This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json) Hash identifier: TnDflEsg8TLzS5rm88XVFnZ9nbiBhLrXX0K6QpHkOlA= Subject key identifier: 7C:55:46:23:C1:EB:EB:88:1E:AB:9A:4B:1B:00:46:6D:57:DD:AA:D0 Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92 Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492 Certificate serial: 019B1BE043B8FBDC75A7016AC706F604E5AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft Manifest number: 04A6 Signing time: Sun 14 Dec 2025 08:00:40 +0000 Manifest this update: Sun 14 Dec 2025 08:00:40 +0000 Manifest next update: Mon 15 Dec 2025 08:00:40 +0000 Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: YWGitYn1coq8H2q05g7ttLCtHsEiw+lq0BuTP018afA=) 2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=) 3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:43:b8:fb:dc:75:a7:01:6a:c7:06:f6:04:e5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492 Validity Not Before: Dec 14 08:00:40 2025 GMT Not After : Dec 15 08:00:40 2025 GMT Subject: CN=7c554623c1ebeb881eab9a4b1b00466d57ddaad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:6f:89:07:9a:aa:84:b1:36:11:c2:2a:23: f6:c1:03:74:c1:e3:6b:e2:4e:6c:34:ed:d3:88:14: 04:04:fa:bd:3b:c8:ab:4c:30:2e:4c:3e:31:51:87: 3d:e9:b8:c4:31:3d:b9:e4:cf:54:de:22:b5:2f:fa: 12:55:3a:1c:26:97:d7:d0:4b:ef:ac:bd:d4:e9:12: d0:4a:9b:10:ee:01:ee:93:6a:7d:c1:47:01:75:84: f1:00:3c:31:7f:9c:5c:df:fa:85:39:6e:a8:0f:b6: c1:10:7b:57:d9:ee:52:f5:42:7c:9b:3b:e8:de:4e: f6:29:44:5e:b9:18:73:94:c4:66:29:8a:57:2d:f6: 78:e2:2a:14:34:29:d6:2b:b3:6a:56:f7:d6:25:32: 73:95:57:7c:8c:fc:d7:b2:13:5b:77:f5:21:3b:e8: 41:09:86:00:4f:88:40:1d:bf:62:f7:4e:ee:c7:4d: 00:13:63:6b:7f:73:d2:7a:d9:a6:3e:c0:84:db:f1: c9:df:31:8b:f1:87:0c:e0:01:6c:34:42:c0:ac:07: 2c:e8:1a:57:6b:6a:29:8b:75:e0:3e:da:12:7a:c3: d8:89:25:64:31:41:44:d3:cc:b2:5a:8d:24:3b:ce: 5d:cd:95:e6:b6:41:d8:74:16:d9:e5:b7:3f:c0:9d: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:55:46:23:C1:EB:EB:88:1E:AB:9A:4B:1B:00:46:6D:57:DD:AA:D0 X509v3 Authority Key Identifier: keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:75:fa:a0:2a:8a:6b:ae:11:45:75:f3:d6:f4:5d:63:fe:8e: 4a:d3:04:ae:76:38:95:da:b7:56:1a:7f:e1:31:20:fa:27:9e: d5:9c:7e:c1:a0:b1:17:7b:a4:62:66:b1:7f:14:a9:e8:31:41: a0:d9:37:cf:42:96:6e:c0:c3:fc:9d:22:b9:d4:ec:36:cf:a8: c0:ef:f4:5c:fb:01:b9:1e:b6:67:b8:10:e5:ad:a1:e4:ec:d3: 4a:d1:bd:30:33:4c:5d:29:0c:5e:6b:09:01:d4:a9:40:46:36: 61:08:52:1b:6a:66:cc:c1:5a:20:a7:35:e7:36:4d:c5:57:9d: 8a:e6:34:22:28:98:83:bb:30:0f:43:9d:b7:4d:f5:7b:1b:01: 8a:06:f6:72:ec:fd:e3:d9:87:8f:24:7a:88:2c:d2:f9:a6:94: 4b:8c:a4:04:63:b0:ed:5b:af:26:f3:53:98:44:39:f7:19:2e: 78:f1:e0:9e:5a:50:46:eb:be:7a:c5:d1:ae:6c:2d:ad:c2:d5: 10:0a:0f:c6:fd:6b:55:cc:b6:09:19:48:62:ec:2e:71:df:a8: 7e:bf:97:0e:83:35:82:48:ae:59:d6:8e:1d:fb:61:c8:ce:45: a9:90:69:86:1c:82:d9:24:27:ed:7e:d0:0d:e0:81:fe:b6:a0: bd:5b:3a:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4EO4+9x1pwFqxwb2BOWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw MzU0OTIwHhcNMjUxMjE0MDgwMDQwWhcNMjUxMjE1MDgwMDQwWjAzMTEwLwYDVQQD Eyg3YzU1NDYyM2MxZWJlYjg4MWVhYjlhNGIxYjAwNDY2ZDU3ZGRhYWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNNviQeaqoSxNhHCKiP2wQN0weNr 4k5sNO3TiBQEBPq9O8irTDAuTD4xUYc96bjEMT255M9U3iK1L/oSVTocJpfX0Evv rL3U6RLQSpsQ7gHuk2p9wUcBdYTxADwxf5xc3/qFOW6oD7bBEHtX2e5S9UJ8mzvo 3k72KUReuRhzlMRmKYpXLfZ44ioUNCnWK7NqVvfWJTJzlVd8jPzXshNbd/UhO+hB CYYAT4hAHb9i907ux00AE2Nrf3PSetmmPsCE2/HJ3zGL8YcM4AFsNELArAcs6BpX a2opi3XgPtoSesPYiSVkMUFE08yyWo0kO85dzZXmtkHYdBbZ5bc/wJ3T3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxVRiPB6+uIHquaSxsARm1X3arQMB8GA1UdIwQY MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et MDYyYzg4ODJiYTcxLzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnX6oCqK a64RRXXz1vRdY/6OStMErnY4ldq3Vhp/4TEg+iee1Zx+waCxF3ukYmaxfxSp6DFB oNk3z0KWbsDD/J0iudTsNs+owO/0XPsBuR62Z7gQ5a2h5OzTStG9MDNMXSkMXmsJ AdSpQEY2YQhSG2pmzMFaIKc15zZNxVediuY0IiiYg7swD0Odt031exsBigb2cuz9 49mHjyR6iCzS+aaUS4ykBGOw7VuvJvNTmEQ59xkuePHgnlpQRuu+esXRrmwtrcLV EAoPxv1rVcy2CRlIYuwucd+ofr+XDoM1gkiuWdaOHfthyM5FqZBphhyC2SQn7X7Q DeCB/ragvVs6RA== -----END CERTIFICATE-----Generated at Sun Dec 14 14:39:51 2025 by rpki-client