This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft File: a0dcb7gDO14R19tfLJl8hLpyXKI.mft (raw, json) Hash identifier: UUeVa24unJPaTW/PRAvyu13JqozfIjfR4fomO3uAwyI= Subject key identifier: A7:2D:CA:A6:55:C5:1F:D8:5D:36:6B:CE:D2:F7:89:A9:FC:55:C4:B3 Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2 Certificate issuer: /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2 Certificate serial: 019AF31D6217C90B2D649E8242DC57C863FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 10:03:00 +0000 Manifest this update: Sat 06 Dec 2025 10:03:00 +0000 Manifest next update: Sun 07 Dec 2025 10:03:00 +0000 Files and hashes: 1: OVBxJN_E7KClOVOyQO1dITqXrDc.roa (hash: gtF4A20X0QOWLiRvuhbFqEg7fy+sAd/zI+eINNfliv0=) 2: a0dcb7gDO14R19tfLJl8hLpyXKI.crl (hash: o3V3EZdJSppmSSwFZ1NMRsmdBhs+J10XC8JL7jWFz1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:62:17:c9:0b:2d:64:9e:82:42:dc:57:c8:63:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2 Validity Not Before: Dec 6 10:03:00 2025 GMT Not After : Dec 7 10:03:00 2025 GMT Subject: CN=a72dcaa655c51fd85d366bced2f789a9fc55c4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:3e:7a:75:cd:cd:91:92:97:2e:ed:b6:51: 5d:c6:0b:d5:19:05:b6:5c:c7:b9:15:86:a2:95:db: cb:30:ae:5d:c8:e3:64:f5:9c:1e:30:1c:d4:0c:e6: 7b:9d:2b:53:21:14:51:79:eb:46:3a:6f:e3:f8:b6: 02:26:c8:96:34:c8:f9:17:c4:a8:f5:b4:ee:a8:a6: 83:22:24:6d:52:71:18:97:19:a7:38:89:3e:da:8e: 9f:30:53:e0:8e:15:c3:11:4f:49:bf:1b:32:d3:c2: 9f:32:fe:12:a8:82:d6:16:86:2c:ba:35:0f:2b:35: 71:7c:44:8c:99:fb:8c:db:25:15:93:b5:67:83:ca: 52:a1:5b:04:2b:6c:5e:63:7a:18:93:74:3c:4d:3c: 19:3f:9e:5e:d0:f7:dc:fb:c2:66:3f:87:14:40:c6: 9f:fe:7e:9b:4e:3e:17:60:75:7c:4d:fc:93:52:d5: c4:71:46:c1:ef:cf:f0:f9:0a:e6:65:0e:f5:9f:76: 3d:63:c6:eb:56:6c:f8:85:ac:63:25:98:f7:c4:5e: 27:b6:be:19:21:35:80:0e:58:44:68:8a:b4:e9:00: de:9e:0c:0c:94:b4:00:3f:c4:ad:0d:92:5b:5c:a8: cf:38:f7:4f:d4:10:90:b7:4c:0f:33:93:cb:49:80: 7d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2D:CA:A6:55:C5:1F:D8:5D:36:6B:CE:D2:F7:89:A9:FC:55:C4:B3 X509v3 Authority Key Identifier: keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e1:27:b0:d7:5a:66:2b:3d:a3:a0:4c:48:13:51:fe:f2:1e: ae:eb:03:ab:0d:6c:31:ef:b1:81:fc:ba:37:f1:1f:14:c9:9d: 56:ab:b1:84:cd:43:e0:bf:c6:65:8a:21:c3:17:f8:b9:62:b7: 9d:f2:c6:61:f7:c0:35:a5:f4:34:1c:05:dd:5b:84:3c:96:0b: fa:98:2d:f2:8d:03:f0:84:1c:e3:a0:91:56:10:87:09:ed:82: d0:06:d8:49:38:6f:4f:65:bd:a2:8f:75:f6:2a:b2:c0:d6:5e: e4:29:63:53:22:a8:3a:18:38:d1:b3:49:48:84:e9:2e:84:c4: 2b:ba:ae:49:32:8e:c6:11:9f:3e:99:63:a4:e5:7d:c1:3d:5b: b3:73:25:fc:22:9e:cf:7a:b1:dc:32:66:14:01:1d:ab:e3:12: 33:bc:12:d8:9c:ab:c3:cf:55:96:9e:9c:86:33:7f:d8:07:2b: 02:e1:da:42:02:c2:42:78:a4:4c:4e:4d:94:37:15:dc:ae:5b: 89:90:ac:79:51:b5:2c:0b:71:7f:93:52:72:c4:09:ac:37:8d: 99:df:79:3b:3f:ca:f1:b5:dd:ce:d9:21:94:ee:26:91:11:c9: a3:c5:87:1a:d4:95:ae:28:ee:a8:bf:cb:6c:37:46:56:98:b3: b7:db:9a:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHWIXyQstZJ6CQtxXyGP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNDc1YzZmYjgwMzNiNWUxMWQ3ZGI1ZjJjOTk3Yzg0YmE3 MjVjYTIwHhcNMjUxMjA2MTAwMzAwWhcNMjUxMjA3MTAwMzAwWjAzMTEwLwYDVQQD EyhhNzJkY2FhNjU1YzUxZmQ4NWQzNjZiY2VkMmY3ODlhOWZjNTVjNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJU+enXNzZGSly7ttlFdxgvVGQW2 XMe5FYaildvLMK5dyONk9ZweMBzUDOZ7nStTIRRReetGOm/j+LYCJsiWNMj5F8So 9bTuqKaDIiRtUnEYlxmnOIk+2o6fMFPgjhXDEU9Jvxsy08KfMv4SqILWFoYsujUP KzVxfESMmfuM2yUVk7Vng8pSoVsEK2xeY3oYk3Q8TTwZP55e0Pfc+8JmP4cUQMaf /n6bTj4XYHV8TfyTUtXEcUbB78/w+QrmZQ71n3Y9Y8brVmz4haxjJZj3xF4ntr4Z ITWADlhEaIq06QDengwMlLQAP8StDZJbXKjPOPdP1BCQt0wPM5PLSYB9aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKctyqZVxR/YXTZrztL3ian8VcSzMB8GA1UdIwQY MBaAFGtHXG+4AzteEdfbXyyZfIS6clyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTBkY2I3Z0RPMTRSMTl0ZkxKbDhoTHB5WEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ZjQzYWEtYzVjOS00ZWY3LTg3NjYt NWE5ZDcwMmU3N2UzLzEvYTBkY2I3Z0RPMTRSMTl0ZkxKbDhoTHB5WEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85ZjQzYWEtYzVjOS00ZWY3LTg3NjYtNWE5ZDcwMmU3N2Uz LzEvYTBkY2I3Z0RPMTRSMTl0ZkxKbDhoTHB5WEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+EnsNda Zis9o6BMSBNR/vIerusDqw1sMe+xgfy6N/EfFMmdVquxhM1D4L/GZYohwxf4uWK3 nfLGYffANaX0NBwF3VuEPJYL+pgt8o0D8IQc46CRVhCHCe2C0AbYSThvT2W9oo91 9iqywNZe5CljUyKoOhg40bNJSITpLoTEK7quSTKOxhGfPpljpOV9wT1bs3Ml/CKe z3qx3DJmFAEdq+MSM7wS2Jyrw89Vlp6chjN/2AcrAuHaQgLCQnikTE5NlDcV3K5b iZCseVG1LAtxf5NScsQJrDeNmd95Oz/K8bXdztkhlO4mkRHJo8WHGtSVrijuqL/L bDdGVpizt9ua6g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:35:28 2025 by rpki-client