This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft File: 0lYiRXob4zoBJYhmoGfgRH39iWQ.mft (raw, json) Hash identifier: UyQ69HFwELesmE0R0LbqLqVE4tpPzvJsQvFmKUF/OKY= Subject key identifier: 12:9A:D8:CC:56:A9:E4:9D:A0:98:7E:2E:59:95:77:EC:EB:8B:F3:50 Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64 Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964 Certificate serial: 019AF31B7A976B9B8BB1A6BC4281D3AFC82E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft Manifest number: 0A32 Signing time: Sat 06 Dec 2025 10:00:55 +0000 Manifest this update: Sat 06 Dec 2025 10:00:55 +0000 Manifest next update: Sun 07 Dec 2025 10:00:55 +0000 Files and hashes: 1: 0lYiRXob4zoBJYhmoGfgRH39iWQ.crl (hash: FQyx6fb5n8+OvILwW3B8XQ34kAaBWNPRXNJYBfVriY8=) 2: POa1_1lG2fZrcfZRxbGnmzL6mIU.roa (hash: hZbXwNqNEsVBnStQz74wqfWaYd+uX0JeS3LWv9uiIFs=) 3: XhmVOxeypIhl-8QtBoFXZmkyOfo.roa (hash: NGVstEUWv/DepTwZpuQa7X5iSrpsHNmeXxcUSdEmq9U=) 4: Y8x1Dc8lYBa9pr_hu1HUt6VfoiQ.roa (hash: tNZ2tMN+vQdGUpJ50iWyGDf4dzENZz5DtzgcHTVz9wQ=) 5: hJHifVMBaH30EqpePenT1Sqap70.roa (hash: QomOS52IIn3hGg0bKejEi6GxR/26/6+mZUMxHEwlzCc=) 6: k1JgfKb3srL6aXDXnzvzd4pJb2w.roa (hash: +LhNHAlBDK0qBIHLLIuzyw+Dk5hZ7SHq+3e02Y/fFBg=) 7: p51-PJoT-E47Il5-C4i0wMvLMrQ.roa (hash: v6b35eBQ2NIYxUqWiW7LPB2L21OTBBy59B+EGu/7XOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:7a:97:6b:9b:8b:b1:a6:bc:42:81:d3:af:c8:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964 Validity Not Before: Dec 6 10:00:55 2025 GMT Not After : Dec 7 10:00:55 2025 GMT Subject: CN=129ad8cc56a9e49da0987e2e599577eceb8bf350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:de:ce:6f:84:89:40:70:3d:2a:ce:be:e1:6c: b1:f3:45:2d:95:4e:e1:d4:23:c6:de:ad:c0:e6:91: e9:dd:41:b8:81:b6:a6:81:80:ac:22:2d:ec:87:94: 81:f7:ce:f6:17:84:b7:c6:fd:76:e3:4a:ca:b5:57: f3:d8:48:79:ad:14:ed:6d:f1:d2:05:eb:19:21:2d: ea:8a:39:34:37:e5:01:a6:e0:64:c9:5a:20:39:60: 5f:97:45:86:6c:a5:b1:bb:a0:75:ef:a1:98:a9:56: 82:85:e7:1e:a6:2b:4b:e8:ca:6b:b0:42:1b:c2:a4: 66:82:3d:71:2d:94:35:6e:63:a3:22:3a:fb:43:ec: 2c:80:2f:36:ad:28:b3:b5:00:f3:27:d7:d3:e8:44: d7:e3:26:ff:04:40:46:60:f8:bc:ba:d4:05:b8:2a: 4e:de:37:1a:ff:70:e4:c9:f9:33:ea:2f:eb:6c:ef: b0:43:b9:dd:55:f2:b6:4b:fe:97:e6:d0:4c:8c:9b: b4:04:4e:78:5d:71:c2:1e:45:1e:2c:72:52:dc:40: 5a:57:a1:51:71:3f:6a:12:d8:32:95:6a:9a:26:94: 80:52:d2:aa:d4:85:31:8e:09:4f:52:b6:03:ba:a4: 9a:e2:b9:63:dd:07:02:1b:94:54:5f:13:c2:5a:c0: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9A:D8:CC:56:A9:E4:9D:A0:98:7E:2E:59:95:77:EC:EB:8B:F3:50 X509v3 Authority Key Identifier: keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:16:d1:04:fd:44:67:c6:8a:92:cf:8d:ad:15:87:40:fb:3e: 55:d7:3d:81:af:3e:19:cc:07:cf:18:03:6b:0c:1d:0a:45:7e: 8e:66:a1:2d:50:c6:66:8a:6d:2f:67:39:e4:75:da:f2:ee:94: 68:fc:4e:62:99:51:b8:03:ab:54:38:5d:a0:98:cf:60:f8:42: cf:56:7b:a7:a7:44:fb:58:24:12:c1:3b:f7:ab:59:ba:8b:d5: 95:e2:f3:81:6b:8b:23:7d:64:aa:ba:88:de:f0:85:31:b6:09: ef:7f:f2:f4:62:74:14:e6:26:13:48:6a:b0:6a:51:cd:db:2a: f7:22:70:1f:81:6b:a4:6b:52:a5:7f:33:04:3b:cb:1c:4f:39: 21:f3:34:bf:1f:33:fc:60:ef:e3:59:2b:bd:48:5e:de:20:0b: 40:94:8e:57:69:ba:46:26:7d:1d:fd:8f:48:0d:7e:75:ec:14: d7:f3:2e:c6:d2:78:55:17:82:01:69:9f:14:ee:78:f0:cf:ab: 48:dd:2e:a1:22:64:f4:db:1d:5f:36:3b:d9:b5:bf:1b:69:18: 3a:2e:76:12:f7:31:49:94:30:cb:3f:b9:89:88:6f:20:89:3a: 55:f3:a6:74:b3:bd:15:44:08:34:60:cf:61:67:62:9e:d3:ad: 3b:f5:27:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3qXa5uLsaa8QoHTr8guMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNTYyMjQ1N2ExYmUzM2EwMTI1ODg2NmEwNjdlMDQ0N2Rm ZDg5NjQwHhcNMjUxMjA2MTAwMDU1WhcNMjUxMjA3MTAwMDU1WjAzMTEwLwYDVQQD EygxMjlhZDhjYzU2YTllNDlkYTA5ODdlMmU1OTk1NzdlY2ViOGJmMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN7Ob4SJQHA9Ks6+4Wyx80UtlU7h 1CPG3q3A5pHp3UG4gbamgYCsIi3sh5SB9872F4S3xv1240rKtVfz2Eh5rRTtbfHS BesZIS3qijk0N+UBpuBkyVogOWBfl0WGbKWxu6B176GYqVaChecepitL6MprsEIb wqRmgj1xLZQ1bmOjIjr7Q+wsgC82rSiztQDzJ9fT6ETX4yb/BEBGYPi8utQFuCpO 3jca/3Dkyfkz6i/rbO+wQ7ndVfK2S/6X5tBMjJu0BE54XXHCHkUeLHJS3EBaV6FR cT9qEtgylWqaJpSAUtKq1IUxjglPUrYDuqSa4rlj3QcCG5RUXxPCWsB93wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKa2MxWqeSdoJh+LlmVd+zri/NQMB8GA1UdIwQY MBaAFNJWIkV6G+M6ASWIZqBn4ER9/YlkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxZaVJYb2I0em9CSllobW9HZmdSSDM5aVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNmI0N2ItZjJjZS00ZjJiLTlkMzMt NDU1NzllNDE4ZmY3LzEvMGxZaVJYb2I0em9CSllobW9HZmdSSDM5aVdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yNmI0N2ItZjJjZS00ZjJiLTlkMzMtNDU1NzllNDE4ZmY3 LzEvMGxZaVJYb2I0em9CSllobW9HZmdSSDM5aVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBbRBP1E Z8aKks+NrRWHQPs+Vdc9ga8+GcwHzxgDawwdCkV+jmahLVDGZoptL2c55HXa8u6U aPxOYplRuAOrVDhdoJjPYPhCz1Z7p6dE+1gkEsE796tZuovVleLzgWuLI31kqrqI 3vCFMbYJ73/y9GJ0FOYmE0hqsGpRzdsq9yJwH4FrpGtSpX8zBDvLHE85IfM0vx8z /GDv41krvUhe3iALQJSOV2m6RiZ9Hf2PSA1+dewU1/MuxtJ4VReCAWmfFO548M+r SN0uoSJk9NsdXzY72bW/G2kYOi52EvcxSZQwyz+5iYhvIIk6VfOmdLO9FUQINGDP YWdintOtO/Unaw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:11:30 2025 by rpki-client