c:09:68:49:a7:00:84: 52:86:aa:b1:c9:48:39:f6:ed:79:f3:11:f6:ab:0d:38:14:58: e2:e3:18:38:64:18:7c:90:2c:83:39:74:95:3c:e6:1c:ab:99: bc:7e:19:6e:af:6a:df:18:06:d7:60:d6:53:9a:ec:20:8a:84: d6:ee:93:a7:00:e6:d5:ab:61:c8:7f:f3:a0:94:8b:e0:b0:f0: bf:49:d0:c4:bb:ee:54:aa:32:ee:0c:80:0e:28:b0:31:68:75: 40:8f:d0:b7:7f:0f:04:a7:10:f9:2f:37:8d:c1:6e:9b:e8:72: e4:2c:22:a8:d4:1a:e1:99:22:15:d3:af:a1:52:90:bc:c8:6a: 09:e5:96:a7:7a:41:36:7b:89:49:95:94:bb:f8:2a:dd:23:53: 16:60:08:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQiuMQ/djsY5A80GNknaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMmVhOTAxNDhkNGU2ODhjOTQ5MmQ5NDY3MTU5Y2QxMDU3 NTU5MWIwHhcNMjUxMjA2MTAwMjM3WhcNMjUxMjA3MTAwMjM3WjAzMTEwLwYDVQQD Eyg1MzRkMzM1N2RhMmQ3OWZhNjk1YjcyZmEwYTdkMTBjNzQzNzY1OWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU6HTC3whe196CwWgo8F3W6M4yiX 4Pss05T4DN0yvvO8x0KIHx1pgMFqCAUiy3RdvGTjw6DPJcf7TtnxQq0G2Fdz79XW lq/TyQik3TrAiwdLNfcQqAsofaVh5/PQu4mCEFBVdFt9mnLV4w/ntZpVyxFPrMf3 6Cqd3r7apAerMserUznp5NuweeLQhGz+7ZxFOeaOedSYs5HoEjWaZmDihQ2oj436 p66Y9oQkiPDqj66Jx7/EtoXlCzhF8Cm7yvExWdMxUPAq1ChVClup6w00dgN/6yUe an/ZrLIKzudLW9mshQ1yeDUcCQXDtmNReZYvxS7h072F8azeaykF6lFggQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNNM1faLXn6aVty+gp9EMdDdlmrMB8GA1UdIwQY MBaAFNAuqQFI1OaIyUktlGcVnNEFdVkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEM2cEFValU1b2pKU1MyVVp4V2MwUVYxV1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kMmE4ODctMGFlNS00NDFjLWEzOTMt ZmRjM2IzZmNlODNhLzEvMEM2cEFValU1b2pKU1MyVVp4V2MwUVYxV1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kMmE4ODctMGFlNS00NDFjLWEzOTMtZmRjM2IzZmNlODNh LzEvMEM2cEFValU1b2pKU1MyVVp4V2MwUVYxV1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeVTFIwk GUA0lwZ0yRJy0Ihp6HwAbA7EP3UDxdqdr39JY2OiR2tyJ3P0h2aLpUNGp+yic9xU Hw3hvuiIjSBeK/QUqrKnZ3eQavo5RQWWh3GVGiyN9uw9L8k3PSxbvT79FDbFLYlM CWhJpwCEUoaqsclIOfbtefMR9qsNOBRY4uMYOGQYfJAsgzl0lTzmHKuZvH4Zbq9q 3xgG12DWU5rsIIqE1u6TpwDm1athyH/zoJSL4LDwv0nQxLvuVKoy7gyADiiwMWh1 QI/Qt38PBKcQ+S83jcFum+hy5CwiqNQa4ZkiFdOvoVKQvMhqCeWWp3pBNnuJSZWU u/gq3SNTFmAIgg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:44 2025 by rpki-client