This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json) Hash identifier: 9p0SCQ9TKYYmLRZju0Bvpg12o8C8845IiEzFHAfiS0s= Subject key identifier: EE:4B:E5:63:3C:AC:8E:4D:3B:D9:4C:AA:AC:A0:1B:CB:AB:C5:F5:BA Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab Certificate serial: 019B10818B796909B581626DF07C80B9E21C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft Manifest number: 09D4 Signing time: Fri 12 Dec 2025 03:01:23 +0000 Manifest this update: Fri 12 Dec 2025 03:01:23 +0000 Manifest next update: Sat 13 Dec 2025 03:01:23 +0000 Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: JTc/g3Iak7BST5z+sm0zzZFFPeDUDlnx8rf2Uml1HtQ=) 2: tkNgBbUczBhXw3Q7nsd4bFDL5Ko.roa (hash: 2ZBjCKDVEUumVBdfZIcGHq5+w377C2/RlriHj7O796c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:8b:79:69:09:b5:81:62:6d:f0:7c:80:b9:e2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab Validity Not Before: Dec 12 03:01:23 2025 GMT Not After : Dec 13 03:01:23 2025 GMT Subject: CN=ee4be5633cac8e4d3bd94caaaca01bcbabc5f5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:55:d5:c7:6e:d6:19:4c:2f:ce:54:c1:34:73: 26:8e:48:a1:70:20:1e:43:01:18:c5:42:f4:e6:0b: ea:d6:d6:37:b8:04:82:f3:31:d3:a3:84:5b:52:55: de:c8:7a:07:37:8f:7e:4a:ee:46:4f:6d:ef:ea:96: 57:56:19:54:72:04:13:20:fe:c0:f7:64:88:3b:84: af:ff:23:42:e0:31:64:7a:36:04:ec:32:eb:cf:47: 0e:56:97:b7:e9:05:4e:cc:d1:ff:85:5e:5b:ab:9f: 4d:0b:fa:7b:a5:97:66:cc:b2:82:c8:37:df:cd:df: 30:00:c7:40:8a:e5:f9:d6:d1:f2:8d:3c:76:07:76: d1:fc:eb:c5:ba:c1:4e:cf:cd:be:78:e8:b7:64:96: b0:8b:29:02:44:72:a0:8e:3a:8f:11:43:4a:fa:74: 46:fd:c0:fb:e3:df:d8:45:02:c5:d5:9b:01:21:58: 30:2d:c1:06:6c:15:97:df:f8:ea:c2:1d:9b:6e:e6: f3:ff:2f:da:52:40:78:2a:95:51:78:f5:51:39:7c: 63:fb:f5:5b:63:ff:3a:26:bb:72:7d:dd:ab:9a:fc: 1f:45:f2:c4:46:c7:2f:ea:83:2f:5c:60:72:43:80: e3:be:c8:e1:21:45:a8:b8:d2:a5:bf:d1:10:78:27: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4B:E5:63:3C:AC:8E:4D:3B:D9:4C:AA:AC:A0:1B:CB:AB:C5:F5:BA X509v3 Authority Key Identifier: keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d1:26:4f:22:4b:c3:e5:42:1a:9c:72:11:37:98:8a:cb:27: be:4f:29:78:4a:08:c7:36:4b:66:1f:34:2e:7e:ed:9f:d1:2e: c3:cd:e9:b1:0a:b3:27:88:51:24:5f:e2:ed:7e:65:fd:6f:2d: 21:68:49:fb:5b:e3:aa:8f:b7:cb:fe:df:ed:a6:ad:85:25:43: 10:76:c0:bf:ff:8a:72:6a:f6:9c:17:c7:57:82:0f:ce:55:ad: 83:5c:fb:fb:d8:8b:48:c2:35:b2:d2:0c:21:43:61:ed:d6:a6: dc:75:4d:d1:9c:50:b3:1d:0b:51:15:0b:dc:8a:20:54:68:0e: 78:55:7e:cf:7c:7d:33:60:2a:72:2f:8a:e8:d5:bd:a5:f1:b7: dd:49:d4:0e:86:ea:ce:b6:5e:39:d7:1a:f9:8d:87:cc:8f:c5: 67:1b:c0:2d:9e:7a:71:ee:24:a5:93:29:7c:57:68:f2:f0:b6: 65:37:61:66:4c:db:22:8a:f1:f9:4a:75:fb:2f:98:b7:0c:09: 48:be:9b:42:0a:9c:e2:6c:2f:40:88:e8:9d:c0:6b:09:8f:e3: 95:aa:74:ab:2f:62:78:89:e5:34:22:dd:bc:00:b0:a5:d5:d2: ec:02:6b:70:93:24:09:2e:ed:1f:99:fe:2a:13:fb:1b:5d:d1: aa:b6:6a:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgYt5aQm1gWJt8HyAueIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNDkxNzcwY2U5YjY2MzAwMmE3OTQ1NDJkOTg4NmQxYTJj ZTYzYWIwHhcNMjUxMjEyMDMwMTIzWhcNMjUxMjEzMDMwMTIzWjAzMTEwLwYDVQQD EyhlZTRiZTU2MzNjYWM4ZTRkM2JkOTRjYWFhY2EwMWJjYmFiYzVmNWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lXVx27WGUwvzlTBNHMmjkihcCAe QwEYxUL05gvq1tY3uASC8zHTo4RbUlXeyHoHN49+Su5GT23v6pZXVhlUcgQTIP7A 92SIO4Sv/yNC4DFkejYE7DLrz0cOVpe36QVOzNH/hV5bq59NC/p7pZdmzLKCyDff zd8wAMdAiuX51tHyjTx2B3bR/OvFusFOz82+eOi3ZJawiykCRHKgjjqPEUNK+nRG /cD749/YRQLF1ZsBIVgwLcEGbBWX3/jqwh2bbubz/y/aUkB4KpVRePVROXxj+/Vb Y/86Jrtyfd2rmvwfRfLERscv6oMvXGByQ4DjvsjhIUWouNKlv9EQeCekewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5L5WM8rI5NO9lMqqygG8urxfW6MB8GA1UdIwQY MBaAFNJJF3DOm2YwAqeUVC2YhtGizmOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEt ODVjMGQwMWY5ZGUyLzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEtODVjMGQwMWY5ZGUy LzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9EmTyJL w+VCGpxyETeYissnvk8peEoIxzZLZh80Ln7tn9Euw83psQqzJ4hRJF/i7X5l/W8t IWhJ+1vjqo+3y/7f7aathSVDEHbAv/+Kcmr2nBfHV4IPzlWtg1z7+9iLSMI1stIM IUNh7dam3HVN0ZxQsx0LURUL3IogVGgOeFV+z3x9M2Aqci+K6NW9pfG33UnUDobq zrZeOdca+Y2HzI/FZxvALZ56ce4kpZMpfFdo8vC2ZTdhZkzbIorx+Up1+y+YtwwJ SL6bQgqc4mwvQIjoncBrCY/jlap0qy9ieInlNCLdvACwpdXS7AJrcJMkCS7tH5n+ KhP7G13RqrZqOw== -----END CERTIFICATE-----Generated at Fri Dec 12 12:39:34 2025 by rpki-client