This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft File: 0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json) Hash identifier: 7BoGQNpvbWOozqXn+zmOY/+MB6yPcBfSFQjhUw0qe1s= Subject key identifier: F0:03:6F:97:3E:72:37:FC:25:07:D7:F0:33:82:AF:9E:BD:65:03:2F Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95 Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95 Certificate serial: 019B16BA96790A80D3831855BB196322831A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft Manifest number: 0EC3 Signing time: Sat 13 Dec 2025 08:01:25 +0000 Manifest this update: Sat 13 Dec 2025 08:01:25 +0000 Manifest next update: Sun 14 Dec 2025 08:01:25 +0000 Files and hashes: 1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: i/9kH0hlZVTbhc3PTvD8rM/qDEdAX/Ga5Gg+LoZKS+4=) 2: 30clEHSQ2FtWcxS6WRrlfziweF0.roa (hash: kMEVQBcSv51miHKtL16mTfHOOekvOtrPK9PKsU+A9fo=) 3: 7DpXnFdsHbigdyiMVLlpMLbaqBk.roa (hash: SY5vZz50/sY6PXI2smf9TJ61eKLV+hC2iIUr3RKUJQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:ba:96:79:0a:80:d3:83:18:55:bb:19:63:22:83:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95 Validity Not Before: Dec 13 08:01:25 2025 GMT Not After : Dec 14 08:01:25 2025 GMT Subject: CN=f0036f973e7237fc2507d7f03382af9ebd65032f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:02:29:da:91:af:61:c6:07:c7:10:fa:c5: 49:f7:7e:60:7b:68:66:0b:de:00:b3:21:cd:04:1a: 7e:e5:9d:1a:b1:05:d0:0f:26:f7:97:d6:d3:cc:8d: 76:a9:7e:f9:3e:23:a8:e7:c8:83:2a:a3:a2:aa:39: 70:91:1f:38:98:c2:20:56:80:ed:3c:da:6f:8b:2d: 2c:26:d5:e0:e4:58:6b:63:75:6a:6b:93:24:f4:17: 7e:43:fa:e7:55:46:59:b4:52:13:be:6b:b2:d8:0a: bc:79:71:c0:ae:43:41:5c:f4:ad:70:cc:8b:2d:77: 90:82:0e:a1:00:a4:e6:8d:77:97:ab:73:9d:23:84: ba:22:42:c9:52:38:25:8d:4c:12:59:3d:5f:05:6b: e0:97:f7:3c:ce:b5:0f:21:78:0b:f6:ec:42:3a:59: cf:ee:27:be:1b:1f:b2:79:5c:c2:36:e6:bf:c1:3f: 04:56:09:13:e7:32:84:18:4b:5e:1d:1a:73:3c:3e: f4:32:35:17:7d:54:bf:5a:f0:45:38:17:5a:38:17: 3f:44:95:7c:47:eb:af:96:eb:1c:0e:bf:aa:d6:ff: 79:eb:92:97:36:3f:7c:42:0d:d0:f6:59:88:78:70: 64:3b:e0:0a:05:42:68:07:28:79:bd:b4:aa:21:2e: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:03:6F:97:3E:72:37:FC:25:07:D7:F0:33:82:AF:9E:BD:65:03:2F X509v3 Authority Key Identifier: keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:f0:24:1a:53:f1:b7:70:36:81:84:87:5f:5d:59:ae:c2:0d: b3:43:b3:a6:a6:34:da:60:f1:56:77:57:cc:68:ec:9a:09:eb: cc:b2:70:b3:b9:aa:dc:36:3a:18:db:42:ec:18:be:62:c3:30: f5:9b:1a:fd:da:7f:ea:a9:4d:b5:0e:8d:56:d2:bd:bd:a1:b1: 74:a6:75:8c:69:47:cb:5d:7c:d6:ab:10:a8:89:39:da:12:99: e7:61:5b:e7:57:f7:20:ed:4d:13:ec:76:d4:72:14:7a:0b:e9: 4f:3c:92:4e:70:7a:25:3f:57:bf:3a:40:ce:5d:88:9f:6c:f6: 67:8f:9a:66:83:e8:e6:e1:42:05:a9:7f:42:e2:1f:6e:e3:d2: 86:ff:22:89:9f:f3:bb:19:1a:61:44:1e:0e:49:67:bd:3e:de: 5f:8a:5a:e5:f4:a1:de:89:7b:8c:4b:0f:d9:53:b9:ae:48:13: 3b:8d:45:76:9f:a7:3b:ef:da:c1:72:5d:56:e5:80:96:7e:a5: 60:7f:3f:74:bc:50:9a:4d:28:c0:42:6f:e3:70:a8:fc:74:a7: 09:ce:8c:a1:62:b6:4f:33:5f:a2:2c:77:98:f0:c4:27:ee:f5: e6:7e:a2:36:ef:3e:fe:92:74:d7:b9:5c:69:88:54:6e:00:ce: 98:01:ac:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWupZ5CoDTgxhVuxljIoMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTQyYTU4M2ZhMjUxYjQzMmNmYzFkY2E4YmQzNDFkNTA2 NjBiOTUwHhcNMjUxMjEzMDgwMTI1WhcNMjUxMjE0MDgwMTI1WjAzMTEwLwYDVQQD EyhmMDAzNmY5NzNlNzIzN2ZjMjUwN2Q3ZjAzMzgyYWY5ZWJkNjUwMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbECKdqRr2HGB8cQ+sVJ935ge2hm C94AsyHNBBp+5Z0asQXQDyb3l9bTzI12qX75PiOo58iDKqOiqjlwkR84mMIgVoDt PNpviy0sJtXg5FhrY3Vqa5Mk9Bd+Q/rnVUZZtFITvmuy2Aq8eXHArkNBXPStcMyL LXeQgg6hAKTmjXeXq3OdI4S6IkLJUjgljUwSWT1fBWvgl/c8zrUPIXgL9uxCOlnP 7ie+Gx+yeVzCNua/wT8EVgkT5zKEGEteHRpzPD70MjUXfVS/WvBFOBdaOBc/RJV8 R+uvluscDr+q1v9565KXNj98Qg3Q9lmIeHBkO+AKBUJoByh5vbSqIS4rnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPADb5c+cjf8JQfX8DOCr569ZQMvMB8GA1UdIwQY MBaAFNLkKlg/olG0Ms/B3Ki9NB1QZguVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMt ZmRjMWRjZGEyOTYxLzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMtZmRjMWRjZGEyOTYx LzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfAkGlPx t3A2gYSHX11ZrsINs0OzpqY02mDxVndXzGjsmgnrzLJws7mq3DY6GNtC7Bi+YsMw 9Zsa/dp/6qlNtQ6NVtK9vaGxdKZ1jGlHy1181qsQqIk52hKZ52Fb51f3IO1NE+x2 1HIUegvpTzySTnB6JT9XvzpAzl2In2z2Z4+aZoPo5uFCBal/QuIfbuPShv8iiZ/z uxkaYUQeDklnvT7eX4pa5fSh3ol7jEsP2VO5rkgTO41Fdp+nO+/awXJdVuWAln6l YH8/dLxQmk0owEJv43Co/HSnCc6MoWK2TzNfoix3mPDEJ+715n6iNu8+/pJ017lc aYhUbgDOmAGs8g== -----END CERTIFICATE-----Generated at Sat Dec 13 11:27:10 2025 by rpki-client