This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json) Hash identifier: Psmc8ERBjKQGQ/Ognn4Qu1pb1mJS6WTEbUa9ylbrapQ= Subject key identifier: 7F:A3:B1:B0:8A:52:43:73:70:F7:AE:C6:84:29:94:F3:8B:B2:39:0F Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10 Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010 Certificate serial: 019AF0882FBB40F9CDCA41A5569D8469C3B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft Manifest number: 0146 Signing time: Fri 05 Dec 2025 22:00:48 +0000 Manifest this update: Fri 05 Dec 2025 22:00:48 +0000 Manifest next update: Sat 06 Dec 2025 22:00:48 +0000 Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: OmMseYyAIi0p34lA5yBpt5JzrgCwUPDrgUhsUf/qQuM=) 2: 1-7rqPeApfWB5OeXme1R2dxaURkI.roa (hash: G1AfCo2TRIj0s8Iv4o94YSbEJ+sCCm2M5yCwI2QU6Oo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:2f:bb:40:f9:cd:ca:41:a5:56:9d:84:69:c3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010 Validity Not Before: Dec 5 22:00:48 2025 GMT Not After : Dec 6 22:00:48 2025 GMT Subject: CN=7fa3b1b08a52437370f7aec6842994f38bb2390f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:3f:b5:ed:3c:26:78:68:bb:a9:76:0d:a1: 6e:e2:15:6b:55:0f:5f:c8:db:89:66:c2:ea:d4:d2: 29:ef:26:e5:f2:fc:6a:f0:29:5a:e8:95:6a:1e:ca: a2:26:69:bb:be:ca:f4:17:6c:83:bd:28:c1:da:95: fb:cf:e4:10:d1:67:e3:e3:cc:b8:13:ad:d7:5f:96: e6:63:23:06:87:f0:6e:9a:be:54:dc:6d:33:b7:df: fa:08:00:f4:16:a0:c0:23:d6:2b:7c:7b:a5:1a:a7: 66:78:5e:18:78:98:af:62:d3:75:cf:2e:07:53:cd: ba:53:51:43:53:a7:7c:65:9a:42:04:fe:a3:f0:33: 7b:63:7c:80:d3:3d:1a:79:12:bc:b8:de:7d:38:5a: 73:96:ef:3b:2a:11:75:c5:1e:dc:85:d9:0e:c7:60: 6e:fe:73:29:23:79:f5:b9:41:e8:ee:3a:77:61:fc: 53:05:18:02:f5:3f:dc:35:96:55:bd:ee:37:99:ee: ed:f4:cf:2d:a5:d3:dc:58:48:fc:da:20:6a:80:a8: 74:e5:01:d0:91:fd:be:b3:d1:7d:f7:9b:2f:a0:54: 3f:23:a6:22:b2:7a:77:dc:b0:f0:a3:97:db:e0:97: 74:8a:c3:02:5b:b1:bf:78:3b:b5:a0:ed:df:3e:03: e9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A3:B1:B0:8A:52:43:73:70:F7:AE:C6:84:29:94:F3:8B:B2:39:0F X509v3 Authority Key Identifier: keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:22:e4:05:5f:48:f3:e1:8e:0d:d7:c2:6d:b9:ba:c7:ef:57: 76:80:17:a6:03:43:20:a7:16:9b:1f:7b:7f:bd:e6:cb:d5:f6: 9c:d5:be:44:9d:95:2b:8a:b6:9c:b3:a6:b3:41:25:2c:20:7a: 91:c7:3f:58:28:c0:f2:84:9a:24:38:36:d7:b5:38:1e:87:da: 0b:b6:72:11:d2:79:21:0a:af:4d:e8:1f:ed:a8:9d:f7:73:17: f3:2e:c2:b7:00:15:02:0a:21:81:83:73:1b:4b:8b:ee:f6:e7: af:cb:10:59:c5:20:80:be:93:47:7c:3b:31:c5:cd:92:ba:4e: 07:1c:ef:19:e9:83:c8:74:11:98:a9:5e:51:80:8e:fa:81:58: 1b:dd:40:ec:68:11:bd:5a:9d:21:c4:2c:e2:a8:ba:c6:32:dc: cb:1d:fd:c1:7a:08:81:26:be:d2:5e:18:25:f4:f1:49:ec:a9: 76:6d:94:52:55:3f:50:ef:80:43:ca:e0:5a:92:9c:58:dd:11: 48:77:0a:b0:67:93:0e:65:48:5e:ee:eb:6a:72:b4:7e:d2:93: b9:28:e1:8e:93:c2:08:57:97:41:99:b1:7e:d0:03:fa:8d:2e: e4:f6:9d:fd:19:17:35:27:04:06:55:ed:38:05:cd:34:28:c1: 40:31:1e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiC+7QPnNykGlVp2EacOwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmVmYjRkOTQwNDM2ODcxYTI0YTg3MjJmM2M5ZDY0ZDZj ODQwMTAwHhcNMjUxMjA1MjIwMDQ4WhcNMjUxMjA2MjIwMDQ4WjAzMTEwLwYDVQQD Eyg3ZmEzYjFiMDhhNTI0MzczNzBmN2FlYzY4NDI5OTRmMzhiYjIzOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lY/te08Jnhou6l2DaFu4hVrVQ9f yNuJZsLq1NIp7ybl8vxq8Cla6JVqHsqiJmm7vsr0F2yDvSjB2pX7z+QQ0Wfj48y4 E63XX5bmYyMGh/Bumr5U3G0zt9/6CAD0FqDAI9YrfHulGqdmeF4YeJivYtN1zy4H U826U1FDU6d8ZZpCBP6j8DN7Y3yA0z0aeRK8uN59OFpzlu87KhF1xR7chdkOx2Bu /nMpI3n1uUHo7jp3YfxTBRgC9T/cNZZVve43me7t9M8tpdPcWEj82iBqgKh05QHQ kf2+s9F995svoFQ/I6Yisnp33LDwo5fb4Jd0isMCW7G/eDu1oO3fPgPp+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+jsbCKUkNzcPeuxoQplPOLsjkPMB8GA1UdIwQY MBaAFNG++02UBDaHGiSoci88nWTWyEAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGI3N1RaUUVOb2NhSktoeUx6eWRaTmJJUUJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83ZGMyZWItNGUyNy00ODNhLWIzNTEt MGQ1ZDk1MTAxMmU3LzEvMGI3N1RaUUVOb2NhSktoeUx6eWRaTmJJUUJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83ZGMyZWItNGUyNy00ODNhLWIzNTEtMGQ1ZDk1MTAxMmU3 LzEvMGI3N1RaUUVOb2NhSktoeUx6eWRaTmJJUUJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSLkBV9I 8+GODdfCbbm6x+9XdoAXpgNDIKcWmx97f73my9X2nNW+RJ2VK4q2nLOms0ElLCB6 kcc/WCjA8oSaJDg217U4HofaC7ZyEdJ5IQqvTegf7aid93MX8y7CtwAVAgohgYNz G0uL7vbnr8sQWcUggL6TR3w7McXNkrpOBxzvGemDyHQRmKleUYCO+oFYG91A7GgR vVqdIcQs4qi6xjLcyx39wXoIgSa+0l4YJfTxSeypdm2UUlU/UO+AQ8rgWpKcWN0R SHcKsGeTDmVIXu7ranK0ftKTuSjhjpPCCFeXQZmxftAD+o0u5Pad/RkXNScEBlXt OAXNNCjBQDEe3g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:31 2025 by rpki-client