This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft File: 0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft (raw, json) Hash identifier: psrVQiIzcto2g256Btesa/zjniHy+sxA0L3zK6vjUgk= Subject key identifier: 7E:E7:D7:68:8A:A2:1A:02:A9:BD:F8:DD:63:2F:2B:B4:6A:C2:98:A2 Authority key identifier: D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86 Certificate issuer: /CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86 Certificate serial: 019AF49BC4667A0A4319EC9F695AB0097687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft Manifest number: 014B Signing time: Sat 06 Dec 2025 17:00:40 +0000 Manifest this update: Sat 06 Dec 2025 17:00:40 +0000 Manifest next update: Sun 07 Dec 2025 17:00:40 +0000 Files and hashes: 1: 0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl (hash: o11R9dBQ7OpdSudm5p2fGHkErPuXP6+Weu33qdzQu5o=) 2: P3iaocB1zo3XgrwcxpGxPusAZdY.roa (hash: 29dj862Am2pikrvIffloXuXMoWnAHSaQPfQpO37ynfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:c4:66:7a:0a:43:19:ec:9f:69:5a:b0:09:76:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86 Validity Not Before: Dec 6 17:00:40 2025 GMT Not After : Dec 7 17:00:40 2025 GMT Subject: CN=7ee7d7688aa21a02a9bdf8dd632f2bb46ac298a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:e6:c5:e8:b9:68:f3:80:48:c0:4a:b6:fc: c7:49:66:d0:6e:63:05:b4:36:ca:2f:25:0c:d5:e0: 78:22:10:a6:13:51:12:98:e9:cd:50:9e:fe:83:46: b0:6c:e0:82:26:1b:0b:71:a1:58:5b:87:47:6b:4e: e8:da:3d:86:04:98:1a:7d:d3:ca:5b:3f:94:43:d4: 6d:ae:7c:5d:ab:20:95:e1:25:49:c2:06:e2:c3:0c: ec:03:d6:93:84:1a:76:61:b7:89:37:e2:b4:73:df: 13:0e:9a:cd:f9:59:be:88:b2:3c:27:ad:8f:c1:7a: d7:75:66:a3:69:45:07:44:d0:c2:da:4f:8e:ae:c7: a8:01:d5:eb:20:04:c5:eb:6e:cf:a0:48:42:6c:d3: 08:7d:83:0e:ea:11:2c:7f:f1:c1:26:29:28:ac:9c: 77:c0:0c:60:1c:f9:09:97:7f:29:5c:ab:83:d0:3c: 94:28:83:d2:ce:48:7c:aa:be:15:0e:f2:4f:5b:14: 03:25:b7:59:ae:7a:54:20:bd:03:ea:99:a3:32:6f: 7f:35:60:ac:89:a6:a7:9e:f3:9c:32:86:e5:05:aa: 81:43:eb:08:f8:1c:7d:e8:8e:2d:c9:88:9c:c0:ae: 48:78:02:37:86:6c:dd:f8:74:aa:b1:cb:84:49:c1: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E7:D7:68:8A:A2:1A:02:A9:BD:F8:DD:63:2F:2B:B4:6A:C2:98:A2 X509v3 Authority Key Identifier: keyid:D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cd:52:c7:ec:60:3d:04:7a:d4:af:0e:c5:64:7d:af:0c:e2: 61:bb:27:ab:dd:20:90:94:a7:90:7c:a3:fc:d0:49:38:ff:e7: 03:e0:69:98:11:cc:08:81:10:8c:5b:9a:0e:05:41:c9:96:27: 39:81:94:cd:f7:54:1b:0e:39:71:ca:e0:8c:2a:a2:b0:ff:51: 30:45:22:03:c6:f5:e5:51:61:7e:96:42:c5:df:56:d0:46:b2: 57:ad:cd:85:48:5a:ce:73:20:89:da:1e:ab:e3:bb:75:dd:bf: 83:0e:d4:66:9f:2b:e1:4f:f4:a4:bc:93:33:ab:d0:29:87:3f: 6d:72:c1:a3:41:39:a6:42:5b:9a:7a:35:21:00:de:75:95:20: 7a:14:05:a1:4c:b9:c5:e2:f5:da:a5:8d:d2:d6:a5:f6:d4:dd: 36:46:0c:16:43:85:3f:4e:ec:02:ca:d7:d0:58:1b:73:6f:c0: a9:31:0a:a2:9d:08:f8:02:a7:ae:07:d3:89:49:e6:3b:e2:f2: bb:70:38:5b:0d:49:46:91:c9:82:6c:eb:e2:c6:be:0d:64:c7: 26:2b:b1:36:87:8d:41:59:ee:87:22:fe:50:39:21:3b:d8:89: 21:5a:ab:96:8a:71:80:a6:58:71:15:2e:08:0b:80:5e:e6:e2: b7:85:20:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m8RmegpDGeyfaVqwCXaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMDI3MDZmM2RkZTJiYjEyZTJiYTkxMWE5YmUwNWM4ZDQ5 NzhjODYwHhcNMjUxMjA2MTcwMDQwWhcNMjUxMjA3MTcwMDQwWjAzMTEwLwYDVQQD Eyg3ZWU3ZDc2ODhhYTIxYTAyYTliZGY4ZGQ2MzJmMmJiNDZhYzI5OGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjPmxei5aPOASMBKtvzHSWbQbmMF tDbKLyUM1eB4IhCmE1ESmOnNUJ7+g0awbOCCJhsLcaFYW4dHa07o2j2GBJgafdPK Wz+UQ9RtrnxdqyCV4SVJwgbiwwzsA9aThBp2YbeJN+K0c98TDprN+Vm+iLI8J62P wXrXdWajaUUHRNDC2k+OrseoAdXrIATF627PoEhCbNMIfYMO6hEsf/HBJikorJx3 wAxgHPkJl38pXKuD0DyUKIPSzkh8qr4VDvJPWxQDJbdZrnpUIL0D6pmjMm9/NWCs iaannvOcMoblBaqBQ+sI+Bx96I4tyYicwK5IeAI3hmzd+HSqscuEScH8TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7n12iKohoCqb343WMvK7RqwpiiMB8GA1UdIwQY MBaAFNMCcG893iuxLiupEam+BcjUl4yGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHdKd2J6M2VLN0V1SzZrUnFiNEZ5TlNYaklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81ZmNhZWEtMmYxNC00ZDRkLWI1NWQt YzhkODQ5ODViYmQ5LzEvMHdKd2J6M2VLN0V1SzZrUnFiNEZ5TlNYaklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS81ZmNhZWEtMmYxNC00ZDRkLWI1NWQtYzhkODQ5ODViYmQ5 LzEvMHdKd2J6M2VLN0V1SzZrUnFiNEZ5TlNYaklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD81Sx+xg PQR61K8OxWR9rwziYbsnq90gkJSnkHyj/NBJOP/nA+BpmBHMCIEQjFuaDgVByZYn OYGUzfdUGw45ccrgjCqisP9RMEUiA8b15VFhfpZCxd9W0EayV63NhUhaznMgidoe q+O7dd2/gw7UZp8r4U/0pLyTM6vQKYc/bXLBo0E5pkJbmno1IQDedZUgehQFoUy5 xeL12qWN0tal9tTdNkYMFkOFP07sAsrX0Fgbc2/AqTEKop0I+AKnrgfTiUnmO+Ly u3A4Ww1JRpHJgmzr4sa+DWTHJiuxNoeNQVnuhyL+UDkhO9iJIVqrlopxgKZYcRUu CAuAXubit4Ugww== -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:28 2025 by rpki-client