This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json) Hash identifier: fQil7cvTRu/3YvQH58860gnH3xtfIl3OAQAnI92YtV8= Subject key identifier: 8F:1A:3D:1F:98:93:3F:A0:56:02:FD:2E:D3:18:FE:1F:B0:F6:EE:02 Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4 Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4 Certificate serial: 019B1125DF68ED969E1EF34EA90449B6FF30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft Manifest number: 125D Signing time: Fri 12 Dec 2025 06:00:53 +0000 Manifest this update: Fri 12 Dec 2025 06:00:53 +0000 Manifest next update: Sat 13 Dec 2025 06:00:53 +0000 Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: /RIfdNfGCYrMFqgaprGS2Bw18DvQoalX2oGg58w+BHw=) 2: dylc3WZzrjgV2VB-T70ps5y7_v8.roa (hash: CjiSp/7ghqmIWPlGrqN52h+3zV23QhuVF2kvnW7CFVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:df:68:ed:96:9e:1e:f3:4e:a9:04:49:b6:ff:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4 Validity Not Before: Dec 12 06:00:53 2025 GMT Not After : Dec 13 06:00:53 2025 GMT Subject: CN=8f1a3d1f98933fa05602fd2ed318fe1fb0f6ee02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:95:c1:1d:9e:73:d8:f0:61:47:b8:1b:91: 1f:70:fc:9a:13:d0:a3:31:c1:cc:c6:be:59:f7:52: 38:92:0b:e3:95:44:da:1c:a2:ba:27:25:f0:2f:4e: e1:a2:d3:5d:a4:f4:c7:2f:fd:33:30:93:d6:45:5a: f1:79:e8:ad:81:55:40:d1:35:0d:e6:70:bf:ca:23: c1:3d:eb:13:5e:4b:ef:8d:08:63:df:71:d4:57:48: b6:a6:71:49:5c:f9:bb:e6:c7:5c:b3:22:80:38:a6: 2f:d0:6b:86:58:2d:4b:39:3c:f6:a2:ad:4e:f6:d9: 77:d0:7f:92:62:9a:91:f5:b6:8d:d2:b3:f3:4e:04: 27:73:34:60:c9:e8:5b:6d:19:90:fd:75:10:c7:d5: 3c:c7:26:f1:21:4d:87:17:e2:ec:67:e0:da:3f:6f: c4:c1:e0:55:f5:0d:c8:42:7d:2c:b0:d0:50:d0:0f: f3:c4:ad:1a:39:0f:33:8e:40:5e:7f:dd:73:32:d3: a0:10:59:38:e5:91:25:d0:5e:e1:4b:64:94:19:d2: d1:77:59:e6:64:d7:fb:fe:5d:6c:ed:aa:3f:a4:48: 5d:05:68:92:b9:37:76:b8:01:4e:a8:58:f6:c6:04: 22:82:05:0a:b9:e6:80:5b:5b:b9:b7:6f:f6:a6:f2: 0f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1A:3D:1F:98:93:3F:A0:56:02:FD:2E:D3:18:FE:1F:B0:F6:EE:02 X509v3 Authority Key Identifier: keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:35:62:29:98:3b:30:11:df:bd:5a:fa:da:01:53:b0:b7:7e: 4b:27:cf:db:bf:9d:69:47:62:0d:dd:e0:c2:21:51:45:1f:19: 29:de:81:ba:23:53:c0:a6:2c:fd:58:f3:36:42:42:da:c5:9a: 55:a1:6a:37:9b:e6:b9:5b:2c:33:ea:cd:15:e7:e4:c0:34:5b: fd:6a:ac:0e:2f:c4:cf:cc:56:2c:a3:db:6c:8f:44:9e:0c:88: 37:81:d7:ec:e7:5b:f8:0a:23:10:18:39:78:54:ed:64:c9:fd: ce:e1:bb:35:97:93:83:a5:d8:06:40:ed:73:34:2f:9d:48:9e: 04:f4:0d:bc:f4:15:24:9f:a1:c2:0d:ed:f5:16:61:c3:a5:33: 27:21:50:3a:c7:9f:7d:8c:43:f5:fa:e1:56:cb:62:12:f9:1e: ef:57:04:bf:5f:fe:9b:88:12:5f:ff:65:9e:38:5a:38:e9:14: be:40:8a:b8:73:a6:67:84:eb:06:f6:75:34:18:9c:fd:3d:d9: 0b:e2:ba:80:5f:01:bf:40:0f:4a:7a:e6:b7:18:ef:57:65:71: 2c:4a:6a:46:fc:e7:b1:df:90:22:d7:ef:67:de:fc:b0:b7:50: 94:d3:ed:c5:fa:e2:2c:a9:8b:50:72:1e:a1:aa:60:99:84:65: 6a:df:0b:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJd9o7ZaeHvNOqQRJtv8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjRmYTgwNzU4NzUzYjI0M2EyMTY1ZWRkZWE3NWRiZWVl ODI2YzQwHhcNMjUxMjEyMDYwMDUzWhcNMjUxMjEzMDYwMDUzWjAzMTEwLwYDVQQD Eyg4ZjFhM2QxZjk4OTMzZmEwNTYwMmZkMmVkMzE4ZmUxZmIwZjZlZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOWVwR2ec9jwYUe4G5EfcPyaE9Cj McHMxr5Z91I4kgvjlUTaHKK6JyXwL07hotNdpPTHL/0zMJPWRVrxeeitgVVA0TUN 5nC/yiPBPesTXkvvjQhj33HUV0i2pnFJXPm75sdcsyKAOKYv0GuGWC1LOTz2oq1O 9tl30H+SYpqR9baN0rPzTgQnczRgyehbbRmQ/XUQx9U8xybxIU2HF+LsZ+DaP2/E weBV9Q3IQn0ssNBQ0A/zxK0aOQ8zjkBef91zMtOgEFk45ZEl0F7hS2SUGdLRd1nm ZNf7/l1s7ao/pEhdBWiSuTd2uAFOqFj2xgQiggUKueaAW1u5t2/2pvIPEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8aPR+Ykz+gVgL9LtMY/h+w9u4CMB8GA1UdIwQY MBaAFND0+oB1h1OyQ6IWXt3qddvu6CbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMt NzJhMWYzNzcxOWJiLzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMtNzJhMWYzNzcxOWJi LzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjViKZg7 MBHfvVr62gFTsLd+SyfP27+daUdiDd3gwiFRRR8ZKd6BuiNTwKYs/VjzNkJC2sWa VaFqN5vmuVssM+rNFefkwDRb/WqsDi/Ez8xWLKPbbI9EngyIN4HX7Odb+AojEBg5 eFTtZMn9zuG7NZeTg6XYBkDtczQvnUieBPQNvPQVJJ+hwg3t9RZhw6UzJyFQOsef fYxD9frhVstiEvke71cEv1/+m4gSX/9lnjhaOOkUvkCKuHOmZ4TrBvZ1NBic/T3Z C+K6gF8Bv0APSnrmtxjvV2VxLEpqRvznsd+QItfvZ978sLdQlNPtxfriLKmLUHIe oapgmYRlat8Lfw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:01:08 2025 by rpki-client