This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft File: 0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json) Hash identifier: mWUQXmxVK+pHOJloEicTZMyxYkxgJPdkJ/l6ZP1sV+U= Subject key identifier: 29:D2:09:28:DC:A6:35:6E:1D:CE:2D:CF:C3:F8:F8:B2:02:08:61:72 Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe Certificate serial: 019B19F267106956DCB9AC60F39622163EA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft Manifest number: 02C1 Signing time: Sat 13 Dec 2025 23:01:14 +0000 Manifest this update: Sat 13 Dec 2025 23:01:14 +0000 Manifest next update: Sun 14 Dec 2025 23:01:14 +0000 Files and hashes: 1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: +sH66Yocea5fPhH4ulfdOdLGTd9IBNmmhEnAP25ZmUA=) 2: IcIhqkwJl3oIn1TFze0JKC2ukZo.roa (hash: N9HPji4dA8H0kkRU9JW+TERsQXqgse1gQnpLkAfBwZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:67:10:69:56:dc:b9:ac:60:f3:96:22:16:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe Validity Not Before: Dec 13 23:01:14 2025 GMT Not After : Dec 14 23:01:14 2025 GMT Subject: CN=29d20928dca6356e1dce2dcfc3f8f8b202086172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:82:ea:b6:67:61:4b:dd:79:0b:72:ba:f8:07: 06:ce:93:f3:ad:0e:5b:75:9d:1a:64:d2:09:4a:eb: ba:ff:65:9d:ae:75:5a:52:cd:c8:26:99:cc:83:a2: 82:11:44:27:db:9e:3c:45:e0:5e:aa:0b:61:91:82: 08:08:97:fa:73:96:18:17:ed:92:e8:47:2c:46:cb: 07:e4:d0:0e:54:67:b1:66:2a:d7:c9:db:28:26:29: e5:5d:d1:26:6b:ad:95:ef:ca:b2:c1:da:b6:6c:d4: 4d:94:e8:fd:0e:13:72:3f:05:27:34:54:07:5c:b8: 2d:b2:fa:bc:e6:8d:9b:ec:68:95:a0:f3:37:68:4e: 6a:23:37:60:b8:3a:4d:c9:4e:13:79:39:24:c3:e8: 21:15:b8:b0:e7:60:58:bb:82:68:8c:fb:d9:79:52: b0:be:bc:1b:da:d2:48:8e:3f:6f:43:3b:e3:b5:9a: f0:9f:b5:47:57:c5:55:71:b9:f6:28:10:00:c2:c7: 26:42:57:76:99:ff:58:e5:85:7f:94:76:20:a2:f0: ad:56:22:80:13:19:75:83:cd:d4:b5:c5:3d:6f:b1: 87:ec:3d:85:0a:04:b8:8f:12:88:a6:55:e7:61:57: 71:e0:da:95:ca:96:4d:ee:4b:25:5c:4f:b3:9a:63: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D2:09:28:DC:A6:35:6E:1D:CE:2D:CF:C3:F8:F8:B2:02:08:61:72 X509v3 Authority Key Identifier: keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:4e:75:30:cc:16:c2:5d:25:32:0f:a6:1c:78:9c:67:4f:5d: b2:7c:ae:97:ec:c5:54:f6:b8:14:99:58:7e:82:9d:2d:e1:d2: eb:29:98:99:b3:7f:5b:06:1e:0f:23:ec:4c:04:a5:96:c3:70: 7c:36:6b:db:5f:63:9a:53:f1:dd:de:33:be:f3:20:6b:4e:ab: f2:94:ca:ec:61:b1:a3:af:35:f2:68:04:68:ac:d8:08:d4:2d: bb:1c:35:2a:4b:fc:02:18:26:1c:79:c3:95:da:35:8c:94:2a: f5:d0:13:68:f8:37:17:6b:a0:b3:2b:98:af:a1:9d:a5:43:26: 58:ae:9d:d7:fa:b1:f9:94:94:a2:e9:b1:39:68:ac:3d:4e:a1: 1e:8d:ce:b0:29:2e:15:f6:d3:09:ad:1a:f1:f0:56:e2:44:89: e8:8f:db:f6:38:ab:07:bb:73:2b:68:4f:40:54:4c:82:d0:84: 2d:70:06:e6:c1:18:51:b3:42:1f:d8:9c:5b:37:39:67:45:a3: ba:ea:e9:05:75:00:5c:f0:7f:0a:00:89:a2:83:ee:49:cb:44: 4e:6b:6e:8d:33:c4:75:75:8f:6c:0b:e4:a8:5c:ba:48:e4:07: 75:63:6f:d3:87:7e:6b:08:de:f1:14:d4:f5:e6:92:f2:34:6d: 6e:75:f7:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8mcQaVbcuaxg85YiFj6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjI4ZTA2OWI1ZWQ4YjQ1NTkzNDNiNWI2N2Y1YWI0Zjky MjUxZmUwHhcNMjUxMjEzMjMwMTE0WhcNMjUxMjE0MjMwMTE0WjAzMTEwLwYDVQQD EygyOWQyMDkyOGRjYTYzNTZlMWRjZTJkY2ZjM2Y4ZjhiMjAyMDg2MTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYLqtmdhS915C3K6+AcGzpPzrQ5b dZ0aZNIJSuu6/2WdrnVaUs3IJpnMg6KCEUQn2548ReBeqgthkYIICJf6c5YYF+2S 6EcsRssH5NAOVGexZirXydsoJinlXdEma62V78qywdq2bNRNlOj9DhNyPwUnNFQH XLgtsvq85o2b7GiVoPM3aE5qIzdguDpNyU4TeTkkw+ghFbiw52BYu4JojPvZeVKw vrwb2tJIjj9vQzvjtZrwn7VHV8VVcbn2KBAAwscmQld2mf9Y5YV/lHYgovCtViKA Exl1g83UtcU9b7GH7D2FCgS4jxKIplXnYVdx4NqVypZN7kslXE+zmmO8nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnSCSjcpjVuHc4tz8P4+LICCGFyMB8GA1UdIwQY MBaAFNJijgabXti0VZNDtbZ/WrT5IlH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZWI5N2EtODNiZC00NDQ4LWIwOWUt YWY2NGE1N2FjOGQyLzEvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xZWI5N2EtODNiZC00NDQ4LWIwOWUtYWY2NGE1N2FjOGQy LzEvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd051MMwW wl0lMg+mHHicZ09dsnyul+zFVPa4FJlYfoKdLeHS6ymYmbN/WwYeDyPsTASllsNw fDZr219jmlPx3d4zvvMga06r8pTK7GGxo6818mgEaKzYCNQtuxw1Kkv8AhgmHHnD ldo1jJQq9dATaPg3F2ugsyuYr6GdpUMmWK6d1/qx+ZSUoumxOWisPU6hHo3OsCku FfbTCa0a8fBW4kSJ6I/b9jirB7tzK2hPQFRMgtCELXAG5sEYUbNCH9icWzc5Z0Wj uurpBXUAXPB/CgCJooPuSctETmtujTPEdXWPbAvkqFy6SOQHdWNv04d+awje8RTU 9eaS8jRtbnX35Q== -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:04 2025 by rpki-client