This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft File: 0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json) Hash identifier: CRortmmVP40vFk3IREqHsNMK8PGbqcRvl4VcZmapXRw= Subject key identifier: 09:31:67:7C:A5:E1:A2:DE:B5:86:04:3B:30:D9:9F:9F:A0:34:99:4A Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29 Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129 Certificate serial: 019B0EC97C775F2F6318BB5A91CDABC026F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft Manifest number: 038C Signing time: Thu 11 Dec 2025 19:00:44 +0000 Manifest this update: Thu 11 Dec 2025 19:00:44 +0000 Manifest next update: Fri 12 Dec 2025 19:00:44 +0000 Files and hashes: 1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: BxOlKVH6lEYxITfDXyeE5HlLVUbfbC4DZvcZzxWvFPM=) 2: 2mOIvyxqACEFmIkGDLPkH-bc67w.roa (hash: a5V4lxFeCQH7YtlBbiNtuF1rDDvq1OPE/o43ZTFdAYQ=) 3: BPcKYotNA4ZeZvm82W73v75zPQs.roa (hash: oHpWOGTj/PoKbHsHCYFs8uXPSnbHGEoV8KY7k9zJBk4=) 4: GkxGrjdz0A7AWmifnWDimQZWI38.roa (hash: tHXJR2KGAG4wHE8bdFOYoF9Jdtd+4jQD2aXhMHJzWK8=) 5: ief4j2bb-cAvwzzS1T0xB8OgxGk.roa (hash: cv2vWMrY2M65pVapU15+XFEE8tVsd4Na8PnjBxEQRuA=) 6: wkwsgzJc2eo9ng8QQ8kvMc3qjbc.roa (hash: +iuoTytPo6r5GmeijHeI4hmWR8iJmhnqPLAkE9k79sI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:7c:77:5f:2f:63:18:bb:5a:91:cd:ab:c0:26:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129 Validity Not Before: Dec 11 19:00:44 2025 GMT Not After : Dec 12 19:00:44 2025 GMT Subject: CN=0931677ca5e1a2deb586043b30d99f9fa034994a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:33:ff:b0:e9:f3:7c:b0:98:09:6a:08:bd:8f: 97:d2:17:b3:4e:b7:f6:e9:cc:59:a7:48:e0:5c:7e: 16:99:ef:35:b7:d1:a5:4e:e7:f8:70:5e:79:c2:44: ca:b1:84:94:d6:1d:20:c5:a3:8c:1c:ee:6a:dc:20: e2:d6:62:2a:79:4a:96:73:ea:8e:67:49:e0:12:bc: a9:69:91:be:30:8a:02:38:ad:e7:62:62:da:0c:78: ea:6d:47:17:c5:c0:91:b3:9b:2c:80:84:cd:99:66: 4f:a6:13:b5:61:5d:a9:b1:e1:7a:75:b4:e8:2a:cf: 26:4d:10:03:90:d4:6c:33:4a:9c:cc:5f:fc:fb:f2: c3:69:62:c5:06:10:87:52:8b:b5:d3:f9:12:3a:08: 3a:d0:5b:55:21:db:fe:fb:83:22:7e:e3:66:01:91: 2e:f6:dd:f8:0d:14:25:15:6c:e6:47:68:f0:6e:f2: 31:30:90:32:19:e7:25:b4:e3:6d:54:3c:89:b7:ef: 88:b5:21:93:13:e3:d1:a5:93:c7:4e:85:f8:86:57: 77:8e:78:3a:20:f0:70:62:34:5a:22:37:77:f9:c5: dc:b7:82:47:2b:3b:81:18:33:fd:50:e1:7b:67:16: 72:82:04:62:f7:42:94:58:51:f0:a5:5e:e8:ff:50: 7b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:31:67:7C:A5:E1:A2:DE:B5:86:04:3B:30:D9:9F:9F:A0:34:99:4A X509v3 Authority Key Identifier: keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c3:19:aa:26:8c:27:58:0c:ac:62:4f:da:22:dc:0f:ed:7d: 63:20:b4:2c:39:fe:be:78:6f:dd:9d:90:ef:36:6e:79:46:9c: 72:61:40:0d:f4:e1:09:17:bf:cd:19:c0:62:e6:ca:9a:31:5a: c2:53:ca:fc:60:f8:e1:51:8e:ad:73:d9:5d:65:67:8a:df:52: 14:52:d3:be:26:68:0e:e5:91:fc:bf:a3:9f:38:32:44:08:d6: 50:a9:16:80:33:89:91:88:74:58:37:fb:e4:68:23:0d:43:f0: d1:a3:b8:80:df:39:0f:49:8b:4f:d2:c0:1a:e7:e8:d3:07:a4: 21:b6:e6:13:41:d6:58:9c:d3:4f:93:51:fc:a3:ae:95:28:b9: fe:ea:0f:1c:ed:ef:80:50:02:33:e5:2a:bc:a3:66:ae:01:65: ae:23:43:86:87:64:fe:a2:cc:fe:27:00:57:ef:e2:cb:d3:d6: 2b:0f:51:b4:75:ad:cb:56:f5:68:96:45:6f:16:c1:0b:e9:ca: 26:b7:71:e1:cb:d0:3a:22:96:b8:01:ed:52:90:cc:2c:d7:8b: 0a:e9:4b:bc:ce:cd:a8:ad:4f:41:9c:55:67:fb:53:a7:01:60: a8:89:e0:c9:90:15:f5:63:07:73:d8:85:0e:dd:e3:8d:0e:c1: 55:26:bf:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyXx3Xy9jGLtakc2rwCbzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYWE0YTFhN2EzYWQyM2ZhYWUyYWVhZTlmYTYxOTRmMDIx MjgxMjkwHhcNMjUxMjExMTkwMDQ0WhcNMjUxMjEyMTkwMDQ0WjAzMTEwLwYDVQQD EygwOTMxNjc3Y2E1ZTFhMmRlYjU4NjA0M2IzMGQ5OWY5ZmEwMzQ5OTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozP/sOnzfLCYCWoIvY+X0hezTrf2 6cxZp0jgXH4Wme81t9GlTuf4cF55wkTKsYSU1h0gxaOMHO5q3CDi1mIqeUqWc+qO Z0ngErypaZG+MIoCOK3nYmLaDHjqbUcXxcCRs5ssgITNmWZPphO1YV2pseF6dbTo Ks8mTRADkNRsM0qczF/8+/LDaWLFBhCHUou10/kSOgg60FtVIdv++4MifuNmAZEu 9t34DRQlFWzmR2jwbvIxMJAyGecltONtVDyJt++ItSGTE+PRpZPHToX4hld3jng6 IPBwYjRaIjd3+cXct4JHKzuBGDP9UOF7ZxZyggRi90KUWFHwpV7o/1B7NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkxZ3yl4aLetYYEOzDZn5+gNJlKMB8GA1UdIwQY MBaAFNCqShp6OtI/quKurp+mGU8CEoEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83NjU1NmUtYTFkOC00ZTBhLTg0Njgt MjIxNGYxOGViMzI5LzEvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83NjU1NmUtYTFkOC00ZTBhLTg0NjgtMjIxNGYxOGViMzI5 LzEvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMMZqiaM J1gMrGJP2iLcD+19YyC0LDn+vnhv3Z2Q7zZueUaccmFADfThCRe/zRnAYubKmjFa wlPK/GD44VGOrXPZXWVnit9SFFLTviZoDuWR/L+jnzgyRAjWUKkWgDOJkYh0WDf7 5GgjDUPw0aO4gN85D0mLT9LAGufo0wekIbbmE0HWWJzTT5NR/KOulSi5/uoPHO3v gFACM+UqvKNmrgFlriNDhodk/qLM/icAV+/iy9PWKw9RtHWty1b1aJZFbxbBC+nK Jrdx4cvQOiKWuAHtUpDMLNeLCulLvM7NqK1PQZxVZ/tTpwFgqIngyZAV9WMHc9iF Dt3jjQ7BVSa/9w== -----END CERTIFICATE-----Generated at Fri Dec 12 03:45:24 2025 by rpki-client