This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json) Hash identifier: JsxJwHv8d9A6kZKUD/DWhWPvmzFWJIBDVPLUbudGbiQ= Subject key identifier: 69:C6:31:4A:C5:87:68:5C:86:A0:C9:B2:07:6D:7E:93:9D:8D:EF:32 Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae Certificate serial: 019AF163D0E5794D08382B93A15E3A7ACEF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft Manifest number: 06CB Signing time: Sat 06 Dec 2025 02:00:41 +0000 Manifest this update: Sat 06 Dec 2025 02:00:41 +0000 Manifest next update: Sun 07 Dec 2025 02:00:41 +0000 Files and hashes: 1: 1-T115Hn6ISqfHKEp1Ejx9Gs-LdM.roa (hash: hwD1bihujg4QKnIBffCm29/kZuX5tsYo4qsj399ZBlI=) 2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: o9J3yjAW+sBdX3/1+LBlaLThRvpHxTbcLjtzmDo1ltY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d0:e5:79:4d:08:38:2b:93:a1:5e:3a:7a:ce:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae Validity Not Before: Dec 6 02:00:41 2025 GMT Not After : Dec 7 02:00:41 2025 GMT Subject: CN=69c6314ac587685c86a0c9b2076d7e939d8def32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c3:09:47:60:0e:c8:6f:a2:1f:c9:6a:37:40: 63:c5:12:c9:cf:1a:f1:0a:37:a8:5d:1b:6a:d6:80: 77:8d:ed:67:4d:be:1b:85:6d:49:f9:ac:ba:7c:6a: 17:80:2d:fd:34:71:e3:1d:6d:11:ed:38:5f:e3:ed: d4:39:88:fb:0f:2f:ec:13:f2:78:dc:2f:bf:52:c9: 41:e2:37:ba:e1:0b:94:d6:e5:63:6e:de:e0:d8:b6: 3c:1e:1a:78:91:ec:aa:8c:ff:25:6c:62:ec:20:36: 77:b8:0d:e1:ca:a0:c1:17:29:0e:e9:6a:b3:f8:4a: 5c:32:77:5f:85:16:b7:c6:60:03:ef:e5:89:1d:a1: 7a:b1:66:33:03:ed:59:7e:a1:e5:63:8f:83:3d:fb: ff:50:4e:98:66:4f:ca:92:b5:86:14:0f:fc:5d:7c: 8c:14:67:f2:0c:6d:9b:02:fe:bd:50:87:78:29:43: c4:52:5a:69:a7:d4:60:fa:4a:f9:30:58:b3:f4:e2: c2:6e:a6:4e:eb:f9:ad:09:08:22:50:32:47:c6:af: b5:51:3d:e4:db:e4:62:f6:6b:6f:c4:4a:20:d6:ab: e7:64:10:18:80:a2:37:fd:cd:a5:d2:62:b3:66:ad: 9a:8b:8c:83:e8:cd:34:2b:56:c2:e9:95:29:50:72: 09:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C6:31:4A:C5:87:68:5C:86:A0:C9:B2:07:6D:7E:93:9D:8D:EF:32 X509v3 Authority Key Identifier: keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8c:fe:d9:08:95:d0:48:ba:ef:6c:9b:79:98:fd:98:9a:ea: 6b:4b:57:d4:3d:bb:51:cb:2b:08:e9:bb:7b:db:c0:f1:00:76: cf:e9:a4:50:a2:bf:e3:ef:09:05:f2:9c:98:4b:8e:0a:6d:9e: 73:2e:8c:67:af:f6:f2:b0:89:dd:50:e6:81:cd:ad:b3:4e:f3: 6b:92:d1:90:a8:08:b0:f0:83:5a:f3:da:13:4e:dc:ba:ca:b5: c3:9c:33:87:a5:7d:bf:15:22:c8:0a:80:11:ed:5a:97:12:82: f4:e1:e9:09:9e:9a:c8:ba:57:2b:8e:27:e0:9c:8c:d5:6b:e7: c9:83:9d:6e:9e:53:fb:96:f6:03:6c:5f:4c:7a:25:e2:7d:d3: 34:79:04:7c:5f:57:e3:4b:e7:3f:23:37:e4:2e:b4:4c:34:7a: d7:8e:0f:8e:2e:ae:bf:87:0d:eb:5f:7c:3b:a4:e6:82:92:88: 0a:41:4c:1b:5e:82:ca:da:d8:bf:0a:4c:82:8a:db:ad:ba:79: 65:56:7f:0b:86:a8:49:b9:a4:21:a6:c8:79:13:8a:e7:9d:69: 71:83:21:0e:d8:46:c4:23:50:4f:ff:03:12:69:df:3b:d9:e0: 89:f4:0b:b8:15:98:85:92:d1:ea:98:95:e8:af:db:0d:54:d2: f6:18:41:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9DleU0IOCuToV46es75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmQxZWRjMGNjNjk3NzQyY2Y0NzM2NGJiMWQxMWI4ZmY4 MDhlYWUwHhcNMjUxMjA2MDIwMDQxWhcNMjUxMjA3MDIwMDQxWjAzMTEwLwYDVQQD Eyg2OWM2MzE0YWM1ODc2ODVjODZhMGM5YjIwNzZkN2U5MzlkOGRlZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sMJR2AOyG+iH8lqN0BjxRLJzxrx CjeoXRtq1oB3je1nTb4bhW1J+ay6fGoXgC39NHHjHW0R7Thf4+3UOYj7Dy/sE/J4 3C+/UslB4je64QuU1uVjbt7g2LY8Hhp4keyqjP8lbGLsIDZ3uA3hyqDBFykO6Wqz +EpcMndfhRa3xmAD7+WJHaF6sWYzA+1ZfqHlY4+DPfv/UE6YZk/KkrWGFA/8XXyM FGfyDG2bAv69UId4KUPEUlppp9Rg+kr5MFiz9OLCbqZO6/mtCQgiUDJHxq+1UT3k 2+Ri9mtvxEog1qvnZBAYgKI3/c2l0mKzZq2ai4yD6M00K1bC6ZUpUHIJ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnGMUrFh2hchqDJsgdtfpOdje8yMB8GA1UdIwQY MBaAFA4tHtwMxpd0LPRzZLsdEbj/gI6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQt NWY4MTY3MDI0OTY4LzEvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQtNWY4MTY3MDI0OTY4 LzEvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4z+2QiV 0Ei672ybeZj9mJrqa0tX1D27UcsrCOm7e9vA8QB2z+mkUKK/4+8JBfKcmEuOCm2e cy6MZ6/28rCJ3VDmgc2ts07za5LRkKgIsPCDWvPaE07cusq1w5wzh6V9vxUiyAqA Ee1alxKC9OHpCZ6ayLpXK44n4JyM1WvnyYOdbp5T+5b2A2xfTHol4n3TNHkEfF9X 40vnPyM35C60TDR6144Pji6uv4cN6198O6TmgpKICkFMG16CytrYvwpMgorbrbp5 ZVZ/C4aoSbmkIabIeROK551pcYMhDthGxCNQT/8DEmnfO9ngifQLuBWYhZLR6piV 6K/bDVTS9hhBkw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:02 2025 by rpki-client