This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json) Hash identifier: oAso7jGEoVkLMmw2gKL9H9NMiKwHRJweTKgzBgSU3wA= Subject key identifier: CA:6C:D6:EF:D7:CF:0F:58:93:1B:EB:6B:CD:0B:7B:78:9C:BD:F2:BC Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63 Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63 Certificate serial: 019AF19B427CDB3E54017CE2177B54051C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft Manifest number: 1039 Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: dcDURgv5VCm+ydkibJjdE06/gya6jRfTaR3gTEC9u4M=) 2: H6uSFDtLoI4YQD04FkS4VSFpIhw.roa (hash: hv1JnxHOhWB0hv+54xUCZyY9gAEBPU8rdk2117x7KVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:42:7c:db:3e:54:01:7c:e2:17:7b:54:05:1c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63 Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=ca6cd6efd7cf0f58931beb6bcd0b7b789cbdf2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:d2:34:be:4e:d6:ef:c2:25:fe:e6:a7:9d: da:1d:fd:4b:a5:f8:94:9b:a1:78:27:b6:4a:cd:ef: ce:41:67:f3:98:14:a3:93:48:0f:f4:4f:2f:b7:2c: 75:19:73:73:d3:70:e3:17:fb:2e:b1:60:98:85:73: d2:dd:57:31:28:43:39:a5:94:91:58:05:d2:0d:e6: 59:fd:a5:e4:f2:87:73:02:76:88:86:6c:6a:d4:bc: d8:df:9b:94:1c:8e:65:14:cd:64:29:fc:95:3e:8a: 9a:67:d3:45:e4:73:9f:2e:b0:7c:3c:ac:ae:5c:f7: f7:22:b4:be:83:b0:4f:9f:5c:2a:2e:fe:24:b2:f7: de:87:79:48:70:18:58:e6:df:94:a9:24:ed:71:37: e4:d2:14:e8:19:32:d1:4c:5a:6a:95:4e:3e:f7:bb: ac:d2:ac:bc:98:c3:bb:6e:93:f1:d8:32:dc:1f:f0: f5:83:bd:5d:78:a7:38:02:91:6d:a3:21:af:de:3c: e2:dc:8e:bb:8c:86:c7:76:ca:1f:c0:c9:52:9b:c3: 63:ba:28:7e:e8:21:a8:7c:91:c5:2b:6b:b1:77:58: ce:67:25:c5:d8:2e:63:41:40:c1:c2:a4:c1:23:6f: 88:a9:92:49:ea:cc:57:d2:22:e3:59:dc:2d:3a:4a: a9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6C:D6:EF:D7:CF:0F:58:93:1B:EB:6B:CD:0B:7B:78:9C:BD:F2:BC X509v3 Authority Key Identifier: keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3a:50:6b:38:bb:78:18:8c:79:c8:71:db:35:f2:5d:9b:c5: 0c:bc:a6:36:e1:3f:f6:38:90:66:e8:a8:da:6a:e5:08:42:1a: 63:ba:0a:8c:d8:96:aa:19:56:ee:e8:b4:12:32:e2:d3:bb:f8: 0f:a8:cb:2b:a1:70:41:6e:f1:7d:20:0e:24:74:b2:bd:88:ac: f7:d7:d7:e2:35:53:f0:8c:fa:5e:f9:20:f0:07:00:be:ee:22: 7b:28:d4:c2:a9:4d:16:57:41:90:fe:74:fc:25:51:26:bd:1c: 79:fe:1f:d9:98:d5:25:8f:81:be:3e:a5:70:5b:5c:9e:55:a6: 46:b3:12:96:c2:2a:2b:fd:c6:b3:83:65:9e:2f:b2:9a:ab:58: 73:17:fe:f0:1b:ad:b8:f7:8e:ab:42:6d:55:1d:aa:a6:0f:6f: 14:4b:99:51:c7:84:15:b0:ea:45:6a:dc:ab:fb:46:00:05:84: 60:23:98:75:85:69:2d:1d:0a:bc:29:3e:a9:eb:8e:16:15:6a: 01:c1:53:28:16:ba:3a:77:d9:8c:63:c7:53:39:ab:a8:ed:0e: 5b:7f:89:32:19:e1:c8:af:72:08:a8:7c:c8:0e:db:bc:d4:cd: c7:31:cc:ba:b1:f1:65:c1:3d:0c:1d:77:ef:69:c1:dd:92:77: 4f:da:67:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0J82z5UAXziF3tUBRwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMDU0MmE2MTM1NTI0MTQyMTk0Y2FhNzA4ZTdkYjJjY2E2 YjRlNjMwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD EyhjYTZjZDZlZmQ3Y2YwZjU4OTMxYmViNmJjZDBiN2I3ODljYmRmMmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHjSNL5O1u/CJf7mp53aHf1LpfiU m6F4J7ZKze/OQWfzmBSjk0gP9E8vtyx1GXNz03DjF/susWCYhXPS3VcxKEM5pZSR WAXSDeZZ/aXk8odzAnaIhmxq1LzY35uUHI5lFM1kKfyVPoqaZ9NF5HOfLrB8PKyu XPf3IrS+g7BPn1wqLv4ksvfeh3lIcBhY5t+UqSTtcTfk0hToGTLRTFpqlU4+97us 0qy8mMO7bpPx2DLcH/D1g71deKc4ApFtoyGv3jzi3I67jIbHdsofwMlSm8Njuih+ 6CGofJHFK2uxd1jOZyXF2C5jQUDBwqTBI2+IqZJJ6sxX0iLjWdwtOkqplwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMps1u/Xzw9Ykxvra80Le3icvfK8MB8GA1UdIwQY MBaAFNIFQqYTVSQUIZTKpwjn2yzKa05jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUt YWI0MmI0YzkzZWQ5LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUtYWI0MmI0YzkzZWQ5 LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzpQazi7 eBiMechx2zXyXZvFDLymNuE/9jiQZuio2mrlCEIaY7oKjNiWqhlW7ui0EjLi07v4 D6jLK6FwQW7xfSAOJHSyvYis99fX4jVT8Iz6Xvkg8AcAvu4ieyjUwqlNFldBkP50 /CVRJr0cef4f2ZjVJY+Bvj6lcFtcnlWmRrMSlsIqK/3Gs4Nlni+ymqtYcxf+8But uPeOq0JtVR2qpg9vFEuZUceEFbDqRWrcq/tGAAWEYCOYdYVpLR0KvCk+qeuOFhVq AcFTKBa6OnfZjGPHUzmrqO0OW3+JMhnhyK9yCKh8yA7bvNTNxzHMurHxZcE9DB13 72nB3ZJ3T9pnCw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:54 2025 by rpki-client