This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft File: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json) Hash identifier: hKBc/PwJXkiyCwTdHCmv4pbl6xxfI5i2w6ux7m+84a0= Subject key identifier: 62:65:D8:DE:07:EC:31:AA:41:A7:F1:58:ED:A2:BD:A2:BE:92:89:FF Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d Certificate serial: 019AF2E446116C52D1A94193EF9CFA2CED12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft Manifest number: 0ACD Signing time: Sat 06 Dec 2025 09:00:37 +0000 Manifest this update: Sat 06 Dec 2025 09:00:37 +0000 Manifest next update: Sun 07 Dec 2025 09:00:37 +0000 Files and hashes: 1: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: qcQk12pHZE9ODoJguOW9y4Sj7jnUawK2WldqG16zkKM=) 2: sKN4W1XQgBRPMLqN0BmAh5exg2s.roa (hash: IHu6vZ3N6G+PYxes9sQszliF8LVxezHAOlnn1uRbGYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:46:11:6c:52:d1:a9:41:93:ef:9c:fa:2c:ed:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d Validity Not Before: Dec 6 09:00:37 2025 GMT Not After : Dec 7 09:00:37 2025 GMT Subject: CN=6265d8de07ec31aa41a7f158eda2bda2be9289ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:a1:bb:42:7f:a8:3d:bb:25:0c:11:9c:c1: cb:a6:ce:d4:9b:89:02:3e:46:92:2b:75:6f:9c:57: ca:30:fb:79:72:5a:c1:b4:2d:50:97:d7:1b:c5:8c: 07:ec:44:73:c3:68:e2:47:fe:e5:74:66:7d:a1:6b: 73:00:27:29:54:64:45:81:c5:d4:1a:a3:93:e4:c9: 62:ce:03:21:f0:14:16:77:13:20:3f:61:9c:17:42: d1:6b:da:3f:52:53:1b:87:4a:84:bc:b9:fe:ea:71: be:a4:01:ac:f1:07:c6:88:08:cc:3c:19:4a:ef:62: ff:dc:80:60:17:9f:dc:1a:fb:eb:a6:24:61:4c:15: a5:8e:69:61:3e:d5:01:b0:21:7e:05:9a:71:92:98: 59:37:5f:28:60:1e:43:32:2e:74:c3:b2:e0:69:11: 85:48:3c:98:5c:2e:64:4f:3a:bf:d7:a8:32:22:5d: 86:d8:4f:33:d4:d4:a6:ee:67:2b:fa:24:8e:e5:f5: f4:82:5e:ee:ad:0a:64:91:00:08:7e:d6:0e:fa:12: 44:12:12:49:a7:b0:86:fc:18:bc:cc:cb:76:73:04: 74:eb:a6:27:b2:5a:4d:6d:cc:de:55:5e:03:b1:a1: 0f:8f:90:43:c9:d8:b6:91:2b:68:72:fe:15:70:cc: 93:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:65:D8:DE:07:EC:31:AA:41:A7:F1:58:ED:A2:BD:A2:BE:92:89:FF X509v3 Authority Key Identifier: keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:a3:3d:79:25:b1:73:45:bb:3d:64:b9:f6:ce:c0:2d:97:89: f9:31:a1:df:a3:6b:4d:be:83:b2:2c:2a:cb:d2:a4:8c:2d:11: b0:01:36:71:f7:ae:60:19:e0:47:a5:7d:a4:c2:1d:43:1c:8c: b3:aa:da:ae:40:f0:4c:6a:c0:bc:67:54:ff:f9:ad:09:7c:e9: e0:d6:cb:1c:86:86:7e:ce:3a:3f:33:60:72:f5:a2:a5:da:ed: 19:15:46:2f:c9:b0:82:f0:f3:f1:58:83:88:b7:1c:d0:37:ca: 32:11:97:30:cd:f0:75:51:c6:af:87:f9:29:d8:2d:01:68:a2: e2:5c:3d:eb:a1:32:be:83:93:5b:6c:0b:8b:49:cf:13:70:b0: 3b:04:61:93:52:df:66:18:2e:ad:59:6f:6a:41:88:3c:d4:fe: 09:89:18:2f:d3:e5:7e:05:c6:fd:aa:95:eb:f9:71:6d:f4:ce: 4d:ef:93:85:d0:09:8d:60:e6:9c:8a:b9:dc:e4:04:42:c2:c4: b1:2d:30:0e:5a:e0:cc:28:ed:1e:cc:7d:2d:9d:cf:bf:f2:31: 43:ee:e7:36:28:e9:2e:54:58:7d:00:19:cf:72:5a:a0:15:8d: 2c:6e:ad:98:22:58:f5:c9:2b:2a:94:41:77:30:c8:d2:6b:d4: 02:78:c1:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EYRbFLRqUGT75z6LO0SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMjU2M2VkOTk2NGU0MjY4MWExYzVkMjk1YjBjNjE0ODYw NmU3M2QwHhcNMjUxMjA2MDkwMDM3WhcNMjUxMjA3MDkwMDM3WjAzMTEwLwYDVQQD Eyg2MjY1ZDhkZTA3ZWMzMWFhNDFhN2YxNThlZGEyYmRhMmJlOTI4OWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCahu0J/qD27JQwRnMHLps7Um4kC PkaSK3VvnFfKMPt5clrBtC1Ql9cbxYwH7ERzw2jiR/7ldGZ9oWtzACcpVGRFgcXU GqOT5MlizgMh8BQWdxMgP2GcF0LRa9o/UlMbh0qEvLn+6nG+pAGs8QfGiAjMPBlK 72L/3IBgF5/cGvvrpiRhTBWljmlhPtUBsCF+BZpxkphZN18oYB5DMi50w7LgaRGF SDyYXC5kTzq/16gyIl2G2E8z1NSm7mcr+iSO5fX0gl7urQpkkQAIftYO+hJEEhJJ p7CG/Bi8zMt2cwR066YnslpNbczeVV4DsaEPj5BDydi2kStocv4VcMyTOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJl2N4H7DGqQafxWO2ivaK+kon/MB8GA1UdIwQY MBaAFNMlY+2ZZOQmgaHF0pWwxhSGBuc9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHlWajdabGs1Q2FCb2NYU2xiREdGSVlHNXowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82YmY1ZWQtNmZlNi00NTYyLWI4NTMt OWE0ZWMxMDYwN2M1LzEvMHlWajdabGs1Q2FCb2NYU2xiREdGSVlHNXowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82YmY1ZWQtNmZlNi00NTYyLWI4NTMtOWE0ZWMxMDYwN2M1 LzEvMHlWajdabGs1Q2FCb2NYU2xiREdGSVlHNXowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA06M9eSWx c0W7PWS59s7ALZeJ+TGh36NrTb6Dsiwqy9KkjC0RsAE2cfeuYBngR6V9pMIdQxyM s6rarkDwTGrAvGdU//mtCXzp4NbLHIaGfs46PzNgcvWipdrtGRVGL8mwgvDz8ViD iLcc0DfKMhGXMM3wdVHGr4f5KdgtAWii4lw966EyvoOTW2wLi0nPE3CwOwRhk1Lf ZhgurVlvakGIPNT+CYkYL9PlfgXG/aqV6/lxbfTOTe+ThdAJjWDmnIq53OQEQsLE sS0wDlrgzCjtHsx9LZ3Pv/IxQ+7nNijpLlRYfQAZz3JaoBWNLG6tmCJY9ckrKpRB dzDI0mvUAnjBxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:55:34 2025 by rpki-client