This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json) Hash identifier: LFcEgooey6LnvozvDg7+LVR2AOL15Azu5gwJkHJzt28= Subject key identifier: 52:B0:D5:C4:68:87:84:37:EC:6B:0A:DF:25:91:1E:BF:29:E8:B7:5F Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Certificate serial: 019AF577598C6E2B81AE068F195D8DF8FD25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 21:00:30 +0000 Manifest this update: Sat 06 Dec 2025 21:00:30 +0000 Manifest next update: Sun 07 Dec 2025 21:00:30 +0000 Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: gIwUgxGNpVGQxTFegoPHz9QlOODGHu+dS/w6EwgNJ1U=) 2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=) 3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:59:8c:6e:2b:81:ae:06:8f:19:5d:8d:f8:fd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Validity Not Before: Dec 6 21:00:30 2025 GMT Not After : Dec 7 21:00:30 2025 GMT Subject: CN=52b0d5c468878437ec6b0adf25911ebf29e8b75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:18:c4:42:2f:a2:c1:ed:63:e2:e8:41:65:25: 1c:a9:b2:66:dd:d8:12:e0:8e:a4:ec:2e:e3:5c:ea: 01:58:47:69:eb:4b:ae:88:3f:c5:3f:9a:d5:22:36: 87:99:95:f1:4c:9d:87:94:a7:f5:ad:fa:15:9a:13: 4c:2e:0a:db:4d:ac:bf:0a:6d:83:27:5e:55:6c:23: f2:4b:75:45:be:6e:a7:32:51:7d:35:81:24:e6:11: b5:8d:7c:93:ff:b8:86:61:c8:66:6a:14:a6:e0:aa: 10:07:c4:5a:f7:34:f7:95:12:0a:15:10:8c:5c:a3: 41:ad:82:e2:d1:cc:21:d0:fd:7c:1b:12:0f:0f:91: 40:49:0d:80:9d:04:bb:89:e0:1f:b4:e6:59:c3:53: 73:60:20:fe:43:18:60:da:ee:d3:13:02:19:a3:11: 70:65:44:c7:46:ed:07:fc:82:d4:e0:2d:23:1c:5d: 5d:c9:4d:97:09:54:21:80:70:76:27:0a:d2:0b:ac: 31:65:c1:16:c2:7d:58:5b:b2:bc:10:89:01:9c:66: ad:f5:48:1e:3f:37:f3:9f:b3:ef:31:cd:d5:ba:dd: 57:f0:0c:a6:2f:13:eb:f8:34:38:ee:62:31:7c:54: 43:ba:62:09:c0:a9:19:08:cc:39:3d:44:5c:94:3b: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B0:D5:C4:68:87:84:37:EC:6B:0A:DF:25:91:1E:BF:29:E8:B7:5F X509v3 Authority Key Identifier: keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:aa:cc:bc:2d:72:28:3f:12:67:8a:24:73:7c:8b:94:85:27: b4:12:3d:dd:2a:f1:75:44:86:9c:9e:6f:98:2d:07:8c:08:12: 28:f0:d8:33:d2:8e:6f:28:08:fd:cf:91:79:39:dd:03:eb:62: ae:f3:1f:66:9c:09:69:55:1e:52:48:a3:d2:5d:5d:db:b3:9d: ea:4f:3e:8c:0e:42:5e:7d:ec:d6:8e:b7:a8:0e:a4:7d:17:e7: 2a:42:76:6d:77:59:4c:f0:ff:be:c0:13:01:8b:3c:84:21:cd: e3:0e:26:17:89:70:fb:87:3f:e3:88:c8:34:f9:c0:2a:00:bf: 3d:36:8f:91:6a:36:e5:36:36:dd:7c:0e:13:d5:2b:be:bf:16: 5f:8d:a9:a9:18:dd:ed:a0:97:83:43:9b:5e:e0:ae:22:83:24: 4f:4e:8e:fe:0c:48:9a:b6:9f:d5:96:81:45:3d:7e:31:f8:16: 0d:ef:bb:a8:ad:3e:d7:48:28:3c:6e:e2:6c:3a:29:d6:01:d2: 78:70:91:d8:98:1a:60:8d:29:14:56:8c:f4:42:db:95:51:49: af:35:09:da:ad:08:e2:a1:2a:43:6e:69:8e:b3:ee:72:bf:08: 8d:f4:0a:a6:3b:f9:db:5f:f4:94:d6:36:76:2d:e0:99:20:80: a5:f1:64:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d1mMbiuBrgaPGV2N+P0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZmEyYTcwMDAzODgwZDc1NjE2MTJhM2MwYTEyNjAyY2Uz NTQxYTQwHhcNMjUxMjA2MjEwMDMwWhcNMjUxMjA3MjEwMDMwWjAzMTEwLwYDVQQD Eyg1MmIwZDVjNDY4ODc4NDM3ZWM2YjBhZGYyNTkxMWViZjI5ZThiNzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxjEQi+iwe1j4uhBZSUcqbJm3dgS 4I6k7C7jXOoBWEdp60uuiD/FP5rVIjaHmZXxTJ2HlKf1rfoVmhNMLgrbTay/Cm2D J15VbCPyS3VFvm6nMlF9NYEk5hG1jXyT/7iGYchmahSm4KoQB8Ra9zT3lRIKFRCM XKNBrYLi0cwh0P18GxIPD5FASQ2AnQS7ieAftOZZw1NzYCD+Qxhg2u7TEwIZoxFw ZUTHRu0H/ILU4C0jHF1dyU2XCVQhgHB2JwrSC6wxZcEWwn1YW7K8EIkBnGat9Uge Pzfzn7PvMc3Vut1X8AymLxPr+DQ47mIxfFRDumIJwKkZCMw5PURclDvKAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKw1cRoh4Q37GsK3yWRHr8p6LdfMB8GA1UdIwQY MBaAFNL6KnAAOIDXVhYSo8ChJgLONUGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAt YTc5NjUwMWU3N2ExLzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAtYTc5NjUwMWU3N2Ex LzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6rMvC1y KD8SZ4okc3yLlIUntBI93SrxdUSGnJ5vmC0HjAgSKPDYM9KObygI/c+ReTndA+ti rvMfZpwJaVUeUkij0l1d27Od6k8+jA5CXn3s1o63qA6kfRfnKkJ2bXdZTPD/vsAT AYs8hCHN4w4mF4lw+4c/44jINPnAKgC/PTaPkWo25TY23XwOE9Urvr8WX42pqRjd 7aCXg0ObXuCuIoMkT06O/gxImraf1ZaBRT1+MfgWDe+7qK0+10goPG7ibDop1gHS eHCR2JgaYI0pFFaM9ELblVFJrzUJ2q0I4qEqQ25pjrPucr8IjfQKpjv521/0lNY2 di3gmSCApfFkkw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:40 2025 by rpki-client