This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json) Hash identifier: QI743RpxttT987rPJDyl+eWamiV1wzOuH3U3fjbgjUQ= Subject key identifier: 49:0E:46:75:9A:0B:47:EF:2E:BF:68:78:9A:0F:7C:FF:AE:A2:BA:32 Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91 Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91 Certificate serial: 019AF2ADB8CBD9F60C72C58216177E207E75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft Manifest number: 033A Signing time: Sat 06 Dec 2025 08:01:02 +0000 Manifest this update: Sat 06 Dec 2025 08:01:02 +0000 Manifest next update: Sun 07 Dec 2025 08:01:02 +0000 Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: /S2GxpFbjBkMEmhljMWMUlIBEWZFqhSTMvCQStJ/x/Y=) 2: Xp2PmSoyw6vuED7OfEi_QaL00dc.roa (hash: ELBh/LCD8srsbWF+z8quU7XGWuHLmHPUfcz10VuYxEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b8:cb:d9:f6:0c:72:c5:82:16:17:7e:20:7e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91 Validity Not Before: Dec 6 08:01:02 2025 GMT Not After : Dec 7 08:01:02 2025 GMT Subject: CN=490e46759a0b47ef2ebf68789a0f7cffaea2ba32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:fc:5a:e3:24:36:6d:cc:b8:9a:99:7d:05: dc:9e:31:7e:38:57:72:8f:89:17:65:86:f7:b8:fb: ed:9c:9e:d4:be:e3:fe:7c:b3:7d:8b:46:96:8e:d3: ba:f5:a1:ad:ce:fd:fe:3e:60:a5:7c:86:99:9f:1e: fb:95:c6:04:52:9f:49:e8:99:77:e3:c5:99:93:08: bc:9d:45:fd:af:03:77:25:4b:92:7d:5d:88:07:03: ca:10:1d:a1:b9:10:7c:8a:46:be:81:08:72:f5:7a: a4:45:cb:ab:35:98:e5:cc:67:2c:81:5d:2f:06:56: 1b:60:50:78:1f:e4:01:74:2e:f3:e8:23:cc:32:81: 2c:06:fb:b8:35:b7:44:85:94:e8:45:e0:7c:60:c4: 7d:65:b3:ca:1d:54:53:be:49:eb:b6:99:98:04:ca: 79:5b:62:14:4a:4c:5c:23:aa:08:69:ee:34:9d:a2: 75:80:c1:3c:db:68:50:df:dd:07:dd:32:0d:2d:f3: 2b:d6:f3:97:ba:83:69:4c:75:25:43:68:1e:15:a2: 07:c3:29:3d:53:16:25:56:cc:8a:f6:16:87:4f:1d: ce:c1:57:88:51:4e:aa:20:04:fb:58:79:19:1f:a4: c7:7d:ed:0a:ba:e5:33:6a:28:75:b8:97:e8:13:85: e1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0E:46:75:9A:0B:47:EF:2E:BF:68:78:9A:0F:7C:FF:AE:A2:BA:32 X509v3 Authority Key Identifier: keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fe:57:f2:a9:d3:40:b0:c0:05:fe:8a:e0:31:37:39:05:c0: 05:9e:ab:0e:b8:1b:8b:80:18:46:29:2c:39:81:53:c7:bb:6e: c8:de:51:07:0d:fa:0b:38:8c:9c:da:42:52:48:21:3e:83:f7: 8f:2d:08:da:4c:48:f6:9c:4c:f4:4c:dd:49:e7:ba:92:e2:fe: 6d:6c:54:9d:d4:60:9f:78:a8:c4:03:cf:ca:9a:b2:25:f1:ae: 7f:46:b5:e0:2b:84:63:ed:7d:97:ee:21:0d:a9:df:be:a6:27: e7:4f:92:54:e6:dc:de:f8:7c:53:f6:6a:b5:df:59:93:b1:81: bc:9a:4f:9b:72:2c:65:6e:03:d7:54:10:6c:b4:a6:f2:04:c6: 01:22:13:9c:8a:5d:79:50:f8:f2:d9:33:d0:eb:f1:32:3f:b0: 51:2b:40:83:88:b5:d5:bc:c9:82:bf:3b:6e:c9:6f:b6:07:f0: 89:17:32:61:f2:57:e0:e7:c2:2e:58:ac:69:7f:16:0f:05:f7: 97:b7:5a:49:f9:36:91:32:bd:f2:25:aa:86:f1:e9:dd:33:b4: 35:45:a4:6f:b8:66:19:b1:e0:7c:33:70:89:6f:f5:11:0c:9c: 17:7c:12:a7:fa:39:8d:16:4c:c9:ef:9b:03:88:03:c2:e1:9a: 78:8d:2b:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbjL2fYMcsWCFhd+IH51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZmY5NzQ5ZWUyMmYwMDkyNTdiODlkODM0MGNjNjRmYjQw YmZjOTEwHhcNMjUxMjA2MDgwMTAyWhcNMjUxMjA3MDgwMTAyWjAzMTEwLwYDVQQD Eyg0OTBlNDY3NTlhMGI0N2VmMmViZjY4Nzg5YTBmN2NmZmFlYTJiYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH78WuMkNm3MuJqZfQXcnjF+OFdy j4kXZYb3uPvtnJ7UvuP+fLN9i0aWjtO69aGtzv3+PmClfIaZnx77lcYEUp9J6Jl3 48WZkwi8nUX9rwN3JUuSfV2IBwPKEB2huRB8ika+gQhy9XqkRcurNZjlzGcsgV0v BlYbYFB4H+QBdC7z6CPMMoEsBvu4NbdEhZToReB8YMR9ZbPKHVRTvknrtpmYBMp5 W2IUSkxcI6oIae40naJ1gME822hQ390H3TINLfMr1vOXuoNpTHUlQ2geFaIHwyk9 UxYlVsyK9haHTx3OwVeIUU6qIAT7WHkZH6THfe0KuuUzaih1uJfoE4XhLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkORnWaC0fvLr9oeJoPfP+uoroyMB8GA1UdIwQY MBaAFNP/l0nuIvAJJXuJ2DQMxk+0C/yRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmIt MDBmYWVjYWM3ZGViLzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmItMDBmYWVjYWM3ZGVi LzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnP5X8qnT QLDABf6K4DE3OQXABZ6rDrgbi4AYRiksOYFTx7tuyN5RBw36CziMnNpCUkghPoP3 jy0I2kxI9pxM9EzdSee6kuL+bWxUndRgn3ioxAPPypqyJfGuf0a14CuEY+19l+4h DanfvqYn50+SVObc3vh8U/Zqtd9Zk7GBvJpPm3IsZW4D11QQbLSm8gTGASITnIpd eVD48tkz0OvxMj+wUStAg4i11bzJgr87bslvtgfwiRcyYfJX4OfCLlisaX8WDwX3 l7daSfk2kTK98iWqhvHp3TO0NUWkb7hmGbHgfDNwiW/1EQycF3wSp/o5jRZMye+b A4gDwuGaeI0rbA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:25:03 2025 by rpki-client