This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json) Hash identifier: +nuBWNcp6w/ZKkaHgNHrsXKAnwcH19EXfHtctQ9Ulh0= Subject key identifier: 69:F8:FA:7E:04:B5:29:9B:22:EA:54:76:F8:2D:53:B3:BE:58:BB:16 Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db Certificate serial: 019AF088C2114B6787D58A7ACEC18328E063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft Manifest number: 04E9 Signing time: Fri 05 Dec 2025 22:01:25 +0000 Manifest this update: Fri 05 Dec 2025 22:01:25 +0000 Manifest next update: Sat 06 Dec 2025 22:01:25 +0000 Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: UVUQr8RyQn5Y2klmFbB0mcu5wyBklagBgBXMMJJWOhE=) 2: BtILLkhjQwKc-cBqSY27nFkJu8g.roa (hash: j7KTEXdiX1vJGa7Y4gsoM737n4p+uU95jozk1BXznCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:c2:11:4b:67:87:d5:8a:7a:ce:c1:83:28:e0:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db Validity Not Before: Dec 5 22:01:25 2025 GMT Not After : Dec 6 22:01:25 2025 GMT Subject: CN=69f8fa7e04b5299b22ea5476f82d53b3be58bb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:e3:6c:77:a8:4d:20:aa:9b:77:98:9a:0f: fc:59:75:67:18:08:5e:6d:d8:da:f5:ca:6a:13:16: ff:c3:cb:7b:17:03:52:65:bd:c3:cc:c8:e0:a9:4d: 3a:1a:ba:19:91:9e:a6:92:be:f9:31:59:7d:89:56: 07:62:ef:4e:91:3b:ef:2e:bd:43:c8:8c:45:35:28: b3:ea:57:54:a7:d9:6b:e9:81:4d:51:6b:97:60:23: 79:c2:96:b4:d4:c5:98:fd:e7:0e:f8:d7:9f:89:96: d0:66:3d:e2:d3:8e:87:6a:8f:18:80:96:09:f0:8c: 78:e4:e8:52:ea:3c:08:9a:be:69:fe:0c:06:61:0e: 42:d4:f4:50:bd:b9:61:f9:1d:61:fe:63:f5:58:6b: 21:af:d7:77:96:b2:32:6e:2b:71:af:a3:7d:17:98: 6d:69:44:62:18:14:30:6d:b7:20:58:fb:9b:57:f0: 47:d7:bc:84:98:7b:f2:f6:61:6b:d4:c3:e9:de:ae: 07:51:d4:db:dc:bf:41:dc:f4:80:6c:01:ff:8b:20: 50:0e:46:dd:4f:dd:51:2e:c6:cd:fd:a7:6d:b9:cb: bb:96:1e:23:27:59:b1:ad:f5:7a:71:f2:0a:86:a0: d1:a4:a5:40:20:0c:93:7b:43:9d:dd:96:bc:a6:46: ce:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F8:FA:7E:04:B5:29:9B:22:EA:54:76:F8:2D:53:B3:BE:58:BB:16 X509v3 Authority Key Identifier: keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b4:19:a6:dd:48:8a:9d:d2:e3:8e:6a:47:87:43:20:a9:be: c0:a1:f3:fa:11:8f:86:a8:e0:6d:de:c8:86:ac:2d:bd:5c:45: d0:f7:cb:f3:dc:43:3c:10:de:0b:f9:9c:b0:ab:2f:82:9a:55: df:35:fb:4a:41:32:84:b9:55:1b:a6:8a:0d:b2:e5:7d:ff:18: 82:a3:88:83:44:8e:03:9a:3d:64:d4:9e:1e:ba:cb:4a:57:8a: 3f:bf:b8:03:2e:03:43:d6:e4:1d:57:d1:08:7e:65:03:8a:67: 56:ff:aa:b0:07:a3:d1:ed:97:76:ac:40:45:3b:d4:8a:8d:ce: 34:32:ac:8a:3b:40:57:d3:0f:0c:4e:d0:b1:20:3e:5e:ab:4e: 4a:11:15:4b:12:64:bc:f7:1b:d9:b0:c2:02:2a:5c:86:b6:93: de:e4:fc:ca:f7:be:eb:a2:90:06:ed:c5:ab:6b:10:0f:65:b7: 9a:3f:05:db:a0:7d:ce:0a:20:c9:61:f3:d3:97:f7:64:d5:c0: db:6b:77:2d:fd:c7:31:94:e5:53:04:b9:2f:04:27:25:f5:54: b8:f3:1d:70:75:31:35:0c:98:80:63:e2:de:ee:c5:02:1b:e4: 92:0b:1e:d6:10:6b:b5:54:7b:fc:50:18:44:20:b8:cf:14:45: 33:af:87:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMIRS2eH1Yp6zsGDKOBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMjIwODY2ZGE0OGUwYzdjZmZiZThjNzNhMzUxYzJhNDdi MWE0ZGIwHhcNMjUxMjA1MjIwMTI1WhcNMjUxMjA2MjIwMTI1WjAzMTEwLwYDVQQD Eyg2OWY4ZmE3ZTA0YjUyOTliMjJlYTU0NzZmODJkNTNiM2JlNThiYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzDjbHeoTSCqm3eYmg/8WXVnGAhe bdja9cpqExb/w8t7FwNSZb3DzMjgqU06GroZkZ6mkr75MVl9iVYHYu9OkTvvLr1D yIxFNSiz6ldUp9lr6YFNUWuXYCN5wpa01MWY/ecO+NefiZbQZj3i046Hao8YgJYJ 8Ix45OhS6jwImr5p/gwGYQ5C1PRQvblh+R1h/mP1WGshr9d3lrIybitxr6N9F5ht aURiGBQwbbcgWPubV/BH17yEmHvy9mFr1MPp3q4HUdTb3L9B3PSAbAH/iyBQDkbd T91RLsbN/adtucu7lh4jJ1mxrfV6cfIKhqDRpKVAIAyTe0Od3Za8pkbO6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn4+n4EtSmbIupUdvgtU7O+WLsWMB8GA1UdIwQY MBaAFNEiCGbaSODHz/voxzo1HCpHsaTbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82MDk1MWUtN2FiNS00NWQ4LTkwMTUt OTVlY2Q2NzE4ODg3LzEvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS82MDk1MWUtN2FiNS00NWQ4LTkwMTUtOTVlY2Q2NzE4ODg3 LzEvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbQZpt1I ip3S445qR4dDIKm+wKHz+hGPhqjgbd7IhqwtvVxF0PfL89xDPBDeC/mcsKsvgppV 3zX7SkEyhLlVG6aKDbLlff8YgqOIg0SOA5o9ZNSeHrrLSleKP7+4Ay4DQ9bkHVfR CH5lA4pnVv+qsAej0e2XdqxARTvUio3ONDKsijtAV9MPDE7QsSA+XqtOShEVSxJk vPcb2bDCAipchraT3uT8yve+66KQBu3Fq2sQD2W3mj8F26B9zgogyWHz05f3ZNXA 22t3Lf3HMZTlUwS5LwQnJfVUuPMdcHUxNQyYgGPi3u7FAhvkkgse1hBrtVR7/FAY RCC4zxRFM6+H6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:56 2025 by rpki-client