This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json) Hash identifier: CZZm37IqhBouwgOxCeCexCwOsyvVxYaaOOKE00tJCxw= Subject key identifier: 53:5A:C6:2C:21:CD:DD:F5:87:07:F3:22:49:91:8F:6B:52:37:06:6A Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f Certificate serial: 019AF1D1E76673845C7E23D48A979F3D3B04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: Uj0hSy+Tk30dXgOOlY+TVE3hOBFvhzaIb13oj0Kdt7k=) 2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e7:66:73:84:5c:7e:23:d4:8a:97:9f:3d:3b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=535ac62c21cdddf58707f32249918f6b5237066a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:44:eb:b8:01:bb:cc:3e:50:fe:f0:d0:98:10: 25:18:0b:a6:8d:c1:3d:24:60:11:f8:46:f4:bf:35: 7c:86:56:b6:33:04:42:e9:04:3f:c6:fd:2f:34:a5: 01:00:44:5e:86:3c:5f:11:a4:2d:7a:db:60:95:7b: 39:68:df:7e:b4:e2:a5:6f:fd:96:4f:ab:8f:f6:3d: c2:86:93:c4:79:38:49:7d:9f:f0:44:53:27:5a:03: f6:65:35:13:09:e9:de:64:5a:57:c5:d5:42:23:25: 29:eb:d6:80:7a:a2:cb:a3:b8:bc:55:b2:ea:09:be: ca:84:a5:b3:4b:53:33:fa:0c:93:0e:a1:6f:5e:e5: cb:a8:57:ea:e7:9c:c7:c2:c1:20:20:32:a7:f0:bf: b5:78:a3:e5:76:8c:99:89:bd:82:2d:db:3e:8f:a2: 7e:bd:93:2b:11:61:38:3c:b7:3f:a0:e8:d8:a9:22: 82:ea:51:b6:6f:37:67:ee:fb:ab:8b:f0:5d:7b:31: a2:d0:ac:d7:eb:5a:d1:36:41:c3:59:58:2b:2e:37: 6b:15:b0:2e:77:a9:87:a8:29:d7:5a:d7:e6:71:db: c6:28:be:91:24:db:fe:04:2e:e7:b5:ae:33:75:12: b9:8c:b1:55:0e:b3:9e:3e:ed:b5:24:18:5c:a8:88: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5A:C6:2C:21:CD:DD:F5:87:07:F3:22:49:91:8F:6B:52:37:06:6A X509v3 Authority Key Identifier: keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:bf:7c:97:0f:e4:97:c8:85:d4:d1:e0:77:fd:4b:48:33:c1: 38:3b:1e:52:32:a9:bf:b1:8a:4f:64:40:ef:29:e6:42:72:1f: 66:20:ea:e7:5a:b2:c3:af:07:22:07:10:01:e0:79:64:3f:94: 56:f1:34:24:34:a6:a8:7a:95:a0:d1:02:b2:69:22:87:31:36: 9a:d4:95:3e:b5:0f:5d:aa:06:9e:b5:1c:4d:c1:72:a5:de:90: 06:d2:0f:c1:e8:d9:5f:92:b6:8f:15:7b:d6:78:d3:4c:b7:66: a9:e5:a6:18:2a:e9:c9:16:15:24:ff:42:30:b2:42:6a:33:bf: 3f:76:3c:3c:06:17:cf:b1:18:00:48:1a:c7:93:8a:ec:d3:9b: 2b:06:9e:15:a8:17:f1:b1:82:f7:a8:85:b6:63:2c:90:5a:c3: 15:c2:04:86:65:55:e9:17:10:57:44:7a:8f:80:a7:36:d1:06: 8a:9d:bd:5d:1b:cb:ca:77:6b:1a:db:a5:51:58:c1:56:d9:b2: 8a:99:32:1d:c5:70:31:0f:b7:dc:2a:ba:13:48:bf:e1:63:e1: e7:85:a2:36:47:a7:e6:04:40:d7:88:a0:8d:39:b0:aa:46:f4: d3:16:88:8b:85:2f:98:ea:2d:1b:e9:9e:ff:1f:a5:ea:ee:91: 58:55:c6:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0edmc4RcfiPUipefPTsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjZjZDMwYjRjZmExOTNlMjI2YmJhOTI4MmUzNjZhMjJh MzExMGYwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD Eyg1MzVhYzYyYzIxY2RkZGY1ODcwN2YzMjI0OTkxOGY2YjUyMzcwNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ETruAG7zD5Q/vDQmBAlGAumjcE9 JGAR+Eb0vzV8hla2MwRC6QQ/xv0vNKUBAERehjxfEaQtettglXs5aN9+tOKlb/2W T6uP9j3ChpPEeThJfZ/wRFMnWgP2ZTUTCeneZFpXxdVCIyUp69aAeqLLo7i8VbLq Cb7KhKWzS1Mz+gyTDqFvXuXLqFfq55zHwsEgIDKn8L+1eKPldoyZib2CLds+j6J+ vZMrEWE4PLc/oOjYqSKC6lG2bzdn7vuri/BdezGi0KzX61rRNkHDWVgrLjdrFbAu d6mHqCnXWtfmcdvGKL6RJNv+BC7nta4zdRK5jLFVDrOePu21JBhcqIgGAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNaxiwhzd31hwfzIkmRj2tSNwZqMB8GA1UdIwQY MBaAFND2zTC0z6GT4ia7qSguNmoioxEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQt ZTI5OWU5MTAwMzllLzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQtZTI5OWU5MTAwMzll LzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWL98lw/k l8iF1NHgd/1LSDPBODseUjKpv7GKT2RA7ynmQnIfZiDq51qyw68HIgcQAeB5ZD+U VvE0JDSmqHqVoNECsmkihzE2mtSVPrUPXaoGnrUcTcFypd6QBtIPwejZX5K2jxV7 1njTTLdmqeWmGCrpyRYVJP9CMLJCajO/P3Y8PAYXz7EYAEgax5OK7NObKwaeFagX 8bGC96iFtmMskFrDFcIEhmVV6RcQV0R6j4CnNtEGip29XRvLyndrGtulUVjBVtmy ipkyHcVwMQ+33Cq6E0i/4WPh54WiNken5gRA14igjTmwqkb00xaIi4UvmOotG+me /x+l6u6RWFXGwA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:24 2025 by rpki-client