This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft File: 0PMTtkDG3nU1uB7GjEDubsmf_00.mft (raw, json) Hash identifier: 9Iya7ANX5BghDJh+TO8oqpOsqmevu9mZItS637Yr7qw= Subject key identifier: A2:A7:71:E1:E0:2C:20:64:64:7B:98:A2:56:B2:A7:9A:CB:DD:C3:17 Authority key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D Certificate issuer: /CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d Certificate serial: 019B3B3490923010A71D4CED3A57776D2DA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft Manifest number: 08B8 Signing time: Sat 20 Dec 2025 10:00:59 +0000 Manifest this update: Sat 20 Dec 2025 10:00:59 +0000 Manifest next update: Sun 21 Dec 2025 10:00:59 +0000 Files and hashes: 1: 0PMTtkDG3nU1uB7GjEDubsmf_00.crl (hash: ZUqJB6R9pM36AdLq40W7d2urz16ngcwxUKQ9GH9VxaI=) 2: _tDyQl_V4oGcaoTQCOv_1tAVV5w.roa (hash: NfAtzjH7XpKV/Nx/c7iUxK0arZdAcmbSlWPMtQY58/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:90:92:30:10:a7:1d:4c:ed:3a:57:77:6d:2d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d Validity Not Before: Dec 20 10:00:59 2025 GMT Not After : Dec 21 10:00:59 2025 GMT Subject: CN=a2a771e1e02c2064647b98a256b2a79acbddc317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4c:99:98:ba:fd:ff:6d:25:38:49:0c:80:05: b1:05:37:08:58:9d:b7:20:90:3b:01:73:b3:59:f3: 4c:26:0e:e2:14:46:2e:b0:95:37:ea:07:4a:48:ad: d3:9d:78:33:74:1b:92:86:76:a7:1c:d6:cb:5e:10: 7e:ce:76:87:36:a3:b0:7b:98:6e:c3:39:7a:93:07: bd:49:5b:cb:91:49:0d:ed:0d:42:60:f7:f9:8c:44: 74:5a:a8:e8:e5:b3:3a:bd:eb:08:42:5b:2b:90:10: a8:46:a1:e0:04:a2:d2:5b:fd:c8:58:16:2a:d1:e3: 95:8e:40:3d:6a:cf:ef:4d:f9:f3:1d:0b:c1:79:1b: d5:d0:dd:4d:2d:bd:78:c2:bf:b5:25:87:0d:c8:3d: 52:97:b4:cd:b2:69:18:91:90:22:70:f1:2d:ae:24: f7:21:5f:ed:cd:41:17:36:5f:78:df:cc:70:7b:5a: e4:41:c2:a0:00:56:7a:67:0e:58:44:ff:2d:93:ea: 3c:2d:f3:16:9c:19:9e:b5:5f:59:54:78:f3:ca:08: b9:e5:64:4e:31:c1:c9:d2:43:04:40:25:56:94:cf: e7:8b:e5:fe:03:80:d8:7a:7a:5a:2b:58:3a:95:cc: f0:49:87:5a:0f:b1:02:da:20:84:f5:ad:85:3e:96: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A7:71:E1:E0:2C:20:64:64:7B:98:A2:56:B2:A7:9A:CB:DD:C3:17 X509v3 Authority Key Identifier: keyid:D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:7d:b7:e4:8a:0b:a3:f7:33:11:67:0d:a6:9a:5a:71:96:54: 40:30:10:41:85:31:c2:44:db:27:98:b9:76:08:10:07:47:be: 42:31:86:d2:81:2e:bc:09:97:45:20:72:83:08:b4:3d:ca:79: 13:43:5b:89:6a:67:18:d3:10:ac:a2:e5:b0:13:6b:65:78:9e: f0:f2:eb:df:d2:c0:3e:0d:de:c6:0e:94:48:ba:bd:66:10:78: 5f:12:aa:11:81:86:81:37:af:97:4b:b8:04:8a:0d:1b:2b:a1: df:9f:1a:3d:4a:57:3b:33:a1:27:0c:3e:85:63:62:b6:e6:2a: 83:08:aa:7c:f8:1c:ed:d1:61:c7:8f:b4:5d:2a:39:43:cd:95: ce:c0:f6:b4:8a:44:45:65:56:68:a6:d8:eb:01:61:02:b7:c7: f4:87:59:03:e9:75:ca:ce:87:6b:f7:51:a5:19:1c:47:ad:62: 6e:bd:50:cd:15:b6:c1:7a:88:e3:3a:a3:ae:a4:17:6e:39:b9: 79:2f:66:cf:47:06:5a:28:a4:41:4b:e3:3a:91:51:db:37:d5: 5e:48:9e:a7:3d:52:e4:8f:cd:e6:8e:01:f4:e0:6e:d5:d7:65: 83:49:4d:12:78:48:32:c7:93:5c:46:02:d3:49:26:ed:e9:80: 3a:7c:01:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NJCSMBCnHUztOld3bS2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjMxM2I2NDBjNmRlNzUzNWI4MWVjNjhjNDBlZTZlYzk5 ZmZmNGQwHhcNMjUxMjIwMTAwMDU5WhcNMjUxMjIxMTAwMDU5WjAzMTEwLwYDVQQD EyhhMmE3NzFlMWUwMmMyMDY0NjQ3Yjk4YTI1NmIyYTc5YWNiZGRjMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UyZmLr9/20lOEkMgAWxBTcIWJ23 IJA7AXOzWfNMJg7iFEYusJU36gdKSK3TnXgzdBuShnanHNbLXhB+znaHNqOwe5hu wzl6kwe9SVvLkUkN7Q1CYPf5jER0Wqjo5bM6vesIQlsrkBCoRqHgBKLSW/3IWBYq 0eOVjkA9as/vTfnzHQvBeRvV0N1NLb14wr+1JYcNyD1Sl7TNsmkYkZAicPEtriT3 IV/tzUEXNl9438xwe1rkQcKgAFZ6Zw5YRP8tk+o8LfMWnBmetV9ZVHjzygi55WRO McHJ0kMEQCVWlM/ni+X+A4DYenpaK1g6lczwSYdaD7EC2iCE9a2FPpb4gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKnceHgLCBkZHuYolayp5rL3cMXMB8GA1UdIwQY MBaAFNDzE7ZAxt51NbgexoxA7m7Jn/9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBNVHRrREczblUxdUI3R2pFRHVic21mXzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85YTk5ZjktMmQ2Yy00YTRhLWEwOTYt MGM3M2JlYzUxMDdjLzEvMFBNVHRrREczblUxdUI3R2pFRHVic21mXzAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85YTk5ZjktMmQ2Yy00YTRhLWEwOTYtMGM3M2JlYzUxMDdj LzEvMFBNVHRrREczblUxdUI3R2pFRHVic21mXzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3235IoL o/czEWcNpppacZZUQDAQQYUxwkTbJ5i5dggQB0e+QjGG0oEuvAmXRSBygwi0Pcp5 E0NbiWpnGNMQrKLlsBNrZXie8PLr39LAPg3exg6USLq9ZhB4XxKqEYGGgTevl0u4 BIoNGyuh358aPUpXOzOhJww+hWNituYqgwiqfPgc7dFhx4+0XSo5Q82VzsD2tIpE RWVWaKbY6wFhArfH9IdZA+l1ys6Ha/dRpRkcR61ibr1QzRW2wXqI4zqjrqQXbjm5 eS9mz0cGWiikQUvjOpFR2zfVXkiepz1S5I/N5o4B9OBu1ddlg0lNEnhIMseTXEYC 00km7emAOnwBuQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:50:44 2025 by rpki-client