This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft File: b58jpjrWJaftMNptos3J6LW7gD4.mft (raw, json) Hash identifier: OM177xXN+2Vqk8t8ZaaTgMICdxYam7wmWhKAarwTcGE= Subject key identifier: DB:B7:91:54:F6:EC:A7:6C:5D:8F:06:B8:E2:C8:FD:2B:5A:FC:DB:A8 Authority key identifier: 6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E Certificate issuer: /CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e Certificate serial: 019AE3A981F30A0D3988B1D24CEA6B8C751A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft Manifest number: 3A Signing time: Wed 03 Dec 2025 10:02:08 +0000 Manifest this update: Wed 03 Dec 2025 10:02:08 +0000 Manifest next update: Thu 04 Dec 2025 10:02:08 +0000 Files and hashes: 1: DnzI1ao7aTnh9Jg64y172kFEW10.roa (hash: iBNgKqvR9Nock/QGQ3vmBAJvLcgbXi64UUTOdAAo0Us=) 2: QXeX_hj0YihTkx3SqV3PC2T0syM.roa (hash: MR5IJFaW2NtmqgjhgTv+2teNHPIAKkBRldoN04grSBs=) 3: b58jpjrWJaftMNptos3J6LW7gD4.crl (hash: UCb4cTw87y8wdWqcQoSYd0ejrFcEmzBzBLqYxlUeb0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a9:81:f3:0a:0d:39:88:b1:d2:4c:ea:6b:8c:75:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e Validity Not Before: Dec 3 10:02:08 2025 GMT Not After : Dec 4 10:02:08 2025 GMT Subject: CN=dbb79154f6eca76c5d8f06b8e2c8fd2b5afcdba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:b7:00:2a:57:fc:1d:3b:aa:7e:cf:6b:d5: 87:d2:1d:47:27:4c:cc:e4:06:5a:52:cb:0f:e9:8d: 02:d0:26:a2:a8:79:bb:b5:a1:7d:e8:2c:26:f2:71: f5:de:f0:f4:bf:11:56:5e:5f:f6:c7:6f:68:17:0e: 04:b4:55:4c:70:31:61:76:72:3d:ea:e0:91:59:fe: ec:e5:73:16:6a:6c:fe:c3:b2:a9:04:cf:48:18:8f: 29:63:8b:d7:bc:85:0c:90:1d:4e:8d:a6:cd:24:9b: e1:b6:b4:07:a0:2a:a0:ee:22:2a:84:41:86:67:cb: d9:d3:05:5c:44:42:51:71:6d:70:e3:6a:df:d5:5e: 7b:6a:4a:00:9f:ce:bd:68:a0:58:ca:5e:1c:4f:0f: 17:e7:f5:3e:4c:13:88:48:fd:49:e9:e6:4f:7d:62: bf:46:f9:9d:d6:a7:aa:68:14:94:ca:3e:bc:76:52: ec:17:31:b5:ad:47:7c:bd:e8:39:92:fa:1a:7a:c4: ce:8b:2e:75:56:97:a1:40:53:2a:de:1e:d2:51:83: 83:22:39:7b:94:20:a0:e6:34:fc:97:1e:17:fa:15: 07:ef:c8:b1:23:e4:52:d4:00:02:8f:da:83:de:00: 1c:5d:fb:cc:c1:07:0d:01:5d:d8:cb:96:6a:c7:71: 29:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B7:91:54:F6:EC:A7:6C:5D:8F:06:B8:E2:C8:FD:2B:5A:FC:DB:A8 X509v3 Authority Key Identifier: keyid:6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4b:6c:ae:83:14:83:cd:80:52:90:41:0b:c9:3b:ef:83:bf: 36:99:cc:0f:d1:01:2d:39:76:a3:89:63:e3:d3:db:a3:71:14: 99:34:c6:82:8f:bd:62:b9:69:ff:27:3b:7d:15:8d:a2:b8:86: ae:26:80:d3:4f:c1:48:52:27:b1:e8:e9:ee:0f:d4:2f:bd:f9: 2f:e7:fe:44:e5:1c:ee:63:8c:62:bf:2b:18:8f:bf:47:42:fb: cd:70:45:f4:c9:3b:ae:d9:00:02:2b:9b:6d:22:7d:71:db:b5: 05:45:a5:59:84:61:9a:ea:4c:5b:9b:ed:2c:f7:34:93:58:b4: a2:d4:07:4c:25:13:9c:f5:bb:a1:c2:bf:b0:3f:0b:7e:30:fc: da:ad:35:76:fd:28:94:75:f0:a4:27:5e:d1:82:26:5d:eb:64: 07:00:b0:d0:25:08:90:73:94:8a:bc:1c:f5:bb:ea:24:6e:18: 87:53:b3:95:06:2d:38:b2:69:16:66:c3:c1:da:ed:f8:95:05: ae:87:51:f2:16:a5:e7:25:3c:79:c0:10:5e:c4:ee:aa:d5:bc: 01:c9:72:f8:2c:4d:4c:10:10:cc:0a:aa:2a:15:96:85:51:0a: f3:ab:ac:64:14:59:b5:e6:a4:fd:69:74:86:7a:72:77:38:e0: 6c:37:dc:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrjqYHzCg05iLHSTOprjHUaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWYyM2E2M2FkNjI1YTdlZDMwZGE2ZGEyY2RjOWU4YjVi YjgwM2UwHhcNMjUxMjAzMTAwMjA4WhcNMjUxMjA0MTAwMjA4WjAzMTEwLwYDVQQD EyhkYmI3OTE1NGY2ZWNhNzZjNWQ4ZjA2YjhlMmM4ZmQyYjVhZmNkYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkC3ACpX/B07qn7Pa9WH0h1HJ0zM 5AZaUssP6Y0C0CaiqHm7taF96Cwm8nH13vD0vxFWXl/2x29oFw4EtFVMcDFhdnI9 6uCRWf7s5XMWamz+w7KpBM9IGI8pY4vXvIUMkB1OjabNJJvhtrQHoCqg7iIqhEGG Z8vZ0wVcREJRcW1w42rf1V57akoAn869aKBYyl4cTw8X5/U+TBOISP1J6eZPfWK/ Rvmd1qeqaBSUyj68dlLsFzG1rUd8veg5kvoaesTOiy51VpehQFMq3h7SUYODIjl7 lCCg5jT8lx4X+hUH78ixI+RS1AACj9qD3gAcXfvMwQcNAV3Yy5Zqx3Ep9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNu3kVT27KdsXY8GuOLI/Sta/NuoMB8GA1UdIwQY MBaAFG+fI6Y61iWn7TDabaLNyei1u4A+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNzJkZTQtNjM2Ni00N2ZhLWI2ZjYt ZDQyYmQ2ODI2MzhkLzEvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNzJkZTQtNjM2Ni00N2ZhLWI2ZjYtZDQyYmQ2ODI2Mzhk LzEvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEtsroMU g82AUpBBC8k774O/NpnMD9EBLTl2o4lj49Pbo3EUmTTGgo+9Yrlp/yc7fRWNoriG riaA00/BSFInsejp7g/UL735L+f+ROUc7mOMYr8rGI+/R0L7zXBF9Mk7rtkAAiub bSJ9cdu1BUWlWYRhmupMW5vtLPc0k1i0otQHTCUTnPW7ocK/sD8LfjD82q01dv0o lHXwpCde0YImXetkBwCw0CUIkHOUirwc9bvqJG4Yh1OzlQYtOLJpFmbDwdrt+JUF rodR8hal5yU8ecAQXsTuqtW8Acly+CxNTBAQzAqqKhWWhVEK86usZBRZteak/Wl0 hnpydzjgbDfc3Q== -----END CERTIFICATE-----Generated at Wed Dec 3 12:38:37 2025 by rpki-client