This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json) Hash identifier: /JNJVxA3LerhrTab035GShYULbxQukkQDAn374/kj3w= Subject key identifier: 95:DA:84:09:E8:7C:9F:97:27:DA:93:9E:78:82:40:9B:C6:2E:3A:6E Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0 Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0 Certificate serial: 019AF4D2ACE4AA99A6AB2E58CA2991271F54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft Manifest number: 0AA8 Signing time: Sat 06 Dec 2025 18:00:38 +0000 Manifest this update: Sat 06 Dec 2025 18:00:38 +0000 Manifest next update: Sun 07 Dec 2025 18:00:38 +0000 Files and hashes: 1: 9h0IDYCPr58Ccxg81AcMZ_13oWo.roa (hash: l+FTuWjUD+EZ0mXchVkunlX52jPEdy8UaVQG+ZcxDvM=) 2: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: 2Q8YNiVRFTdgs4VRi6qz8yWFfl9bGG/EeDnYYnJIjgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:ac:e4:aa:99:a6:ab:2e:58:ca:29:91:27:1f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0 Validity Not Before: Dec 6 18:00:38 2025 GMT Not After : Dec 7 18:00:38 2025 GMT Subject: CN=95da8409e87c9f9727da939e7882409bc62e3a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:36:73:37:9f:23:59:9d:a4:af:5c:f9:99: 2f:1b:06:69:c3:d9:3a:ff:99:69:3a:14:f1:51:a1: c9:65:fa:bf:03:17:1d:f1:90:51:11:55:6b:43:35: 18:18:a3:0d:a4:3d:89:e5:e1:cf:0b:e4:18:3e:f8: 48:de:09:be:76:43:34:85:03:79:b4:8a:4c:4d:bb: b7:28:af:f9:4c:de:76:68:15:67:30:1a:d0:59:3e: 71:c3:9a:a0:9b:18:d0:ba:6c:30:6c:6b:63:90:b6: fd:21:1f:cb:f8:cb:9d:b7:56:88:28:f9:54:90:3a: 13:8d:de:fc:8e:e9:6a:c3:5b:75:15:28:ac:f1:ef: 28:15:8d:58:dd:fc:71:e1:25:cd:20:fb:df:cd:ae: 2f:fd:ae:01:13:5c:17:e2:2a:42:f7:7f:35:87:e3: 59:a1:11:8d:4d:5a:e1:4a:96:19:53:4c:75:fb:8d: 0b:d8:d1:6c:da:55:aa:a4:63:08:bd:89:28:64:c9: 22:8f:c4:d7:55:70:65:ac:0f:96:52:d7:5a:0b:88: 1e:01:46:5e:e5:a0:ac:8f:eb:ab:83:f3:f0:d7:e3: 6e:aa:78:1e:57:ca:14:42:f7:90:5b:c7:3e:6b:22: 26:2a:99:e5:2a:47:ea:73:d7:b0:8c:ab:a0:38:8e: 67:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DA:84:09:E8:7C:9F:97:27:DA:93:9E:78:82:40:9B:C6:2E:3A:6E X509v3 Authority Key Identifier: keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:76:37:b1:3e:f4:25:70:a9:52:86:dd:95:8b:bc:72:35:8c: 2a:a7:f9:f8:cd:18:d6:0f:d6:97:a4:ec:ed:89:d3:0a:ca:97: b2:c5:c4:fc:5f:74:7e:f0:27:a4:39:92:ab:5f:9c:94:06:fa: aa:60:41:c5:3a:7c:a9:3e:8b:8b:17:ba:02:b5:df:e8:85:63: ba:70:d4:2d:0d:06:b9:dc:66:01:4d:ed:56:2f:3a:f0:b2:f0: 35:e6:e5:7b:cf:1b:6f:69:d3:05:df:60:37:d9:dd:44:ad:5b: 7b:d0:31:24:59:34:83:cc:64:9c:e4:fc:7a:3e:bd:36:84:6b: 4f:32:41:77:2e:81:cf:92:77:ea:c1:c0:9f:54:b2:18:3f:05: 72:61:d5:7b:e5:5e:ea:c0:88:b8:ab:d9:ec:f1:0d:bc:a4:5d: c8:7f:33:d8:fc:d4:60:64:3b:69:c2:42:63:70:f6:f5:16:3a: 82:16:6a:ed:d1:5f:ba:82:3a:48:e1:0b:69:74:69:04:5f:8b: 45:db:67:86:5b:8f:80:44:ea:b5:a8:84:a2:b4:81:b6:e4:bc: e7:d3:1d:84:5f:4c:55:7a:ed:57:13:62:cd:da:f9:b8:d9:e2: 04:f8:37:2c:96:62:32:0b:ab:8e:0d:e7:69:92:7f:50:50:e2: df:65:4a:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00qzkqpmmqy5YyimRJx9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNDUzYjQxMGQzNTg2YTYyMzdhOTUxZWVmM2IwM2Y0YzQ0 MTE4ZjAwHhcNMjUxMjA2MTgwMDM4WhcNMjUxMjA3MTgwMDM4WjAzMTEwLwYDVQQD Eyg5NWRhODQwOWU4N2M5Zjk3MjdkYTkzOWU3ODgyNDA5YmM2MmUzYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+E2czefI1mdpK9c+ZkvGwZpw9k6 /5lpOhTxUaHJZfq/Axcd8ZBREVVrQzUYGKMNpD2J5eHPC+QYPvhI3gm+dkM0hQN5 tIpMTbu3KK/5TN52aBVnMBrQWT5xw5qgmxjQumwwbGtjkLb9IR/L+Mudt1aIKPlU kDoTjd78julqw1t1FSis8e8oFY1Y3fxx4SXNIPvfza4v/a4BE1wX4ipC9381h+NZ oRGNTVrhSpYZU0x1+40L2NFs2lWqpGMIvYkoZMkij8TXVXBlrA+WUtdaC4geAUZe 5aCsj+urg/Pw1+NuqngeV8oUQveQW8c+ayImKpnlKkfqc9ewjKugOI5nFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXahAnofJ+XJ9qTnniCQJvGLjpuMB8GA1UdIwQY MBaAFAtFO0ENNYamI3qVHu87A/TEQRjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kNjNmOGUtNGIxYS00OGJmLTg3ZWIt MjlmYTQ3YjY4MDkzLzEvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kNjNmOGUtNGIxYS00OGJmLTg3ZWItMjlmYTQ3YjY4MDkz LzEvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHY3sT70 JXCpUobdlYu8cjWMKqf5+M0Y1g/Wl6Ts7YnTCsqXssXE/F90fvAnpDmSq1+clAb6 qmBBxTp8qT6Lixe6ArXf6IVjunDULQ0GudxmAU3tVi868LLwNeble88bb2nTBd9g N9ndRK1be9AxJFk0g8xknOT8ej69NoRrTzJBdy6Bz5J36sHAn1SyGD8FcmHVe+Ve 6sCIuKvZ7PENvKRdyH8z2PzUYGQ7acJCY3D29RY6ghZq7dFfuoI6SOELaXRpBF+L RdtnhluPgETqtaiEorSBtuS859MdhF9MVXrtVxNizdr5uNniBPg3LJZiMgurjg3n aZJ/UFDi32VKlw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:12:39 2025 by rpki-client