This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json) Hash identifier: 0FeyaYa9e+sVi68QuAzFxu3QZE5XijIuqL1X9azRbnE= Subject key identifier: BB:D2:8C:CE:38:F7:22:85:2B:81:98:8B:D1:E6:3E:78:9B:43:AA:96 Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c Certificate serial: 019AF19B66983151B3F2E3C1C1D57B3B1396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:24 +0000 Manifest this update: Sat 06 Dec 2025 03:01:24 +0000 Manifest next update: Sun 07 Dec 2025 03:01:24 +0000 Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: CeNiQ1s+8ov6AZGLlUzJMvsGkMODyRZVTymUwaCFxrA=) 2: irNcQLmJh11TGBELw5uQP7kOVJE.roa (hash: R7pIQc58X7S0CJk6seUtKX1n/5bjuhfl7ShC4vfuTCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:66:98:31:51:b3:f2:e3:c1:c1:d5:7b:3b:13:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c Validity Not Before: Dec 6 03:01:24 2025 GMT Not After : Dec 7 03:01:24 2025 GMT Subject: CN=bbd28cce38f722852b81988bd1e63e789b43aa96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0b:09:95:13:9c:a7:b3:68:cb:74:40:9d:43: 23:e2:e0:ae:2c:a8:2a:e1:67:81:1f:c6:48:df:77: 42:23:e0:55:15:de:55:dd:10:1f:a9:11:66:8d:75: 67:c1:8e:2f:a2:36:5a:92:49:f6:5f:b7:63:51:63: 6f:0b:0f:f0:a0:1d:f5:5e:13:11:7f:16:8e:de:b9: c7:01:d2:94:fe:42:e7:e5:c8:ea:6c:0d:19:ad:37: 8f:74:e7:55:f5:c1:34:05:a1:aa:00:08:a7:41:66: 69:0f:c8:4d:04:6e:51:2e:ff:c7:9b:4e:4e:44:d7: f1:55:57:dd:d6:5e:84:4c:56:a5:b0:b7:96:3e:0b: 4b:67:43:aa:8b:6a:cd:a8:51:dd:db:a2:64:9c:31: 57:cb:59:ac:e4:51:c3:4e:9d:ab:61:16:eb:bf:61: 7b:96:5c:01:c9:41:ce:89:c2:a7:cc:9f:4f:47:a5: b6:0b:54:c6:ab:71:12:f2:a7:dc:90:29:a0:a6:92: a2:ca:28:b0:cd:26:c2:c1:86:29:57:84:d1:0d:27: e3:97:ac:57:88:f2:1b:b6:be:4e:75:be:06:7d:80: 38:c8:4e:cd:e8:b4:27:b0:a7:6d:e7:41:a3:2c:87: 26:7b:4c:95:38:88:b5:c0:ca:53:a9:5a:45:ed:19: ee:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D2:8C:CE:38:F7:22:85:2B:81:98:8B:D1:E6:3E:78:9B:43:AA:96 X509v3 Authority Key Identifier: keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:26:38:83:48:ca:f2:ab:f3:b5:be:b7:3d:da:aa:1d:bb:b4: e0:98:61:fb:a2:e2:22:50:82:4d:1c:44:5a:df:70:66:47:aa: 74:85:83:39:bb:f0:e6:e3:f3:51:6f:09:55:cb:6f:5b:c9:c0: b0:56:d1:cd:c5:13:f7:4d:88:9b:7d:c4:c1:63:fd:5c:c6:62: f5:bb:a3:07:70:e6:67:25:95:f2:b7:01:9d:e1:5a:53:ac:95: 68:65:16:3a:c7:85:f1:9d:40:e3:43:bb:01:93:3f:83:03:36: 4c:5e:46:e1:86:a1:93:f2:80:5e:fe:df:e2:42:07:bc:57:6f: 2a:3c:17:d9:71:59:7a:76:ef:09:5a:81:00:5a:f3:1a:25:8c: e7:52:90:05:75:25:a0:b1:31:52:a4:56:bc:74:7c:1d:78:ac: 3b:5a:3a:14:d4:15:e1:1b:ae:b9:ee:f1:42:0c:d5:b2:e2:07: 6f:54:d6:1c:e8:c4:d0:cc:4d:5a:4b:9e:27:61:ba:8f:d2:c4: 51:68:47:01:6e:b5:0f:b9:4a:9e:6a:a8:1b:62:a5:50:3f:1d: 05:7e:71:ea:4e:66:4e:31:05:32:cf:b2:e0:98:f7:a3:0c:8a: e6:b2:84:fe:04:2e:d5:91:b3:89:9c:af:56:76:d9:6e:1d:9d: 50:17:6e:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2aYMVGz8uPBwdV7OxOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYmI2NmZiZGVhYWZmZjQzYjk2NTBiMWY2Y2JlNGYyOWVk YWY1OGMwHhcNMjUxMjA2MDMwMTI0WhcNMjUxMjA3MDMwMTI0WjAzMTEwLwYDVQQD EyhiYmQyOGNjZTM4ZjcyMjg1MmI4MTk4OGJkMWU2M2U3ODliNDNhYTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QsJlROcp7Noy3RAnUMj4uCuLKgq 4WeBH8ZI33dCI+BVFd5V3RAfqRFmjXVnwY4vojZakkn2X7djUWNvCw/woB31XhMR fxaO3rnHAdKU/kLn5cjqbA0ZrTePdOdV9cE0BaGqAAinQWZpD8hNBG5RLv/Hm05O RNfxVVfd1l6ETFalsLeWPgtLZ0Oqi2rNqFHd26JknDFXy1ms5FHDTp2rYRbrv2F7 llwByUHOicKnzJ9PR6W2C1TGq3ES8qfckCmgppKiyiiwzSbCwYYpV4TRDSfjl6xX iPIbtr5Odb4GfYA4yE7N6LQnsKdt50GjLIcme0yVOIi1wMpTqVpF7RnuCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvSjM449yKFK4GYi9HmPnibQ6qWMB8GA1UdIwQY MBaAFNK7Zvveqv/0O5ZQsfbL5PKe2vWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lOWNiZjMtM2E1ZC00Yjc0LTg2ZDMt Y2IwZjI0NTVjYmQ2LzEvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lOWNiZjMtM2E1ZC00Yjc0LTg2ZDMtY2IwZjI0NTVjYmQ2 LzEvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCY4g0jK 8qvztb63PdqqHbu04Jhh+6LiIlCCTRxEWt9wZkeqdIWDObvw5uPzUW8JVctvW8nA sFbRzcUT902Im33EwWP9XMZi9bujB3DmZyWV8rcBneFaU6yVaGUWOseF8Z1A40O7 AZM/gwM2TF5G4Yahk/KAXv7f4kIHvFdvKjwX2XFZenbvCVqBAFrzGiWM51KQBXUl oLExUqRWvHR8HXisO1o6FNQV4Ruuue7xQgzVsuIHb1TWHOjE0MxNWkueJ2G6j9LE UWhHAW61D7lKnmqoG2KlUD8dBX5x6k5mTjEFMs+y4Jj3owyK5rKE/gQu1ZGziZyv VnbZbh2dUBdu1w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:43 2025 by rpki-client