This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json) Hash identifier: WEh2AOj6W2GPpXl4OyzKa16l7rBHVloxJyOODYJHlTI= Subject key identifier: 47:3B:09:44:E2:F3:B2:55:3F:C0:DF:BD:27:70:43:CD:39:1B:74:A3 Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf Certificate serial: 019AF49BD597A33B44FDC169B2FB7D5A65C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 17:00:44 +0000 Manifest this update: Sat 06 Dec 2025 17:00:44 +0000 Manifest next update: Sun 07 Dec 2025 17:00:44 +0000 Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: DsytAk6xogQebfx+SwuxGv8o2eaShGJWQYoEZPSj0kk=) 2: ye296n7TFw2U7qCSerBkbo7SsH0.roa (hash: m5pP+tHttyj1Oj+JBIbSiGDkTJLLn21rUnR9Ptw/3e0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:d5:97:a3:3b:44:fd:c1:69:b2:fb:7d:5a:65:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf Validity Not Before: Dec 6 17:00:44 2025 GMT Not After : Dec 7 17:00:44 2025 GMT Subject: CN=473b0944e2f3b2553fc0dfbd277043cd391b74a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:30:e9:27:d5:94:c9:ae:35:32:66:ab:fb: 31:85:d8:49:5a:c4:75:40:25:7c:90:36:9b:0a:80: 69:04:9e:1a:37:81:ad:ac:a4:31:12:7b:7e:d6:4d: 70:45:b6:79:84:33:e0:a1:9f:98:d5:ca:37:a4:d4: 2b:11:9d:4c:63:fa:a0:16:6c:bd:3a:64:e5:56:84: 33:60:d9:c5:37:d8:3f:af:8f:d5:79:4e:e9:b0:83: 75:b0:3f:70:0c:2e:a2:47:69:f1:23:7d:94:39:5b: ad:2b:90:b6:6b:f0:1e:11:15:f8:e0:18:4c:68:1d: 32:62:e6:ef:3f:06:e8:6d:84:4a:db:1e:ae:09:86: 10:f8:e2:04:92:17:53:87:ff:df:6d:5d:82:0c:45: 09:e3:7e:17:90:73:77:da:83:20:8f:57:7e:39:fc: cb:78:1d:38:5e:89:39:df:0b:c3:64:47:73:fd:07: ca:d7:91:4a:ad:ed:b3:f2:cd:b5:51:b5:b4:5c:01: fe:60:2f:20:4d:d7:e5:fc:e2:64:76:7a:ef:d7:c5: ff:ef:6f:77:56:2b:ab:d3:95:82:ab:82:ab:04:d7: eb:45:61:4d:14:a6:e8:12:69:88:7a:d4:3f:3a:33: b9:50:d2:68:5d:95:29:e4:60:5e:db:a7:37:bd:d0: cb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3B:09:44:E2:F3:B2:55:3F:C0:DF:BD:27:70:43:CD:39:1B:74:A3 X509v3 Authority Key Identifier: keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:71:bd:02:7b:65:06:09:84:56:ce:df:fd:77:5b:99:93:2b: 76:2b:97:9a:4e:93:78:ad:17:a4:cd:85:e7:cb:cd:5a:ad:d5: 1e:80:e9:40:80:4c:04:4e:55:5a:d1:77:ce:20:96:fe:fc:68: f3:f0:ca:bb:06:51:97:2b:8d:d3:63:7a:16:19:21:80:e2:8f: ea:75:78:c2:0b:11:61:10:5b:07:01:6f:b1:14:c2:0b:c5:fa: 78:ca:2b:0a:22:0f:50:3f:51:e5:34:aa:a8:a3:e6:ba:cc:4f: 70:48:9c:93:c6:d4:27:80:66:47:6f:77:48:a8:0c:c5:df:1f: 58:b1:d2:9e:f9:8e:d5:e8:a8:62:79:2b:ce:d8:78:70:3d:c2: b3:c2:f6:ec:b0:43:0e:ab:58:52:a3:94:5b:ae:97:ae:da:db: 13:b2:6c:9b:c7:a4:da:ce:80:9a:74:e9:eb:c4:b0:09:45:0b: 0e:99:ab:d5:7e:56:b0:22:49:b0:7f:bd:fa:7f:cf:b7:90:a2: f4:7c:36:6c:5b:19:af:59:67:f1:02:72:4a:52:07:e4:5c:a1: ea:c6:c2:ca:ff:ba:7e:8f:27:8a:ee:6c:9f:78:fc:8e:16:68: f4:29:97:1d:29:d4:06:0c:7c:a7:4c:82:59:bd:80:c5:ac:ba: e1:f1:66:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9WXoztE/cFpsvt9WmXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMjAxM2YzNTQ4YmUzZGNiM2RjYTE4ZDRmYzkzNzg5ZjQ0 ZjAzYmYwHhcNMjUxMjA2MTcwMDQ0WhcNMjUxMjA3MTcwMDQ0WjAzMTEwLwYDVQQD Eyg0NzNiMDk0NGUyZjNiMjU1M2ZjMGRmYmQyNzcwNDNjZDM5MWI3NGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M4w6SfVlMmuNTJmq/sxhdhJWsR1 QCV8kDabCoBpBJ4aN4GtrKQxEnt+1k1wRbZ5hDPgoZ+Y1co3pNQrEZ1MY/qgFmy9 OmTlVoQzYNnFN9g/r4/VeU7psIN1sD9wDC6iR2nxI32UOVutK5C2a/AeERX44BhM aB0yYubvPwbobYRK2x6uCYYQ+OIEkhdTh//fbV2CDEUJ434XkHN32oMgj1d+OfzL eB04Xok53wvDZEdz/QfK15FKre2z8s21UbW0XAH+YC8gTdfl/OJkdnrv18X/7293 Viur05WCq4KrBNfrRWFNFKboEmmIetQ/OjO5UNJoXZUp5GBe26c3vdDLQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc7CUTi87JVP8DfvSdwQ805G3SjMB8GA1UdIwQY MBaAFNAgE/NUi+Pcs9yhjU/JN4n0TwO/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZDQzMWEtOTcwNi00ZjM4LTgwMGIt MmE2ODVmNzhiMjlkLzEvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZDQzMWEtOTcwNi00ZjM4LTgwMGItMmE2ODVmNzhiMjlk LzEvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknG9Antl BgmEVs7f/XdbmZMrdiuXmk6TeK0XpM2F58vNWq3VHoDpQIBMBE5VWtF3ziCW/vxo 8/DKuwZRlyuN02N6FhkhgOKP6nV4wgsRYRBbBwFvsRTCC8X6eMorCiIPUD9R5TSq qKPmusxPcEick8bUJ4BmR293SKgMxd8fWLHSnvmO1eioYnkrzth4cD3Cs8L27LBD DqtYUqOUW66XrtrbE7Jsm8ek2s6AmnTp68SwCUULDpmr1X5WsCJJsH+9+n/Pt5Ci 9Hw2bFsZr1ln8QJySlIH5Fyh6sbCyv+6fo8niu5sn3j8jhZo9CmXHSnUBgx8p0yC Wb2Axay64fFmwQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:21 2025 by rpki-client