This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json) Hash identifier: WFEW5qLxiajNZBjXvCZEmfuxVLa83/II9MK2ydeNNYg= Subject key identifier: 86:F1:67:68:0F:F2:69:66:35:36:DD:D1:A4:64:5E:73:E7:C2:BD:55 Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff Certificate serial: 019AF31B5C6E4C3E38146438CCD1B4A18EA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 10:00:47 +0000 Manifest this update: Sat 06 Dec 2025 10:00:47 +0000 Manifest next update: Sun 07 Dec 2025 10:00:47 +0000 Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: /5pK1HfuBsQ+gAVxJ4tfiy9+t75D/tUZbuRRPies0Po=) 2: j-Iupp3EcWQfbMD2aDvdXh5buVM.roa (hash: vNF4TPFh0oVURLAenwqLDdq2RvvuTpEILFtX5lE+Y4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:5c:6e:4c:3e:38:14:64:38:cc:d1:b4:a1:8e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff Validity Not Before: Dec 6 10:00:47 2025 GMT Not After : Dec 7 10:00:47 2025 GMT Subject: CN=86f167680ff269663536ddd1a4645e73e7c2bd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:3f:b9:10:a2:64:5f:ed:01:24:a0:33:2c: 0d:fe:f3:69:61:54:46:0e:8d:fd:3d:8f:d6:be:2a: cb:b5:2b:ea:4b:3f:53:7f:0f:c7:57:2b:33:8d:e4: ef:8a:0a:a2:8e:bf:16:54:54:04:7f:c7:1e:5a:15: 99:95:9a:01:24:30:bd:29:9d:69:96:08:fb:2a:cd: 17:93:00:13:c5:fd:a1:20:79:f6:ae:5d:9e:b0:5e: 42:36:9e:aa:a0:fd:90:08:94:38:27:d5:32:a0:ee: 89:0a:a0:6b:45:3e:61:46:1d:e3:93:77:b7:d8:cc: c3:80:f1:a1:eb:e6:18:68:a2:e0:19:29:21:45:93: 96:ef:db:2a:9a:5f:88:db:71:8a:ad:7d:e5:dc:97: 3b:ac:82:4a:21:24:0d:bb:46:9e:84:d5:8f:36:b3: 24:e3:80:6b:49:60:8d:50:44:52:78:ba:6f:51:1d: db:ed:da:3a:35:c9:9b:16:6d:d0:58:73:b0:67:95: b1:20:ee:95:fb:69:8a:fb:66:2e:c4:52:4b:14:5f: 8f:a4:5b:3a:82:e3:df:aa:40:90:43:7c:ba:7e:1d: 46:7d:9a:68:b3:03:74:d6:05:4b:f5:e7:0e:e4:39: 16:4f:11:fa:0d:f8:76:5a:f4:1b:23:25:23:e0:a8: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F1:67:68:0F:F2:69:66:35:36:DD:D1:A4:64:5E:73:E7:C2:BD:55 X509v3 Authority Key Identifier: keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption fb:87:55:05:12:f7:f2:65:52:2d:62:89:de:8f:ce:d9:ba:10: 2e:84:00:11:63:e1:a1:f7:15:94:e5:71:29:64:1d:8b:35:00: ec:bd:0a:90:0c:7c:05:47:2e:95:ec:ff:d8:2d:ce:57:2c:76: 7d:f1:14:de:a4:af:34:e5:61:9d:4c:c1:a4:90:24:21:20:82: 49:6c:20:81:1d:b9:e7:31:44:69:86:17:3a:ba:62:0a:44:4d: 65:e5:65:9b:ae:b4:01:05:8c:7e:14:72:a8:f0:1d:6a:b9:28: 4d:63:b4:5a:ca:55:35:44:d5:13:bd:01:d1:99:b0:19:bc:8d: 8f:5f:70:cb:0d:8d:ed:7b:a0:f7:2c:b5:b3:e9:13:18:e9:ee: cc:8a:ba:7b:0c:a0:91:79:51:77:6c:e5:d9:87:d8:68:3a:c2: 08:d1:03:dc:95:97:ea:d6:4d:2a:cc:e4:bc:d9:b9:ed:17:78: 8c:1e:ef:f1:db:2e:2e:11:4d:68:a4:c7:56:ac:1a:7f:eb:01: 59:14:2d:66:97:35:32:dd:29:0b:eb:bb:d1:42:5d:05:6b:33: 21:46:73:8d:ae:4f:a0:89:f0:6e:57:41:85:b9:70:90:cc:07: ca:a0:99:7c:c2:d8:20:9b:b4:ee:bd:42:2a:b6:41:7e:e4:7a: 54:d1:52:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1xuTD44FGQ4zNG0oY6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjE3ZDE1ZGI1OGZlMzA2MmQxYmFkYmUwNGQzMGMxOTQ5 ZGQ1ZmYwHhcNMjUxMjA2MTAwMDQ3WhcNMjUxMjA3MTAwMDQ3WjAzMTEwLwYDVQQD Eyg4NmYxNjc2ODBmZjI2OTY2MzUzNmRkZDFhNDY0NWU3M2U3YzJiZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvk/uRCiZF/tASSgMywN/vNpYVRG Do39PY/WvirLtSvqSz9Tfw/HVyszjeTvigqijr8WVFQEf8ceWhWZlZoBJDC9KZ1p lgj7Ks0XkwATxf2hIHn2rl2esF5CNp6qoP2QCJQ4J9UyoO6JCqBrRT5hRh3jk3e3 2MzDgPGh6+YYaKLgGSkhRZOW79sqml+I23GKrX3l3Jc7rIJKISQNu0aehNWPNrMk 44BrSWCNUERSeLpvUR3b7do6NcmbFm3QWHOwZ5WxIO6V+2mK+2YuxFJLFF+PpFs6 guPfqkCQQ3y6fh1GfZposwN01gVL9ecO5DkWTxH6Dfh2WvQbIyUj4KjwGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbxZ2gP8mlmNTbd0aRkXnPnwr1VMB8GA1UdIwQY MBaAFNJhfRXbWP4wYtG62+BNMMGUndX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3Mjct NTdlMDhmNjFmMmVjLzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3MjctNTdlMDhmNjFmMmVj LzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA+4dVBRL3 8mVSLWKJ3o/O2boQLoQAEWPhofcVlOVxKWQdizUA7L0KkAx8BUculez/2C3OVyx2 ffEU3qSvNOVhnUzBpJAkISCCSWwggR255zFEaYYXOrpiCkRNZeVlm660AQWMfhRy qPAdarkoTWO0WspVNUTVE70B0ZmwGbyNj19wyw2N7Xug9yy1s+kTGOnuzIq6ewyg kXlRd2zl2YfYaDrCCNED3JWX6tZNKszkvNm57Rd4jB7v8dsuLhFNaKTHVqwaf+sB WRQtZpc1Mt0pC+u70UJdBWszIUZzja5PoInwbldBhblwkMwHyqCZfMLYIJu07r1C KrZBfuR6VNFSsw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:17 2025 by rpki-client