This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft File: 0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json) Hash identifier: fWuUECz8mIOyPM27dTMZBFxth41S67SoCi9080fNMyk= Subject key identifier: 8A:24:59:58:9C:FB:E1:76:D8:BA:4A:24:6A:93:E4:A1:35:D0:1B:8F Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E Certificate issuer: /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e Certificate serial: 019AF1645B5B0F2381641C8F7F01A47C02E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:17 +0000 Manifest this update: Sat 06 Dec 2025 02:01:17 +0000 Manifest next update: Sun 07 Dec 2025 02:01:17 +0000 Files and hashes: 1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: jVdClhSgU30YAK1J3REuq++fH+4nN/d/m6kKxE6CzLs=) 2: 814d1F1Lpiv2ZmQt3nv-Q0MhR14.roa (hash: vJZyCty8aaf+QpA3OskD2b+GSFI6e+26K8I9XWLd+A4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5b:5b:0f:23:81:64:1c:8f:7f:01:a4:7c:02:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e Validity Not Before: Dec 6 02:01:17 2025 GMT Not After : Dec 7 02:01:17 2025 GMT Subject: CN=8a2459589cfbe176d8ba4a246a93e4a135d01b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0d:bd:5e:75:c4:f5:08:9a:b4:25:48:29:3b: 5f:c9:51:72:37:7e:6d:48:45:5f:d0:95:0e:bc:fa: 38:6a:1f:1d:65:e8:12:f1:18:6e:b0:e4:88:07:97: 8f:d2:92:b6:d1:84:38:8d:ba:ca:a6:6c:9c:de:56: a0:63:dc:95:0d:fb:c9:76:6e:7e:37:d0:39:d7:0f: 59:74:76:09:61:92:22:a5:70:6e:3d:00:13:ed:6e: 5c:55:42:e6:12:5b:24:28:9d:c4:23:e8:fb:18:66: 8a:b5:a8:a7:8a:0e:0c:b5:8e:64:52:01:00:d6:81: 90:31:81:8c:bf:e5:31:5f:61:4e:21:ee:28:4e:8e: dc:27:08:20:2b:7c:44:cb:1d:83:af:4e:46:0e:d6: 78:15:ff:86:53:7a:72:c4:a0:17:1d:d5:47:b0:59: ec:39:90:52:df:40:6b:76:af:3c:aa:40:75:40:78: 69:4b:37:0d:22:cb:10:0f:87:c3:f8:7e:b7:f1:3b: 81:1e:90:a1:5c:c0:3f:86:df:c7:11:eb:ad:54:ee: 36:6d:6b:2d:60:62:09:7f:13:24:de:0f:6a:90:2d: 59:13:75:e9:c0:e6:04:50:7b:f6:57:da:c2:81:0e: d1:2f:ae:cf:21:33:0a:ab:dd:0f:9f:c9:d2:66:58: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:24:59:58:9C:FB:E1:76:D8:BA:4A:24:6A:93:E4:A1:35:D0:1B:8F X509v3 Authority Key Identifier: keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:5f:32:e0:88:25:a3:81:10:42:7a:47:d3:bd:df:a6:45:10: 90:3e:1d:64:0e:6b:cf:83:d6:9c:5a:3f:88:df:77:4d:21:65: 5f:ab:db:fa:75:f9:10:2c:8b:13:19:34:14:27:b9:03:01:01: c7:ea:53:9b:5f:17:39:4e:ff:ad:90:d0:d0:5c:28:e0:05:72: 3c:3b:d1:db:0b:a0:8b:02:25:64:65:e8:03:dc:4e:e0:36:88: db:87:28:4f:c3:2b:a5:43:f1:97:3d:43:d7:db:3f:05:9b:e3: 25:e7:12:e9:f7:ac:0c:8d:de:5d:5a:4e:0d:85:61:32:ef:11: 1c:aa:e0:33:98:20:ab:ad:d3:26:6e:93:f1:55:81:f7:36:da: a9:4c:45:65:7a:15:68:4e:ae:0c:98:16:e5:bf:c6:85:57:cc: 31:19:52:63:4e:95:3f:04:c2:92:4b:c6:9e:03:8a:ad:bc:ac: 48:a6:ef:18:dc:5a:b0:27:03:85:cf:59:72:5f:61:5e:3c:16: 5f:7e:f4:ed:76:52:e5:0a:3c:62:79:24:57:23:ce:ad:e7:0b: 87:ba:e1:65:84:cb:1f:21:d4:20:f2:f0:7a:8d:cd:37:37:e1: c0:81:14:89:a5:5b:b0:ed:12:c6:b2:c9:ea:20:26:f9:cd:4e: 93:49:60:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFtbDyOBZByPfwGkfALlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZThkNGNiOGU0NDJlYzM4YTZiYzNmYTQwMGEyYTUxN2Nl ZTBkMWUwHhcNMjUxMjA2MDIwMTE3WhcNMjUxMjA3MDIwMTE3WjAzMTEwLwYDVQQD Eyg4YTI0NTk1ODljZmJlMTc2ZDhiYTRhMjQ2YTkzZTRhMTM1ZDAxYjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ29XnXE9QiatCVIKTtfyVFyN35t SEVf0JUOvPo4ah8dZegS8RhusOSIB5eP0pK20YQ4jbrKpmyc3lagY9yVDfvJdm5+ N9A51w9ZdHYJYZIipXBuPQAT7W5cVULmElskKJ3EI+j7GGaKtainig4MtY5kUgEA 1oGQMYGMv+UxX2FOIe4oTo7cJwggK3xEyx2Dr05GDtZ4Ff+GU3pyxKAXHdVHsFns OZBS30Brdq88qkB1QHhpSzcNIssQD4fD+H638TuBHpChXMA/ht/HEeutVO42bWst YGIJfxMk3g9qkC1ZE3XpwOYEUHv2V9rCgQ7RL67PITMKq90Pn8nSZljoHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIokWVic++F22LpKJGqT5KE10BuPMB8GA1UdIwQY MBaAFNPo1MuORC7DimvD+kAKKlF87g0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYt NWQ1ODcxMWYzNjYyLzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYtNWQ1ODcxMWYzNjYy LzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtl8y4Igl o4EQQnpH073fpkUQkD4dZA5rz4PWnFo/iN93TSFlX6vb+nX5ECyLExk0FCe5AwEB x+pTm18XOU7/rZDQ0Fwo4AVyPDvR2wugiwIlZGXoA9xO4DaI24coT8MrpUPxlz1D 19s/BZvjJecS6fesDI3eXVpODYVhMu8RHKrgM5ggq63TJm6T8VWB9zbaqUxFZXoV aE6uDJgW5b/GhVfMMRlSY06VPwTCkkvGngOKrbysSKbvGNxasCcDhc9Zcl9hXjwW X3707XZS5Qo8YnkkVyPOrecLh7rhZYTLHyHUIPLweo3NNzfhwIEUiaVbsO0SxrLJ 6iAm+c1Ok0lgCA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:53 2025 by rpki-client