This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json) Hash identifier: Zemn9XMAHszA5dKrYhIbiPtXumObm5iuKQQaB6mjTYo= Subject key identifier: 0A:2D:EC:6E:69:30:69:A0:1C:DD:81:E3:1B:BE:60:B0:BC:D7:91:4C Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef Certificate serial: 019AF12EAF021ED74C2CFD1B621C014695E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft Manifest number: 0B02 Signing time: Sat 06 Dec 2025 01:02:39 +0000 Manifest this update: Sat 06 Dec 2025 01:02:39 +0000 Manifest next update: Sun 07 Dec 2025 01:02:39 +0000 Files and hashes: 1: YJ__Jpr1denKLIU4A4wwpaBEGuM.roa (hash: HQMvWJSgBySt+TDaIiCe+VSZte2lW30WZtz1IJWSvxM=) 2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: MF1vifsCq0eSqjBNo7hXsYisSLM7/WFpME9zb2ZEkI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:af:02:1e:d7:4c:2c:fd:1b:62:1c:01:46:95:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef Validity Not Before: Dec 6 01:02:39 2025 GMT Not After : Dec 7 01:02:39 2025 GMT Subject: CN=0a2dec6e693069a01cdd81e31bbe60b0bcd7914c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:39:d4:d8:c5:c6:fe:4f:4a:ba:de:af:02:c7: 75:db:65:e4:ab:6d:50:33:da:78:26:64:24:f7:1a: da:7a:6b:81:9d:85:1c:06:4e:84:0e:fd:b4:b4:b0: 6d:68:21:35:44:85:a3:08:65:7d:91:09:ea:fa:97: e9:72:a1:4b:28:5b:f3:8c:fc:7b:4a:54:e2:26:06: 68:3d:8e:cc:15:db:69:78:41:8b:4e:f7:8a:45:c6: d2:d2:ea:4a:49:07:4d:c3:f0:86:16:7c:72:64:89: a7:a4:ae:c1:d2:ef:54:e8:0f:95:a7:00:9b:a1:79: 4e:a1:74:5e:84:fd:43:16:4e:79:c0:7e:c4:12:d6: 0a:97:2a:59:dd:54:1e:df:b6:cb:48:ef:df:d1:b9: d7:bb:72:56:32:3d:22:ed:3c:f8:e7:07:b7:08:5c: 88:14:91:2e:20:dd:52:de:bd:8a:ba:a0:0c:16:d8: fb:3e:e9:aa:70:16:39:77:6d:ac:08:de:99:bc:ea: 68:a5:c1:98:ab:b0:b9:26:9e:0e:3e:a0:ba:c8:8e: e1:b8:f9:0c:e1:ed:f6:cb:f0:89:73:8a:a3:25:bc: b4:b0:29:e3:46:59:7f:58:7b:ba:a7:d9:55:3c:f6: 7d:53:2a:92:52:ba:b0:2f:da:5d:b6:39:fb:ce:37: bc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2D:EC:6E:69:30:69:A0:1C:DD:81:E3:1B:BE:60:B0:BC:D7:91:4C X509v3 Authority Key Identifier: keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:69:90:4b:65:04:88:df:7d:db:7e:bb:98:2e:33:16:cf:fc: 6e:83:b6:1c:e2:1f:01:3e:4a:0e:0b:6d:48:9b:cb:3b:fc:64: 5f:2d:ce:4b:4f:19:54:3e:19:ab:97:84:12:0c:d9:2e:8c:be: ba:18:5a:07:dc:3e:4a:e1:4b:a0:3e:6d:1e:84:bb:1b:5a:3e: 05:71:73:eb:93:3d:07:dd:35:9a:fc:f0:04:36:79:17:00:94: 82:eb:ab:8c:ee:18:f7:64:25:d8:45:7e:6e:9d:c8:d0:ff:2d: ec:06:4a:81:6c:2e:df:7e:e9:dc:00:5a:0e:06:2c:87:27:c2: 7f:d9:a7:1d:47:3c:b0:3d:7a:1a:4b:48:0b:b2:41:76:11:70: b0:86:7b:e6:d9:34:36:cf:29:ad:0a:e4:1c:5f:63:58:85:a5: 4d:d9:98:ce:9b:a4:20:e6:41:2a:7a:c9:27:9d:c9:95:3f:eb: c7:8b:10:4d:d5:a2:56:17:d3:9e:43:88:54:31:b5:cb:8d:a3: 93:9a:ff:fe:76:a7:49:aa:aa:97:b7:be:a1:ea:27:b1:3c:15: af:8e:2c:82:d2:b6:13:de:4c:5f:15:94:87:a0:06:64:ba:12: 19:8f:99:82:07:2d:f3:1a:0b:88:c9:bd:25:82:62:88:0e:7c: a5:c2:ef:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLq8CHtdMLP0bYhwBRpXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYmQwZTM2ZTFjMjAyMzA0YTM1MTMzYjExNjY2NjI1ZTVk NmU1ZWYwHhcNMjUxMjA2MDEwMjM5WhcNMjUxMjA3MDEwMjM5WjAzMTEwLwYDVQQD EygwYTJkZWM2ZTY5MzA2OWEwMWNkZDgxZTMxYmJlNjBiMGJjZDc5MTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTnU2MXG/k9Kut6vAsd122Xkq21Q M9p4JmQk9xraemuBnYUcBk6EDv20tLBtaCE1RIWjCGV9kQnq+pfpcqFLKFvzjPx7 SlTiJgZoPY7MFdtpeEGLTveKRcbS0upKSQdNw/CGFnxyZImnpK7B0u9U6A+VpwCb oXlOoXRehP1DFk55wH7EEtYKlypZ3VQe37bLSO/f0bnXu3JWMj0i7Tz45we3CFyI FJEuIN1S3r2KuqAMFtj7PumqcBY5d22sCN6ZvOpopcGYq7C5Jp4OPqC6yI7huPkM 4e32y/CJc4qjJby0sCnjRll/WHu6p9lVPPZ9UyqSUrqwL9pdtjn7zje8AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAot7G5pMGmgHN2B4xu+YLC815FMMB8GA1UdIwQY MBaAFHK9DjbhwgIwSjUTOxFmZiXl1uXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3IwT051SENBakJLTlJNN0VXWm1KZVhXNWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81MjQ3NmQtYTc5NC00N2Q1LThmNTAt YWVkYTgyNDY3OGQ0LzEvY3IwT051SENBakJLTlJNN0VXWm1KZVhXNWU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC81MjQ3NmQtYTc5NC00N2Q1LThmNTAtYWVkYTgyNDY3OGQ0 LzEvY3IwT051SENBakJLTlJNN0VXWm1KZVhXNWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmmQS2UE iN992367mC4zFs/8boO2HOIfAT5KDgttSJvLO/xkXy3OS08ZVD4Zq5eEEgzZLoy+ uhhaB9w+SuFLoD5tHoS7G1o+BXFz65M9B901mvzwBDZ5FwCUguurjO4Y92Ql2EV+ bp3I0P8t7AZKgWwu337p3ABaDgYshyfCf9mnHUc8sD16GktIC7JBdhFwsIZ75tk0 Ns8prQrkHF9jWIWlTdmYzpukIOZBKnrJJ53JlT/rx4sQTdWiVhfTnkOIVDG1y42j k5r//nanSaqql7e+oeonsTwVr44sgtK2E95MXxWUh6AGZLoSGY+Zggct8xoLiMm9 JYJiiA58pcLvhA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:04 2025 by rpki-client