This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json) Hash identifier: 0Agd5s2YyGb6qgFitB//o/9fo7+YmVqh9BgDxv9hmdU= Subject key identifier: B9:C1:DC:F2:AA:13:10:DA:3E:65:63:4B:10:C7:6A:CD:87:04:A6:B7 Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9 Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9 Certificate serial: 019B0D49246FEED2B1BBA02CCAE10490BD56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft Manifest number: 0B74 Signing time: Thu 11 Dec 2025 12:00:55 +0000 Manifest this update: Thu 11 Dec 2025 12:00:55 +0000 Manifest next update: Fri 12 Dec 2025 12:00:55 +0000 Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: vRDVpyxLogUc7Ca67HY6UfNmnwmhk22G/vT/JnjKI7M=) 2: V1kohq7P4ydapDB7EU11fRLeRUg.roa (hash: TxOniEW/xxFZY5KmO7UC+sdZGH0WDC/W/Livh3vHUfw=) 3: lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa (hash: iBeGuJYtICJBlFiRT2Vx63Td8Xc0QnYIl7/YBwzr0yk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:49:24:6f:ee:d2:b1:bb:a0:2c:ca:e1:04:90:bd:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9 Validity Not Before: Dec 11 12:00:55 2025 GMT Not After : Dec 12 12:00:55 2025 GMT Subject: CN=b9c1dcf2aa1310da3e65634b10c76acd8704a6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:a7:01:a3:6a:e5:78:98:81:ce:cc:88:29: 41:fa:3b:a6:e2:93:76:c6:85:8a:29:54:ff:db:a7: a3:1b:59:63:f5:ce:9c:3f:84:9f:de:df:f6:73:55: 9e:42:97:d7:50:3e:45:2f:0c:87:98:69:18:99:bd: 1f:e0:fc:3f:0c:6c:7a:8b:31:db:31:d9:92:d0:b4: 00:b1:dc:61:57:04:e0:67:ce:b4:b0:32:34:f3:90: 3d:b0:c4:f3:7b:88:1b:5c:64:57:6a:aa:f6:17:6c: 77:26:0a:16:9e:54:f9:ff:f1:90:1b:41:b2:1f:52: f4:1c:a1:88:16:df:f4:dd:fd:32:76:19:e4:86:db: ba:9d:ec:35:ae:1c:a1:7f:f9:ca:b0:77:e4:f2:1b: c4:35:58:66:ec:f7:b2:c3:ae:7b:10:c9:ec:57:01: 11:36:81:8e:f3:55:44:61:71:2d:04:c1:08:98:0a: bd:97:7d:49:77:ef:08:a8:63:8a:6e:06:32:ff:a4: 48:7d:5a:f9:10:c6:92:a0:14:34:10:aa:b7:be:3d: 0f:b5:34:e4:31:5c:42:f5:f4:d3:25:57:29:bc:8f: cc:16:17:33:f5:0b:a1:be:7b:37:c0:c1:a4:da:2d: 7e:5c:ec:19:1b:d7:54:b6:44:e3:fe:33:9f:d6:1a: 0d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C1:DC:F2:AA:13:10:DA:3E:65:63:4B:10:C7:6A:CD:87:04:A6:B7 X509v3 Authority Key Identifier: keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:17:47:e1:f3:0a:99:eb:5d:bc:7e:5d:a7:39:7f:7d:0b:b0: 5e:a9:2c:f9:59:44:56:89:3f:28:ac:ae:82:63:c6:b4:a2:9e: 16:c1:87:f8:ff:37:f5:0a:fe:6b:d3:f6:0c:36:22:d8:12:c0: c4:03:49:18:24:2a:05:de:f9:ac:32:aa:5c:2a:bb:9c:e0:db: 7e:c3:28:08:db:e6:f0:d5:53:73:47:13:aa:21:59:5d:c0:cb: 0c:35:d7:cd:90:ce:21:9f:44:ab:92:13:e2:76:4d:3e:a7:99: 36:2a:1a:03:ff:1b:99:93:b5:6f:2b:54:c0:bb:0d:46:31:87: ed:fb:3a:9e:1e:f9:6f:a0:ae:f2:ea:c1:2c:0a:e5:a1:e1:68: 17:dd:89:7e:34:5d:e4:13:8d:28:27:15:49:4b:21:69:88:85: 8f:eb:11:11:c8:b4:79:10:0a:33:41:3d:2d:19:c1:91:3b:98: 32:43:1b:e4:ee:da:df:f7:de:8a:19:83:ee:84:89:dd:9e:a9: 6c:c2:de:bb:8c:58:1e:29:df:11:22:ae:e9:11:ef:41:39:43: dd:b9:51:2a:a9:bb:e2:41:73:a8:d7:4c:64:c8:a3:97:f4:9e: 1b:90:43:1c:6b:82:20:5c:7c:9a:61:1d:2a:37:40:8b:da:f7: b1:65:47:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNSSRv7tKxu6AsyuEEkL1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOWRjNzkyYWRmY2ZlODhjNzllNzk1OGZiZmVjNTI1NjMw YjYyZjkwHhcNMjUxMjExMTIwMDU1WhcNMjUxMjEyMTIwMDU1WjAzMTEwLwYDVQQD EyhiOWMxZGNmMmFhMTMxMGRhM2U2NTYzNGIxMGM3NmFjZDg3MDRhNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0SnAaNq5XiYgc7MiClB+jum4pN2 xoWKKVT/26ejG1lj9c6cP4Sf3t/2c1WeQpfXUD5FLwyHmGkYmb0f4Pw/DGx6izHb MdmS0LQAsdxhVwTgZ860sDI085A9sMTze4gbXGRXaqr2F2x3JgoWnlT5//GQG0Gy H1L0HKGIFt/03f0ydhnkhtu6new1rhyhf/nKsHfk8hvENVhm7Peyw657EMnsVwER NoGO81VEYXEtBMEImAq9l31Jd+8IqGOKbgYy/6RIfVr5EMaSoBQ0EKq3vj0PtTTk MVxC9fTTJVcpvI/MFhcz9Quhvns3wMGk2i1+XOwZG9dUtkTj/jOf1hoNTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnB3PKqExDaPmVjSxDHas2HBKa3MB8GA1UdIwQY MBaAFNKdx5Kt/P6Ix555WPv+xSVjC2L5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEt NDFlN2ZiYTZkNmUxLzEvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEtNDFlN2ZiYTZkNmUx LzEvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBdH4fMK metdvH5dpzl/fQuwXqks+VlEVok/KKyugmPGtKKeFsGH+P839Qr+a9P2DDYi2BLA xANJGCQqBd75rDKqXCq7nODbfsMoCNvm8NVTc0cTqiFZXcDLDDXXzZDOIZ9Eq5IT 4nZNPqeZNioaA/8bmZO1bytUwLsNRjGH7fs6nh75b6Cu8urBLArloeFoF92JfjRd 5BONKCcVSUshaYiFj+sREci0eRAKM0E9LRnBkTuYMkMb5O7a3/feihmD7oSJ3Z6p bMLeu4xYHinfESKu6RHvQTlD3blRKqm74kFzqNdMZMijl/SeG5BDHGuCIFx8mmEd KjdAi9r3sWVH2g== -----END CERTIFICATE-----Generated at Thu Dec 11 15:09:03 2025 by rpki-client