This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json) Hash identifier: zc8zFJ2DGh8lLcxdNhP9Tu5chEA8q6+lnGr+2pwkXJM= Subject key identifier: B0:DF:4B:AA:86:12:EA:C3:44:8E:38:4A:F3:AE:E4:27:C7:B7:1A:5E Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f Certificate serial: 019AF208F09191419EF11BBC0B90CAD8E0C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:03 +0000 Manifest this update: Sat 06 Dec 2025 05:01:03 +0000 Manifest next update: Sun 07 Dec 2025 05:01:03 +0000 Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: Ez8Nsi6e/urZr5tKwfst8+Qw1FfwgIRE+r0gEPf5wA0=) 2: cl3GADBIa5-t9wHD_fNk8JDv5PM.roa (hash: H9R6zlOL/gViduYKRIYyM+avR4L6nr/tioY61On5qcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f0:91:91:41:9e:f1:1b:bc:0b:90:ca:d8:e0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f Validity Not Before: Dec 6 05:01:03 2025 GMT Not After : Dec 7 05:01:03 2025 GMT Subject: CN=b0df4baa8612eac3448e384af3aee427c7b71a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:65:e1:20:1f:33:24:a4:d3:b0:c3:c9:f0:5b: db:d5:c6:b6:03:51:bd:31:18:2f:0f:57:9f:f8:49: 2a:3f:22:57:f4:46:ad:01:99:c8:3f:cc:cc:a6:96: 2d:59:88:95:bf:70:3c:a9:ec:dd:c7:66:c7:0d:9d: 11:0f:ad:31:42:a8:1a:19:71:2f:d3:15:c4:2b:34: 30:3b:de:9b:d6:ab:32:01:c3:f3:6f:12:65:fb:4c: d2:e4:90:82:75:52:9b:b6:62:b9:d4:25:61:b2:59: cf:93:5c:4d:61:27:41:c9:74:0d:0d:de:df:32:64: 62:ee:c9:37:43:d8:43:8c:a9:3e:db:bc:29:87:d9: ac:f5:06:df:8d:c8:48:17:39:f2:42:8a:8e:6e:72: 04:d4:f1:53:2d:64:55:e8:f9:b8:14:ce:66:36:a2: cb:15:c5:4d:bf:1e:89:e8:49:cb:10:1f:6f:a5:cd: 70:2a:24:ce:2b:56:36:ef:92:95:1b:e6:73:ca:1b: 8c:96:64:c6:6e:c0:42:0a:f6:82:d2:17:a0:7f:cd: af:c1:bd:83:84:29:a1:e3:38:31:5c:54:34:01:56: d3:54:85:3e:54:06:fc:7c:f8:5c:2b:5a:4d:c0:b1: b3:0c:1d:a4:2b:c7:ba:6f:21:b1:94:b7:4b:6a:49: 05:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DF:4B:AA:86:12:EA:C3:44:8E:38:4A:F3:AE:E4:27:C7:B7:1A:5E X509v3 Authority Key Identifier: keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:94:84:8e:f3:b4:51:4d:49:58:bd:8b:ce:73:fc:f4:b5:9d: c7:85:ea:c1:85:bb:da:91:70:90:4e:44:d8:94:9f:99:0d:32: fd:f6:b0:2e:c2:dd:4b:44:34:2c:51:b0:4c:90:55:ae:85:4d: 88:d7:86:b4:ce:71:ef:38:bd:88:a1:55:1c:f7:6c:47:94:d4: fb:a5:65:02:54:2e:ec:0b:39:8a:2f:eb:f4:27:ca:f0:79:07: be:88:fc:76:41:65:4a:24:98:c5:8e:2d:62:b1:18:98:ab:a2: c4:c0:29:32:c4:01:3b:9a:ca:d3:d1:eb:69:21:8a:c0:b3:51: 50:2a:9c:0a:83:7c:fe:50:01:bb:b7:3f:fe:9c:37:13:ec:fd: bc:f6:f9:1c:14:a0:c6:80:06:8a:1c:a9:f9:6d:8d:50:95:69: 59:8d:ac:31:52:5a:a8:6d:b5:2f:b7:f9:3b:4f:a0:27:27:35: 29:05:fa:a8:f8:9f:cd:86:7a:08:1a:5c:44:17:9e:0b:bb:df: 8f:6a:44:e4:bd:a2:d3:6e:33:4a:a3:82:1c:cd:9f:2d:f6:93: eb:99:c2:d2:25:f3:9a:c6:b8:15:b2:28:12:0f:f1:0e:0c:64: ed:86:e9:a7:3a:8c:f1:23:81:1d:ef:5a:2e:50:97:30:56:fa: 8c:7b:72:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPCRkUGe8Ru8C5DK2ODBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYjExMTU5YjcyZDQwMTVlZDg2N2I0MmI3ODQzODFlNWQ5 NTVhOGYwHhcNMjUxMjA2MDUwMTAzWhcNMjUxMjA3MDUwMTAzWjAzMTEwLwYDVQQD EyhiMGRmNGJhYTg2MTJlYWMzNDQ4ZTM4NGFmM2FlZTQyN2M3YjcxYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2XhIB8zJKTTsMPJ8Fvb1ca2A1G9 MRgvD1ef+EkqPyJX9EatAZnIP8zMppYtWYiVv3A8qezdx2bHDZ0RD60xQqgaGXEv 0xXEKzQwO96b1qsyAcPzbxJl+0zS5JCCdVKbtmK51CVhslnPk1xNYSdByXQNDd7f MmRi7sk3Q9hDjKk+27wph9ms9QbfjchIFznyQoqObnIE1PFTLWRV6Pm4FM5mNqLL FcVNvx6J6EnLEB9vpc1wKiTOK1Y275KVG+ZzyhuMlmTGbsBCCvaC0hegf82vwb2D hCmh4zgxXFQ0AVbTVIU+VAb8fPhcK1pNwLGzDB2kK8e6byGxlLdLakkF+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDfS6qGEurDRI44SvOu5CfHtxpeMB8GA1UdIwQY MBaAFNKxEVm3LUAV7YZ7QreEOB5dlVqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAt ZjViOTQ5NTljOWY3LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAtZjViOTQ5NTljOWY3 LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5SEjvO0 UU1JWL2LznP89LWdx4XqwYW72pFwkE5E2JSfmQ0y/fawLsLdS0Q0LFGwTJBVroVN iNeGtM5x7zi9iKFVHPdsR5TU+6VlAlQu7As5ii/r9CfK8HkHvoj8dkFlSiSYxY4t YrEYmKuixMApMsQBO5rK09HraSGKwLNRUCqcCoN8/lABu7c//pw3E+z9vPb5HBSg xoAGihyp+W2NUJVpWY2sMVJaqG21L7f5O0+gJyc1KQX6qPifzYZ6CBpcRBeeC7vf j2pE5L2i024zSqOCHM2fLfaT65nC0iXzmsa4FbIoEg/xDgxk7YbppzqM8SOBHe9a LlCXMFb6jHtyUw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:05 2025 by rpki-client