This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft File: 0VoQmMXIU1yXWPEo2KCC33z4UQs.mft (raw, json) Hash identifier: VLEK/VTmOcVRn9rfEyRZ+Rn7B798S7XOMr5DqFf+35E= Subject key identifier: 31:C4:85:C0:6B:D8:23:55:D1:71:0A:8B:0A:38:27:D7:36:3E:FD:45 Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B Certificate issuer: /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b Certificate serial: 019AF0BF8BF47E254DC764EE22B3BC2B4C05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft Manifest number: 0A19 Signing time: Fri 05 Dec 2025 23:01:16 +0000 Manifest this update: Fri 05 Dec 2025 23:01:16 +0000 Manifest next update: Sat 06 Dec 2025 23:01:16 +0000 Files and hashes: 1: 0VoQmMXIU1yXWPEo2KCC33z4UQs.crl (hash: seT4EuDUNnI/1/yBxBcoJMQrkBBhf47pp15HXf39QWc=) 2: MPcncw3TBLN9O1Fy19LVCE6t17w.roa (hash: jJnn/mYRkvFLhH11P3nUb1E3/V7XDU260gIFAJXV/0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8b:f4:7e:25:4d:c7:64:ee:22:b3:bc:2b:4c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b Validity Not Before: Dec 5 23:01:16 2025 GMT Not After : Dec 6 23:01:16 2025 GMT Subject: CN=31c485c06bd82355d1710a8b0a3827d7363efd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:83:9e:e8:5f:17:1e:d4:e6:79:7f:96:9d: 5f:01:3b:b8:44:a1:30:ff:b5:29:1d:8b:92:80:8b: 17:f0:6e:4c:f4:8f:13:a7:6d:8c:26:f5:c4:6b:db: 18:d6:fe:75:59:71:66:87:28:8e:5e:e0:88:3f:d8: 88:e9:05:81:7f:6d:a0:b4:4e:0c:02:e8:33:5c:1d: 9a:cc:fe:a5:25:58:15:a9:87:62:5d:63:56:10:66: 70:3f:41:cc:77:7f:45:64:c5:70:c1:51:90:f0:57: ad:f2:ec:c9:4a:27:9c:fc:87:29:3e:4e:9e:58:cb: c2:52:62:a4:68:3d:8a:6b:96:1e:47:08:8d:f4:36: dc:e8:52:b7:96:56:4b:ba:9e:04:69:70:2a:0e:d5: a4:68:1c:b7:a0:88:0c:3d:e1:08:4b:a9:7c:a6:35: 44:7d:77:53:b3:f7:8c:7d:4e:fb:95:0c:da:5d:f5: 0a:83:51:18:05:f6:bf:d4:1e:1a:bf:10:c5:2e:9e: 49:fc:04:55:8a:4d:54:0e:ad:68:56:c9:77:20:97: 49:40:b3:78:3e:1e:1a:2c:30:d1:c0:a9:ef:37:55: af:23:29:7c:0e:30:17:43:8a:99:84:f0:fd:0b:f5: d1:2d:bf:23:7f:92:6d:63:a2:0a:97:23:5b:c8:32: ac:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C4:85:C0:6B:D8:23:55:D1:71:0A:8B:0A:38:27:D7:36:3E:FD:45 X509v3 Authority Key Identifier: keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:11:ec:2a:e7:35:14:d1:10:af:35:0e:4e:8f:00:2d:b9:6d: 29:33:58:c6:d4:88:b5:76:5a:9f:da:1a:d1:02:2e:3e:f8:a2: 2a:0c:78:a9:fa:1f:1c:58:3f:59:e9:cf:05:f0:c7:1d:74:cf: 87:e0:87:3e:b9:85:eb:f0:01:e7:d0:62:65:0c:01:cb:d1:2f: 0a:2c:11:a7:4f:00:6f:db:0f:09:c8:2d:ed:d9:1d:84:09:a2: 0d:6a:64:66:80:51:9f:88:b5:4d:62:8d:36:85:53:cd:0a:d2: 60:47:2c:8c:03:6b:c2:a0:56:e0:69:94:26:28:32:45:51:c1: bb:25:c9:48:77:37:eb:f3:3f:06:30:ac:4e:17:49:62:bb:cd: da:be:28:f8:1a:7a:07:d6:f5:f4:8f:25:1e:6b:41:fc:6d:f7: c1:33:59:b6:dc:68:cd:8f:fa:1f:11:60:fa:fb:49:68:48:71: c6:14:6e:b0:dd:7c:88:2f:66:52:3e:5e:40:b1:61:97:e9:a2: 5d:ff:26:cb:16:46:ff:87:4c:48:6c:0e:82:91:46:c8:ec:4c: f5:c1:b8:78:ed:b8:a2:13:e0:96:a4:26:bb:78:b6:c4:59:79: 09:22:f3:13:ab:3a:c8:ff:03:e5:3e:c5:1b:eb:a9:3a:a1:89: 97:a0:a3:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4v0fiVNx2TuIrO8K0wFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNWExMDk4YzVjODUzNWM5NzU4ZjEyOGQ4YTA4MmRmN2Nm ODUxMGIwHhcNMjUxMjA1MjMwMTE2WhcNMjUxMjA2MjMwMTE2WjAzMTEwLwYDVQQD EygzMWM0ODVjMDZiZDgyMzU1ZDE3MTBhOGIwYTM4MjdkNzM2M2VmZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM2DnuhfFx7U5nl/lp1fATu4RKEw /7UpHYuSgIsX8G5M9I8Tp22MJvXEa9sY1v51WXFmhyiOXuCIP9iI6QWBf22gtE4M AugzXB2azP6lJVgVqYdiXWNWEGZwP0HMd39FZMVwwVGQ8Fet8uzJSiec/IcpPk6e WMvCUmKkaD2Ka5YeRwiN9Dbc6FK3llZLup4EaXAqDtWkaBy3oIgMPeEIS6l8pjVE fXdTs/eMfU77lQzaXfUKg1EYBfa/1B4avxDFLp5J/ARVik1UDq1oVsl3IJdJQLN4 Ph4aLDDRwKnvN1WvIyl8DjAXQ4qZhPD9C/XRLb8jf5JtY6IKlyNbyDKs5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHEhcBr2CNV0XEKiwo4J9c2Pv1FMB8GA1UdIwQY MBaAFNFaEJjFyFNcl1jxKNiggt98+FELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMt MGJkZGM4MDcxMWFlLzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMtMGJkZGM4MDcxMWFl LzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxHsKuc1 FNEQrzUOTo8ALbltKTNYxtSItXZan9oa0QIuPviiKgx4qfofHFg/WenPBfDHHXTP h+CHPrmF6/AB59BiZQwBy9EvCiwRp08Ab9sPCcgt7dkdhAmiDWpkZoBRn4i1TWKN NoVTzQrSYEcsjANrwqBW4GmUJigyRVHBuyXJSHc36/M/BjCsThdJYrvN2r4o+Bp6 B9b19I8lHmtB/G33wTNZttxozY/6HxFg+vtJaEhxxhRusN18iC9mUj5eQLFhl+mi Xf8myxZG/4dMSGwOgpFGyOxM9cG4eO24ohPglqQmu3i2xFl5CSLzE6s6yP8D5T7F G+upOqGJl6Cj2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:59 2025 by rpki-client