This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json) Hash identifier: kgZ8mYKeQc768MFKugeJr7EcRfVUJY2u8vczUVDxKH8= Subject key identifier: C2:77:BC:85:98:7E:21:DC:DB:88:E5:17:6A:24:33:DA:A6:6D:D5:FD Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Certificate serial: 019AF3523C0C5AFB0927265A73A1A199472F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft Manifest number: 086F Signing time: Sat 06 Dec 2025 11:00:44 +0000 Manifest this update: Sat 06 Dec 2025 11:00:44 +0000 Manifest next update: Sun 07 Dec 2025 11:00:44 +0000 Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: x4+28HV5nuIzSWgf7TAED5BVNawZZrhWn5N7pAoda5A=) 2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:3c:0c:5a:fb:09:27:26:5a:73:a1:a1:99:47:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Validity Not Before: Dec 6 11:00:44 2025 GMT Not After : Dec 7 11:00:44 2025 GMT Subject: CN=c277bc85987e21dcdb88e5176a2433daa66dd5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:bf:2a:19:d2:21:01:79:70:32:ce:c7:dc: 10:f8:f1:f0:36:d7:f8:eb:72:81:10:55:7f:f8:3a: 2f:67:cc:9d:4f:33:cc:f9:d3:f3:c7:f7:7f:02:00: 22:34:55:46:7d:d5:24:42:4a:3e:50:ba:9e:52:d4: 8a:90:83:d3:ac:b1:27:27:ea:44:8a:95:f2:1b:e8: 39:fb:f9:11:26:d0:90:ee:02:eb:0a:40:b9:14:be: a1:dc:9a:63:50:38:c5:5a:8e:79:b4:87:9c:41:52: c3:5c:3c:c1:22:dc:76:7e:79:6d:f7:8f:e7:7c:52: 86:23:fc:a4:f6:21:fa:c9:7d:61:86:37:5e:61:a7: 94:48:09:b5:9e:7e:86:a4:c0:7e:4a:a7:35:5b:00: 59:d0:0c:bd:72:35:19:61:4b:43:d6:54:d3:fb:5b: db:c6:05:3c:03:20:0b:cb:0b:cf:74:58:ea:d9:fd: 73:7c:18:9c:0c:90:ee:d3:33:89:df:ca:98:16:f0: 3c:1b:12:e4:2d:3c:47:ed:1b:29:b8:4d:0c:a5:24: a1:8b:1f:b4:19:1f:bb:81:f2:c6:37:b0:37:91:9a: cb:d9:ee:50:be:29:5d:98:ce:b4:f0:6c:97:89:de: db:36:8e:e4:ea:9c:17:60:b2:e3:0d:32:e5:3a:e9: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:77:BC:85:98:7E:21:DC:DB:88:E5:17:6A:24:33:DA:A6:6D:D5:FD X509v3 Authority Key Identifier: keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:77:c3:77:63:5e:53:b4:b6:45:77:db:35:07:02:d2:3b:ab: b4:6b:57:bf:77:de:e7:dc:4d:28:3b:c1:bd:e9:d8:36:7e:7a: 8f:06:9a:82:39:53:28:af:3f:81:ab:c8:c6:36:10:8d:98:09: d8:ed:3e:93:0b:52:c2:78:64:c5:b4:22:8f:e7:8e:d2:39:6e: 56:fd:89:bb:a5:89:67:db:32:1c:3a:cb:bc:78:7e:fb:de:c4: 80:e7:c5:74:8a:39:54:e8:fa:e9:5c:af:ff:c4:ef:66:a5:8b: 13:2f:8c:36:7c:15:f6:26:88:07:f2:3c:fc:9e:08:71:13:1c: 21:ac:d4:43:af:91:c6:bd:8c:59:f9:ba:b9:d2:f6:c0:76:25: a5:db:64:5d:9f:3d:67:7b:56:f4:53:a7:6d:45:cb:b7:96:4c: 02:e1:a7:ef:cb:a3:50:57:1b:a5:53:45:dc:58:f4:e7:09:18: 6d:e9:6a:99:c8:67:25:41:9f:31:3c:71:f5:21:75:52:e6:3b: 4e:9b:dc:e5:82:27:5a:67:83:85:53:f4:9d:26:96:16:a5:88: 53:58:23:b2:af:c5:18:5e:83:a0:12:5a:c5:f4:9f:79:31:b3: 9f:db:9b:08:9c:fe:22:af:85:b5:8f:cd:a7:bc:7b:ee:f7:d9: 3a:9d:a0:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjwMWvsJJyZac6GhmUcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNTgxNDc5ZGVlM2I1OTk0ZjExYzlkOTU2NDYzMWJmNWE0 MDRjMDcwHhcNMjUxMjA2MTEwMDQ0WhcNMjUxMjA3MTEwMDQ0WjAzMTEwLwYDVQQD EyhjMjc3YmM4NTk4N2UyMWRjZGI4OGU1MTc2YTI0MzNkYWE2NmRkNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY6/KhnSIQF5cDLOx9wQ+PHwNtf4 63KBEFV/+DovZ8ydTzPM+dPzx/d/AgAiNFVGfdUkQko+ULqeUtSKkIPTrLEnJ+pE ipXyG+g5+/kRJtCQ7gLrCkC5FL6h3JpjUDjFWo55tIecQVLDXDzBItx2fnlt94/n fFKGI/yk9iH6yX1hhjdeYaeUSAm1nn6GpMB+Sqc1WwBZ0Ay9cjUZYUtD1lTT+1vb xgU8AyALywvPdFjq2f1zfBicDJDu0zOJ38qYFvA8GxLkLTxH7RspuE0MpSShix+0 GR+7gfLGN7A3kZrL2e5QvildmM608GyXid7bNo7k6pwXYLLjDTLlOulYKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ3vIWYfiHc24jlF2okM9qmbdX9MB8GA1UdIwQY MBaAFNJYFHne47WZTxHJ2VZGMb9aQEwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYt NmE2YzZlMDk2MDcxLzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYtNmE2YzZlMDk2MDcx LzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHfDd2Ne U7S2RXfbNQcC0jurtGtXv3fe59xNKDvBvenYNn56jwaagjlTKK8/gavIxjYQjZgJ 2O0+kwtSwnhkxbQij+eO0jluVv2Ju6WJZ9syHDrLvHh++97EgOfFdIo5VOj66Vyv /8TvZqWLEy+MNnwV9iaIB/I8/J4IcRMcIazUQ6+Rxr2MWfm6udL2wHYlpdtkXZ89 Z3tW9FOnbUXLt5ZMAuGn78ujUFcbpVNF3Fj05wkYbelqmchnJUGfMTxx9SF1UuY7 Tpvc5YInWmeDhVP0nSaWFqWIU1gjsq/FGF6DoBJaxfSfeTGzn9ubCJz+Iq+FtY/N p7x77vfZOp2glw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:48 2025 by rpki-client