This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json) Hash identifier: nuWXuglmHKtmVfG4PxjJWFegLTibqMGJtffISek9kTw= Subject key identifier: A1:1A:41:D7:D2:7F:1E:DF:A0:EF:01:E2:25:4E:4D:AA:E5:C1:FA:04 Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be Certificate serial: 019B1014AF2F01AB59915924F9FB07947DCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft Manifest number: 10E2 Signing time: Fri 12 Dec 2025 01:02:29 +0000 Manifest this update: Fri 12 Dec 2025 01:02:29 +0000 Manifest next update: Sat 13 Dec 2025 01:02:29 +0000 Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: T7K3lAkPC1CPsiZeWuUXoapba/JB41Jq9hzb4A0Njhc=) 2: Ns-TL5URBIXkWjSrsIX0f-jA8r8.roa (hash: rkMxs94A3zqfZql4p2TlDjcRtvwJLskmzewtRu09cI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:af:2f:01:ab:59:91:59:24:f9:fb:07:94:7d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d103af197645a4941c6cdb08669af008b79102be Validity Not Before: Dec 12 01:02:29 2025 GMT Not After : Dec 13 01:02:29 2025 GMT Subject: CN=a11a41d7d27f1edfa0ef01e2254e4daae5c1fa04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:48:1a:af:5a:10:44:67:cf:eb:c9:b6:09: 40:2a:fc:87:b8:54:a6:17:29:32:30:75:63:8a:14: ff:77:0e:a4:d7:b8:d0:fc:54:e1:0a:01:a0:2b:44: f0:36:55:1c:00:f0:98:26:9e:6a:39:7d:f0:eb:50: af:2d:ce:1e:82:2c:c7:96:da:54:d3:91:87:61:1b: 98:9a:d4:32:2c:67:99:9f:88:a6:8c:09:f7:24:8d: 35:2a:03:52:3e:e9:f0:7d:c9:d9:dd:55:c5:7e:40: 32:ee:d8:18:10:7e:34:5e:7b:4d:e5:ab:a3:a8:e7: 96:5c:b1:a9:34:dc:5d:71:69:a2:84:55:ce:34:71: 04:90:e0:29:35:0b:a6:da:c1:20:03:66:f1:fe:dd: 95:f2:ac:5d:04:e5:9f:9e:ac:b8:0c:37:7c:12:b6: 57:ed:0f:ae:5c:b0:af:33:e4:17:3c:14:08:a4:85: c0:0c:dc:34:ba:ae:37:59:24:b8:cb:58:d1:1d:01: 87:dc:2f:79:33:a8:bb:99:bd:4b:eb:33:6f:78:18: 44:73:47:72:76:e8:74:3f:09:7c:68:6d:96:10:58: 42:7f:67:78:df:cc:dd:15:20:c1:75:92:31:4d:6f: 6f:b4:34:49:68:29:b0:57:84:77:ab:6e:53:c6:9d: de:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1A:41:D7:D2:7F:1E:DF:A0:EF:01:E2:25:4E:4D:AA:E5:C1:FA:04 X509v3 Authority Key Identifier: keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:90:03:3d:1c:fa:82:d6:aa:05:ce:9d:1e:9e:1d:f3:dc:65: 4a:f3:7a:ca:84:02:15:fc:31:7a:72:cc:0c:0e:af:31:23:af: 55:59:99:30:11:98:7c:5f:81:ee:81:89:b8:93:cc:45:dd:99: b6:cf:e8:c2:e0:83:75:c2:9e:e6:a5:04:2c:ac:d1:2b:4f:58: 42:4c:c1:16:28:4d:2c:5a:27:5c:7c:5a:2b:36:70:08:2d:1a: a5:d2:2d:17:b5:0f:7c:d9:1b:fb:8c:66:32:9d:70:06:7f:fd: ce:c4:58:93:9b:cd:c6:6c:4d:ba:7c:e9:ca:a7:9e:0a:7f:46: ca:32:24:03:80:79:5c:dc:6b:66:c7:fc:bd:31:b2:61:62:a3: 37:54:2a:84:6e:23:63:f1:a3:ee:75:8d:1a:3c:3a:33:f6:c9: 24:e1:89:3d:07:f7:18:64:20:83:49:57:bf:54:98:e2:b5:ed: 1b:9f:e8:82:e5:1c:17:ed:1c:2b:46:1e:06:10:2f:b2:db:e9: bc:cd:77:d8:84:77:6e:61:e1:88:51:e1:d5:4a:d8:71:8d:10: d4:01:aa:b6:bd:60:9b:ca:38:ab:d4:1a:c5:71:79:7e:e6:bc: 01:aa:1c:87:ec:1d:eb:59:73:a3:a7:1f:29:15:ab:4d:44:1e: eb:c4:8d:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFK8vAatZkVkk+fsHlH3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMDNhZjE5NzY0NWE0OTQxYzZjZGIwODY2OWFmMDA4Yjc5 MTAyYmUwHhcNMjUxMjEyMDEwMjI5WhcNMjUxMjEzMDEwMjI5WjAzMTEwLwYDVQQD EyhhMTFhNDFkN2QyN2YxZWRmYTBlZjAxZTIyNTRlNGRhYWU1YzFmYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL9IGq9aEERnz+vJtglAKvyHuFSm FykyMHVjihT/dw6k17jQ/FThCgGgK0TwNlUcAPCYJp5qOX3w61CvLc4egizHltpU 05GHYRuYmtQyLGeZn4imjAn3JI01KgNSPunwfcnZ3VXFfkAy7tgYEH40XntN5auj qOeWXLGpNNxdcWmihFXONHEEkOApNQum2sEgA2bx/t2V8qxdBOWfnqy4DDd8ErZX 7Q+uXLCvM+QXPBQIpIXADNw0uq43WSS4y1jRHQGH3C95M6i7mb1L6zNveBhEc0dy duh0Pwl8aG2WEFhCf2d438zdFSDBdZIxTW9vtDRJaCmwV4R3q25Txp3eBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEaQdfSfx7foO8B4iVOTarlwfoEMB8GA1UdIwQY MBaAFNEDrxl2RaSUHGzbCGaa8Ai3kQK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDkt N2RiM2VjNmZhMzAyLzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDktN2RiM2VjNmZhMzAy LzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5ADPRz6 gtaqBc6dHp4d89xlSvN6yoQCFfwxenLMDA6vMSOvVVmZMBGYfF+B7oGJuJPMRd2Z ts/owuCDdcKe5qUELKzRK09YQkzBFihNLFonXHxaKzZwCC0apdItF7UPfNkb+4xm Mp1wBn/9zsRYk5vNxmxNunzpyqeeCn9GyjIkA4B5XNxrZsf8vTGyYWKjN1QqhG4j Y/Gj7nWNGjw6M/bJJOGJPQf3GGQgg0lXv1SY4rXtG5/oguUcF+0cK0YeBhAvstvp vM132IR3bmHhiFHh1UrYcY0Q1AGqtr1gm8o4q9QaxXF5fua8Aaoch+wd61lzo6cf KRWrTUQe68SN5g== -----END CERTIFICATE-----Generated at Fri Dec 12 02:45:34 2025 by rpki-client