This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json) Hash identifier: csReumrx545dgciX2KqgK793C9MSIP0sSEOHBsoCLjQ= Subject key identifier: 0D:0A:47:B2:FF:B0:B0:4D:44:0E:24:D3:4E:6C:B5:87:BA:4D:C7:D6 Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d Certificate serial: 019AF240146B68EEEC5EF087BF901ACD511C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:01:17 +0000 Manifest this update: Sat 06 Dec 2025 06:01:17 +0000 Manifest next update: Sun 07 Dec 2025 06:01:17 +0000 Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: UgjTi0ntTR6/M7TV6qcrLQ1t3CBQ/YPT1s1VD3g4HmU=) 2: yWi1Y-nakOmyfRqesRZIzBZCSpo.roa (hash: XIYZfLdl8kZlRiSAj90PT17pvRJ8h9U9zRjI6i+BCkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:14:6b:68:ee:ec:5e:f0:87:bf:90:1a:cd:51:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d Validity Not Before: Dec 6 06:01:17 2025 GMT Not After : Dec 7 06:01:17 2025 GMT Subject: CN=0d0a47b2ffb0b04d440e24d34e6cb587ba4dc7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:cd:c8:4c:25:d3:4a:7b:89:cd:e0:70:df:c9: fd:e3:8f:32:41:31:89:ae:20:64:92:90:bf:3c:bc: 76:a8:cd:8b:1f:46:55:de:21:80:f8:38:5c:f7:4b: 2c:c0:93:c1:5e:de:0e:d6:69:b6:36:fa:bd:f7:d0: e2:6a:c3:4a:f6:7e:e5:c1:2f:31:a3:31:99:66:27: 27:ac:04:6c:9a:04:dd:49:20:88:27:b4:1e:10:a9: ab:89:12:6d:d9:14:15:53:23:6f:b9:89:b3:e9:a3: 94:08:b7:68:9b:74:ff:ef:1a:37:26:c6:14:ff:30: 57:7c:28:19:17:c2:6e:c3:8f:c5:1c:bd:9c:33:10: 3b:2b:45:44:d0:65:08:f1:22:47:3b:f4:f5:fa:01: e5:fc:77:ed:dd:78:b8:23:f6:dc:72:83:74:3b:2d: f7:da:0f:b5:1b:d0:62:c8:6f:2b:59:22:c8:98:5f: 7e:01:31:e0:bf:db:2c:b9:89:2a:8c:54:a1:28:e7: e7:a2:6b:8a:66:c6:de:15:b8:ab:12:95:ab:b0:44: 2f:31:ee:cf:db:fe:4c:91:53:43:a9:97:d0:d3:65: 3e:be:fc:de:53:05:c2:3c:92:b3:d0:71:de:79:f5: 8d:3b:90:45:a8:6c:20:85:e2:f5:da:f9:8f:7e:63: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0A:47:B2:FF:B0:B0:4D:44:0E:24:D3:4E:6C:B5:87:BA:4D:C7:D6 X509v3 Authority Key Identifier: keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9b:51:fe:e6:a3:51:19:a2:4f:fe:50:f0:ad:bf:e8:a8:3c: e7:5d:7a:7c:42:5a:f2:8b:a0:65:9f:da:3e:be:26:61:4f:2a: ed:a5:58:53:9e:46:17:0a:ee:d3:d1:d4:41:32:2f:47:5a:f3: 64:30:60:e0:a5:f9:9f:be:d6:f2:4b:a0:c7:a2:01:97:4f:3f: a8:ef:c4:a7:63:21:7b:8a:6d:c5:90:d9:d7:a9:ff:5c:93:0d: 3a:e3:ab:22:4e:dd:1e:59:04:95:f9:37:c4:dc:22:9b:82:2b: c1:bd:4f:1a:7b:7e:9f:3d:b2:6a:d3:9e:7d:2a:df:93:40:e2: ef:a0:12:cb:6e:5c:0e:17:b4:ee:dd:96:d0:25:2f:df:0d:54: fd:b8:ee:33:aa:11:22:59:1c:1e:75:23:7c:90:e3:1f:22:ba: 6f:2f:bf:39:d0:1f:ab:bc:7a:e3:ba:cc:0e:29:f1:32:3b:dd: ca:8d:af:a7:45:5c:c6:77:8d:e2:53:aa:b9:19:de:53:6d:e5: 5b:95:06:c3:38:98:af:0f:0d:d0:f6:1e:bc:fd:ad:32:2b:18: ed:c5:74:48:bc:22:cc:f4:a0:07:97:7b:71:66:87:b1:91:11: f6:be:fb:c6:f0:5e:8a:31:6d:d5:88:a7:23:eb:b7:10:1f:47: 17:e5:65:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBRraO7sXvCHv5AazVEcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWRiYjYxMjM3ODFmZjBlMzU0MTM0NDZhYzc5MzFjZmY0 YTQ5MGQwHhcNMjUxMjA2MDYwMTE3WhcNMjUxMjA3MDYwMTE3WjAzMTEwLwYDVQQD EygwZDBhNDdiMmZmYjBiMDRkNDQwZTI0ZDM0ZTZjYjU4N2JhNGRjN2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6M3ITCXTSnuJzeBw38n9448yQTGJ riBkkpC/PLx2qM2LH0ZV3iGA+Dhc90sswJPBXt4O1mm2Nvq999DiasNK9n7lwS8x ozGZZicnrARsmgTdSSCIJ7QeEKmriRJt2RQVUyNvuYmz6aOUCLdom3T/7xo3JsYU /zBXfCgZF8Juw4/FHL2cMxA7K0VE0GUI8SJHO/T1+gHl/Hft3Xi4I/bccoN0Oy33 2g+1G9BiyG8rWSLImF9+ATHgv9ssuYkqjFShKOfnomuKZsbeFbirEpWrsEQvMe7P 2/5MkVNDqZfQ02U+vvzeUwXCPJKz0HHeefWNO5BFqGwgheL12vmPfmNy/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0KR7L/sLBNRA4k005stYe6TcfWMB8GA1UdIwQY MBaAFNOtu2EjeB/w41QTRGrHkxz/SkkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMt Nzk4YWI3NzNlYWZhLzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMtNzk4YWI3NzNlYWZh LzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5tR/uaj URmiT/5Q8K2/6Kg85116fEJa8ougZZ/aPr4mYU8q7aVYU55GFwru09HUQTIvR1rz ZDBg4KX5n77W8kugx6IBl08/qO/Ep2Mhe4ptxZDZ16n/XJMNOuOrIk7dHlkElfk3 xNwim4Irwb1PGnt+nz2yatOefSrfk0Di76ASy25cDhe07t2W0CUv3w1U/bjuM6oR IlkcHnUjfJDjHyK6by+/OdAfq7x647rMDinxMjvdyo2vp0VcxneN4lOquRneU23l W5UGwziYrw8N0PYevP2tMisY7cV0SLwizPSgB5d7cWaHsZER9r77xvBeijFt1Yin I+u3EB9HF+Vlxw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:27 2025 by rpki-client