This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json) Hash identifier: Xo7L4rC1uKHdsVbofsQfbcztTsH+i7BKhYZKp+T4RVg= Subject key identifier: 06:2E:87:8E:15:90:6E:95:CA:25:FD:28:D4:0E:B0:F9:BB:60:21:3D Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127 Certificate serial: 019AF50A0415EB8BA429A1A1E0C3E0DC615F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft Manifest number: 0B7A Signing time: Sat 06 Dec 2025 19:01:05 +0000 Manifest this update: Sat 06 Dec 2025 19:01:05 +0000 Manifest next update: Sun 07 Dec 2025 19:01:05 +0000 Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: hJILAzzdrxtNQoX5NP0ZJ8LJ9BwIbGLKjsOGwS7HlxQ=) 2: Ve2RrvNi_87VDfl21Lq8fKe-sYc.roa (hash: Bwg7wRCqbsHk5Pn4Ah5pnRiyg8rpwcrSFyOQ2YGllyY=) 3: nc0QnNEGuF1kLi9w3egLsBhEL6Y.roa (hash: KWBWDWBG7Sj1CyJ1paoXUYeG29P/pnqgE+4DRW4DIYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:04:15:eb:8b:a4:29:a1:a1:e0:c3:e0:dc:61:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127 Validity Not Before: Dec 6 19:01:05 2025 GMT Not After : Dec 7 19:01:05 2025 GMT Subject: CN=062e878e15906e95ca25fd28d40eb0f9bb60213d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:24:ae:c1:f7:5d:bd:0a:90:3c:bf:19:54:16: 2f:57:b9:bd:73:aa:e1:87:e0:f0:48:4a:27:5f:43: 9d:66:c2:b8:76:85:f3:29:01:01:7c:a4:86:27:21: ee:15:a5:7c:d2:89:ed:fe:e9:4d:af:08:cd:03:fa: d2:f7:e3:9e:b9:63:84:1b:24:ee:97:dc:90:32:b9: ec:4c:21:3c:5f:c5:c3:a5:df:09:5a:ba:e4:a6:44: 78:8d:2e:c0:db:43:a5:20:44:8f:a9:e1:51:69:8c: 5f:8e:91:3d:53:95:4f:8e:57:30:fd:80:e3:20:f4: 37:93:e6:67:df:f3:22:bd:d3:04:7c:c6:0c:3e:80: 70:b9:8e:7e:88:ed:5f:13:93:54:4a:b3:96:fd:f6: f1:f8:9d:28:0e:08:8e:93:57:a9:aa:d7:17:b7:d4: 6e:f4:0d:a2:f9:11:7c:27:b3:b9:f8:21:93:e3:ab: f0:22:d5:69:9e:a5:fe:b2:e0:54:d8:ad:a5:4f:6b: 4f:02:5b:f8:7c:79:57:26:ba:f9:38:9f:b5:95:c4: ac:8b:f0:80:43:56:e1:4e:46:10:83:fe:41:66:f2: 54:b2:41:4f:61:81:85:7f:21:91:71:68:dd:7b:08: a2:8a:7b:e4:0b:06:33:b0:09:2a:f6:7a:2f:d1:b9: d4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2E:87:8E:15:90:6E:95:CA:25:FD:28:D4:0E:B0:F9:BB:60:21:3D X509v3 Authority Key Identifier: keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:dc:68:35:97:7c:ab:d6:8b:01:d4:dc:16:b2:47:17:2e:bb: 73:36:61:7e:88:d8:b4:00:ee:06:dc:5a:ea:71:08:2d:ca:ee: a3:0d:0f:46:1d:c1:fa:08:f6:c8:5c:86:80:63:21:b2:48:99: 81:3e:e9:8c:fd:75:96:4a:bb:c1:99:b0:a3:3d:e5:81:8a:ab: 6e:18:07:20:85:35:77:7d:99:c7:03:92:6a:d5:89:46:dc:9b: 4d:ca:58:fd:1f:91:aa:3d:c7:3f:99:2b:5b:cc:1d:84:50:06: 4f:64:28:8c:9b:d1:78:37:8d:6b:2f:b9:24:bf:26:e7:00:ad: 4e:32:8b:1d:00:3d:99:38:f9:8b:4c:ae:8d:91:b7:cc:39:a2: 1e:62:b1:a8:6c:57:e8:0a:98:d2:b8:00:7a:04:bf:ea:57:76: 6e:cc:56:90:66:2a:a0:a5:b6:d7:65:ce:72:76:97:ed:75:4e: e1:d0:92:6b:25:3f:45:ea:25:cc:17:c9:c5:36:0c:38:cb:c5: 87:32:97:e9:19:57:89:2e:10:0f:a3:c8:49:9c:06:3a:29:a6: 8c:81:34:14:65:45:a8:e3:88:3a:9b:30:f6:d4:d0:b6:96:af: d7:a3:69:50:4c:d1:d8:11:47:f3:6d:34:11:b4:3c:b5:5d:1c: 34:28:47:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CgQV64ukKaGh4MPg3GFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMTY4MzVkMDM3Nzg2NjIwYTllOWY3YTBlMzYwNDk4YmI2 NTQxMjcwHhcNMjUxMjA2MTkwMTA1WhcNMjUxMjA3MTkwMTA1WjAzMTEwLwYDVQQD EygwNjJlODc4ZTE1OTA2ZTk1Y2EyNWZkMjhkNDBlYjBmOWJiNjAyMTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzySuwfddvQqQPL8ZVBYvV7m9c6rh h+DwSEonX0OdZsK4doXzKQEBfKSGJyHuFaV80ont/ulNrwjNA/rS9+OeuWOEGyTu l9yQMrnsTCE8X8XDpd8JWrrkpkR4jS7A20OlIESPqeFRaYxfjpE9U5VPjlcw/YDj IPQ3k+Zn3/MivdMEfMYMPoBwuY5+iO1fE5NUSrOW/fbx+J0oDgiOk1epqtcXt9Ru 9A2i+RF8J7O5+CGT46vwItVpnqX+suBU2K2lT2tPAlv4fHlXJrr5OJ+1lcSsi/CA Q1bhTkYQg/5BZvJUskFPYYGFfyGRcWjdewiiinvkCwYzsAkq9nov0bnUsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYuh44VkG6VyiX9KNQOsPm7YCE9MB8GA1UdIwQY MBaAFNEWg10Dd4ZiCp6feg42BJi7ZUEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMt MTZhN2Q2MGQ1YmVhLzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMtMTZhN2Q2MGQ1YmVh LzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9xoNZd8 q9aLAdTcFrJHFy67czZhfojYtADuBtxa6nEILcruow0PRh3B+gj2yFyGgGMhskiZ gT7pjP11lkq7wZmwoz3lgYqrbhgHIIU1d32ZxwOSatWJRtybTcpY/R+Rqj3HP5kr W8wdhFAGT2QojJvReDeNay+5JL8m5wCtTjKLHQA9mTj5i0yujZG3zDmiHmKxqGxX 6AqY0rgAegS/6ld2bsxWkGYqoKW212XOcnaX7XVO4dCSayU/ReolzBfJxTYMOMvF hzKX6RlXiS4QD6PISZwGOimmjIE0FGVFqOOIOpsw9tTQtpav16NpUEzR2BFH8200 EbQ8tV0cNChHNQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:07:54 2025 by rpki-client