This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json) Hash identifier: j21xF/Q3DfnfWptN61hf1QblB/Av2yvfzOPJmXonztY= Subject key identifier: 0A:F3:42:2D:D2:4E:8C:61:6F:E5:22:65:40:86:5A:E3:61:33:EC:DD Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40 Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40 Certificate serial: 019B31C3B13FEE9B2999C9C1E010CC5604D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft Manifest number: 0717 Signing time: Thu 18 Dec 2025 14:01:06 +0000 Manifest this update: Thu 18 Dec 2025 14:01:06 +0000 Manifest next update: Fri 19 Dec 2025 14:01:06 +0000 Files and hashes: 1: 0i_jhQqN2iNg5AEP50J1N6ocU14.roa (hash: dte6GhHBF0dhj/nHMGGQvO/MzVf6vGP1TT8x/x47jYs=) 2: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: 6/ewyOgwaQKqDZXGeB952yqDNPMzYHob+rjuOQSCQ5Q=) 3: wH2BXhQbp4RbWEqazf0ETM0OAOI.roa (hash: WPj1rnPevOFK6Wz2Mo2etzdEIyu2IX1IvghxSjU5v1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:b1:3f:ee:9b:29:99:c9:c1:e0:10:cc:56:04:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40 Validity Not Before: Dec 18 14:01:06 2025 GMT Not After : Dec 19 14:01:06 2025 GMT Subject: CN=0af3422dd24e8c616fe5226540865ae36133ecdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:28:e4:64:67:ff:4d:0f:f9:e5:e6:74:6a:5e: 55:fb:f7:ed:14:36:9e:a3:c3:70:b9:6f:13:18:d4: ec:a7:8f:ac:8e:f3:54:fe:63:15:2e:69:9a:99:ce: 85:1c:3c:9d:b3:c4:61:47:d6:2d:f5:15:d8:23:4e: 54:9c:bb:48:03:8f:fb:27:e3:cc:dc:65:83:b4:a3: 9e:f4:57:98:93:08:fb:e9:e4:bf:be:14:ae:fd:59: aa:36:85:3f:ab:3b:5c:6b:f9:d3:dc:02:9b:b6:d2: 61:a3:0f:2a:36:16:11:fc:9c:8f:f4:93:26:00:c3: e0:88:7f:00:7e:b4:13:1f:a7:fa:15:db:bd:eb:3d: ff:8d:1a:4c:45:0b:5a:13:e4:fa:3c:f5:87:1b:3d: c3:d7:0a:d5:21:e2:fe:00:cb:03:2c:45:eb:d9:5a: 1e:af:41:a8:40:97:63:7c:43:92:7b:ba:22:c7:d1: 88:48:ce:0b:53:c2:30:5e:b7:df:56:40:82:48:de: 5c:ba:89:42:c8:5e:0c:23:18:be:46:be:6c:19:8a: 4c:12:e4:f3:a8:7b:6a:84:36:b1:6e:04:f6:82:3c: 15:c6:3b:4d:77:62:d6:de:b8:87:a9:b3:62:03:8c: 4b:a7:89:31:18:f6:db:5b:8f:8e:9d:dd:30:0f:2a: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F3:42:2D:D2:4E:8C:61:6F:E5:22:65:40:86:5A:E3:61:33:EC:DD X509v3 Authority Key Identifier: keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f1:25:69:d0:36:22:24:1c:72:c5:47:ab:41:be:34:1b:23: f0:4d:91:07:9a:db:ce:23:4a:05:1e:cf:ca:24:30:9b:df:03: f9:80:20:4c:ed:c5:df:9e:41:07:97:ba:5d:d6:7f:35:04:a7: 15:18:8a:be:f4:f4:70:b1:f1:27:85:60:be:1e:42:3f:fd:46: b9:b1:55:15:b5:cc:22:58:34:fb:31:aa:9d:de:09:9a:91:40: 73:74:b3:4d:66:c1:1e:53:4a:73:93:8a:29:36:82:e9:d3:b5: 1e:98:93:a7:97:a9:ec:87:1f:78:a2:cf:38:2d:29:09:27:b1: e1:d8:f2:50:83:73:49:06:fc:98:ea:ed:a4:dc:5f:83:63:a8: f6:6f:7a:17:6d:a8:24:bf:b8:c6:ba:80:4c:2f:61:95:66:e9: 66:cb:72:5d:d4:54:78:7a:57:ef:2a:5b:ac:27:96:c9:f1:50: fa:59:05:86:dc:87:f6:0e:83:00:9b:2d:11:be:d6:c2:a9:bb: d0:33:4f:74:de:bb:f1:72:10:fe:55:f1:69:d3:07:b8:59:08: bc:c7:b7:f0:06:52:41:2e:10:ac:f3:a5:e5:c5:b6:39:83:6c: bc:df:12:ac:ac:86:38:3b:80:38:c3:55:7a:99:40:80:0e:50: 45:1b:77:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw7E/7pspmcnB4BDMVgTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNDMyMmIyZDBhNzk0ZmQwNzZiODVlOGRjNTc4YWJiMGQw M2VjNDAwHhcNMjUxMjE4MTQwMTA2WhcNMjUxMjE5MTQwMTA2WjAzMTEwLwYDVQQD EygwYWYzNDIyZGQyNGU4YzYxNmZlNTIyNjU0MDg2NWFlMzYxMzNlY2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCjkZGf/TQ/55eZ0al5V+/ftFDae o8NwuW8TGNTsp4+sjvNU/mMVLmmamc6FHDyds8RhR9Yt9RXYI05UnLtIA4/7J+PM 3GWDtKOe9FeYkwj76eS/vhSu/VmqNoU/qztca/nT3AKbttJhow8qNhYR/JyP9JMm AMPgiH8AfrQTH6f6Fdu96z3/jRpMRQtaE+T6PPWHGz3D1wrVIeL+AMsDLEXr2Voe r0GoQJdjfEOSe7oix9GISM4LU8IwXrffVkCCSN5cuolCyF4MIxi+Rr5sGYpMEuTz qHtqhDaxbgT2gjwVxjtNd2LW3riHqbNiA4xLp4kxGPbbW4+Ond0wDyo7iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArzQi3SToxhb+UiZUCGWuNhM+zdMB8GA1UdIwQY MBaAFNJDIrLQp5T9B2uF6NxXirsNA+xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85N2MzNTMtMGMzNi00MDY2LWE1NmIt MTM5YTQ5NmNkNTljLzEvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy85N2MzNTMtMGMzNi00MDY2LWE1NmItMTM5YTQ5NmNkNTlj LzEvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPEladA2 IiQccsVHq0G+NBsj8E2RB5rbziNKBR7PyiQwm98D+YAgTO3F355BB5e6XdZ/NQSn FRiKvvT0cLHxJ4Vgvh5CP/1GubFVFbXMIlg0+zGqnd4JmpFAc3SzTWbBHlNKc5OK KTaC6dO1HpiTp5ep7IcfeKLPOC0pCSex4djyUINzSQb8mOrtpNxfg2Oo9m96F22o JL+4xrqATC9hlWbpZstyXdRUeHpX7ypbrCeWyfFQ+lkFhtyH9g6DAJstEb7Wwqm7 0DNPdN678XIQ/lXxadMHuFkIvMe38AZSQS4QrPOl5cW2OYNsvN8SrKyGODuAOMNV eplAgA5QRRt3uw== -----END CERTIFICATE-----Generated at Thu Dec 18 20:32:26 2025 by rpki-client