This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.mft (raw, json) Hash identifier: AoHfp6MD0lUZ5QhFP+R0HGgOck0WC+pAEIgAVegoGTk= Subject key identifier: D4:35:C1:4F:28:00:09:60:0D:1A:BA:4B:A3:A6:D3:15:ED:D9:7B:48 Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae Certificate serial: 019AF49C1EAEC775A358F48983A898056AB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft Manifest number: 0843 Signing time: Sat 06 Dec 2025 17:01:03 +0000 Manifest this update: Sat 06 Dec 2025 17:01:03 +0000 Manifest next update: Sun 07 Dec 2025 17:01:03 +0000 Files and hashes: 1: 0HCWDtmg2hybfiRX6ry2YEeNCK4.crl (hash: ZNphf/xvr2EC7HL5eEAV6TQ5P6hEchj70x92tpz7XV0=) 2: ZYblDAaDwwmnrchNjFrf0zm4tO0.roa (hash: TUJh6mrSVIERTxbeRqv55tj1PiJ2BrobmYQdllbfBL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1e:ae:c7:75:a3:58:f4:89:83:a8:98:05:6a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae Validity Not Before: Dec 6 17:01:03 2025 GMT Not After : Dec 7 17:01:03 2025 GMT Subject: CN=d435c14f280009600d1aba4ba3a6d315edd97b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:57:2c:63:0f:62:e1:c8:92:7a:4e:b3:02: b4:8e:ff:44:02:b1:56:17:59:4d:77:20:9c:fa:f0: 06:a1:e7:a5:62:72:64:1f:2f:d0:3e:a9:cf:b2:57: 41:27:6f:83:9f:83:8f:bb:38:9a:bd:60:1c:b5:b6: 85:da:c0:3f:62:7e:28:82:09:f8:11:b0:cc:b6:1a: 6c:78:27:b6:8c:96:0d:62:25:57:2c:97:3b:30:42: 5b:e2:58:3a:48:15:b4:33:8d:00:32:f4:cd:12:4b: 9a:60:b8:92:62:a1:7a:2e:d8:bc:0b:8b:5c:87:af: b4:c5:a5:5e:a6:28:eb:2f:35:81:ca:c5:b1:ec:70: 9a:f5:77:28:76:19:d8:f3:54:c3:86:29:21:00:85: 75:32:63:59:0a:77:6c:e0:24:ed:7c:00:48:e5:86: b1:a0:e2:89:87:28:7a:32:11:b3:ba:30:3a:6a:b7: ef:3d:c3:ee:39:f3:3a:2d:b9:dc:1f:0b:62:28:30: 29:83:17:a3:a0:ee:40:6f:83:30:7a:ea:fa:5b:2e: 13:e9:22:67:52:97:c3:a5:39:43:bd:80:55:9c:9b: 30:cc:2d:f5:ba:26:86:ae:d4:44:57:fb:bb:dc:cf: be:49:c1:a4:df:d7:37:5b:9a:c3:a4:40:f3:b5:26: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:35:C1:4F:28:00:09:60:0D:1A:BA:4B:A3:A6:D3:15:ED:D9:7B:48 X509v3 Authority Key Identifier: keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0d:cc:82:0b:44:bf:2e:56:ad:dc:77:d8:73:cb:55:ca:a5: 89:ca:d2:43:fe:34:09:25:eb:4a:c9:72:af:ad:be:4f:98:83: 4e:9f:2f:56:b3:03:99:4a:fd:92:ab:61:c1:35:64:f5:26:8d: 5e:cd:90:d6:1b:e4:99:00:1e:9d:7c:b7:c3:99:6a:9a:45:51: 27:55:e3:03:8f:f1:3a:8a:5e:df:e0:61:93:5d:d2:08:17:b6: 9e:f8:f9:29:8f:b7:da:15:98:fc:c5:9c:b6:ce:c5:fd:5b:9d: fb:c3:9b:fc:42:5c:ea:32:3d:ae:c8:e0:80:e6:b7:a8:20:e0: 7a:8a:fd:75:85:77:d3:37:c4:e0:1b:38:df:93:87:13:8b:cc: 0b:86:89:3a:30:08:24:13:1c:09:eb:7e:9f:35:79:5f:e9:c2: 68:e9:48:77:0d:2d:e2:72:f4:be:4a:cc:5f:c1:9d:03:41:58: b0:3e:32:5d:a1:0d:52:dd:78:36:47:55:ea:fd:8f:61:52:86: 54:6b:e6:50:63:70:81:29:ab:ee:31:b5:a0:00:54:94:1c:17: e3:7f:ec:a4:1a:f5:59:1e:ac:9e:b6:7f:1b:30:d7:ba:e4:24: c4:12:36:3a:3c:e8:e7:3c:72:34:aa:36:96:78:80:8b:1d:68: 50:93:41:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nB6ux3WjWPSJg6iYBWq1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNzA5NjBlZDlhMGRhMWM5YjdlMjQ1N2VhYmNiNjYwNDc4 ZDA4YWUwHhcNMjUxMjA2MTcwMTAzWhcNMjUxMjA3MTcwMTAzWjAzMTEwLwYDVQQD EyhkNDM1YzE0ZjI4MDAwOTYwMGQxYWJhNGJhM2E2ZDMxNWVkZDk3YjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrJXLGMPYuHIknpOswK0jv9EArFW F1lNdyCc+vAGoeelYnJkHy/QPqnPsldBJ2+Dn4OPuziavWActbaF2sA/Yn4oggn4 EbDMthpseCe2jJYNYiVXLJc7MEJb4lg6SBW0M40AMvTNEkuaYLiSYqF6Lti8C4tc h6+0xaVepijrLzWBysWx7HCa9XcodhnY81TDhikhAIV1MmNZCnds4CTtfABI5Yax oOKJhyh6MhGzujA6arfvPcPuOfM6LbncHwtiKDApgxejoO5Ab4Mweur6Wy4T6SJn UpfDpTlDvYBVnJswzC31uiaGrtREV/u73M++ScGk39c3W5rDpEDztSbwRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQ1wU8oAAlgDRq6S6Om0xXt2XtIMB8GA1UdIwQY MBaAFNBwlg7ZoNocm34kV+q8tmBHjQiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYt NmVlZmRhMTEwOGFkLzEvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYtNmVlZmRhMTEwOGFk LzEvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXw3MggtE vy5Wrdx32HPLVcqlicrSQ/40CSXrSslyr62+T5iDTp8vVrMDmUr9kqthwTVk9SaN Xs2Q1hvkmQAenXy3w5lqmkVRJ1XjA4/xOope3+Bhk13SCBe2nvj5KY+32hWY/MWc ts7F/Vud+8Ob/EJc6jI9rsjggOa3qCDgeor9dYV30zfE4Bs435OHE4vMC4aJOjAI JBMcCet+nzV5X+nCaOlIdw0t4nL0vkrMX8GdA0FYsD4yXaENUt14NkdV6v2PYVKG VGvmUGNwgSmr7jG1oABUlBwX43/spBr1WR6snrZ/GzDXuuQkxBI2Ojzo5zxyNKo2 lniAix1oUJNBMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:16 2025 by rpki-client