This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json) Hash identifier: OMIR/LU9hRyjMC+ak7k++0R2ld/gqi40DMFiG5mZ/5s= Subject key identifier: 86:BF:2C:57:F8:9E:01:0D:08:F9:75:68:B6:7B:40:3D:F9:9B:CF:04 Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7 Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7 Certificate serial: 019B36B42AE1DBF9AE2A0ECFA8F615DF8D99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft Manifest number: 165E Signing time: Fri 19 Dec 2025 13:02:15 +0000 Manifest this update: Fri 19 Dec 2025 13:02:15 +0000 Manifest next update: Sat 20 Dec 2025 13:02:15 +0000 Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: f4lFcArErA5RTnG0wPTnBMUbljvfYEEmvyrqg1Rtp2w=) 2: FIvNNxujkeosaQmK-8zL99U8I-8.roa (hash: xdptKNwYHkOXesPFH1LxyuhIbU4UE4ZRfmuf1MyhTcI=) 3: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (hash: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:2a:e1:db:f9:ae:2a:0e:cf:a8:f6:15:df:8d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7 Validity Not Before: Dec 19 13:02:15 2025 GMT Not After : Dec 20 13:02:15 2025 GMT Subject: CN=86bf2c57f89e010d08f97568b67b403df99bcf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:16:1e:7e:2b:04:f9:a2:f1:a2:0c:50:ca: a1:de:f9:c1:7a:5d:75:b8:87:35:85:d0:b1:55:bc: 71:5e:a0:b0:34:20:62:fb:7a:67:07:7a:90:7a:b5: 93:31:3f:7f:4b:63:69:4e:93:db:de:fd:4f:b1:36: 35:2b:48:83:94:98:4b:9e:89:6c:88:29:48:c6:7e: df:5e:70:42:e8:db:4d:6b:bd:67:11:1a:de:70:54: 93:ce:1d:da:ab:de:f8:e1:60:7c:d1:0e:1c:19:91: 24:bf:db:e4:23:0b:48:3a:62:b8:60:ad:a6:c5:76: 33:d0:c9:87:31:69:f4:66:34:90:48:f0:77:fd:2b: 0a:e9:f6:41:3c:b6:40:86:62:df:99:ed:17:57:5d: fc:b2:bd:4e:e4:4a:f0:01:30:a4:c0:3a:1c:41:93: e6:57:60:69:a6:17:e7:f9:94:4c:0a:36:1c:16:62: 9f:c6:48:6c:3f:35:f3:9c:b7:49:31:ec:1c:50:9e: 40:2a:06:bc:b4:6c:fc:5e:26:71:60:e3:6d:4a:e5: 99:1e:ad:ad:23:3a:40:07:6d:70:7d:b6:3c:28:48: 56:ed:95:af:4d:81:74:ee:2d:d8:4a:63:50:fd:4c: 96:d7:f3:2f:72:51:9d:2b:77:77:76:a8:81:30:17: 23:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BF:2C:57:F8:9E:01:0D:08:F9:75:68:B6:7B:40:3D:F9:9B:CF:04 X509v3 Authority Key Identifier: keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:64:3c:44:c1:14:65:0e:d4:b4:fa:3c:03:b2:ed:4b:01:44: c5:ce:a6:c2:ed:fd:78:a6:9e:c9:ed:66:54:09:b3:4e:01:16: 09:bb:41:1a:7d:c3:fa:56:14:a7:b6:e2:94:c7:ce:d2:94:82: d5:cd:3f:88:05:22:10:55:c4:c0:f5:0f:a7:ec:f7:75:ad:b7: 2a:b1:5d:20:31:02:d1:3f:e6:b9:cd:b7:55:39:18:37:de:7d: e3:94:fd:d2:c0:d1:76:39:e8:bf:b3:ae:72:c4:57:3a:c4:23: f2:19:c2:46:c5:e0:1f:2b:a9:b3:eb:59:ac:76:6d:84:d9:0e: 80:2a:f0:bb:f6:b3:93:4d:4f:1e:c0:7c:f4:40:8a:a3:e1:2c: 34:b7:15:1b:36:5e:d8:24:93:5f:26:86:73:23:a0:2e:da:ef: 8e:42:fc:eb:bb:bf:87:1b:be:15:56:80:c8:80:d0:60:55:91: c7:5f:ce:25:81:32:40:c6:fe:89:4d:55:37:93:a0:85:cd:8b: 7c:07:37:17:29:c4:7e:b6:06:cd:8f:05:78:36:76:f3:e0:75: a6:5e:a1:42:24:27:4b:7e:48:98:12:c6:9b:da:55:a7:bf:c3: fb:56:8a:8c:54:46:7b:e8:25:97:29:04:68:86:d6:27:eb:9c: b0:00:ab:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tCrh2/muKg7PqPYV342ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzQ5MTMwOTRhMjEyNjhjNzNhNjc2NTNhMzczOGQ3M2U1 YzU5YTcwHhcNMjUxMjE5MTMwMjE1WhcNMjUxMjIwMTMwMjE1WjAzMTEwLwYDVQQD Eyg4NmJmMmM1N2Y4OWUwMTBkMDhmOTc1NjhiNjdiNDAzZGY5OWJjZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth8WHn4rBPmi8aIMUMqh3vnBel11 uIc1hdCxVbxxXqCwNCBi+3pnB3qQerWTMT9/S2NpTpPb3v1PsTY1K0iDlJhLnols iClIxn7fXnBC6NtNa71nERrecFSTzh3aq9744WB80Q4cGZEkv9vkIwtIOmK4YK2m xXYz0MmHMWn0ZjSQSPB3/SsK6fZBPLZAhmLfme0XV138sr1O5ErwATCkwDocQZPm V2Bpphfn+ZRMCjYcFmKfxkhsPzXznLdJMewcUJ5AKga8tGz8XiZxYONtSuWZHq2t IzpAB21wfbY8KEhW7ZWvTYF07i3YSmNQ/UyW1/MvclGdK3d3dqiBMBcjLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIa/LFf4ngENCPl1aLZ7QD35m88EMB8GA1UdIwQY MBaAFNHEkTCUohJoxzpnZTo3ONc+XFmnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAt MzNhODJhYjVmNTEzLzEvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAtMzNhODJhYjVmNTEz LzEvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWQ8RMEU ZQ7UtPo8A7LtSwFExc6mwu39eKaeye1mVAmzTgEWCbtBGn3D+lYUp7bilMfO0pSC 1c0/iAUiEFXEwPUPp+z3da23KrFdIDEC0T/muc23VTkYN95945T90sDRdjnov7Ou csRXOsQj8hnCRsXgHyups+tZrHZthNkOgCrwu/azk01PHsB89ECKo+EsNLcVGzZe 2CSTXyaGcyOgLtrvjkL867u/hxu+FVaAyIDQYFWRx1/OJYEyQMb+iU1VN5Oghc2L fAc3FynEfrYGzY8FeDZ28+B1pl6hQiQnS35ImBLGm9pVp7/D+1aKjFRGe+gllykE aIbWJ+ucsACrEQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:54:26 2025 by rpki-client