This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json) Hash identifier: SqBwI10mrhrzwuuBMm+f1aeV0qXMClZe4mZ1fzThyl8= Subject key identifier: 23:BB:1B:87:6F:56:51:6F:AA:7F:EC:B5:A4:5F:59:34:FF:8D:E3:86 Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Certificate serial: 019B0E251CAA20B121847FE4505CDD2AC189 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 16:01:11 +0000 Manifest this update: Thu 11 Dec 2025 16:01:11 +0000 Manifest next update: Fri 12 Dec 2025 16:01:11 +0000 Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: hmXnwBxt572VoWpgRMZCTcxrZnh6b3y0ZQtIpqsh9NA=) 2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:1c:aa:20:b1:21:84:7f:e4:50:5c:dd:2a:c1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Validity Not Before: Dec 11 16:01:11 2025 GMT Not After : Dec 12 16:01:11 2025 GMT Subject: CN=23bb1b876f56516faa7fecb5a45f5934ff8de386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:30:85:fb:b3:b4:3e:5e:98:5a:0e:89:b3:73: 67:d1:4a:b8:dd:4e:78:1d:8e:e5:30:52:c6:f8:19: 41:08:44:00:a2:c2:dc:b0:13:43:ed:ec:64:da:26: 81:2b:7d:aa:42:a7:35:f0:d1:e2:42:72:a4:5f:c6: 11:28:68:f9:df:3d:bb:d3:2c:58:d1:5b:d2:0f:4a: b4:cc:18:f9:64:34:0f:2b:d0:34:ed:e6:b3:2a:f0: 6b:ef:02:a7:d3:67:6e:50:20:ca:95:c5:c8:24:d6: 1d:64:83:cf:45:d8:87:56:64:11:3e:a4:9d:5f:25: a6:41:e3:53:1e:c2:26:90:8e:5c:8b:17:1f:de:b8: 9d:6f:36:e4:5e:26:d3:9b:e1:8b:ca:26:af:d8:a5: 34:af:9a:c5:20:57:45:5b:8c:f4:b9:63:63:a0:70: ed:48:76:b1:59:ce:bc:fb:d6:a1:4b:cd:d8:a5:e9: 49:ee:21:35:0c:5f:a6:b1:c0:2e:cc:ad:86:8b:23: 14:27:be:d8:8b:82:65:19:73:3e:0c:0b:06:af:ff: 3d:e6:ec:db:f6:71:fc:37:40:08:f0:2b:cd:5e:37: 14:28:77:75:f3:30:75:d6:ec:ba:57:57:4e:62:73: 72:08:a8:bd:20:de:48:c8:69:e9:de:b5:14:c4:5a: 3e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BB:1B:87:6F:56:51:6F:AA:7F:EC:B5:A4:5F:59:34:FF:8D:E3:86 X509v3 Authority Key Identifier: keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:73:98:1e:81:5a:f9:3f:34:ee:82:33:3f:a0:62:25:74:30: f7:dc:f8:18:cc:78:8b:c5:05:bc:61:9b:68:78:56:41:a4:90: 39:c5:8c:c3:23:17:c4:58:b7:0a:70:ab:d0:02:9b:f7:39:3d: 0c:12:23:0f:66:25:b8:af:f8:c6:b1:13:98:1b:e0:ec:c2:04: 88:74:d8:4b:9e:6b:10:3c:a9:8a:72:c3:d7:75:bb:d7:f8:5d: 2a:fb:34:26:b4:9f:21:41:e6:8e:95:9b:be:90:4c:b3:36:4b: be:fb:a6:39:d5:22:ed:f5:4c:0c:58:54:f2:d8:f8:14:e3:41: 87:95:c2:0e:5d:62:d5:0b:fe:79:1c:3d:38:e0:dc:ef:25:2c: 04:31:39:d2:45:af:32:7d:57:3a:ea:c5:ae:28:90:5a:4f:17: 74:b3:7c:1a:7c:1c:44:c7:b0:dd:30:83:de:18:f6:46:e5:c8: 02:e3:20:04:e4:c5:69:40:08:94:da:8e:2a:6b:2d:df:1a:d1: ed:c1:80:35:cb:fc:83:6e:cd:c5:f6:fc:5d:38:49:2b:3b:63: e0:68:41:9d:64:75:64:b3:3e:57:b7:b1:98:2b:44:ab:2c:1c: fd:98:bb:d5:31:4f:22:07:80:7e:c4:6e:ae:cc:62:07:ef:54: 22:1c:b8:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJRyqILEhhH/kUFzdKsGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMmU5NWM0NTE5ZGU5MjA4ZTNkMjIzMzJhYWJlYzZiMWEy ZWE3NTYwHhcNMjUxMjExMTYwMTExWhcNMjUxMjEyMTYwMTExWjAzMTEwLwYDVQQD EygyM2JiMWI4NzZmNTY1MTZmYWE3ZmVjYjVhNDVmNTkzNGZmOGRlMzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDCF+7O0Pl6YWg6Js3Nn0Uq43U54 HY7lMFLG+BlBCEQAosLcsBND7exk2iaBK32qQqc18NHiQnKkX8YRKGj53z270yxY 0VvSD0q0zBj5ZDQPK9A07eazKvBr7wKn02duUCDKlcXIJNYdZIPPRdiHVmQRPqSd XyWmQeNTHsImkI5cixcf3ridbzbkXibTm+GLyiav2KU0r5rFIFdFW4z0uWNjoHDt SHaxWc68+9ahS83YpelJ7iE1DF+mscAuzK2GiyMUJ77Yi4JlGXM+DAsGr/895uzb 9nH8N0AI8CvNXjcUKHd18zB11uy6V1dOYnNyCKi9IN5IyGnp3rUUxFo+VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCO7G4dvVlFvqn/staRfWTT/jeOGMB8GA1UdIwQY MBaAFNIulcRRnekgjj0iMyqr7GsaLqdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQt ZjJlNTRkZGVhM2IzLzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQtZjJlNTRkZGVhM2Iz LzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXOYHoFa +T807oIzP6BiJXQw99z4GMx4i8UFvGGbaHhWQaSQOcWMwyMXxFi3CnCr0AKb9zk9 DBIjD2YluK/4xrETmBvg7MIEiHTYS55rEDypinLD13W71/hdKvs0JrSfIUHmjpWb vpBMszZLvvumOdUi7fVMDFhU8tj4FONBh5XCDl1i1Qv+eRw9OODc7yUsBDE50kWv Mn1XOurFriiQWk8XdLN8GnwcRMew3TCD3hj2RuXIAuMgBOTFaUAIlNqOKmst3xrR 7cGANcv8g27Nxfb8XThJKztj4GhBnWR1ZLM+V7exmCtEqywc/Zi71TFPIgeAfsRu rsxiB+9UIhy4rQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:35 2025 by rpki-client