This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft File: 0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json) Hash identifier: 6KNlVsH2yrO2jXQtxkUqrid0sTw7tP2MHp1+qcttZic= Subject key identifier: 9E:BB:A5:1B:AD:2B:96:1E:BC:50:02:81:7C:6A:E2:3D:74:C3:89:80 Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04 Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604 Certificate serial: 019AF31BB696F2B675E1ACF16734D681BDCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft Manifest number: 1366 Signing time: Sat 06 Dec 2025 10:01:10 +0000 Manifest this update: Sat 06 Dec 2025 10:01:10 +0000 Manifest next update: Sun 07 Dec 2025 10:01:10 +0000 Files and hashes: 1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: yAfOJVE+Vl2MScthOCTCj8yMlepOgl4rKsRwTRUZZ/Q=) 2: M3dHm9GHrYD8lQS4ksiSXCNoje4.roa (hash: Nu6oMe2kKfWTDbq3VinP98dNG8A/F9K2WRgisYnSNqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b6:96:f2:b6:75:e1:ac:f1:67:34:d6:81:bd:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0041ff7980379b798049256868dff39819c2604 Validity Not Before: Dec 6 10:01:10 2025 GMT Not After : Dec 7 10:01:10 2025 GMT Subject: CN=9ebba51bad2b961ebc5002817c6ae23d74c38980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:5c:a7:fc:07:10:75:87:45:4f:07:94:eb: 99:43:0d:73:d7:91:a4:b0:2e:40:f3:37:7b:21:76: f2:5b:63:40:45:ee:d3:68:42:75:90:fb:98:0d:1f: 03:9e:bd:87:d8:2a:fc:16:1a:4f:b1:b7:a4:78:6b: 75:78:3d:18:aa:b8:73:a4:5b:83:b4:57:f2:6f:8c: b8:fa:ac:a6:95:0b:9c:34:53:04:67:e5:1f:b5:a5: 7c:5a:44:8e:15:84:e1:76:c2:b6:08:95:ee:01:af: 12:e8:ad:0c:3d:62:d8:7c:12:03:b4:74:9a:bf:c0: e6:fe:ad:6c:d2:fc:41:b5:dc:52:2e:e0:f4:bc:8f: 29:28:3d:21:0a:d3:c4:90:36:a0:3f:9f:58:b6:0c: f9:40:b8:94:81:0a:4f:2d:1c:c2:e2:7e:ea:34:bf: 8f:91:bc:13:ea:ea:a2:0a:88:37:67:cb:3f:7f:e7: 96:14:96:e4:d9:92:c0:23:65:d3:31:f8:8d:81:ad: 25:aa:fa:e4:03:1c:13:27:c4:a2:fe:8b:2b:00:97: ec:f8:a4:0d:7f:d5:7d:4f:be:aa:b5:72:b1:fa:83: 4f:77:b6:de:dd:cc:4b:56:5d:0c:6c:fb:1a:8d:41: 87:93:6a:20:7b:f4:bb:b0:57:dd:f0:76:63:7b:ce: 69:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BB:A5:1B:AD:2B:96:1E:BC:50:02:81:7C:6A:E2:3D:74:C3:89:80 X509v3 Authority Key Identifier: keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:11:2d:60:b2:10:05:18:0f:6f:4c:4a:5e:b2:e8:91:81:84: 8b:d6:01:81:dc:a6:1f:6f:34:23:ab:55:75:f6:f6:3f:f4:b1: 46:5b:4f:23:c6:07:d1:6c:16:b0:c9:a2:9f:5d:3c:4f:58:c1: 62:16:7f:fc:73:66:10:0b:56:bf:74:e6:99:01:aa:e7:fe:eb: 0b:5e:6f:3e:c7:94:47:66:a9:9b:5e:5f:92:ae:fa:48:4f:33: c9:73:47:e9:0e:7e:7f:cb:b5:e5:96:a7:43:c3:99:b7:4b:20: 3a:3a:f5:84:53:22:9b:ec:78:92:15:b8:0b:c0:b1:33:ad:dd: 9d:35:4d:12:c7:4a:87:a6:25:70:20:8f:32:4f:b9:b2:b1:76: 0b:c6:06:90:b2:71:e6:1f:d0:fb:15:a1:50:27:d3:91:e5:fb: 84:79:2f:6d:57:25:ee:89:b5:43:d1:ad:ae:92:59:1c:95:5f: 25:43:8f:0f:b1:b9:83:89:85:22:62:96:c5:a5:1e:69:75:a7: 29:68:dc:8d:75:47:16:69:d5:4a:6f:34:ee:51:d8:43:7e:f6: 22:06:d8:ba:31:72:97:bc:d2:fe:7f:a6:8e:dc:72:a2:c1:a4: 83:75:ad:c8:1c:19:36:63:73:b1:fd:21:39:a8:b6:ae:db:6c: d5:c4:1a:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7aW8rZ14azxZzTWgb3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDQxZmY3OTgwMzc5Yjc5ODA0OTI1Njg2OGRmZjM5ODE5 YzI2MDQwHhcNMjUxMjA2MTAwMTEwWhcNMjUxMjA3MTAwMTEwWjAzMTEwLwYDVQQD Eyg5ZWJiYTUxYmFkMmI5NjFlYmM1MDAyODE3YzZhZTIzZDc0YzM4OTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBdcp/wHEHWHRU8HlOuZQw1z15Gk sC5A8zd7IXbyW2NARe7TaEJ1kPuYDR8Dnr2H2Cr8FhpPsbekeGt1eD0YqrhzpFuD tFfyb4y4+qymlQucNFMEZ+UftaV8WkSOFYThdsK2CJXuAa8S6K0MPWLYfBIDtHSa v8Dm/q1s0vxBtdxSLuD0vI8pKD0hCtPEkDagP59Ytgz5QLiUgQpPLRzC4n7qNL+P kbwT6uqiCog3Z8s/f+eWFJbk2ZLAI2XTMfiNga0lqvrkAxwTJ8Si/osrAJfs+KQN f9V9T76qtXKx+oNPd7be3cxLVl0MbPsajUGHk2oge/S7sFfd8HZje85puwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ67pRutK5YevFACgXxq4j10w4mAMB8GA1UdIwQY MBaAFNAEH/eYA3m3mASSVoaN/zmBnCYEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFRZjk1Z0RlYmVZQkpKV2hvM19PWUdjSmdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lOGY0NTItYmU3MC00MTc2LTlkYTAt ZTY4OWJmNTdkZDI3LzEvMEFRZjk1Z0RlYmVZQkpKV2hvM19PWUdjSmdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lOGY0NTItYmU3MC00MTc2LTlkYTAtZTY4OWJmNTdkZDI3 LzEvMEFRZjk1Z0RlYmVZQkpKV2hvM19PWUdjSmdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKREtYLIQ BRgPb0xKXrLokYGEi9YBgdymH280I6tVdfb2P/SxRltPI8YH0WwWsMmin108T1jB YhZ//HNmEAtWv3TmmQGq5/7rC15vPseUR2apm15fkq76SE8zyXNH6Q5+f8u15Zan Q8OZt0sgOjr1hFMim+x4khW4C8CxM63dnTVNEsdKh6YlcCCPMk+5srF2C8YGkLJx 5h/Q+xWhUCfTkeX7hHkvbVcl7om1Q9GtrpJZHJVfJUOPD7G5g4mFImKWxaUeaXWn KWjcjXVHFmnVSm807lHYQ372IgbYujFyl7zS/n+mjtxyosGkg3WtyBwZNmNzsf0h Oai2rtts1cQaqw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:17 2025 by rpki-client