This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft File: 0QZfT7a2eefxy92ANflnRnAQ6pk.mft (raw, json) Hash identifier: 3BlumNk2FyhfhNWmoGWS7CvJTQPvnRMfQUiZgLtYvkI= Subject key identifier: C6:E5:76:EC:44:D1:08:D7:5C:4B:29:89:50:99:6B:BD:F9:6A:81:A2 Authority key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99 Certificate issuer: /CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99 Certificate serial: 019AF0BF164CE1D29CD5AD8D75FD048B6230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft Manifest number: 0DDA Signing time: Fri 05 Dec 2025 23:00:46 +0000 Manifest this update: Fri 05 Dec 2025 23:00:46 +0000 Manifest next update: Sat 06 Dec 2025 23:00:46 +0000 Files and hashes: 1: 0QZfT7a2eefxy92ANflnRnAQ6pk.crl (hash: NHVlUV8OJbJJsAc9e9qQi9KUTr4L2gz341fIM1rnUJA=) 2: TLgddA3CgmtAKo-fV94OuzSavi4.roa (hash: tQo/EK/pm7RsFTI12Ej+RxeB7S+rUphRTa4aWGCPu7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:16:4c:e1:d2:9c:d5:ad:8d:75:fd:04:8b:62:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99 Validity Not Before: Dec 5 23:00:46 2025 GMT Not After : Dec 6 23:00:46 2025 GMT Subject: CN=c6e576ec44d108d75c4b298950996bbdf96a81a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:57:c4:28:02:fa:a8:8c:c5:2c:79:b4:0a:eb: 40:45:cf:e0:7e:06:99:6c:1b:fa:80:53:2c:c2:1f: db:bb:19:04:c3:29:31:93:6c:a0:91:2c:dd:4e:e0: 6f:f6:74:8e:83:e0:92:f6:d5:b4:4b:5e:be:dc:68: d9:3f:dd:1b:d8:f5:6b:a2:f1:ea:de:67:bc:cb:6d: e2:f7:d8:1f:19:80:84:7b:9f:d7:3e:0c:e9:49:d8: 99:6a:c9:f5:13:81:3d:07:4f:63:59:30:16:2f:cd: ae:8e:a4:ab:fc:63:47:4e:8d:8e:a4:ab:5f:4b:01: 32:ee:c5:0c:d7:96:a2:10:04:7c:ab:bf:62:81:35: 3b:47:da:3a:7c:e0:64:75:6e:cc:7d:92:02:5f:c1: 28:0e:bf:dc:74:43:d7:0d:c5:7c:d3:d7:b4:52:f0: e5:22:a7:4f:3f:75:a0:2d:64:bf:99:91:b4:70:53: 12:42:c8:ba:0e:35:c8:6f:d4:82:73:71:ee:36:9e: d7:03:d5:19:10:92:5e:46:81:8b:d6:0c:15:74:95: d3:43:f7:b2:07:6e:11:2c:2c:9d:d1:60:5f:44:f8: f6:5c:a4:02:aa:3e:6c:53:5c:72:69:e9:c9:bd:0d: 87:db:50:59:f8:57:82:14:57:15:10:db:f9:81:c5: bd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E5:76:EC:44:D1:08:D7:5C:4B:29:89:50:99:6B:BD:F9:6A:81:A2 X509v3 Authority Key Identifier: keyid:D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:de:a8:80:f8:e6:86:3b:f0:88:94:eb:0a:7b:32:bf:0e:8b: b8:e0:cc:1b:8a:cc:82:3e:98:16:88:41:95:f2:8a:75:6b:a7: 1c:68:b5:c7:b5:4f:db:35:fd:d2:fd:ca:b5:6a:7e:c5:4e:04: 16:84:bd:64:2f:e2:80:97:6c:66:06:8c:57:51:61:b7:ea:a8: d4:4a:57:7f:4f:2f:da:91:46:db:78:e2:09:a6:70:4b:fa:ee: 11:80:10:2f:12:a0:58:75:68:73:a1:da:5f:cb:ed:48:75:2b: eb:26:ba:0c:16:1d:33:5c:6a:27:bb:57:ba:9d:b1:65:9b:6b: fe:aa:1e:7c:d4:a7:54:0e:24:0f:5d:5f:d6:81:fe:8c:ba:20: 3d:5f:9a:7e:8c:83:31:36:0a:c1:00:20:d0:a8:35:e6:fb:ae: 67:f4:a4:10:87:30:7b:09:72:d6:c5:c3:77:e6:99:c2:7a:e6: 55:16:f7:89:df:cb:e0:a9:6e:ef:dc:54:30:82:18:9f:d5:7b: 63:95:44:5c:98:d5:00:35:bd:66:58:f6:64:2d:db:61:41:0d: 4a:5b:0e:9d:bd:5c:92:aa:50:56:42:f4:ba:2e:d8:10:e8:7a: 3e:f4:44:99:ca:35:c0:41:5b:db:8a:d3:d8:8c:f7:d9:a3:47: b5:45:e6:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxZM4dKc1a2Ndf0Ei2IwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMDY1ZjRmYjZiNjc5ZTdmMWNiZGQ4MDM1Zjk2NzQ2NzAx MGVhOTkwHhcNMjUxMjA1MjMwMDQ2WhcNMjUxMjA2MjMwMDQ2WjAzMTEwLwYDVQQD EyhjNmU1NzZlYzQ0ZDEwOGQ3NWM0YjI5ODk1MDk5NmJiZGY5NmE4MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1fEKAL6qIzFLHm0CutARc/gfgaZ bBv6gFMswh/buxkEwykxk2ygkSzdTuBv9nSOg+CS9tW0S16+3GjZP90b2PVrovHq 3me8y23i99gfGYCEe5/XPgzpSdiZasn1E4E9B09jWTAWL82ujqSr/GNHTo2OpKtf SwEy7sUM15aiEAR8q79igTU7R9o6fOBkdW7MfZICX8EoDr/cdEPXDcV809e0UvDl IqdPP3WgLWS/mZG0cFMSQsi6DjXIb9SCc3HuNp7XA9UZEJJeRoGL1gwVdJXTQ/ey B24RLCyd0WBfRPj2XKQCqj5sU1xyaenJvQ2H21BZ+FeCFFcVENv5gcW9BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMblduxE0QjXXEspiVCZa735aoGiMB8GA1UdIwQY MBaAFNEGX0+2tnnn8cvdgDX5Z0ZwEOqZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFFaZlQ3YTJlZWZ4eTkyQU5mbG5SbkFRNnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS83OGY0OWYtMjQ3ZC00ODg4LWFmOGQt YTFmMDQwZThlOGQ0LzEvMFFaZlQ3YTJlZWZ4eTkyQU5mbG5SbkFRNnBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS83OGY0OWYtMjQ3ZC00ODg4LWFmOGQtYTFmMDQwZThlOGQ0 LzEvMFFaZlQ3YTJlZWZ4eTkyQU5mbG5SbkFRNnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgd6ogPjm hjvwiJTrCnsyvw6LuODMG4rMgj6YFohBlfKKdWunHGi1x7VP2zX90v3KtWp+xU4E FoS9ZC/igJdsZgaMV1Fht+qo1EpXf08v2pFG23jiCaZwS/ruEYAQLxKgWHVoc6Ha X8vtSHUr6ya6DBYdM1xqJ7tXup2xZZtr/qoefNSnVA4kD11f1oH+jLogPV+afoyD MTYKwQAg0Kg15vuuZ/SkEIcwewly1sXDd+aZwnrmVRb3id/L4Klu79xUMIIYn9V7 Y5VEXJjVADW9Zlj2ZC3bYUENSlsOnb1ckqpQVkL0ui7YEOh6PvREmco1wEFb24rT 2Iz32aNHtUXmJg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:36 2025 by rpki-client