This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft File: 0Dxztg8hA-47Kiw8vpIOISqS7mU.mft (raw, json) Hash identifier: Zv2kZf8bba4HVb9tp6RpVqux0+MMSMrH72sjmvanIz0= Subject key identifier: 44:D1:25:C0:60:C4:2D:1B:46:BB:58:52:38:3F:74:3B:E9:FE:65:28 Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65 Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65 Certificate serial: 019B2D0ABC6CD6BAC404A0DA03207943C875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft Manifest number: 06ED Signing time: Wed 17 Dec 2025 16:00:36 +0000 Manifest this update: Wed 17 Dec 2025 16:00:36 +0000 Manifest next update: Thu 18 Dec 2025 16:00:36 +0000 Files and hashes: 1: 0Dxztg8hA-47Kiw8vpIOISqS7mU.crl (hash: UNWhOIvURffFdNh7Xe2/08EGGip2feYfDtnAvLla8m0=) 2: tDVvrqtQQCwl2jE6yV_v8vBSPyI.roa (hash: qiENM6J31Gqa4rOEk4JnN/zBbLfxSy0s2Ydx5h5QGk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0a:bc:6c:d6:ba:c4:04:a0:da:03:20:79:43:c8:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65 Validity Not Before: Dec 17 16:00:36 2025 GMT Not After : Dec 18 16:00:36 2025 GMT Subject: CN=44d125c060c42d1b46bb5852383f743be9fe6528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:95:c2:c9:e5:b3:b1:94:f2:42:72:48:12: e8:c2:1f:99:ed:3f:7b:5e:49:70:67:45:0d:c0:6b: 28:4c:aa:e9:4e:de:4a:d4:5c:ca:93:42:db:78:95: 75:e2:1a:92:17:d6:82:ce:fe:b0:5d:75:37:49:55: 5e:64:f0:6b:72:43:6f:1a:1c:c3:ad:2a:24:9d:14: d2:4c:40:07:f9:e2:96:ab:9c:79:d2:a7:8b:30:48: 36:37:93:f0:20:51:f2:64:80:6c:16:99:8f:80:d4: c5:84:2f:7f:7b:ca:c2:33:bc:7b:a3:65:df:b5:ba: 3d:ce:5e:f1:f6:b0:f8:31:26:41:51:5a:8d:f9:ec: d7:67:22:8c:16:97:3a:10:32:89:a7:78:10:83:19: 10:46:5f:dc:82:ed:ec:ff:ea:f8:da:fe:83:5f:aa: be:81:1c:91:80:be:aa:62:bd:ad:9b:7f:f3:bd:8f: c7:d1:42:42:09:eb:38:89:ab:5a:98:c8:54:25:ba: 4c:4f:b1:a2:e2:26:3d:25:3e:aa:fe:6e:ca:f0:0e: c2:66:d6:34:ab:28:b8:b2:27:a1:47:00:b7:b3:5f: 01:a2:b5:e1:56:22:10:b9:3f:85:cb:b0:ef:98:e7: 8a:64:ca:b9:9d:a8:e6:55:f5:b3:9c:76:30:29:41: e0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D1:25:C0:60:C4:2D:1B:46:BB:58:52:38:3F:74:3B:E9:FE:65:28 X509v3 Authority Key Identifier: keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ec:c1:50:47:04:1d:01:5d:3c:e1:e8:06:d2:60:b6:08:fe: 1e:5d:c9:86:48:e5:6b:f9:c8:aa:00:3e:61:17:bd:51:5a:5b: c7:27:9f:a6:3d:55:2f:b0:c9:a9:47:85:cb:ad:4d:b0:f2:88: ac:4d:11:6c:81:c8:28:73:c2:94:53:ca:a0:6e:21:0e:c6:f1: 91:e9:26:a3:eb:29:b1:4e:99:32:78:51:75:f2:8b:8d:3b:8b: fb:ee:98:f0:4b:fa:93:59:1f:a2:bc:59:f9:6c:f2:3e:41:43: 3f:44:fb:61:1f:e1:2a:ff:fc:0a:64:29:e9:f4:84:15:9f:c6: db:d1:82:87:c0:bc:a2:cf:d6:19:21:bd:56:74:ff:ca:02:e5: 15:5b:ad:61:cf:fe:59:42:c9:df:99:bb:20:bb:77:9e:38:8f: d9:a5:ae:49:ff:56:9d:2b:3a:47:55:fc:23:4c:16:f0:f7:5e: 8b:4a:6c:8b:e5:02:a1:92:86:07:3f:df:09:b7:68:c2:d3:1f: 63:29:53:2d:de:0b:0d:a8:3f:9a:6c:c9:51:3e:de:82:41:46: e8:4f:e1:f4:18:31:3e:fe:fb:21:66:02:c2:5e:fd:7c:29:64: 8e:b2:8c:79:1e:b2:98:5f:f1:8a:a7:82:6a:e6:ba:67:dc:00: 4e:e0:e7:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCrxs1rrEBKDaAyB5Q8h1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwM2M3M2I2MGYyMTAzZWUzYjJhMmMzY2JlOTIwZTIxMmE5 MmVlNjUwHhcNMjUxMjE3MTYwMDM2WhcNMjUxMjE4MTYwMDM2WjAzMTEwLwYDVQQD Eyg0NGQxMjVjMDYwYzQyZDFiNDZiYjU4NTIzODNmNzQzYmU5ZmU2NTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+WVwsnls7GU8kJySBLowh+Z7T97 XklwZ0UNwGsoTKrpTt5K1FzKk0LbeJV14hqSF9aCzv6wXXU3SVVeZPBrckNvGhzD rSoknRTSTEAH+eKWq5x50qeLMEg2N5PwIFHyZIBsFpmPgNTFhC9/e8rCM7x7o2Xf tbo9zl7x9rD4MSZBUVqN+ezXZyKMFpc6EDKJp3gQgxkQRl/cgu3s/+r42v6DX6q+ gRyRgL6qYr2tm3/zvY/H0UJCCes4iatamMhUJbpMT7Gi4iY9JT6q/m7K8A7CZtY0 qyi4siehRwC3s18BorXhViIQuT+Fy7DvmOeKZMq5najmVfWznHYwKUHgYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETRJcBgxC0bRrtYUjg/dDvp/mUoMB8GA1UdIwQY MBaAFNA8c7YPIQPuOyosPL6SDiEqku5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAt NDZmMDA0YTE5NTkxLzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAtNDZmMDA0YTE5NTkx LzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+zBUEcE HQFdPOHoBtJgtgj+Hl3Jhkjla/nIqgA+YRe9UVpbxyefpj1VL7DJqUeFy61NsPKI rE0RbIHIKHPClFPKoG4hDsbxkekmo+spsU6ZMnhRdfKLjTuL++6Y8Ev6k1kforxZ +WzyPkFDP0T7YR/hKv/8CmQp6fSEFZ/G29GCh8C8os/WGSG9VnT/ygLlFVutYc/+ WULJ35m7ILt3njiP2aWuSf9WnSs6R1X8I0wW8Pdei0psi+UCoZKGBz/fCbdowtMf YylTLd4LDag/mmzJUT7egkFG6E/h9BgxPv77IWYCwl79fClkjrKMeR6ymF/xiqeC aua6Z9wATuDnmQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:13:26 2025 by rpki-client