This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json) Hash identifier: W2Wuab+5u2/0p4LbDRRnw0yQfT0/n+umcKTgPbkivfg= Subject key identifier: F3:5C:44:11:50:7E:7D:44:9F:E9:EA:85:8B:A8:60:96:38:8A:AA:2F Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90 Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90 Certificate serial: 019B1A9737519299CB341F8CD0C81FAAA217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft Manifest number: 0B9E Signing time: Sun 14 Dec 2025 02:01:16 +0000 Manifest this update: Sun 14 Dec 2025 02:01:16 +0000 Manifest next update: Mon 15 Dec 2025 02:01:16 +0000 Files and hashes: 1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=) 2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: 2DaAt0pPpbX66FyJE+6xDFW2bi+OCK8BrdnmDIzqAg0=) 3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:37:51:92:99:cb:34:1f:8c:d0:c8:1f:aa:a2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90 Validity Not Before: Dec 14 02:01:16 2025 GMT Not After : Dec 15 02:01:16 2025 GMT Subject: CN=f35c4411507e7d449fe9ea858ba86096388aaa2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7c:6b:65:fe:e6:4e:e6:ad:29:f4:f7:6d:5f: 1c:b9:e5:40:fc:d2:03:d1:13:f5:c8:4c:81:71:59: db:c9:e6:a3:3c:e0:87:da:73:36:ef:95:ec:ff:73: ff:13:dd:b5:e4:97:d0:6a:2b:27:e4:16:f3:29:50: bb:e0:bb:5e:ae:2c:c2:e3:df:71:c1:25:8c:c5:45: 78:ca:de:3a:b1:5a:54:17:81:9e:1b:0f:fb:a7:64: 40:7b:d3:97:e4:e9:5d:36:de:7e:33:d3:0a:f0:76: 99:40:7a:1e:82:c0:6c:57:75:31:4a:93:73:70:53: dc:d5:f1:d4:7a:ed:e5:66:07:dd:95:89:42:c6:6a: f3:71:6d:a2:70:5e:16:ec:5d:7f:15:03:02:df:12: 88:04:f4:d2:9e:19:c5:12:5c:57:29:65:ba:49:5c: ee:cb:72:92:6a:22:35:e0:9c:c4:ab:2a:55:f3:71: 6f:3a:b9:20:7a:a1:00:3c:6c:da:2c:bd:f1:89:d9: 29:44:0d:37:90:5d:6d:de:69:8c:df:b2:12:a5:47: f8:42:06:9d:86:67:4e:95:d9:c9:d9:57:ae:d5:98: 02:13:3c:e9:65:d9:dc:f3:c3:9c:22:b7:97:6b:9a: a1:d6:0f:e6:3f:18:dd:b9:bd:d6:03:2f:03:34:eb: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5C:44:11:50:7E:7D:44:9F:E9:EA:85:8B:A8:60:96:38:8A:AA:2F X509v3 Authority Key Identifier: keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:2f:26:76:46:d4:d8:21:67:dd:69:54:17:ce:14:6e:42:ad: 9c:7c:6e:90:d1:47:b4:13:5f:78:ba:a6:2c:8f:8f:34:fa:29: d9:68:e9:b4:d7:23:28:01:9d:a0:f9:16:01:11:0e:e6:be:5a: a3:0a:af:d3:94:de:14:71:3d:12:52:3d:84:69:5f:f6:67:d6: a5:69:fa:50:00:ac:23:97:e7:e1:69:fa:06:1e:c5:94:f5:1a: e6:80:77:c9:c1:8d:d6:0a:e5:f0:53:4b:f7:fd:eb:22:0d:11: 6f:40:d2:75:9b:cf:21:68:5b:56:2c:93:4c:56:1d:cf:7e:f8: f7:55:bd:a3:28:11:01:64:98:47:ba:f5:eb:09:37:51:55:29: 1c:39:ac:19:48:04:be:12:68:66:81:f0:e5:8f:b6:d5:1b:e2: 4f:b9:4d:f5:cd:ee:2f:4f:9d:f5:1f:f0:fc:ae:fb:d1:01:65: 48:82:23:cb:3d:75:d4:07:13:6b:03:2c:dd:b0:2b:8f:d2:a6: 49:ee:5f:46:e3:f5:59:58:07:2b:e9:aa:8c:c9:b1:57:fd:41: 94:d3:2f:28:53:46:c6:32:66:25:d7:68:30:3c:11:6a:e6:15: fe:b2:fc:78:5c:48:42:62:63:0e:80:8e:d7:fd:8a:b5:16:a5: 8b:ad:ec:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsalzdRkpnLNB+M0MgfqqIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiY2Y3MjFjNzFjOGFlN2NhZjcwNmQ5ZGYzMzU4YjEyZDU0 YjRkOTAwHhcNMjUxMjE0MDIwMTE2WhcNMjUxMjE1MDIwMTE2WjAzMTEwLwYDVQQD EyhmMzVjNDQxMTUwN2U3ZDQ0OWZlOWVhODU4YmE4NjA5NjM4OGFhYTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3xrZf7mTuatKfT3bV8cueVA/NID 0RP1yEyBcVnbyeajPOCH2nM275Xs/3P/E9215JfQaisn5BbzKVC74LterizC499x wSWMxUV4yt46sVpUF4GeGw/7p2RAe9OX5OldNt5+M9MK8HaZQHoegsBsV3UxSpNz cFPc1fHUeu3lZgfdlYlCxmrzcW2icF4W7F1/FQMC3xKIBPTSnhnFElxXKWW6SVzu y3KSaiI14JzEqypV83FvOrkgeqEAPGzaLL3xidkpRA03kF1t3mmM37ISpUf4Qgad hmdOldnJ2Veu1ZgCEzzpZdnc88OcIreXa5qh1g/mPxjdub3WAy8DNOu++wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNcRBFQfn1En+nqhYuoYJY4iqovMB8GA1UdIwQY MBaAFAvPchxxyK58r3BtnfM1ixLVS02QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYt ZDllYjhkNTczNjZjLzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYtZDllYjhkNTczNjZj LzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEy8mdkbU 2CFn3WlUF84UbkKtnHxukNFHtBNfeLqmLI+PNPop2WjptNcjKAGdoPkWAREO5r5a owqv05TeFHE9ElI9hGlf9mfWpWn6UACsI5fn4Wn6Bh7FlPUa5oB3ycGN1grl8FNL 9/3rIg0Rb0DSdZvPIWhbViyTTFYdz37491W9oygRAWSYR7r16wk3UVUpHDmsGUgE vhJoZoHw5Y+21RviT7lN9c3uL0+d9R/w/K770QFlSIIjyz111AcTawMs3bArj9Km Se5fRuP1WVgHK+mqjMmxV/1BlNMvKFNGxjJmJddoMDwRauYV/rL8eFxIQmJjDoCO 1/2KtRali63sXQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:47:48 2025 by rpki-client