This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json) Hash identifier: 6dNqJ3di3V3WAyYazl2QJTa9FNCWH2CHdJPaYY5P5SM= Subject key identifier: FD:00:13:BB:30:3D:F8:CC:27:02:6B:B7:88:88:57:8C:A0:C8:10:37 Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f Certificate serial: 019AF31C75222DFE8C8A6693B8B349C4D1BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft Manifest number: 067A Signing time: Sat 06 Dec 2025 10:01:59 +0000 Manifest this update: Sat 06 Dec 2025 10:01:59 +0000 Manifest next update: Sun 07 Dec 2025 10:01:59 +0000 Files and hashes: 1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=) 2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: lVPG0gr51ucvR88zJdNR73CuqPJOjsFXF+doTV1kkQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:75:22:2d:fe:8c:8a:66:93:b8:b3:49:c4:d1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f Validity Not Before: Dec 6 10:01:59 2025 GMT Not After : Dec 7 10:01:59 2025 GMT Subject: CN=fd0013bb303df8cc27026bb78888578ca0c81037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8c:c5:96:c0:08:3e:66:bc:46:94:4b:62:b2: 6b:fc:7f:36:3b:47:b2:06:eb:be:d0:aa:60:3a:a7: 7d:bc:a0:68:34:d2:e7:e6:fb:ea:c6:b2:32:88:58: fa:b7:1a:9a:aa:34:11:5a:7a:c4:d2:6f:c3:37:66: 4b:a1:2e:0a:72:aa:ce:cd:78:7a:ec:5e:96:47:f7: bf:89:fa:b7:1a:a1:5a:47:fb:68:b5:28:03:d8:d4: f7:0b:1e:a1:04:92:f1:ec:77:d6:67:fa:83:33:94: f8:20:8b:83:81:3f:1e:42:4a:bd:86:05:35:09:17: 68:39:c3:b9:91:f5:6b:9a:42:52:a4:16:60:31:44: 13:2c:51:84:8e:5e:2c:22:5a:7e:60:ea:47:83:30: e6:28:8d:67:13:9b:b6:4d:4f:04:6c:36:9e:7b:86: 98:14:45:9a:36:fd:41:b5:73:fe:b9:9f:2d:af:da: 82:6b:99:ba:6d:76:2e:f0:b6:af:50:9e:5f:4f:68: fb:d6:7e:d5:e9:de:a8:86:eb:40:21:d7:35:d4:ef: 94:18:84:66:5b:ed:2e:76:21:f5:ca:09:dc:19:0e: df:6b:4a:4a:23:be:13:b9:df:e6:90:fa:49:a3:3a: 16:f8:ca:39:ef:bc:c0:3d:7b:23:13:98:ce:64:25: 5d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:00:13:BB:30:3D:F8:CC:27:02:6B:B7:88:88:57:8C:A0:C8:10:37 X509v3 Authority Key Identifier: keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ca:69:af:37:0f:67:91:d7:ea:fe:78:7d:9e:4b:07:ce:0b: af:61:02:08:b6:be:30:c3:1c:08:0e:8d:87:7f:c6:1d:ef:fe: 7e:df:f2:9d:17:fd:ed:8f:27:33:32:21:23:70:4f:1b:89:4e: 36:e1:3e:19:c2:2a:25:c8:53:b7:25:45:11:6f:a6:c3:a9:07: 98:e0:be:78:01:5a:81:53:3a:90:5d:63:1b:a1:ce:e5:13:b1: e4:46:45:c8:7b:62:53:e8:44:b7:9d:23:43:52:aa:37:af:7a: 2e:18:8e:72:b9:54:20:59:d7:24:c4:02:02:9e:8c:fc:55:5f: 7b:9b:c4:b8:99:4b:b0:20:8e:5e:e4:dc:9d:30:b0:37:b9:77: c2:84:69:5e:57:4b:44:e7:44:f9:08:a7:b6:97:f3:b1:cb:3b: bc:60:00:15:de:ae:45:47:a5:16:06:2c:d6:97:76:9d:f2:c9: 3a:99:0e:db:ab:3d:2a:aa:1e:a2:3b:b0:3d:62:10:3e:46:ab: 8c:fc:74:ee:24:46:02:c5:68:58:4f:bb:79:3c:55:b9:2f:19: bf:9f:d1:aa:56:19:b3:3b:0f:cd:f4:4b:36:e2:05:12:14:e4: 61:b1:a1:4a:f1:19:7f:c7:1b:c2:dc:2d:0a:43:f3:ac:6e:30: 3d:a8:27:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHUiLf6MimaTuLNJxNG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy NTI3OGYwHhcNMjUxMjA2MTAwMTU5WhcNMjUxMjA3MTAwMTU5WjAzMTEwLwYDVQQD EyhmZDAwMTNiYjMwM2RmOGNjMjcwMjZiYjc4ODg4NTc4Y2EwYzgxMDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ozFlsAIPma8RpRLYrJr/H82O0ey Buu+0KpgOqd9vKBoNNLn5vvqxrIyiFj6txqaqjQRWnrE0m/DN2ZLoS4KcqrOzXh6 7F6WR/e/ifq3GqFaR/totSgD2NT3Cx6hBJLx7HfWZ/qDM5T4IIuDgT8eQkq9hgU1 CRdoOcO5kfVrmkJSpBZgMUQTLFGEjl4sIlp+YOpHgzDmKI1nE5u2TU8EbDaee4aY FEWaNv1BtXP+uZ8tr9qCa5m6bXYu8LavUJ5fT2j71n7V6d6ohutAIdc11O+UGIRm W+0udiH1ygncGQ7fa0pKI74Tud/mkPpJozoW+Mo577zAPXsjE5jOZCVdCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0AE7swPfjMJwJrt4iIV4ygyBA3MB8GA1UdIwQY MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcspprzcP Z5HX6v54fZ5LB84Lr2ECCLa+MMMcCA6Nh3/GHe/+ft/ynRf97Y8nMzIhI3BPG4lO NuE+GcIqJchTtyVFEW+mw6kHmOC+eAFagVM6kF1jG6HO5ROx5EZFyHtiU+hEt50j Q1KqN696LhiOcrlUIFnXJMQCAp6M/FVfe5vEuJlLsCCOXuTcnTCwN7l3woRpXldL ROdE+Qintpfzscs7vGAAFd6uRUelFgYs1pd2nfLJOpkO26s9KqoeojuwPWIQPkar jPx07iRGAsVoWE+7eTxVuS8Zv5/RqlYZszsPzfRLNuIFEhTkYbGhSvEZf8cbwtwt CkPzrG4wPagnPw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:31 2025 by rpki-client