This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json) Hash identifier: 69WA0auC9k7yEsnVgqPp+9GTs0vpjaArrUKUZX2zv0c= Subject key identifier: B8:3D:BF:3A:47:06:E7:F7:39:D5:FC:3F:54:35:3B:C0:A6:E6:0C:14 Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72 Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772 Certificate serial: 019B1012F9269168A8BC1AE9B87B9F850426 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft Manifest number: 0BC4 Signing time: Fri 12 Dec 2025 01:00:37 +0000 Manifest this update: Fri 12 Dec 2025 01:00:37 +0000 Manifest next update: Sat 13 Dec 2025 01:00:37 +0000 Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: CKinsX+yxa8bBZZpk6itd202JjGD/IkZS+sqZfJ/p0w=) 2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:12:f9:26:91:68:a8:bc:1a:e9:b8:7b:9f:85:04:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772 Validity Not Before: Dec 12 01:00:37 2025 GMT Not After : Dec 13 01:00:37 2025 GMT Subject: CN=b83dbf3a4706e7f739d5fc3f54353bc0a6e60c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:95:44:71:dd:fc:fa:31:33:fd:10:64:7a:1c: 0d:e9:5c:01:f8:0f:12:62:a9:19:76:48:ce:1d:d8: a9:04:b5:1a:a9:2f:34:af:e1:3c:4a:14:06:21:5a: b8:f9:29:e6:25:5d:33:4b:62:34:94:e2:b9:6a:1d: 4a:03:95:f7:5e:f3:ce:b7:18:49:e1:5a:8c:14:86: c5:bf:ff:ff:6d:45:09:35:b3:65:e1:fd:6e:aa:8f: 34:8e:fc:12:c7:85:c8:88:47:ee:b5:46:df:06:2e: e5:da:fb:50:ff:d1:9d:b7:d5:bf:96:0b:9a:43:1f: 5f:e6:1e:86:91:cf:1d:8a:68:c4:c2:61:e1:a2:f6: 40:8e:c7:3d:33:e7:fb:aa:9c:5f:c1:a5:01:ce:89: 50:77:3e:c1:11:1d:79:ff:c4:37:07:56:e7:53:96: 64:81:c6:6f:9f:fe:26:97:0f:c0:52:c1:85:37:55: f9:41:b1:6e:71:90:2e:26:70:2d:2c:aa:df:5d:03: d3:08:58:68:e7:8b:47:6c:08:93:b1:2c:e6:9e:81: 7b:54:e0:32:f6:68:86:2e:a3:9f:dc:f2:05:07:58: fa:54:17:6c:bb:25:42:b2:3e:c5:c5:49:2a:72:d0: 3c:12:c9:f3:91:e5:ee:46:85:1d:3c:31:1c:ed:93: b7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3D:BF:3A:47:06:E7:F7:39:D5:FC:3F:54:35:3B:C0:A6:E6:0C:14 X509v3 Authority Key Identifier: keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4b:88:81:47:4f:21:28:9b:88:b1:bf:60:48:c9:8c:76:51: 9b:01:e6:7f:64:49:a4:33:b4:89:4e:74:6e:22:59:dd:2f:f1: 85:29:2d:4d:76:0f:28:b3:27:87:3a:9c:45:55:e9:7c:28:f8: dc:b9:e7:ca:5d:dd:0a:b4:82:5d:46:5f:32:9b:de:4b:cb:71: ee:1c:37:ba:13:e6:51:f3:17:8b:2a:27:49:b0:34:c7:7f:bd: 42:79:d4:0e:cd:52:88:e7:7c:f7:92:65:5a:1e:dd:3b:81:70: 3c:f0:be:4b:61:4c:c8:ae:8b:07:31:22:f7:7a:61:b1:0d:e2: 85:b7:fe:e2:c0:3e:47:26:15:60:7b:70:02:ab:96:ce:a7:0a: db:8d:bc:f9:79:80:05:80:2c:15:5e:41:bd:17:5d:83:e5:d0: 2c:bc:9b:e0:f1:18:b5:d3:86:55:8c:0d:46:50:fb:73:7b:5f: 07:78:96:6f:6b:d2:34:b0:2e:2a:55:ac:07:97:8a:c5:d4:94: ba:fb:68:13:d6:f6:3a:80:c2:92:f4:d8:ab:bd:53:00:45:33: 1e:5b:75:16:fe:f8:ba:f6:d7:c3:14:3b:2e:3c:c7:a1:97:0c: 55:ef:42:82:71:0f:1f:f5:67:59:a7:91:8a:94:2f:6a:20:2e: 45:d9:8e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEvkmkWiovBrpuHufhQQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNjNhOWQ3MDIzYjNjYjAwMzI5MTJkY2FhYzljNTYzYzkw YTk3NzIwHhcNMjUxMjEyMDEwMDM3WhcNMjUxMjEzMDEwMDM3WjAzMTEwLwYDVQQD EyhiODNkYmYzYTQ3MDZlN2Y3MzlkNWZjM2Y1NDM1M2JjMGE2ZTYwYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75VEcd38+jEz/RBkehwN6VwB+A8S YqkZdkjOHdipBLUaqS80r+E8ShQGIVq4+SnmJV0zS2I0lOK5ah1KA5X3XvPOtxhJ 4VqMFIbFv///bUUJNbNl4f1uqo80jvwSx4XIiEfutUbfBi7l2vtQ/9Gdt9W/lgua Qx9f5h6Gkc8dimjEwmHhovZAjsc9M+f7qpxfwaUBzolQdz7BER15/8Q3B1bnU5Zk gcZvn/4mlw/AUsGFN1X5QbFucZAuJnAtLKrfXQPTCFho54tHbAiTsSzmnoF7VOAy 9miGLqOf3PIFB1j6VBdsuyVCsj7FxUkqctA8EsnzkeXuRoUdPDEc7ZO3YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLg9vzpHBuf3OdX8P1Q1O8Cm5gwUMB8GA1UdIwQY MBaAFONjqdcCOzywAykS3KrJxWPJCpdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDJPcDF3STdQTEFES1JMY3FzbkZZOGtLbDNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yZDUzMzctZGEyNC00Y2U4LWEzYjct YzMwMmMxMGVjNWMwLzEvNDJPcDF3STdQTEFES1JMY3FzbkZZOGtLbDNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8yZDUzMzctZGEyNC00Y2U4LWEzYjctYzMwMmMxMGVjNWMw LzEvNDJPcDF3STdQTEFES1JMY3FzbkZZOGtLbDNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEuIgUdP ISibiLG/YEjJjHZRmwHmf2RJpDO0iU50biJZ3S/xhSktTXYPKLMnhzqcRVXpfCj4 3Lnnyl3dCrSCXUZfMpveS8tx7hw3uhPmUfMXiyonSbA0x3+9QnnUDs1SiOd895Jl Wh7dO4FwPPC+S2FMyK6LBzEi93phsQ3ihbf+4sA+RyYVYHtwAquWzqcK2428+XmA BYAsFV5BvRddg+XQLLyb4PEYtdOGVYwNRlD7c3tfB3iWb2vSNLAuKlWsB5eKxdSU uvtoE9b2OoDCkvTYq71TAEUzHlt1Fv74uvbXwxQ7LjzHoZcMVe9CgnEPH/VnWaeR ipQvaiAuRdmOLg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:00:47 2025 by rpki-client