This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json) Hash identifier: v7lebHQN2k+BkVtVLUDA4XtP+uughdb46R+pzcpn8nw= Subject key identifier: EA:00:78:1C:CC:2F:25:58:7A:48:FF:A6:52:49:1E:2C:F5:CF:64:56 Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40 Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40 Certificate serial: 019AF5E5727350023F45EA884D63A63F9BD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft Manifest number: 06F8 Signing time: Sat 06 Dec 2025 23:00:46 +0000 Manifest this update: Sat 06 Dec 2025 23:00:46 +0000 Manifest next update: Sun 07 Dec 2025 23:00:46 +0000 Files and hashes: 1: 0i_jhQqN2iNg5AEP50J1N6ocU14.roa (hash: dte6GhHBF0dhj/nHMGGQvO/MzVf6vGP1TT8x/x47jYs=) 2: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: dS8ltqPyWg2dwcL1IxE1gx8KQWTeAbig5NtHVyhG6Q0=) 3: wH2BXhQbp4RbWEqazf0ETM0OAOI.roa (hash: WPj1rnPevOFK6Wz2Mo2etzdEIyu2IX1IvghxSjU5v1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:72:73:50:02:3f:45:ea:88:4d:63:a6:3f:9b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40 Validity Not Before: Dec 6 23:00:46 2025 GMT Not After : Dec 7 23:00:46 2025 GMT Subject: CN=ea00781ccc2f25587a48ffa652491e2cf5cf6456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:b4:c1:6c:f0:64:91:5b:f8:c5:3a:46:b1: 07:d2:22:60:bd:d5:ff:32:bf:a3:b2:dc:c9:d0:ee: 92:74:c9:e6:b2:ae:b2:06:8d:50:20:4f:62:3c:21: 62:3f:4a:18:e6:38:64:b8:b6:01:19:c5:a8:0f:5f: e5:ac:ba:3c:85:8f:5d:ba:7d:3e:26:c7:25:1a:7f: 03:be:06:bf:fe:de:a6:a5:3e:a4:17:6b:18:73:0e: 10:b2:17:f1:cb:d0:95:66:5a:fb:b7:f4:b8:5a:05: 0d:bf:39:83:b3:92:37:34:76:32:6a:b9:8b:40:e3: 3b:38:d7:da:84:ee:39:19:a0:42:e0:6c:89:d5:36: da:52:44:28:99:79:7f:c0:a2:9b:da:7d:b3:f1:ab: 56:a5:0e:e7:72:59:8c:c9:d5:3c:df:62:33:3b:40: e0:4a:48:3c:f2:eb:b1:0b:ae:8f:b4:88:5d:7a:9e: ef:e2:8c:cf:b7:d4:57:45:32:0e:c5:74:9a:f4:ee: 93:d8:75:3e:f4:b3:79:41:42:99:57:cd:38:ce:9a: 06:4f:95:e2:a3:45:3a:75:f7:7f:56:6f:45:b0:c8: f1:4b:db:4c:f9:24:a2:f0:28:f8:c8:77:7c:fb:63: 33:55:04:d5:23:42:05:64:c9:1a:a9:07:ce:45:ad: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:00:78:1C:CC:2F:25:58:7A:48:FF:A6:52:49:1E:2C:F5:CF:64:56 X509v3 Authority Key Identifier: keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e7:36:3e:8d:9c:72:d6:3a:ed:ef:d4:35:a3:23:a2:08:d0: 37:2a:08:8a:1d:6e:75:1e:06:b0:28:6e:17:62:3f:24:6b:58: ca:33:21:50:9f:f2:5c:f0:e4:27:70:a7:0b:f1:54:e4:ef:39: f4:e1:c4:93:f7:34:e7:88:9c:26:db:9e:bd:31:86:5b:87:e9: 42:39:08:94:8b:d7:05:df:4c:b2:d0:c3:6e:a2:c8:50:74:63: bd:ac:fa:96:8b:31:03:a3:f7:7e:ff:86:02:b2:80:7c:df:e2: b9:6b:5c:9e:89:be:c2:0d:cb:c8:e7:9f:c4:8b:5f:56:08:9f: a0:d4:e5:e4:50:1b:ea:19:b3:70:8c:24:53:41:56:3c:2f:93: 3b:4b:bc:5e:76:a0:85:48:99:21:66:d4:f5:a7:75:dd:af:82: 38:c6:99:0a:31:25:03:79:15:30:ad:a5:a1:8d:68:8a:37:fa: 2c:11:27:22:c1:34:97:07:a9:41:7a:81:36:ad:08:11:11:e3: f1:d2:bc:58:d9:ca:30:1c:e6:22:07:03:db:31:e7:f1:4c:f1: 09:a8:3b:2d:46:09:24:c9:fe:1d:c3:98:47:81:5b:cf:5a:e7: ae:0b:ea:19:c0:0d:1c:cf:4c:69:ea:79:9f:7f:a7:25:88:c5: d3:11:b6:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15XJzUAI/ReqITWOmP5vVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNDMyMmIyZDBhNzk0ZmQwNzZiODVlOGRjNTc4YWJiMGQw M2VjNDAwHhcNMjUxMjA2MjMwMDQ2WhcNMjUxMjA3MjMwMDQ2WjAzMTEwLwYDVQQD EyhlYTAwNzgxY2NjMmYyNTU4N2E0OGZmYTY1MjQ5MWUyY2Y1Y2Y2NDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxve0wWzwZJFb+MU6RrEH0iJgvdX/ Mr+jstzJ0O6SdMnmsq6yBo1QIE9iPCFiP0oY5jhkuLYBGcWoD1/lrLo8hY9dun0+ JsclGn8Dvga//t6mpT6kF2sYcw4Qshfxy9CVZlr7t/S4WgUNvzmDs5I3NHYyarmL QOM7ONfahO45GaBC4GyJ1TbaUkQomXl/wKKb2n2z8atWpQ7nclmMydU832IzO0Dg Skg88uuxC66PtIhdep7v4ozPt9RXRTIOxXSa9O6T2HU+9LN5QUKZV804zpoGT5Xi o0U6dfd/Vm9FsMjxS9tM+SSi8Cj4yHd8+2MzVQTVI0IFZMkaqQfORa1W6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoAeBzMLyVYekj/plJJHiz1z2RWMB8GA1UdIwQY MBaAFNJDIrLQp5T9B2uF6NxXirsNA+xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85N2MzNTMtMGMzNi00MDY2LWE1NmIt MTM5YTQ5NmNkNTljLzEvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy85N2MzNTMtMGMzNi00MDY2LWE1NmItMTM5YTQ5NmNkNTlj LzEvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjec2Po2c ctY67e/UNaMjogjQNyoIih1udR4GsChuF2I/JGtYyjMhUJ/yXPDkJ3CnC/FU5O85 9OHEk/c054icJtuevTGGW4fpQjkIlIvXBd9MstDDbqLIUHRjvaz6losxA6P3fv+G ArKAfN/iuWtcnom+wg3LyOefxItfVgifoNTl5FAb6hmzcIwkU0FWPC+TO0u8Xnag hUiZIWbU9ad13a+COMaZCjElA3kVMK2loY1oijf6LBEnIsE0lwepQXqBNq0IERHj 8dK8WNnKMBzmIgcD2zHn8UzxCag7LUYJJMn+HcOYR4Fbz1rnrgvqGcANHM9Maep5 n3+nJYjF0xG2dg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:21 2025 by rpki-client