This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft File: 0dXq4THDsQiP-wI3mA1u4YiWaMY.mft (raw, json) Hash identifier: ZoM+KMgH0EYagPAyggboaFzGBu5uqq/Cid6jzwLVn98= Subject key identifier: 25:AE:09:C6:A0:98:BF:28:CB:88:6A:27:51:26:C8:E1:7B:B6:BE:63 Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6 Certificate issuer: /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6 Certificate serial: 019AF2AD98482584DEC9A17B672D0AAE2475 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft Manifest number: DC Signing time: Sat 06 Dec 2025 08:00:54 +0000 Manifest this update: Sat 06 Dec 2025 08:00:54 +0000 Manifest next update: Sun 07 Dec 2025 08:00:54 +0000 Files and hashes: 1: 0dXq4THDsQiP-wI3mA1u4YiWaMY.crl (hash: clui0fDZU08ADyJk0Dd/ON2FWPSvlksO4BqhkWvRu50=) 2: 6W2f7odCRZasTES13-ea8vAK_m8.roa (hash: okmw3ktsRXXv4R0y2S6qFif1SfGCGqe5Hb5ZPwgIWm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:98:48:25:84:de:c9:a1:7b:67:2d:0a:ae:24:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6 Validity Not Before: Dec 6 08:00:54 2025 GMT Not After : Dec 7 08:00:54 2025 GMT Subject: CN=25ae09c6a098bf28cb886a275126c8e17bb6be63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:98:e8:d7:1b:6e:c7:e6:76:d2:54:67:84: 31:33:84:58:e7:39:63:48:00:c9:8c:a0:8c:0a:bd: 9c:97:66:a4:06:b9:df:56:26:b1:9c:48:95:11:43: 91:a0:0f:c2:b3:08:59:7c:fe:6a:76:40:d0:84:33: 9f:65:37:a3:a9:0f:f2:6c:a4:a2:f5:39:39:93:a7: 34:7f:26:0f:bd:b3:be:54:33:61:84:30:5e:47:11: 34:6e:5b:d4:10:6a:9e:6b:3e:15:f6:df:3c:f8:3e: 51:b4:a8:f8:6f:57:ff:d8:a8:50:76:fb:28:05:21: 8a:92:c9:a4:cb:a0:b8:f0:90:f8:6d:af:a1:64:6e: dc:47:9a:4c:a3:85:83:6e:32:33:f1:93:c5:10:19: 65:4e:6f:ba:4b:cd:55:a3:dd:0f:1e:ca:de:56:ce: 5a:51:05:5e:5f:80:da:64:ee:8b:2b:2c:89:b5:16: ca:3d:21:b7:50:6f:f3:aa:e3:c9:6a:9d:4e:55:8a: ab:44:f7:c6:c8:73:8c:a8:74:51:be:73:a2:c1:ad: 23:6f:d4:87:d1:6b:ea:bc:ec:c5:ba:5c:c8:2a:47: 7a:58:54:83:be:47:d2:ce:5f:d6:b3:b9:66:e1:85: d3:c0:45:c4:ec:2b:5a:56:d3:eb:8a:e6:ef:4e:d6: 13:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AE:09:C6:A0:98:BF:28:CB:88:6A:27:51:26:C8:E1:7B:B6:BE:63 X509v3 Authority Key Identifier: keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c1:0f:5d:2b:f1:a2:db:4a:a6:93:fc:57:77:09:a0:a5:19: ad:27:29:7e:83:82:93:63:07:ed:d9:64:6a:69:1b:0e:71:73: 35:31:ea:af:2d:a5:a6:69:a0:db:2e:b1:1f:0e:67:88:2b:25: 4b:08:1a:97:bc:ba:65:45:97:78:54:69:e4:e4:1b:b5:cf:3e: e0:04:0c:10:59:cc:e0:14:d5:d4:d1:bc:5b:1b:f6:a1:eb:d9: 42:e9:fc:5e:04:12:5f:43:5f:e1:43:1b:86:ef:e9:ae:ca:6a: 69:69:bf:07:c1:a0:86:34:6c:c0:30:67:12:f4:24:34:88:1f: 95:86:89:2d:de:c6:68:6e:bb:8b:7c:96:f4:cb:4a:b6:c9:81: 8f:33:03:54:e2:ac:54:32:44:d0:76:cc:09:3b:19:7c:15:da: ba:b2:97:fc:92:82:8b:dd:8f:92:e3:f5:60:6b:e4:8f:9c:91: 16:44:57:5a:69:ec:0f:21:aa:f7:82:69:e0:4a:2f:05:16:fd: 13:7c:a4:f1:3d:1d:2c:b6:3e:cf:1d:a5:4d:5c:b4:ca:50:67: c8:01:d2:c6:d5:e0:cc:8d:68:47:68:7c:32:3f:a6:3b:f2:46: df:dd:b3:12:58:45:07:65:f4:bf:84:67:ce:f2:86:ee:5a:9a: 65:12:b7:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZhIJYTeyaF7Zy0KriR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZDVlYWUxMzFjM2IxMDg4ZmZiMDIzNzk4MGQ2ZWUxODg5 NjY4YzYwHhcNMjUxMjA2MDgwMDU0WhcNMjUxMjA3MDgwMDU0WjAzMTEwLwYDVQQD EygyNWFlMDljNmEwOThiZjI4Y2I4ODZhMjc1MTI2YzhlMTdiYjZiZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOuY6NcbbsfmdtJUZ4QxM4RY5zlj SADJjKCMCr2cl2akBrnfViaxnEiVEUORoA/CswhZfP5qdkDQhDOfZTejqQ/ybKSi 9Tk5k6c0fyYPvbO+VDNhhDBeRxE0blvUEGqeaz4V9t88+D5RtKj4b1f/2KhQdvso BSGKksmky6C48JD4ba+hZG7cR5pMo4WDbjIz8ZPFEBllTm+6S81Vo90PHsreVs5a UQVeX4DaZO6LKyyJtRbKPSG3UG/zquPJap1OVYqrRPfGyHOMqHRRvnOiwa0jb9SH 0WvqvOzFulzIKkd6WFSDvkfSzl/Ws7lm4YXTwEXE7CtaVtPriubvTtYTQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWuCcagmL8oy4hqJ1EmyOF7tr5jMB8GA1UdIwQY MBaAFNHV6uExw7EIj/sCN5gNbuGIlmjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMmVhZGYtNTNiNy00MjhhLTgxZWQt OWRhMmNmNGU2MDY1LzEvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xMmVhZGYtNTNiNy00MjhhLTgxZWQtOWRhMmNmNGU2MDY1 LzEvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMEPXSvx ottKppP8V3cJoKUZrScpfoOCk2MH7dlkamkbDnFzNTHqry2lpmmg2y6xHw5niCsl Swgal7y6ZUWXeFRp5OQbtc8+4AQMEFnM4BTV1NG8Wxv2oevZQun8XgQSX0Nf4UMb hu/prspqaWm/B8GghjRswDBnEvQkNIgflYaJLd7GaG67i3yW9MtKtsmBjzMDVOKs VDJE0HbMCTsZfBXaurKX/JKCi92PkuP1YGvkj5yRFkRXWmnsDyGq94Jp4EovBRb9 E3yk8T0dLLY+zx2lTVy0ylBnyAHSxtXgzI1oR2h8Mj+mO/JG392zElhFB2X0v4Rn zvKG7lqaZRK37w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:08 2025 by rpki-client