This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json) Hash identifier: c3fS9d3mfoOEUK2hhnadCobkpUAYXTdg2HI7h5e89Oo= Subject key identifier: 43:D4:AF:0E:38:09:E6:6B:DC:BD:53:02:86:18:E1:5A:73:0D:69:49 Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4 Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4 Certificate serial: 019B1A9704976E250A4936B6A80B53301EAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft Manifest number: 06E9 Signing time: Sun 14 Dec 2025 02:01:03 +0000 Manifest this update: Sun 14 Dec 2025 02:01:03 +0000 Manifest next update: Mon 15 Dec 2025 02:01:03 +0000 Files and hashes: 1: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: 5p6b3BgbMGOZg8fz9oGJlfJmSWqEUDYi+YAT7w6c1d0=) 2: qj9pJEL6aLQRmJQwwNdSHRT6Q7o.roa (hash: YXXU3MHXgJerIl9CeLyHeV8Hu3RdrFxQkf90wVwUCHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:04:97:6e:25:0a:49:36:b6:a8:0b:53:30:1e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4 Validity Not Before: Dec 14 02:01:03 2025 GMT Not After : Dec 15 02:01:03 2025 GMT Subject: CN=43d4af0e3809e66bdcbd53028618e15a730d6949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4c:78:46:24:f8:06:20:93:03:dd:29:b5:be: e4:45:28:15:f3:bc:e5:59:89:b2:6b:60:3d:3f:e4: e5:05:de:02:dd:25:2a:2d:de:85:45:c9:ad:4f:6a: e3:02:77:88:95:a8:a2:23:db:83:e5:ac:c0:a8:aa: 66:92:a9:6d:a3:a7:28:47:1f:47:ad:83:27:a6:07: f6:d8:a1:3f:82:e0:4d:9c:c7:13:99:59:28:31:e1: bd:1d:a9:eb:01:f7:8f:c9:b7:c8:3a:db:39:7e:c4: 98:d5:d7:af:ba:d6:52:dc:d5:8b:89:68:4d:83:3e: 52:6d:e8:6a:1c:38:ab:70:00:5d:81:80:69:5f:8c: 01:fc:9b:1a:8d:37:16:68:d3:01:c2:90:9d:09:7a: a8:fc:5f:bb:d4:ed:ea:05:c7:21:a9:f2:d7:29:01: f8:c8:a2:7a:54:43:4e:7c:ac:0a:a5:47:7c:8e:1b: a2:6f:18:56:63:e0:e6:1c:07:f0:dd:84:7e:62:c4: 99:d4:6b:62:3a:a4:f7:3a:73:30:65:fa:92:9a:98: 0a:3f:71:26:f7:79:16:4c:65:4c:e8:d2:49:22:95: ab:f3:b4:6d:d9:e6:94:e5:a9:9a:ad:9a:d2:fa:33: 0a:40:0a:25:9f:12:77:36:87:35:94:51:93:45:4c: a1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:AF:0E:38:09:E6:6B:DC:BD:53:02:86:18:E1:5A:73:0D:69:49 X509v3 Authority Key Identifier: keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c7:0b:0f:d0:8d:f0:f0:39:53:1d:07:7e:3d:bd:8a:64:c5: c2:44:8b:f1:39:f6:11:7d:58:84:49:7c:d7:47:88:3f:65:26: ec:77:bc:b4:f0:5e:de:d7:28:ed:6a:9f:43:dd:16:30:89:ba: a0:c6:c6:18:40:62:61:8b:ce:5f:43:7e:43:2c:f5:3d:a9:c7: c8:46:56:2f:5c:ac:71:95:d7:cf:b8:21:b1:e2:5e:fa:4f:f6: f6:31:e7:3c:24:22:39:24:47:4b:7a:6c:bc:64:ab:d7:24:5a: 53:e7:54:17:10:66:d3:0b:35:6a:a4:a6:b8:22:24:50:42:af: f8:ff:c4:cb:e0:b9:c2:65:4f:00:b2:5f:de:f3:db:f0:9a:b6: 6f:52:77:07:ed:0a:cf:c8:df:74:b8:57:1f:9e:5f:c6:3c:fd: 85:3b:8a:b3:88:5c:c8:09:cb:16:5e:a0:bc:6d:6b:18:84:1a: af:62:12:08:9f:77:76:fe:06:74:e9:48:d4:05:8b:eb:f8:61: 12:d6:92:31:ab:6f:3a:44:94:12:16:b6:ac:9e:c9:a6:22:b6: d2:3e:42:3e:49:1e:b9:b0:06:b9:3f:76:22:be:ad:9c:95:92: 89:47:da:ae:38:f0:89:cd:03:f8:f8:b1:a4:68:35:8d:5c:87: 3d:7d:a2:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsalwSXbiUKSTa2qAtTMB6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYmZlOTM4NWU2YTc1OWY4MzNlNGYwOWEwOWYwZGNmZWQ1 M2IzZTQwHhcNMjUxMjE0MDIwMTAzWhcNMjUxMjE1MDIwMTAzWjAzMTEwLwYDVQQD Eyg0M2Q0YWYwZTM4MDllNjZiZGNiZDUzMDI4NjE4ZTE1YTczMGQ2OTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkx4RiT4BiCTA90ptb7kRSgV87zl WYmya2A9P+TlBd4C3SUqLd6FRcmtT2rjAneIlaiiI9uD5azAqKpmkqlto6coRx9H rYMnpgf22KE/guBNnMcTmVkoMeG9HanrAfePybfIOts5fsSY1devutZS3NWLiWhN gz5SbehqHDircABdgYBpX4wB/JsajTcWaNMBwpCdCXqo/F+71O3qBcchqfLXKQH4 yKJ6VENOfKwKpUd8jhuibxhWY+DmHAfw3YR+YsSZ1GtiOqT3OnMwZfqSmpgKP3Em 93kWTGVM6NJJIpWr87Rt2eaU5amarZrS+jMKQAolnxJ3Noc1lFGTRUyhpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPUrw44CeZr3L1TAoYY4VpzDWlJMB8GA1UdIwQY MBaAFA+/6TheanWfgz5PCaCfDc/tU7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUt ZDY0N2RjOGE1NmI2LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUtZDY0N2RjOGE1NmI2 LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMcLD9CN 8PA5Ux0Hfj29imTFwkSL8Tn2EX1YhEl810eIP2Um7He8tPBe3tco7WqfQ90WMIm6 oMbGGEBiYYvOX0N+Qyz1PanHyEZWL1yscZXXz7ghseJe+k/29jHnPCQiOSRHS3ps vGSr1yRaU+dUFxBm0ws1aqSmuCIkUEKv+P/Ey+C5wmVPALJf3vPb8Jq2b1J3B+0K z8jfdLhXH55fxjz9hTuKs4hcyAnLFl6gvG1rGIQar2ISCJ93dv4GdOlI1AWL6/hh EtaSMatvOkSUEha2rJ7JpiK20j5CPkkeubAGuT92Ir6tnJWSiUfarjjwic0D+Pix pGg1jVyHPX2iQg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:36 2025 by rpki-client