This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json) Hash identifier: hVN2js8+FNM7EeKSB8EmSYIvjPo4S0qe0hj9WO0cBcw= Subject key identifier: D9:80:AC:6E:DF:C1:9E:01:C6:17:13:B3:DD:22:F5:D4:A9:08:A8:72 Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Certificate serial: 019B25886CADAB03682184AC37BC7B29CEC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft Manifest number: 0889 Signing time: Tue 16 Dec 2025 05:00:56 +0000 Manifest this update: Tue 16 Dec 2025 05:00:56 +0000 Manifest next update: Wed 17 Dec 2025 05:00:56 +0000 Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: TC0isAo6sjBf7ozfqXq1lLvc8SP3Qo/2ofyEPLoLIJM=) 2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:6c:ad:ab:03:68:21:84:ac:37:bc:7b:29:ce:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Validity Not Before: Dec 16 05:00:56 2025 GMT Not After : Dec 17 05:00:56 2025 GMT Subject: CN=d980ac6edfc19e01c61713b3dd22f5d4a908a872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:fd:aa:1a:2f:39:67:e6:0f:1e:bf:f1:44: e8:ce:92:4c:9b:c6:a8:58:22:b8:1d:f0:dd:f2:d9: 6c:9f:3e:8e:52:c4:a4:90:0a:eb:7c:bb:14:12:87: 3e:9b:31:5d:9e:4d:1e:a9:a7:31:37:ac:09:44:54: 1b:8c:bc:35:40:76:52:dc:8a:3f:ae:0f:d4:9b:fd: a3:45:e0:35:f5:be:87:ce:7e:c7:20:b1:08:d4:ec: 1b:b5:78:fb:bf:cb:ed:2a:8c:f4:52:ac:84:c0:89: 4e:3d:46:53:cc:5e:1b:d6:1d:c3:0e:31:b8:04:d4: f5:9b:39:fd:15:b4:24:85:54:3d:d1:be:2a:bc:17: 9d:b1:c1:8e:c3:bf:7f:ea:9f:77:2c:79:1d:02:04: e9:c3:db:18:ec:46:a9:ea:33:dd:e2:d8:43:8a:22: b0:1e:8f:ac:57:7c:53:36:66:21:c3:75:52:06:86: 8b:06:79:43:99:60:44:58:1e:30:f7:69:23:49:48: b5:61:d6:55:94:a2:ea:74:32:67:4f:15:3e:d4:d6: f0:38:f7:4d:be:ca:17:58:44:f9:ac:4e:b4:99:80: fa:4b:a2:28:ec:3c:71:4b:be:ae:7a:5e:05:c1:8c: be:fe:f5:2c:f1:63:74:fa:ea:5d:17:21:c0:ff:1e: 5e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:80:AC:6E:DF:C1:9E:01:C6:17:13:B3:DD:22:F5:D4:A9:08:A8:72 X509v3 Authority Key Identifier: keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:47:20:b6:07:b9:b9:44:35:69:fc:e6:7c:16:e9:41:d6:1f: 56:44:e1:c6:cb:45:34:a4:87:47:32:bf:42:8f:e5:38:32:46: 71:48:6b:70:67:bb:9e:22:b5:89:46:8a:be:0c:89:90:f1:7c: aa:d1:65:41:af:7c:9e:ef:71:95:f8:22:05:06:ee:0c:4e:e7: 61:fa:d9:33:3d:9a:bc:da:c9:86:9a:2d:17:66:73:20:b9:27: be:6b:c3:18:12:ca:2a:4f:27:4c:e2:ea:11:76:e9:c9:ba:3f: 54:3a:07:54:9b:34:06:72:91:85:06:81:e7:ac:91:57:b3:77: 94:ef:60:7f:98:49:6f:77:28:05:a2:06:e9:e9:a2:09:5e:bb: 9a:8c:f8:49:d1:a1:0d:b3:2e:3c:1d:0c:ce:e7:e9:db:da:42: 97:a7:5e:fe:ae:75:d0:05:5d:be:cc:cd:fe:5d:a6:1c:41:41: 1d:73:32:2b:c4:7d:28:d1:d6:f8:da:92:aa:6b:11:d2:04:58: 26:74:66:77:78:93:55:90:af:d7:c5:95:c4:b4:de:66:ba:5d: 01:77:20:ae:91:99:0e:67:f2:03:fc:a1:60:7b:2e:f3:e6:7b: a8:5e:44:e4:be:b5:a0:f7:de:b7:48:c9:3a:b8:0f:54:e8:f5: 26:ca:ce:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliGytqwNoIYSsN7x7Kc7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNTgxNDc5ZGVlM2I1OTk0ZjExYzlkOTU2NDYzMWJmNWE0 MDRjMDcwHhcNMjUxMjE2MDUwMDU2WhcNMjUxMjE3MDUwMDU2WjAzMTEwLwYDVQQD EyhkOTgwYWM2ZWRmYzE5ZTAxYzYxNzEzYjNkZDIyZjVkNGE5MDhhODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLL9qhovOWfmDx6/8UTozpJMm8ao WCK4HfDd8tlsnz6OUsSkkArrfLsUEoc+mzFdnk0eqacxN6wJRFQbjLw1QHZS3Io/ rg/Um/2jReA19b6Hzn7HILEI1OwbtXj7v8vtKoz0UqyEwIlOPUZTzF4b1h3DDjG4 BNT1mzn9FbQkhVQ90b4qvBedscGOw79/6p93LHkdAgTpw9sY7Eap6jPd4thDiiKw Ho+sV3xTNmYhw3VSBoaLBnlDmWBEWB4w92kjSUi1YdZVlKLqdDJnTxU+1NbwOPdN vsoXWET5rE60mYD6S6Io7DxxS76uel4FwYy+/vUs8WN0+updFyHA/x5ejQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmArG7fwZ4BxhcTs90i9dSpCKhyMB8GA1UdIwQY MBaAFNJYFHne47WZTxHJ2VZGMb9aQEwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYt NmE2YzZlMDk2MDcxLzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYtNmE2YzZlMDk2MDcx LzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukcgtge5 uUQ1afzmfBbpQdYfVkThxstFNKSHRzK/Qo/lODJGcUhrcGe7niK1iUaKvgyJkPF8 qtFlQa98nu9xlfgiBQbuDE7nYfrZMz2avNrJhpotF2ZzILknvmvDGBLKKk8nTOLq EXbpybo/VDoHVJs0BnKRhQaB56yRV7N3lO9gf5hJb3coBaIG6emiCV67moz4SdGh DbMuPB0Mzufp29pCl6de/q510AVdvszN/l2mHEFBHXMyK8R9KNHW+NqSqmsR0gRY JnRmd3iTVZCv18WVxLTeZrpdAXcgrpGZDmfyA/yhYHsu8+Z7qF5E5L61oPfet0jJ OrgPVOj1JsrOLQ== -----END CERTIFICATE-----Generated at Tue Dec 16 15:29:33 2025 by rpki-client