This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft File: 0E45j3kEn2u7gzOBCoFhyXiWKiY.mft (raw, json) Hash identifier: /VDZTulCw0PjdNGp2b8jMsnQTmsucVThF3209MX/pkY= Subject key identifier: 90:06:B9:96:C5:5B:CE:9B:21:04:78:CB:4E:01:31:DB:2C:D1:0A:48 Authority key identifier: D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26 Certificate issuer: /CN=d04e398f79049f6bbb8333810a8161c978962a26 Certificate serial: 019AF19B272EB722468D9B60B4E8FD8EDA92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft Manifest number: 105D Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: 0E45j3kEn2u7gzOBCoFhyXiWKiY.crl (hash: +bMK8J6lvX0VRRPvgKl+VUEhDST2xy4jERe8JUYQZlc=) 2: fmJrqNi3AK7xf-5ry-ZR1hvBtQQ.roa (hash: R/N1KJCx1ZG7TAbnbY1p8xT86HawFSAUgAukKuDa69o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:27:2e:b7:22:46:8d:9b:60:b4:e8:fd:8e:da:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d04e398f79049f6bbb8333810a8161c978962a26 Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=9006b996c55bce9b210478cb4e0131db2cd10a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:6c:69:e5:97:39:39:24:2e:f7:36:bf:60: 20:23:d3:24:e3:9b:d6:73:2a:cb:26:58:e8:a8:65: 54:dd:03:6a:56:fc:41:3f:63:eb:80:61:79:b9:b0: f9:96:ae:a8:c7:a3:0c:78:bd:76:91:1f:07:3e:ad: 2c:c2:20:cc:28:89:82:75:67:a1:74:05:22:5b:c3: 58:c4:a5:a8:80:31:7a:86:a8:59:a6:5d:e5:a1:d0: 4d:b2:f2:1b:61:7e:50:0e:c1:ee:8c:4e:d4:75:0b: 59:30:d4:8a:c6:70:d7:2f:31:a3:ec:b1:ae:b7:90: 32:cc:b3:9b:b8:b8:7b:22:bc:f1:69:33:5c:a7:2b: 27:ed:09:33:f3:ae:75:10:67:1a:52:c6:93:27:cc: 2c:5c:38:3f:0e:22:1a:09:1f:c7:98:4d:64:d4:9c: ab:07:26:99:da:87:a1:ef:97:31:6a:57:d2:11:6c: 30:cd:ee:99:0d:b5:25:23:3f:6d:8e:38:b0:68:43: 31:35:cf:cb:75:b0:8b:1d:77:eb:d8:8e:24:25:7c: 58:2e:8e:65:60:2e:5d:59:51:23:ff:72:ee:25:8a: ac:ea:83:1e:55:b1:28:3b:97:e0:42:31:c9:9b:94: 96:3b:38:58:b7:e2:aa:40:e5:d2:0a:7b:30:44:1b: 08:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:06:B9:96:C5:5B:CE:9B:21:04:78:CB:4E:01:31:DB:2C:D1:0A:48 X509v3 Authority Key Identifier: keyid:D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:cd:8f:7d:d6:df:ce:80:48:02:bc:a4:12:a0:9f:69:6b:40: e9:23:d4:b8:a8:8a:42:3a:9d:5c:d3:ef:06:74:f6:2c:13:84: 2f:ef:a4:af:76:03:25:64:e1:ac:ef:91:4b:5d:d5:3b:8e:96: e4:68:16:48:ef:f5:e3:af:fa:3f:33:fb:e9:fe:92:ea:84:79: b1:06:49:f5:2c:47:21:4b:00:26:21:eb:f9:32:07:36:f0:1e: b1:40:6b:97:f0:8f:1e:ea:9f:eb:4b:a1:6a:7f:89:9e:de:7f: e6:67:af:5b:de:bb:3f:ad:2e:c6:bd:3d:ea:46:70:b7:34:78: 9c:74:f2:76:08:a8:38:33:ce:37:0e:18:e7:e6:dd:5c:a1:7a: b7:aa:a4:d8:38:a1:a9:41:06:25:4f:3c:cd:e3:53:07:e6:c6: ec:a7:9e:c4:92:ca:8f:9d:f3:aa:67:96:2d:ad:90:07:ce:36: 35:d7:80:2d:ef:31:74:27:36:fa:7b:52:b9:38:c5:e2:f7:df: dd:5c:51:60:30:16:59:44:94:bb:b5:cb:f3:95:19:a7:ec:f1: 6f:f1:e1:70:96:54:ea:fb:0c:e8:6f:86:c5:3a:e0:43:9c:3e: d2:6e:5a:3f:ff:0b:4b:ff:02:9f:c5:46:7e:fb:ac:b9:c1:c9: cc:a4:78:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmycutyJGjZtgtOj9jtqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNGUzOThmNzkwNDlmNmJiYjgzMzM4MTBhODE2MWM5Nzg5 NjJhMjYwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD Eyg5MDA2Yjk5NmM1NWJjZTliMjEwNDc4Y2I0ZTAxMzFkYjJjZDEwYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2lsaeWXOTkkLvc2v2AgI9Mk45vW cyrLJljoqGVU3QNqVvxBP2PrgGF5ubD5lq6ox6MMeL12kR8HPq0swiDMKImCdWeh dAUiW8NYxKWogDF6hqhZpl3lodBNsvIbYX5QDsHujE7UdQtZMNSKxnDXLzGj7LGu t5AyzLObuLh7IrzxaTNcpysn7Qkz8651EGcaUsaTJ8wsXDg/DiIaCR/HmE1k1Jyr ByaZ2oeh75cxalfSEWwwze6ZDbUlIz9tjjiwaEMxNc/LdbCLHXfr2I4kJXxYLo5l YC5dWVEj/3LuJYqs6oMeVbEoO5fgQjHJm5SWOzhYt+KqQOXSCnswRBsIcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAGuZbFW86bIQR4y04BMdss0QpIMB8GA1UdIwQY MBaAFNBOOY95BJ9ru4MzgQqBYcl4liomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEU0NWoza0VuMnU3Z3pPQkNvRmh5WGlXS2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xOTkwYjEtZGQwOC00NjkxLWFjNmIt NmFjNGRkNDZkNGY3LzEvMEU0NWoza0VuMnU3Z3pPQkNvRmh5WGlXS2lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8xOTkwYjEtZGQwOC00NjkxLWFjNmItNmFjNGRkNDZkNGY3 LzEvMEU0NWoza0VuMnU3Z3pPQkNvRmh5WGlXS2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaM2Pfdbf zoBIArykEqCfaWtA6SPUuKiKQjqdXNPvBnT2LBOEL++kr3YDJWThrO+RS13VO46W 5GgWSO/146/6PzP76f6S6oR5sQZJ9SxHIUsAJiHr+TIHNvAesUBrl/CPHuqf60uh an+Jnt5/5mevW967P60uxr096kZwtzR4nHTydgioODPONw4Y5+bdXKF6t6qk2Dih qUEGJU88zeNTB+bG7KeexJLKj53zqmeWLa2QB842NdeALe8xdCc2+ntSuTjF4vff 3VxRYDAWWUSUu7XL85UZp+zxb/HhcJZU6vsM6G+GxTrgQ5w+0m5aP/8LS/8Cn8VG fvusucHJzKR4fw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:36 2025 by rpki-client