This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json) Hash identifier: JrGKovpt+GIMPEUSuckYleZ0TZKe1UD+54xkfurOa5o= Subject key identifier: 6B:AD:76:68:A8:45:21:AC:75:87:B8:18:C2:DE:B5:B2:5E:8A:95:8D Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03 Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403 Certificate serial: 019AF19ABF5273375D640A884F738B647F28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:00:41 +0000 Manifest this update: Sat 06 Dec 2025 03:00:41 +0000 Manifest next update: Sun 07 Dec 2025 03:00:41 +0000 Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: MJlWlVO+kaQUV2PxSHNlpmMGY2hf9OIuTkBvyvgLbFc=) 2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=) 3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bf:52:73:37:5d:64:0a:88:4f:73:8b:64:7f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403 Validity Not Before: Dec 6 03:00:41 2025 GMT Not After : Dec 7 03:00:41 2025 GMT Subject: CN=6bad7668a84521ac7587b818c2deb5b25e8a958d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:f0:83:1d:03:94:79:92:ba:f1:d7:3d:a7: 8f:af:4d:47:0f:19:5f:27:eb:7f:ca:cc:ff:0a:5c: a9:bf:6b:5a:c0:80:fa:1b:90:c9:54:8e:b2:6c:28: 0f:63:cb:72:e2:07:e0:30:af:2e:73:9b:c9:4a:67: ce:33:03:05:72:b9:e8:f3:1d:7f:ab:12:17:c2:2c: d2:78:c1:55:95:ad:ac:05:64:b3:ef:ea:09:43:6f: 05:14:04:47:a9:0c:c1:aa:2b:9f:35:a9:48:b1:2f: 9d:dc:41:63:83:21:5a:64:1d:b5:54:84:f0:ca:63: 34:18:e3:08:34:b6:68:a9:97:f6:0e:b5:41:8a:e3: f4:f1:d5:bc:08:81:3e:96:1f:f7:94:74:fe:d2:ae: ba:d5:79:0c:ad:22:ff:ae:06:d0:6f:bc:9a:95:4b: 03:a6:36:9a:09:c3:82:e9:4b:18:7b:ae:c4:36:ea: d1:c6:92:d3:92:f5:ca:bc:dd:37:a8:44:ac:41:34: 35:eb:b5:ea:75:94:58:eb:0d:41:05:36:58:50:ff: 24:4d:5e:92:49:33:1c:b1:35:fc:ef:9e:e3:f4:67: 8a:ba:76:6a:35:2d:35:a7:43:52:8f:31:bf:dd:3e: ef:a3:8d:a3:b8:0c:9c:ff:2b:5a:80:f0:05:0d:39: cd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AD:76:68:A8:45:21:AC:75:87:B8:18:C2:DE:B5:B2:5E:8A:95:8D X509v3 Authority Key Identifier: keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:21:cc:e8:c8:66:20:e4:58:cd:fe:2a:3b:9c:8d:6f:2f:07: 02:d2:97:72:fb:ca:ed:42:3e:de:f1:12:e5:d0:a1:79:5d:19: b9:9d:63:fc:17:ed:e9:5c:a6:16:d3:6c:cd:12:37:83:a3:37: 1a:c8:3e:45:42:86:1f:68:49:16:d2:2c:05:36:21:f2:e8:b4: 70:ea:5b:88:80:ea:ab:ed:48:ea:96:33:83:8b:6d:87:5f:cd: e6:60:47:fa:7b:d3:82:a5:71:fd:07:d5:fa:01:87:69:72:33: 47:bb:cd:fc:dd:ce:34:f6:5c:e5:cb:bf:f2:0c:74:00:a9:a8: 52:2e:13:f1:9c:ec:c6:6a:dd:9a:44:22:42:30:15:47:47:c9: 36:c2:ff:5b:94:d8:80:ae:b8:71:e6:72:85:1f:df:8e:d0:c5: b8:a2:de:a4:f2:3c:5f:5f:e6:3f:dc:aa:58:16:04:48:8f:c7: 95:0b:4f:25:bf:94:a1:52:1d:36:aa:74:e6:ed:66:78:73:f6: 82:24:57:bb:4a:b3:c3:4c:58:ff:e0:90:6e:bf:12:5b:f8:6e: 95:8d:7c:6e:bb:f2:ca:f4:dc:e0:18:ca:85:af:e0:a4:c6:49: 4a:e7:80:36:66:6f:53:5f:aa:df:a3:b2:72:b7:7b:43:e5:94: a7:21:0b:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmr9SczddZAqIT3OLZH8oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMDEwZGEzNTc2MjQyMzI0Y2VmYjJjODFjMTMzOWE2YzBl M2I0MDMwHhcNMjUxMjA2MDMwMDQxWhcNMjUxMjA3MDMwMDQxWjAzMTEwLwYDVQQD Eyg2YmFkNzY2OGE4NDUyMWFjNzU4N2I4MThjMmRlYjViMjVlOGE5NThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGbwgx0DlHmSuvHXPaePr01HDxlf J+t/ysz/Clypv2tawID6G5DJVI6ybCgPY8ty4gfgMK8uc5vJSmfOMwMFcrno8x1/ qxIXwizSeMFVla2sBWSz7+oJQ28FFARHqQzBqiufNalIsS+d3EFjgyFaZB21VITw ymM0GOMINLZoqZf2DrVBiuP08dW8CIE+lh/3lHT+0q661XkMrSL/rgbQb7yalUsD pjaaCcOC6UsYe67ENurRxpLTkvXKvN03qESsQTQ167XqdZRY6w1BBTZYUP8kTV6S STMcsTX8757j9GeKunZqNS01p0NSjzG/3T7vo42juAyc/ytagPAFDTnNswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGutdmioRSGsdYe4GMLetbJeipWNMB8GA1UdIwQY MBaAFNEBDaNXYkIyTO+yyBwTOabA47QDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NzdiMTEtNzAwOS00ODZjLTkwMTAt YTcwNDEyZmJjODMyLzEvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81NzdiMTEtNzAwOS00ODZjLTkwMTAtYTcwNDEyZmJjODMy LzEvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSHM6Mhm IORYzf4qO5yNby8HAtKXcvvK7UI+3vES5dCheV0ZuZ1j/Bft6VymFtNszRI3g6M3 Gsg+RUKGH2hJFtIsBTYh8ui0cOpbiIDqq+1I6pYzg4tth1/N5mBH+nvTgqVx/QfV +gGHaXIzR7vN/N3ONPZc5cu/8gx0AKmoUi4T8ZzsxmrdmkQiQjAVR0fJNsL/W5TY gK64ceZyhR/fjtDFuKLepPI8X1/mP9yqWBYESI/HlQtPJb+UoVIdNqp05u1meHP2 giRXu0qzw0xY/+CQbr8SW/hulY18brvyyvTc4BjKha/gpMZJSueANmZvU1+q36Oy crd7Q+WUpyELRA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:25 2025 by rpki-client