This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json) Hash identifier: DNauLvijz+Udvt13SAkaPYtgEDHNr6F+5STn+JM+5IM= Subject key identifier: 7F:86:2F:F7:9A:B5:FC:D6:29:47:C7:FC:FD:73:0B:BE:7F:93:12:47 Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad Certificate serial: 019AF087F05B0A9145AAE905EB73FC31B146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft Manifest number: 175D Signing time: Fri 05 Dec 2025 22:00:31 +0000 Manifest this update: Fri 05 Dec 2025 22:00:31 +0000 Manifest next update: Sat 06 Dec 2025 22:00:31 +0000 Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: Mulf6VVvSf/gnnKH9LBfZEQ3rXeNdcGDNaNknjaU3TM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f0:5b:0a:91:45:aa:e9:05:eb:73:fc:31:b1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad Validity Not Before: Dec 5 22:00:31 2025 GMT Not After : Dec 6 22:00:31 2025 GMT Subject: CN=7f862ff79ab5fcd62947c7fcfd730bbe7f931247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b2:ca:68:44:9e:be:79:43:95:19:2d:4c:cf: b0:7f:41:7a:65:89:66:75:48:a2:fa:1b:a9:cf:96: 83:4e:04:64:8f:1e:97:42:27:5e:26:fb:76:ae:46: 38:12:c1:74:ed:6d:9b:88:a1:6d:d2:d7:ab:f1:0b: 72:15:9f:12:53:fe:f8:2d:ed:5e:2c:de:cb:ce:1a: 08:95:bb:9f:c2:57:22:24:aa:b9:14:ef:46:02:56: 12:c1:26:bc:fc:56:a0:a3:49:6e:05:3c:81:c4:cb: 14:3b:25:82:89:27:e2:1c:aa:56:40:09:32:07:aa: 6d:19:e8:c5:06:ea:53:c0:39:ef:64:27:9c:a7:bb: 04:3e:e3:bb:b6:87:e7:24:00:70:38:c4:5c:fe:9c: c6:df:62:28:3e:c6:93:f8:31:f2:e5:de:6c:bf:ee: 36:01:ea:49:76:3b:1f:f7:20:5d:c2:10:fe:2a:d8: 94:e4:1c:26:ce:5d:a5:0d:e5:73:a3:46:4e:35:c9: e6:66:eb:23:5b:0a:cb:b8:a2:24:1e:32:e3:d6:02: 12:b6:0d:48:f8:87:b0:ab:be:80:9b:82:9e:e5:d6: c5:53:2c:7a:1a:5a:17:ab:a5:d1:b4:65:f1:bc:bf: 3d:64:86:7b:81:98:72:a0:4f:23:d0:a0:03:7f:72: 54:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:86:2F:F7:9A:B5:FC:D6:29:47:C7:FC:FD:73:0B:BE:7F:93:12:47 X509v3 Authority Key Identifier: keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fc:3e:c8:13:21:9b:6e:fd:e5:99:41:4f:18:a1:2f:bc:23: c3:ca:61:10:b2:da:f2:6e:ab:76:0d:42:1d:3d:c7:68:04:86: d0:77:81:19:3d:34:89:cb:be:df:19:4d:68:78:d9:7d:a4:a1: e1:d3:c8:15:c6:b4:7b:a0:83:f4:63:01:2c:c6:fd:7f:b5:4f: d8:1d:05:d7:bf:e1:eb:73:83:6c:55:da:7d:2b:ac:14:97:fb: 80:4a:3a:f4:32:c7:cd:6a:94:26:93:6e:91:b4:7d:1f:94:cc: b6:1c:5d:07:eb:54:43:48:62:6d:37:9f:3e:2d:b4:04:06:c1: 81:5c:df:7e:ae:85:8c:64:48:34:43:51:df:4f:cf:3b:98:b5: 12:57:76:7d:d7:ac:e8:1e:ce:97:6d:76:d7:bf:8d:57:cd:a2: af:27:bf:e9:86:6e:0f:64:7e:a1:c2:b5:ec:68:d7:2b:8b:87: ab:ef:10:8d:95:5f:95:05:54:88:76:12:ae:5d:a0:9a:76:2a: f0:67:86:03:44:96:4a:79:c5:d8:c7:a9:b9:7d:ae:55:be:1a: 12:06:a8:ee:ee:09:b2:65:a9:87:0f:1c:4c:04:07:ab:8c:c3: 3f:19:9b:ac:23:5d:6f:2e:85:77:45:27:6f:bb:d5:ed:f5:4c: 25:90:3e:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/BbCpFFqukF63P8MbFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGE0ZDdhZjMzOWJmNTI1NTcyMzkzNzU1ZDFjZmIzM2Nk ZGI1YWQwHhcNMjUxMjA1MjIwMDMxWhcNMjUxMjA2MjIwMDMxWjAzMTEwLwYDVQQD Eyg3Zjg2MmZmNzlhYjVmY2Q2Mjk0N2M3ZmNmZDczMGJiZTdmOTMxMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLLKaESevnlDlRktTM+wf0F6ZYlm dUii+hupz5aDTgRkjx6XQideJvt2rkY4EsF07W2biKFt0ter8QtyFZ8SU/74Le1e LN7LzhoIlbufwlciJKq5FO9GAlYSwSa8/Fago0luBTyBxMsUOyWCiSfiHKpWQAky B6ptGejFBupTwDnvZCecp7sEPuO7tofnJABwOMRc/pzG32IoPsaT+DHy5d5sv+42 AepJdjsf9yBdwhD+KtiU5Bwmzl2lDeVzo0ZONcnmZusjWwrLuKIkHjLj1gIStg1I +Iewq76Am4Ke5dbFUyx6GloXq6XRtGXxvL89ZIZ7gZhyoE8j0KADf3JUlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+GL/eatfzWKUfH/P1zC75/kxJHMB8GA1UdIwQY MBaAFNCKTXrzOb9SVXI5N1XRz7M83bWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMt ZDVhMWVhOWVkYjA4LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMtZDVhMWVhOWVkYjA4 LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvw+yBMh m2795ZlBTxihL7wjw8phELLa8m6rdg1CHT3HaASG0HeBGT00icu+3xlNaHjZfaSh 4dPIFca0e6CD9GMBLMb9f7VP2B0F17/h63ODbFXafSusFJf7gEo69DLHzWqUJpNu kbR9H5TMthxdB+tUQ0hibTefPi20BAbBgVzffq6FjGRINENR30/PO5i1Eld2fdes 6B7Ol21217+NV82irye/6YZuD2R+ocK17GjXK4uHq+8QjZVflQVUiHYSrl2gmnYq 8GeGA0SWSnnF2MepuX2uVb4aEgao7u4JsmWphw8cTAQHq4zDPxmbrCNdby6Fd0Un b7vV7fVMJZA+sA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:12 2025 by rpki-client