This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json) Hash identifier: vJPhm49cR8SQef/O7gPq2aQcP6hqppv2zkN/R33/8OQ= Subject key identifier: 0E:5A:D7:DE:78:DE:49:90:36:0A:89:73:44:81:8E:AD:64:1A:96:BD Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c Certificate serial: 019AF23F917616B0A05E1326F5D5E845719A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft Manifest number: 0EDD Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: 1oj0phuDbCWuR+ijSlOU+qWoml8/8M4oecRM4uIfZDs=) 2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:91:76:16:b0:a0:5e:13:26:f5:d5:e8:45:71:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=0e5ad7de78de4990360a897344818ead641a96bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:19:a7:50:0d:7e:2f:1a:88:28:86:aa:08:d2: c7:5e:06:65:e2:9d:d1:48:c7:21:a5:9a:7d:90:78: 6c:13:88:8e:1c:1e:16:03:c1:2a:a1:a4:00:aa:18: 00:d4:7a:7a:fb:19:c6:0e:ba:ec:d7:11:95:8c:6d: 49:fb:32:06:f4:72:cc:00:27:a1:3e:98:c9:04:ac: 07:f0:c6:97:16:33:2d:94:26:95:5f:36:ed:f4:71: ba:45:a7:82:15:ac:47:80:7c:89:1b:a0:a7:4e:0f: 66:92:fb:eb:e3:84:90:c4:5b:36:5e:70:f0:01:2e: e8:fd:77:d9:b3:cc:75:2e:cf:04:46:dc:6a:14:d7: 07:44:1e:bc:aa:1b:de:e4:a4:e5:83:16:ca:a1:3e: 99:31:08:0f:dc:13:78:46:8b:a0:09:8f:3c:90:55: 11:af:07:2a:ca:4f:56:e2:6c:24:65:1f:86:75:b9: 7f:23:0c:d4:bb:08:a2:fc:b5:c1:cd:40:83:fc:fd: 9e:77:0a:9b:41:50:19:85:54:92:90:dc:4f:3a:69: 05:6a:3d:d6:0e:28:be:c7:78:c7:c6:dc:f7:bb:63: ca:a2:b3:bc:fb:13:4d:84:66:5d:c1:8c:27:e2:05: f6:ad:80:54:e3:55:3c:bd:86:b6:df:99:04:af:5c: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5A:D7:DE:78:DE:49:90:36:0A:89:73:44:81:8E:AD:64:1A:96:BD X509v3 Authority Key Identifier: keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4e:52:da:c0:bd:7c:15:84:ab:1a:50:e6:61:ef:c7:69:10: 12:27:b0:65:d5:b7:99:21:05:e3:f1:19:53:00:3c:3e:d3:3b: 58:e2:5b:10:04:69:3c:91:01:96:e2:a6:04:7b:5a:1e:a0:a5: ec:a1:14:e0:a6:ee:e0:d0:57:11:08:2c:db:11:69:32:6e:32: 58:43:1b:32:b2:00:54:9b:a4:9e:8e:35:30:c0:db:48:7c:9d: ec:33:b6:95:25:31:5f:7f:e4:4d:be:92:f1:3e:29:d2:24:f1: c3:cc:fe:ec:12:fb:e5:e2:b8:53:64:96:ac:31:95:63:5a:90: e4:49:d7:5f:64:1e:4c:92:a5:3b:a0:8f:8d:52:d8:67:82:e2: 59:11:13:08:e8:99:2e:21:e4:71:c2:42:6d:f9:ab:82:6f:c6: 9a:7b:77:c3:3f:94:7a:68:9b:21:f9:a0:02:0f:12:71:fd:d6: be:d5:3e:55:fe:62:c7:ee:d5:81:6e:60:90:80:a1:dc:0d:84: 58:8f:76:77:5d:a0:e3:82:ed:3d:24:34:79:5c:97:78:d7:ed: 4e:cf:33:7f:3b:e5:77:8c:07:75:4b:0e:8a:85:be:32:70:bf: da:14:ac:ff:23:a1:6e:b7:fb:dd:82:c9:ce:f3:dd:c1:ed:9d: 40:cf:1b:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5F2FrCgXhMm9dXoRXGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMjE1YmZjNDg4NzZjMzY1MTgzNTZlZmQ2ZTI4MDI1NWEx ZGVlM2MwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EygwZTVhZDdkZTc4ZGU0OTkwMzYwYTg5NzM0NDgxOGVhZDY0MWE5NmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhmnUA1+LxqIKIaqCNLHXgZl4p3R SMchpZp9kHhsE4iOHB4WA8EqoaQAqhgA1Hp6+xnGDrrs1xGVjG1J+zIG9HLMACeh PpjJBKwH8MaXFjMtlCaVXzbt9HG6RaeCFaxHgHyJG6CnTg9mkvvr44SQxFs2XnDw AS7o/XfZs8x1Ls8ERtxqFNcHRB68qhve5KTlgxbKoT6ZMQgP3BN4RougCY88kFUR rwcqyk9W4mwkZR+Gdbl/IwzUuwii/LXBzUCD/P2edwqbQVAZhVSSkNxPOmkFaj3W Dii+x3jHxtz3u2PKorO8+xNNhGZdwYwn4gX2rYBU41U8vYa235kEr1wYaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5a19543kmQNgqJc0SBjq1kGpa9MB8GA1UdIwQY MBaAFNEhW/xIh2w2UYNW79bigCVaHe48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQt MDliZjQwNzFhZWEyLzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQtMDliZjQwNzFhZWEy LzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfU5S2sC9 fBWEqxpQ5mHvx2kQEiewZdW3mSEF4/EZUwA8PtM7WOJbEARpPJEBluKmBHtaHqCl 7KEU4Kbu4NBXEQgs2xFpMm4yWEMbMrIAVJukno41MMDbSHyd7DO2lSUxX3/kTb6S 8T4p0iTxw8z+7BL75eK4U2SWrDGVY1qQ5EnXX2QeTJKlO6CPjVLYZ4LiWRETCOiZ LiHkccJCbfmrgm/Gmnt3wz+UemibIfmgAg8Scf3WvtU+Vf5ix+7VgW5gkICh3A2E WI92d12g44LtPSQ0eVyXeNftTs8zfzvld4wHdUsOioW+MnC/2hSs/yOhbrf73YLJ zvPdwe2dQM8bIA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:46 2025 by rpki-client