This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json) Hash identifier: z5bOR2aJ5jyI+cATkxegqJ6Fx9Wz9xFCSUFB5EFXuew= Subject key identifier: 75:0B:FF:6C:13:CF:D1:E9:E6:F3:08:F1:0F:9A:E5:AE:9F:45:5C:BD Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a Certificate serial: 019AF1D1925ECBAB422AD040E0856CF6FDF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft Manifest number: 0369 Signing time: Sat 06 Dec 2025 04:00:34 +0000 Manifest this update: Sat 06 Dec 2025 04:00:34 +0000 Manifest next update: Sun 07 Dec 2025 04:00:34 +0000 Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: /4/fcYY3WUMgJhG8Cu1Ez7IC6FFAAb99Q6TVJEeMjNw=) 2: tCQKTUl91gUF9YCakBjVvOmahA8.roa (hash: +o4wlq7VWOUaSft8SFBzstGqOiur0Xr8ur6qt9Ob1Nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:92:5e:cb:ab:42:2a:d0:40:e0:85:6c:f6:fd:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a Validity Not Before: Dec 6 04:00:34 2025 GMT Not After : Dec 7 04:00:34 2025 GMT Subject: CN=750bff6c13cfd1e9e6f308f10f9ae5ae9f455cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:1d:f3:d0:3a:9f:06:7a:27:cb:07:ef:23: 53:60:24:d1:90:1a:be:d7:80:8c:1d:58:2c:39:df: 85:df:f4:b6:61:b3:8a:70:7c:ac:5e:e7:05:f1:30: da:00:f0:7f:5e:26:c1:7b:8b:c2:9e:be:83:02:c6: 3f:22:ee:5a:ff:8c:6a:a6:c2:55:4a:cd:70:47:5a: 62:9e:5d:f4:55:5c:87:ad:d5:eb:b3:17:0f:3a:31: f6:3e:04:f5:66:8b:48:4e:63:cc:3d:76:df:ff:02: 93:36:b5:53:bb:f1:cd:2f:22:b4:5e:2d:f5:76:5e: a1:7a:78:4f:8f:e9:14:bb:3d:e2:9f:9d:2b:4a:ac: 06:75:82:eb:1e:79:8e:72:e9:29:8c:39:1c:30:4a: 78:ab:82:48:5c:d7:80:08:34:17:da:03:9d:a0:38: 6c:30:7e:f0:e9:89:6c:d0:cd:f0:54:bd:f9:aa:63: a4:d3:4f:49:10:57:41:ce:3f:53:97:9d:7b:64:b9: 59:ec:db:4f:91:56:4b:d1:db:c7:41:44:a3:c9:d6: fa:20:4a:53:5a:0d:20:62:a0:bb:3b:b0:a5:6a:e9: e8:c9:47:a4:41:d7:03:66:62:75:02:17:39:66:c9: ed:d8:eb:b1:97:f1:68:d3:69:72:f8:61:0d:72:4d: d2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0B:FF:6C:13:CF:D1:E9:E6:F3:08:F1:0F:9A:E5:AE:9F:45:5C:BD X509v3 Authority Key Identifier: keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b0:1b:02:53:b4:d9:65:d8:c2:e4:a4:a4:30:38:55:fb:4f: 06:23:b6:97:85:a7:f9:2e:3e:1b:e3:d2:eb:14:fb:d1:cb:34: 7e:5f:74:4e:41:a7:fc:dc:23:15:82:36:a5:00:fc:d0:4a:09: 87:63:7b:dc:7d:8e:0b:ef:12:37:71:f5:74:e2:46:b5:75:39: 4c:11:4c:6a:34:9b:7b:bc:db:b6:c4:46:1c:9c:4b:e7:4b:92: 0a:c8:ff:51:1f:10:30:81:d7:ee:b6:1c:30:b9:ca:98:64:a7: 29:14:ca:a6:98:dd:86:9a:51:cc:d7:7c:d3:44:15:d7:ba:7e: 88:86:de:62:38:42:ab:06:ca:92:e6:8d:50:60:18:a4:ab:1d: f6:28:16:c0:9d:4b:fc:fd:0e:d2:58:fb:dd:1a:8e:51:3d:6d: 62:61:07:a9:02:61:97:b8:c5:f9:11:e3:d5:49:9f:d1:aa:3e: 42:0e:8b:b0:8b:e1:12:f6:24:33:7e:ac:56:5d:8c:b7:ef:0b: d3:a1:0d:1d:c1:52:93:60:ef:94:4e:71:69:2f:6e:f1:31:84: 25:4b:00:78:81:96:b7:4c:12:69:c2:30:0c:b5:fd:03:c7:ed: 9d:09:82:2e:18:39:1c:05:bf:21:3c:23:61:d7:62:3e:a6:26: 09:c2:ef:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZJey6tCKtBA4IVs9v33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmY2Q2NGVhZjI1OTQ4MjJmM2Y5YTJlYmNkMTlkYjliN2Zh NzBkOWEwHhcNMjUxMjA2MDQwMDM0WhcNMjUxMjA3MDQwMDM0WjAzMTEwLwYDVQQD Eyg3NTBiZmY2YzEzY2ZkMWU5ZTZmMzA4ZjEwZjlhZTVhZTlmNDU1Y2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg8d89A6nwZ6J8sH7yNTYCTRkBq+ 14CMHVgsOd+F3/S2YbOKcHysXucF8TDaAPB/XibBe4vCnr6DAsY/Iu5a/4xqpsJV Ss1wR1pinl30VVyHrdXrsxcPOjH2PgT1ZotITmPMPXbf/wKTNrVTu/HNLyK0Xi31 dl6henhPj+kUuz3in50rSqwGdYLrHnmOcukpjDkcMEp4q4JIXNeACDQX2gOdoDhs MH7w6Yls0M3wVL35qmOk009JEFdBzj9Tl517ZLlZ7NtPkVZL0dvHQUSjydb6IEpT Wg0gYqC7O7ClaunoyUekQdcDZmJ1Ahc5Zsnt2Ouxl/Fo02ly+GENck3SXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUL/2wTz9Hp5vMI8Q+a5a6fRVy9MB8GA1UdIwQY MBaAFA/NZOryWUgi8/mi680Z25t/pw2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4Mzgt MWEzN2YxMDc2NTU3LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4MzgtMWEzN2YxMDc2NTU3 LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrAbAlO0 2WXYwuSkpDA4VftPBiO2l4Wn+S4+G+PS6xT70cs0fl90TkGn/NwjFYI2pQD80EoJ h2N73H2OC+8SN3H1dOJGtXU5TBFMajSbe7zbtsRGHJxL50uSCsj/UR8QMIHX7rYc MLnKmGSnKRTKppjdhppRzNd800QV17p+iIbeYjhCqwbKkuaNUGAYpKsd9igWwJ1L /P0O0lj73RqOUT1tYmEHqQJhl7jF+RHj1Umf0ao+Qg6LsIvhEvYkM36sVl2Mt+8L 06ENHcFSk2DvlE5xaS9u8TGEJUsAeIGWt0wSacIwDLX9A8ftnQmCLhg5HAW/ITwj YddiPqYmCcLvtg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:44:07 2025 by rpki-client