This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json) Hash identifier: bUFk9Y/Iis1E4/mpGOgUVWFhTtkSorVIjwrik2vLYBk= Subject key identifier: 08:8E:03:C0:BF:9F:3F:F3:F2:84:92:8C:41:C2:DA:AC:73:09:36:31 Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8 Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8 Certificate serial: 019AF1D24DF0D73D1DBAE16C3D33FB422EEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft Manifest number: 03E6 Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: eKwXUjQbdHlWzvYWTvMSkvTrAboM2D1G00vsO7PEu7o=) 2: vwZ3qyY8j7AihfGsWYtA6mwINxQ.roa (hash: VBbCuPYUO8ASQ+6MrnY57WOdr+3+R3PhClJszE/T/CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4d:f0:d7:3d:1d:ba:e1:6c:3d:33:fb:42:2e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8 Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=088e03c0bf9f3ff3f284928c41c2daac73093631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:e6:a1:0f:73:cd:ca:f3:fc:cc:b5:6b:42: c0:12:4b:f8:09:2b:6b:d8:20:33:e9:94:1b:e0:c3: 57:df:0a:99:9f:e8:09:9e:82:a9:5d:81:e9:9b:23: 6f:54:1b:84:2d:b1:4c:13:3e:db:e7:91:fe:81:b6: ba:93:7c:c6:8b:d5:8e:51:45:31:d0:a6:a7:05:2f: 3d:a6:b0:07:09:a3:de:f5:09:ef:3e:4b:9a:ed:29: 29:6d:4d:60:2e:68:af:73:36:42:e4:0d:30:7e:68: 2c:ff:eb:58:fb:e3:3a:de:25:ec:a5:3c:07:2c:07: 3d:f9:98:2b:13:cb:77:6a:60:d6:65:fb:08:9c:bb: 9f:40:ba:20:a6:78:f2:52:80:4c:f1:19:3b:52:86: 1f:c6:69:3e:02:7f:1c:47:b3:4f:3f:ae:45:bd:af: 35:08:44:99:8b:e5:0d:84:18:fe:83:f5:3a:90:2c: 94:df:0c:ae:87:00:f7:c9:0f:f3:e1:fb:eb:0a:e5: 08:ba:b6:0b:b8:d9:95:c0:7c:f6:86:ad:fb:b2:2a: 26:7b:96:2a:9d:aa:58:90:4a:0c:f2:b9:a4:fc:5b: 75:f0:e3:73:5b:d1:e2:3a:3c:4b:b5:d0:45:a9:57: 77:0b:80:33:bf:48:7e:5d:96:51:cd:41:36:83:29: ae:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8E:03:C0:BF:9F:3F:F3:F2:84:92:8C:41:C2:DA:AC:73:09:36:31 X509v3 Authority Key Identifier: keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:05:6f:76:65:8a:88:29:05:57:20:26:3a:5b:4f:5c:2f:69: 76:77:30:5c:f5:94:7f:e7:20:86:10:27:43:e5:7a:35:6c:69: a9:ec:0d:2c:4f:2a:41:68:b6:fa:21:b1:a0:2f:f8:cd:7d:24: 1f:4d:18:98:e2:01:09:78:09:2a:34:6a:82:67:c8:ce:9e:e8: ae:05:7c:c7:a4:9e:cf:02:ab:f9:c9:ad:c2:d7:a0:60:d1:9d: 5e:fd:54:ba:8a:ba:f4:25:32:0a:b2:de:6a:3f:e5:b9:ea:aa: 4a:f7:ed:8a:f6:ce:1a:08:49:13:34:5e:90:4a:ac:f0:fd:0a: 67:61:8f:6e:86:26:2b:70:9a:39:30:f1:46:dd:04:d4:68:91: e9:82:26:7a:b9:6e:bc:67:5f:8b:fa:f0:41:ce:bd:c2:d8:f5: 73:67:11:4c:27:1f:a5:63:58:ae:83:3d:80:fd:40:1a:6e:6a: 37:fa:1b:39:52:a0:39:fc:10:39:f6:b1:c4:6b:80:6f:df:e1: 08:9c:f4:1e:bf:33:43:53:3c:60:71:71:7a:54:40:22:b1:f2: b8:32:07:27:7c:b5:ab:b4:b2:c3:a0:e6:5c:1d:8b:cd:8d:98: 09:9c:bf:12:2b:1f:83:fe:5a:5c:e3:a5:4f:f4:23:e1:52:56: f8:15:93:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0k3w1z0duuFsPTP7Qi7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNDg1MGY4MDY5ZGY2MmRjNTE1NWMwMmVkMWU2MmJmNTFj ZWRiYzgwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD EygwODhlMDNjMGJmOWYzZmYzZjI4NDkyOGM0MWMyZGFhYzczMDkzNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLLmoQ9zzcrz/My1a0LAEkv4CStr 2CAz6ZQb4MNX3wqZn+gJnoKpXYHpmyNvVBuELbFMEz7b55H+gba6k3zGi9WOUUUx 0KanBS89prAHCaPe9QnvPkua7SkpbU1gLmivczZC5A0wfmgs/+tY++M63iXspTwH LAc9+ZgrE8t3amDWZfsInLufQLogpnjyUoBM8Rk7UoYfxmk+An8cR7NPP65Fva81 CESZi+UNhBj+g/U6kCyU3wyuhwD3yQ/z4fvrCuUIurYLuNmVwHz2hq37siome5Yq napYkEoM8rmk/Ft18ONzW9HiOjxLtdBFqVd3C4Azv0h+XZZRzUE2gymuewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiOA8C/nz/z8oSSjEHC2qxzCTYxMB8GA1UdIwQY MBaAFNBIUPgGnfYtxRVcAu0eYr9RztvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMDk3ZDMtZDRiYS00MTMwLThlOTYt YWQ5NWViZmFhYWUyLzEvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kMDk3ZDMtZDRiYS00MTMwLThlOTYtYWQ5NWViZmFhYWUy LzEvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAVvdmWK iCkFVyAmOltPXC9pdncwXPWUf+cghhAnQ+V6NWxpqewNLE8qQWi2+iGxoC/4zX0k H00YmOIBCXgJKjRqgmfIzp7orgV8x6SezwKr+cmtwtegYNGdXv1Uuoq69CUyCrLe aj/lueqqSvftivbOGghJEzRekEqs8P0KZ2GPboYmK3CaOTDxRt0E1GiR6YImerlu vGdfi/rwQc69wtj1c2cRTCcfpWNYroM9gP1AGm5qN/obOVKgOfwQOfaxxGuAb9/h CJz0Hr8zQ1M8YHFxelRAIrHyuDIHJ3y1q7Syw6DmXB2LzY2YCZy/Eisfg/5aXOOl T/Qj4VJW+BWTxA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:52 2025 by rpki-client