This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft File: 0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json) Hash identifier: 2zUN2Vs7RuAQY1qAcuG9DE1NZdHd/VPlRjU8vQXbU7Y= Subject key identifier: CB:86:8B:89:F0:05:71:C8:A3:5F:D1:82:DE:F1:43:EA:36:0C:39:92 Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77 Certificate issuer: /CN=d0cbf6ba097a76b610c856035bc18de797c2a677 Certificate serial: 019B0D1215E392EE4A1E499FD05ED34B69CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft Manifest number: 0958 Signing time: Thu 11 Dec 2025 11:00:47 +0000 Manifest this update: Thu 11 Dec 2025 11:00:47 +0000 Manifest next update: Fri 12 Dec 2025 11:00:47 +0000 Files and hashes: 1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: IbC4ZkEoedJuFXhvcPJPYk/dcQNBoquvqkpaPQl2eY8=) 2: kAhsl83sRH6W4s8jtU8YJb8qwhQ.roa (hash: +uG81eC9noWL3YdfTYPyy1nu/3IN2ObXCeDG/BCSpTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:12:15:e3:92:ee:4a:1e:49:9f:d0:5e:d3:4b:69:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677 Validity Not Before: Dec 11 11:00:47 2025 GMT Not After : Dec 12 11:00:47 2025 GMT Subject: CN=cb868b89f00571c8a35fd182def143ea360c3992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:4c:70:38:30:2e:ef:4f:4a:50:9f:73:ec: 16:3f:c5:2a:dd:0a:7c:01:27:e3:7a:22:1e:7f:e4: b6:9c:a1:a2:3c:a0:f0:73:2d:60:af:91:ac:d3:46: 1e:35:21:81:25:24:6b:dd:0f:09:dd:32:d4:8a:cc: ae:4a:c2:43:c1:fc:13:98:0f:9c:a8:da:f2:24:3d: 9b:58:43:e2:ae:35:6e:16:48:a0:6e:80:0f:49:9c: 4c:f8:06:60:28:29:b1:19:fd:71:0e:8a:f9:64:3c: 03:b0:65:4e:32:01:57:e2:6e:75:22:1d:92:d7:18: 63:aa:95:bc:9f:03:5b:86:ae:09:f9:83:d4:16:c2: a5:e4:0d:ef:c4:ce:b6:38:1e:fd:14:50:f8:e0:44: 34:7f:63:f9:63:14:ff:ac:a4:b2:b7:43:0b:3f:5c: 77:85:01:a2:44:ce:7b:a2:f0:68:a4:94:55:34:82: 0b:16:96:e0:09:da:df:a0:5b:f7:d8:d7:be:ec:70: c6:90:fd:e7:83:af:51:9c:ac:b4:de:e3:c6:0c:c6: cf:66:e9:bd:cb:89:39:cf:ac:fa:ed:1d:f8:65:36: 07:c6:cf:08:f8:5f:92:81:d5:cc:1a:78:c2:e5:41: b4:ef:00:74:04:50:c0:8d:4c:c4:cb:85:25:6d:1c: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:86:8B:89:F0:05:71:C8:A3:5F:D1:82:DE:F1:43:EA:36:0C:39:92 X509v3 Authority Key Identifier: keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a0:10:ee:48:a0:f5:ac:7b:b5:92:b4:f5:4f:76:50:12:43: e2:0a:e8:0a:d8:bd:9e:e6:49:51:2c:1b:0e:d7:7c:97:19:e0: e9:4a:00:e5:3a:e2:30:1c:b2:c1:c2:7e:9b:e8:4b:e7:39:b3: 7c:9e:91:9c:19:d5:a0:0a:54:e4:67:ef:4a:0c:ac:c3:b8:e7: 9c:a6:1f:a3:88:a3:8b:4b:a2:ab:73:3f:0b:ca:c9:55:a8:de: 92:22:d6:68:e1:2c:15:00:cd:3f:24:7d:6b:07:e3:59:9d:12: 05:29:40:a0:81:83:5b:16:ce:5a:10:35:6b:ac:af:ba:7e:4b: d4:27:7b:89:c7:24:e2:86:c2:44:92:2a:4f:2b:6c:65:35:8c: ae:a7:67:84:3f:ea:6e:5d:1f:6f:a1:31:a9:da:28:2b:9d:5a: 6c:29:19:02:3f:88:dc:ff:a9:d7:fa:c1:0e:13:b9:7b:e6:b3: 0b:8c:0a:30:f5:9f:47:52:5f:a3:9b:a1:db:e9:ba:a7:53:e3: 57:56:c3:85:d1:57:66:cd:d4:8a:b1:96:ab:78:2f:8f:36:94: 51:3c:c2:e6:00:92:54:57:22:c5:a0:c8:c8:2c:08:2b:3f:f9: 63:08:80:dc:39:6a:9d:11:e3:75:c9:6f:3d:88:17:d1:cf:04: dc:6e:a5:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNEhXjku5KHkmf0F7TS2nPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwY2JmNmJhMDk3YTc2YjYxMGM4NTYwMzViYzE4ZGU3OTdj MmE2NzcwHhcNMjUxMjExMTEwMDQ3WhcNMjUxMjEyMTEwMDQ3WjAzMTEwLwYDVQQD EyhjYjg2OGI4OWYwMDU3MWM4YTM1ZmQxODJkZWYxNDNlYTM2MGMzOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmtMcDgwLu9PSlCfc+wWP8Uq3Qp8 ASfjeiIef+S2nKGiPKDwcy1gr5Gs00YeNSGBJSRr3Q8J3TLUisyuSsJDwfwTmA+c qNryJD2bWEPirjVuFkigboAPSZxM+AZgKCmxGf1xDor5ZDwDsGVOMgFX4m51Ih2S 1xhjqpW8nwNbhq4J+YPUFsKl5A3vxM62OB79FFD44EQ0f2P5YxT/rKSyt0MLP1x3 hQGiRM57ovBopJRVNIILFpbgCdrfoFv32Ne+7HDGkP3ng69RnKy03uPGDMbPZum9 y4k5z6z67R34ZTYHxs8I+F+SgdXMGnjC5UG07wB0BFDAjUzEy4UlbRzvowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuGi4nwBXHIo1/Rgt7xQ+o2DDmSMB8GA1UdIwQY MBaAFNDL9roJena2EMhWA1vBjeeXwqZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYt ZDY2OGM1M2Y2NjEyLzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYtZDY2OGM1M2Y2NjEy LzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaAQ7kig 9ax7tZK09U92UBJD4groCti9nuZJUSwbDtd8lxng6UoA5TriMByywcJ+m+hL5zmz fJ6RnBnVoApU5GfvSgysw7jnnKYfo4iji0uiq3M/C8rJVajekiLWaOEsFQDNPyR9 awfjWZ0SBSlAoIGDWxbOWhA1a6yvun5L1Cd7icck4obCRJIqTytsZTWMrqdnhD/q bl0fb6ExqdooK51abCkZAj+I3P+p1/rBDhO5e+azC4wKMPWfR1Jfo5uh2+m6p1Pj V1bDhdFXZs3UirGWq3gvjzaUUTzC5gCSVFcixaDIyCwIKz/5YwiA3DlqnRHjdclv PYgX0c8E3G6lFw== -----END CERTIFICATE-----Generated at Thu Dec 11 19:01:29 2025 by rpki-client