This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json) Hash identifier: zzeuVJGg+70TMIOdN//8eYwHq+jW7dn6JGitOChXRu0= Subject key identifier: 54:B2:A4:64:37:7D:56:75:1D:39:E9:65:9C:47:29:8B:44:B9:33:2E Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7 Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7 Certificate serial: 019B33E896E41F01E2C5792460F879FCA0DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft Manifest number: 0B88 Signing time: Fri 19 Dec 2025 00:00:39 +0000 Manifest this update: Fri 19 Dec 2025 00:00:39 +0000 Manifest next update: Sat 20 Dec 2025 00:00:39 +0000 Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: 5CNCzIyW1NUPKivS/mTbTdeosV16hJ/mtnShz7HpAWs=) 2: sW1FbXnmMLs31PJCKJCZsxmeKF0.roa (hash: gPwTFuA8vjPg7PCIOrBM62Yfp57prUWNjPVJTmJKnuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:96:e4:1f:01:e2:c5:79:24:60:f8:79:fc:a0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7 Validity Not Before: Dec 19 00:00:39 2025 GMT Not After : Dec 20 00:00:39 2025 GMT Subject: CN=54b2a464377d56751d39e9659c47298b44b9332e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:80:75:fa:e7:60:79:d6:d1:6e:b8:5f:67: 33:e2:71:a2:8f:0b:a9:1e:26:47:ba:d8:64:20:18: fb:0d:ec:86:ad:38:ad:df:fc:f9:f6:11:5c:b7:e1: f8:2b:39:27:cf:4d:01:8e:67:f5:bf:2e:4f:2f:46: c7:56:73:e1:bd:9c:50:c6:96:34:77:e5:08:2f:f5: b0:d6:a0:ec:d0:80:bc:91:e8:77:ad:42:80:ec:9c: 5d:b2:99:39:84:17:8a:4e:b5:97:dc:4b:66:16:73: d7:e4:4b:e8:14:54:5a:76:45:f5:c3:f6:d1:98:bd: f5:56:a9:0c:02:05:2d:df:90:6f:c9:bf:1c:2e:ec: 14:6e:78:84:e7:14:fe:46:2b:a4:50:56:3c:f1:e4: 94:7b:45:9c:66:37:dc:95:74:88:81:d4:eb:59:e5: 4f:49:ee:b2:0e:6e:b6:68:88:a4:08:11:d2:4e:67: e4:08:8a:ad:df:ff:70:9b:85:17:25:a7:ba:ab:27: 30:97:9a:93:14:56:55:91:6b:60:1a:bd:4e:e4:d1: 7f:9e:22:2c:5e:43:93:43:93:81:34:88:4d:17:d8: f9:bb:db:02:61:81:bc:43:d1:85:16:1e:78:91:53: b7:f4:3d:5e:62:67:0e:70:8b:a9:7e:34:a4:70:4e: 9a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B2:A4:64:37:7D:56:75:1D:39:E9:65:9C:47:29:8B:44:B9:33:2E X509v3 Authority Key Identifier: keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9b:54:83:e9:2c:28:d8:95:3d:5e:32:ab:e9:60:4b:ca:21: b7:7c:58:42:eb:6b:0b:ea:9f:fd:70:34:12:e3:86:a7:15:af: fe:98:b9:22:ad:e2:0a:99:3d:45:fb:37:51:45:9c:d2:6b:66: ab:14:fd:52:83:a8:57:a1:40:72:a7:e0:4c:9f:b3:87:51:c5: ee:76:b0:29:32:b0:a1:1f:d6:32:28:2b:30:aa:de:0e:9c:f0: f2:c4:b7:2a:04:40:ae:35:76:2a:9a:5d:b8:15:39:8e:02:36: d0:36:4f:16:93:4e:51:ad:25:1d:db:d1:69:4c:d1:6a:5f:e6: 52:f6:11:58:b3:b7:f3:19:25:a1:c9:24:a1:9e:cd:73:fd:64: 1a:b4:5f:05:bc:32:cb:b9:91:ee:e8:c4:1f:12:7d:82:70:25: 60:a6:78:b9:54:cb:7d:2a:01:28:e6:a0:16:cf:07:9e:0b:8a: b5:53:cd:80:0a:c6:ab:59:69:79:b6:3d:0a:67:80:ce:98:b9: 1d:c2:d2:4f:21:01:3d:77:96:91:b6:1b:ed:04:0a:63:17:91: a5:5d:d1:2a:0f:6c:1c:b6:02:e6:31:09:18:e7:66:6a:0f:8d: b8:92:23:54:be:f3:b1:b4:21:4f:07:02:93:48:d5:51:4f:04: dc:73:9d:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6JbkHwHixXkkYPh5/KDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMjVmYWM0YTVkOTViNDFhMDcyZWJiZjRmMDM1ZDA5YjNh YTU5YzcwHhcNMjUxMjE5MDAwMDM5WhcNMjUxMjIwMDAwMDM5WjAzMTEwLwYDVQQD Eyg1NGIyYTQ2NDM3N2Q1Njc1MWQzOWU5NjU5YzQ3Mjk4YjQ0YjkzMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseWAdfrnYHnW0W64X2cz4nGijwup HiZHuthkIBj7DeyGrTit3/z59hFct+H4Kzknz00Bjmf1vy5PL0bHVnPhvZxQxpY0 d+UIL/Ww1qDs0IC8keh3rUKA7Jxdspk5hBeKTrWX3EtmFnPX5EvoFFRadkX1w/bR mL31VqkMAgUt35Bvyb8cLuwUbniE5xT+RiukUFY88eSUe0WcZjfclXSIgdTrWeVP Se6yDm62aIikCBHSTmfkCIqt3/9wm4UXJae6qycwl5qTFFZVkWtgGr1O5NF/niIs XkOTQ5OBNIhNF9j5u9sCYYG8Q9GFFh54kVO39D1eYmcOcIupfjSkcE6aCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSypGQ3fVZ1HTnpZZxHKYtEuTMuMB8GA1UdIwQY MBaAFNEl+sSl2VtBoHLrv08DXQmzqlnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMt MGRlZDA2ZTQwYTc1LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMtMGRlZDA2ZTQwYTc1 LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5tUg+ks KNiVPV4yq+lgS8oht3xYQutrC+qf/XA0EuOGpxWv/pi5Iq3iCpk9Rfs3UUWc0mtm qxT9UoOoV6FAcqfgTJ+zh1HF7nawKTKwoR/WMigrMKreDpzw8sS3KgRArjV2Kppd uBU5jgI20DZPFpNOUa0lHdvRaUzRal/mUvYRWLO38xklockkoZ7Nc/1kGrRfBbwy y7mR7ujEHxJ9gnAlYKZ4uVTLfSoBKOagFs8HnguKtVPNgArGq1lpebY9CmeAzpi5 HcLSTyEBPXeWkbYb7QQKYxeRpV3RKg9sHLYC5jEJGOdmag+NuJIjVL7zsbQhTwcC k0jVUU8E3HOdKA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:29:34 2025 by rpki-client