This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json) Hash identifier: RAHGCJTLO/2zgHaF4tUChcXNnFnw64dVzjKKvf/CqRY= Subject key identifier: A9:42:D8:F3:3F:78:80:83:7E:B8:31:8C:E2:EF:2D:AD:AF:9B:37:65 Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f Certificate serial: 019B3C7EE6D779B829A395C9343A1FF7C20A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft Manifest number: 06A0 Signing time: Sat 20 Dec 2025 16:01:48 +0000 Manifest this update: Sat 20 Dec 2025 16:01:48 +0000 Manifest next update: Sun 21 Dec 2025 16:01:48 +0000 Files and hashes: 1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=) 2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: 2mAicaq+g4vo5jeUvkK26k5f1q5YrgFrh/1dbCwkTiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:e6:d7:79:b8:29:a3:95:c9:34:3a:1f:f7:c2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f Validity Not Before: Dec 20 16:01:48 2025 GMT Not After : Dec 21 16:01:48 2025 GMT Subject: CN=a942d8f33f7880837eb8318ce2ef2dadaf9b3765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:a5:08:b5:1e:e1:60:c3:61:74:4c:85:21: 39:e9:a8:06:ac:ca:0d:fc:ce:a3:80:29:e9:64:0c: 68:c2:61:88:1b:04:57:74:35:04:57:3a:6c:43:46: 94:76:c9:b0:43:a5:90:ee:af:07:86:66:26:b1:14: 7d:9d:9c:eb:cc:fc:9b:69:39:2e:35:f9:d1:17:26: 25:45:18:5d:02:52:60:50:dc:5a:9f:f7:23:08:ab: be:ce:e8:a4:bb:35:a8:6b:2d:3e:d7:e5:26:06:82: 6d:7a:88:2c:c4:03:e7:e6:2e:62:0e:96:5d:78:77: 05:ac:84:32:e2:15:03:a6:ad:c3:fb:7b:62:89:f8: 30:44:fc:87:ba:8b:47:bc:e4:b3:c3:2e:80:8a:0d: 15:19:31:4a:ad:24:c9:34:c2:83:2f:d9:f9:16:27: 71:fa:17:a4:29:1f:9d:cf:a1:15:9d:d9:58:e1:32: 3a:e1:66:41:43:67:44:3c:1b:fd:eb:f8:e2:0b:90: a0:5b:c3:04:7b:7c:3d:1a:be:0c:80:43:ef:dd:c8: 12:90:73:28:7a:86:13:62:95:b9:42:b4:17:b9:24: c3:a2:c9:ed:80:12:e4:09:f9:09:e9:4a:f0:31:99: 37:99:97:61:a4:4a:fa:b6:1e:63:75:0b:49:d6:7a: c4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:42:D8:F3:3F:78:80:83:7E:B8:31:8C:E2:EF:2D:AD:AF:9B:37:65 X509v3 Authority Key Identifier: keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fe:55:43:5d:e0:4b:ed:32:9d:bf:25:a4:1a:da:62:24:a4: ab:ee:ce:6c:e9:fe:81:ff:de:f0:55:2d:77:4a:3f:d1:09:a3: 7e:f2:9b:e1:f8:7d:5d:06:5c:82:14:3b:f6:20:50:1e:79:cb: 87:fa:eb:13:78:21:c1:ef:8c:a4:2a:b7:b5:de:25:85:90:2d: bf:57:ef:52:4b:37:7f:ee:40:94:04:48:46:03:fc:b5:8e:97: f8:24:ba:64:7d:e8:7d:4d:8e:01:4d:ec:c8:c4:d3:51:a9:ea: 0e:65:94:42:df:cf:94:db:80:e4:58:e4:0e:d0:fb:cd:0a:65: 62:28:d9:cd:49:8a:f6:2c:56:4b:92:dc:4c:c8:9b:96:46:f5: 2e:f4:da:b8:4f:00:45:51:bb:55:d4:88:5b:50:63:2f:5f:a2: 61:04:21:68:2e:3e:a8:06:ae:82:4c:83:a7:f0:18:e6:7c:2e: 70:fc:90:3c:41:ec:17:fd:03:e9:20:51:0a:65:fb:db:cc:41: e0:b3:58:30:63:a6:a9:b7:3b:a6:a1:0f:f7:84:e2:ed:31:20: da:df:91:c5:b3:71:a7:cf:5a:9a:17:22:cf:50:be:8f:e6:97: b3:11:a7:a8:cc:7c:fd:b7:da:b3:ab:4b:09:8d:d2:f8:88:30: 1b:78:ed:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fubXebgpo5XJNDof98IKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy NTI3OGYwHhcNMjUxMjIwMTYwMTQ4WhcNMjUxMjIxMTYwMTQ4WjAzMTEwLwYDVQQD EyhhOTQyZDhmMzNmNzg4MDgzN2ViODMxOGNlMmVmMmRhZGFmOWIzNzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmWlCLUe4WDDYXRMhSE56agGrMoN /M6jgCnpZAxowmGIGwRXdDUEVzpsQ0aUdsmwQ6WQ7q8HhmYmsRR9nZzrzPybaTku NfnRFyYlRRhdAlJgUNxan/cjCKu+zuikuzWoay0+1+UmBoJteogsxAPn5i5iDpZd eHcFrIQy4hUDpq3D+3tiifgwRPyHuotHvOSzwy6Aig0VGTFKrSTJNMKDL9n5Fidx +hekKR+dz6EVndlY4TI64WZBQ2dEPBv96/jiC5CgW8MEe3w9Gr4MgEPv3cgSkHMo eoYTYpW5QrQXuSTDosntgBLkCfkJ6UrwMZk3mZdhpEr6th5jdQtJ1nrEIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlC2PM/eICDfrgxjOLvLa2vmzdlMB8GA1UdIwQY MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWf5VQ13g S+0ynb8lpBraYiSkq+7ObOn+gf/e8FUtd0o/0QmjfvKb4fh9XQZcghQ79iBQHnnL h/rrE3ghwe+MpCq3td4lhZAtv1fvUks3f+5AlARIRgP8tY6X+CS6ZH3ofU2OAU3s yMTTUanqDmWUQt/PlNuA5FjkDtD7zQplYijZzUmK9ixWS5LcTMiblkb1LvTauE8A RVG7VdSIW1BjL1+iYQQhaC4+qAaugkyDp/AY5nwucPyQPEHsF/0D6SBRCmX728xB 4LNYMGOmqbc7pqEP94Ti7TEg2t+RxbNxp89amhciz1C+j+aXsxGnqMx8/bfas6tL CY3S+IgwG3jtIg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:22:02 2025 by rpki-client