This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft File: 0sAfMj0dJYn5qbRi_nDzawn6xjI.mft (raw, json) Hash identifier: PGkZfZpg5t0vf7WEuLDbq9NyMKO4to1tQpVUW7gZc6E= Subject key identifier: 27:61:0E:F6:A2:57:65:B9:93:CF:ED:BA:47:F3:88:D8:AF:F0:5F:80 Authority key identifier: D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32 Certificate issuer: /CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632 Certificate serial: 019AF42E3457880064804FAE49EB11C974F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft Manifest number: 078F Signing time: Sat 06 Dec 2025 15:01:00 +0000 Manifest this update: Sat 06 Dec 2025 15:01:00 +0000 Manifest next update: Sun 07 Dec 2025 15:01:00 +0000 Files and hashes: 1: 0sAfMj0dJYn5qbRi_nDzawn6xjI.crl (hash: hMJ1yErMy66fG0EWq/g6WZmV5X+YFatF4ZgDPsuBtzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:34:57:88:00:64:80:4f:ae:49:eb:11:c9:74:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632 Validity Not Before: Dec 6 15:01:00 2025 GMT Not After : Dec 7 15:01:00 2025 GMT Subject: CN=27610ef6a25765b993cfedba47f388d8aff05f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e4:ce:e2:18:ac:7e:fa:cd:9d:31:fd:7a:2c: cc:80:06:0f:3f:b0:99:fb:9c:d9:72:72:64:35:0e: ef:50:3b:51:9a:5e:94:e3:d3:de:6a:a4:a2:05:c8: a8:0e:8a:e6:f7:49:2f:ff:d9:28:ff:eb:cf:2d:80: 7b:83:13:b6:f7:f8:80:60:9d:bd:62:0e:61:84:df: 14:79:e4:7c:c7:16:88:a6:36:a0:cb:e0:0c:56:72: a3:e8:81:04:63:a1:57:a1:ac:ef:8b:76:2b:01:8f: 7d:8b:17:06:cc:25:cf:94:47:33:54:76:a5:fc:db: 27:4b:ce:69:0a:7a:62:80:dc:c6:26:7d:3d:f3:b7: c7:70:d1:6f:ba:e4:52:52:3c:99:e1:8b:ad:ea:5a: 4b:7a:ce:8c:a4:e7:e0:10:cd:b3:17:c7:a3:c8:89: 81:84:96:d9:00:0a:82:d2:12:a9:b4:67:ec:0c:e2: 33:86:74:93:3a:25:b8:fc:24:20:39:6a:46:b0:b2: d1:2f:e4:e9:bd:31:7e:95:2f:ea:6a:3c:f9:87:f6: 84:5f:b3:7f:92:6f:fa:35:6b:35:f6:7e:4e:97:d5: c0:1f:ac:ec:fc:22:8e:74:32:a2:af:ad:4c:5d:40: 4b:ef:e3:c1:10:21:68:8c:b4:6e:4f:6d:db:62:84: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:61:0E:F6:A2:57:65:B9:93:CF:ED:BA:47:F3:88:D8:AF:F0:5F:80 X509v3 Authority Key Identifier: keyid:D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3e:63:53:43:2a:96:95:57:bc:9d:ba:64:f2:f2:98:18:08: 41:5e:e4:b7:6f:c3:93:00:41:a3:65:82:86:a6:8f:d2:5f:a8: 07:8e:ee:d4:35:d0:b4:2e:d8:78:01:9a:28:2f:69:aa:93:71: f3:1b:09:3e:ef:c8:30:12:27:fe:1e:d1:02:0b:d5:1a:40:fe: 33:e1:6a:bf:a0:1e:85:c8:c9:06:8b:c9:cb:7e:ca:67:a3:d2: 05:fe:bf:79:d3:ad:ca:85:72:8a:b1:83:12:cc:8e:7a:02:b4: bf:0e:68:c1:ed:bd:34:28:f4:b0:5e:65:12:92:5e:c2:6d:83: 7f:89:b1:ce:12:53:a7:0d:05:14:7a:d6:2b:5a:bf:d4:2c:74: c1:2b:ba:52:6d:57:d0:02:c0:9a:18:94:66:66:be:8e:2f:25: 6d:66:64:60:71:b6:05:81:7b:88:3a:bf:ba:52:91:8d:ef:1c: 89:7f:06:7e:db:1b:a9:d6:4e:ae:1d:ae:18:88:70:6d:7b:eb: 3b:9c:2a:b7:69:9f:11:96:d9:30:e2:78:21:2c:49:ca:74:37: 87:50:0e:13:ad:2f:e3:ec:2f:84:46:ce:4f:5c:6e:64:7c:b7: fd:6b:e9:07:e9:96:d5:28:f3:5f:37:03:f8:ce:07:33:5f:90: 07:02:84:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LjRXiABkgE+uSesRyXTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzAxZjMyM2QxZDI1ODlmOWE5YjQ2MmZlNzBmMzZiMDlm YWM2MzIwHhcNMjUxMjA2MTUwMTAwWhcNMjUxMjA3MTUwMTAwWjAzMTEwLwYDVQQD EygyNzYxMGVmNmEyNTc2NWI5OTNjZmVkYmE0N2YzODhkOGFmZjA1ZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OTO4hisfvrNnTH9eizMgAYPP7CZ +5zZcnJkNQ7vUDtRml6U49PeaqSiBcioDorm90kv/9ko/+vPLYB7gxO29/iAYJ29 Yg5hhN8UeeR8xxaIpjagy+AMVnKj6IEEY6FXoazvi3YrAY99ixcGzCXPlEczVHal /NsnS85pCnpigNzGJn0987fHcNFvuuRSUjyZ4Yut6lpLes6MpOfgEM2zF8ejyImB hJbZAAqC0hKptGfsDOIzhnSTOiW4/CQgOWpGsLLRL+TpvTF+lS/qajz5h/aEX7N/ km/6NWs19n5Ol9XAH6zs/CKOdDKir61MXUBL7+PBECFojLRuT23bYoR/nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdhDvaiV2W5k8/tukfziNiv8F+AMB8GA1UdIwQY MBaAFNLAHzI9HSWJ+am0Yv5w82sJ+sYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNBZk1qMGRKWW41cWJSaV9uRHphd242eGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80Yzg0Y2QtMGJmMS00M2EzLWI0NDIt NjViZDQyMjRjZGI5LzEvMHNBZk1qMGRKWW41cWJSaV9uRHphd242eGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS80Yzg0Y2QtMGJmMS00M2EzLWI0NDItNjViZDQyMjRjZGI5 LzEvMHNBZk1qMGRKWW41cWJSaV9uRHphd242eGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAej5jU0Mq lpVXvJ26ZPLymBgIQV7kt2/DkwBBo2WChqaP0l+oB47u1DXQtC7YeAGaKC9pqpNx 8xsJPu/IMBIn/h7RAgvVGkD+M+Fqv6AehcjJBovJy37KZ6PSBf6/edOtyoVyirGD EsyOegK0vw5owe29NCj0sF5lEpJewm2Df4mxzhJTpw0FFHrWK1q/1Cx0wSu6Um1X 0ALAmhiUZma+ji8lbWZkYHG2BYF7iDq/ulKRje8ciX8GftsbqdZOrh2uGIhwbXvr O5wqt2mfEZbZMOJ4ISxJynQ3h1AOE60v4+wvhEbOT1xuZHy3/WvpB+mW1SjzXzcD +M4HM1+QBwKEOw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:59 2025 by rpki-client