This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft File: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json) Hash identifier: Cd8NrCwRDqffKBUVZyQ+tPBjYKCDnripjvN2WffnfNU= Subject key identifier: EA:B2:0F:D6:08:E2:DA:91:87:22:D4:22:70:AD:EB:18:A7:F3:41:71 Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f Certificate serial: 019AF352A8CD1363931B9532222922AB8CBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft Manifest number: 10A3 Signing time: Sat 06 Dec 2025 11:01:11 +0000 Manifest this update: Sat 06 Dec 2025 11:01:11 +0000 Manifest next update: Sun 07 Dec 2025 11:01:11 +0000 Files and hashes: 1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: b0Vp4dbr6SAxecDltvrpJ/4QugNvOiFwA5FsIXpnpww=) 2: gbK6DHiZq7AYAmJhGhegTd1JJGM.roa (hash: 3ZhInyD7W5kRDFPCm7P1BZAvCR0mhPTykPk/poLoSao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a8:cd:13:63:93:1b:95:32:22:29:22:ab:8c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3277a239664d245becf4214dde15923042a142f Validity Not Before: Dec 6 11:01:11 2025 GMT Not After : Dec 7 11:01:11 2025 GMT Subject: CN=eab20fd608e2da918722d42270adeb18a7f34171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:af:d8:b2:d9:bf:cc:0e:e2:66:8f:09:55: 7c:7d:46:0d:2a:a8:03:78:a3:0a:fc:ee:6b:99:74: 79:ae:eb:56:e0:c7:28:4f:9c:79:13:f3:e3:2a:dc: 13:fa:9d:c1:2a:f9:8e:21:65:ba:7b:aa:72:91:a4: b0:13:4e:f1:f3:6c:5d:cd:55:f3:f3:35:19:81:e0: 19:d2:0d:35:38:d1:13:e3:15:24:44:3c:de:54:02: b1:4a:84:8b:aa:3d:82:48:1b:f3:62:3d:b8:37:4d: 86:a0:5e:76:7c:0d:fd:d4:4e:52:42:dc:78:fc:ee: 39:37:dd:70:16:84:66:fc:de:cc:80:0c:03:b8:72: d4:e4:98:9a:28:cb:a9:0c:b2:e7:38:58:38:22:59: ae:5c:82:1a:b4:e0:40:b6:e6:08:53:91:67:f6:30: d8:71:f9:26:ab:7c:60:31:eb:5d:10:6a:d1:a0:ea: 95:c2:d0:70:83:b4:be:87:43:b9:3c:f6:76:d6:5e: b1:1f:00:08:45:7d:13:5b:11:6a:34:66:33:f5:1e: c3:36:ae:59:3c:2c:c5:8b:18:cc:be:7d:f2:be:61: a7:90:43:66:6c:05:7c:b8:56:38:06:88:44:0a:75: 0c:81:94:7a:b1:ce:c4:c3:56:1e:42:86:41:6e:db: b3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B2:0F:D6:08:E2:DA:91:87:22:D4:22:70:AD:EB:18:A7:F3:41:71 X509v3 Authority Key Identifier: keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:19:90:d2:b1:f9:45:0f:e9:ff:a2:a1:31:4f:60:b1:73:bd: 50:d8:7d:75:c9:a6:8a:74:6d:3f:68:f1:08:a3:13:82:74:24: 07:55:2b:75:ef:a5:b9:0c:1f:bc:0c:0b:6e:a5:d2:f6:a2:15: 00:43:b2:09:77:07:de:69:77:ce:95:23:34:ae:90:6b:5a:65: 1b:42:57:26:98:ee:bf:e8:14:aa:01:ce:a6:af:1f:9c:7b:dc: 2d:ba:ef:c3:50:d6:8f:66:ce:c8:1a:2d:37:aa:f1:3f:e6:58: 06:d1:1d:c4:75:86:eb:1e:bc:61:7d:96:0f:e5:b7:30:f8:9d: 9b:c4:1e:41:fa:bc:47:5a:3a:27:cc:c7:fd:a7:2e:9a:15:94: ea:e3:29:a1:20:ed:5e:98:f5:d7:3d:72:2a:3f:0d:e7:a7:87: 39:06:15:87:db:3b:2c:b1:a7:ce:55:c6:a0:0e:c5:fa:6e:87: c6:a2:71:20:5b:f0:67:db:f0:c9:22:7b:31:73:8a:ef:38:f2: 4a:4d:c1:7d:9f:ef:69:0b:73:f9:fd:79:1d:24:f1:57:4f:1e: 80:c2:77:a6:b2:8b:20:00:c7:8a:80:33:f6:65:88:57:bb:80: 2e:02:d7:05:36:12:df:26:3f:30:2e:83:89:64:27:28:fd:6a: 4b:6e:56:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqjNE2OTG5UyIikiq4y+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMjc3YTIzOTY2NGQyNDViZWNmNDIxNGRkZTE1OTIzMDQy YTE0MmYwHhcNMjUxMjA2MTEwMTExWhcNMjUxMjA3MTEwMTExWjAzMTEwLwYDVQQD EyhlYWIyMGZkNjA4ZTJkYTkxODcyMmQ0MjI3MGFkZWIxOGE3ZjM0MTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPqv2LLZv8wO4maPCVV8fUYNKqgD eKMK/O5rmXR5rutW4McoT5x5E/PjKtwT+p3BKvmOIWW6e6pykaSwE07x82xdzVXz 8zUZgeAZ0g01ONET4xUkRDzeVAKxSoSLqj2CSBvzYj24N02GoF52fA391E5SQtx4 /O45N91wFoRm/N7MgAwDuHLU5JiaKMupDLLnOFg4IlmuXIIatOBAtuYIU5Fn9jDY cfkmq3xgMetdEGrRoOqVwtBwg7S+h0O5PPZ21l6xHwAIRX0TWxFqNGYz9R7DNq5Z PCzFixjMvn3yvmGnkENmbAV8uFY4BohECnUMgZR6sc7Ew1YeQoZBbtuzCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqyD9YI4tqRhyLUInCt6xin80FxMB8GA1UdIwQY MBaAFNMneiOWZNJFvs9CFN3hWSMEKhQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMt YzM3M2Y0NTNhMjQ1LzEvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMtYzM3M2Y0NTNhMjQ1 LzEvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBmQ0rH5 RQ/p/6KhMU9gsXO9UNh9dcmminRtP2jxCKMTgnQkB1Urde+luQwfvAwLbqXS9qIV AEOyCXcH3ml3zpUjNK6Qa1plG0JXJpjuv+gUqgHOpq8fnHvcLbrvw1DWj2bOyBot N6rxP+ZYBtEdxHWG6x68YX2WD+W3MPidm8QeQfq8R1o6J8zH/acumhWU6uMpoSDt Xpj11z1yKj8N56eHOQYVh9s7LLGnzlXGoA7F+m6HxqJxIFvwZ9vwySJ7MXOK7zjy Sk3BfZ/vaQtz+f15HSTxV08egMJ3prKLIADHioAz9mWIV7uALgLXBTYS3yY/MC6D iWQnKP1qS25WKg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:28 2025 by rpki-client