This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft File: 0VoQmMXIU1yXWPEo2KCC33z4UQs.mft (raw, json) Hash identifier: UCUjUQdCGuk3ow9gPacR+uT/nX0gsPa2ZMP0ac7BE9o= Subject key identifier: 8F:6E:86:6A:6A:39:33:46:11:97:1E:D0:DE:A1:CE:CE:3B:B4:AE:C6 Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B Certificate issuer: /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b Certificate serial: 019B5AF668F8315D34859A87CB7658F10A42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft Manifest number: 0A50 Signing time: Fri 26 Dec 2025 14:00:56 +0000 Manifest this update: Fri 26 Dec 2025 14:00:56 +0000 Manifest next update: Sat 27 Dec 2025 14:00:56 +0000 Files and hashes: 1: 0VoQmMXIU1yXWPEo2KCC33z4UQs.crl (hash: 3vFF6oLsvU4J+hggw/bXrme+Fa2PGUHOMC1wCINitzM=) 2: MPcncw3TBLN9O1Fy19LVCE6t17w.roa (hash: jJnn/mYRkvFLhH11P3nUb1E3/V7XDU260gIFAJXV/0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:68:f8:31:5d:34:85:9a:87:cb:76:58:f1:0a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b Validity Not Before: Dec 26 14:00:56 2025 GMT Not After : Dec 27 14:00:56 2025 GMT Subject: CN=8f6e866a6a39334611971ed0dea1cece3bb4aec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e5:d1:e5:47:d7:b9:17:c3:61:ee:fb:15:cc: f5:7f:e3:c9:02:8a:2f:e1:1e:c5:2f:f4:ae:70:da: 57:8b:26:23:8c:06:d0:19:61:23:45:bb:f8:ef:22: 5b:c2:8d:b1:49:eb:22:60:98:ca:c6:23:b4:da:0f: 54:15:46:fc:af:0a:9a:d6:27:fc:31:f3:0c:9e:c3: 35:d5:78:fd:8f:0c:49:3f:f7:26:ff:9a:1e:97:87: a5:86:6c:1b:4c:d3:85:d2:f4:d9:cc:fe:15:c6:0c: e5:53:1d:e2:f1:4a:66:78:a7:cf:69:c8:51:18:43: d5:dd:58:e4:38:f5:f1:2c:04:4c:c7:a1:cb:7b:71: f1:36:5a:04:a5:6a:f2:2a:10:ad:e8:58:ed:f3:e0: a9:47:ab:a6:d1:ad:6e:8a:04:1d:8c:6a:2c:62:33: 43:c8:a2:b9:81:cb:87:b9:2d:6b:68:ee:1e:8d:25: 07:22:94:68:1b:f7:b5:31:ae:26:49:b6:86:36:37: f6:f8:39:59:5f:3f:99:51:b0:e1:63:ec:7b:24:b2: 1a:f6:b0:75:29:1e:8f:c4:8a:8b:18:b3:29:c6:74: 72:e8:c7:31:10:f5:e8:50:2b:5a:2a:f0:86:70:0e: cd:46:0e:c2:58:f0:45:1e:df:5a:41:a0:5d:47:e1: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6E:86:6A:6A:39:33:46:11:97:1E:D0:DE:A1:CE:CE:3B:B4:AE:C6 X509v3 Authority Key Identifier: keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:64:72:4d:4b:ba:d8:cb:7a:73:3c:e9:65:6e:ef:80:c7:43: d4:98:57:60:71:0b:35:fc:aa:a4:f8:db:79:c8:83:54:66:a0: 02:8e:fa:97:01:59:64:b0:9f:a7:71:0d:9e:d3:db:c7:a5:1e: 4e:5e:49:8c:13:ca:95:ca:e3:7a:02:9b:14:b5:15:3f:ea:7d: 3e:20:e9:ae:28:1f:15:74:6f:44:3c:cd:5d:19:3a:7d:69:d2: b9:de:be:1f:78:9e:d7:11:b0:0b:e1:5b:a8:44:66:2b:06:1f: 51:2d:9e:af:40:8b:29:cb:8c:2b:30:09:ac:e8:a4:b6:8b:fc: 15:f0:05:ef:12:6b:84:d9:a4:9c:69:9f:5b:41:47:83:2b:1b: 96:43:c7:0b:23:c2:1b:f6:69:ca:22:74:8e:54:26:82:a4:55: 49:7e:68:13:ea:1f:ee:e7:0c:5e:3b:e0:2d:87:22:34:34:fc: 35:4d:56:03:94:e5:d1:ac:20:d4:ac:d1:96:fc:3b:5f:ab:56: c7:32:bf:8a:4c:0f:8b:d7:b3:f9:46:e4:4f:7f:fe:30:20:1f: b2:ca:11:b8:8a:a8:89:4b:c5:5d:c1:fb:a0:09:06:96:76:2d: 3c:66:51:61:7c:f0:5b:d3:a8:dc:47:48:a3:a1:0a:fb:10:07: b2:bc:39:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9mj4MV00hZqHy3ZY8QpCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNWExMDk4YzVjODUzNWM5NzU4ZjEyOGQ4YTA4MmRmN2Nm ODUxMGIwHhcNMjUxMjI2MTQwMDU2WhcNMjUxMjI3MTQwMDU2WjAzMTEwLwYDVQQD Eyg4ZjZlODY2YTZhMzkzMzQ2MTE5NzFlZDBkZWExY2VjZTNiYjRhZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eXR5UfXuRfDYe77Fcz1f+PJAoov 4R7FL/SucNpXiyYjjAbQGWEjRbv47yJbwo2xSesiYJjKxiO02g9UFUb8rwqa1if8 MfMMnsM11Xj9jwxJP/cm/5oel4elhmwbTNOF0vTZzP4VxgzlUx3i8UpmeKfPachR GEPV3VjkOPXxLARMx6HLe3HxNloEpWryKhCt6Fjt8+CpR6um0a1uigQdjGosYjND yKK5gcuHuS1raO4ejSUHIpRoG/e1Ma4mSbaGNjf2+DlZXz+ZUbDhY+x7JLIa9rB1 KR6PxIqLGLMpxnRy6McxEPXoUCtaKvCGcA7NRg7CWPBFHt9aQaBdR+FcpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9uhmpqOTNGEZce0N6hzs47tK7GMB8GA1UdIwQY MBaAFNFaEJjFyFNcl1jxKNiggt98+FELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMt MGJkZGM4MDcxMWFlLzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMtMGJkZGM4MDcxMWFl LzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2RyTUu6 2Mt6czzpZW7vgMdD1JhXYHELNfyqpPjbeciDVGagAo76lwFZZLCfp3ENntPbx6Ue Tl5JjBPKlcrjegKbFLUVP+p9PiDprigfFXRvRDzNXRk6fWnSud6+H3ie1xGwC+Fb qERmKwYfUS2er0CLKcuMKzAJrOiktov8FfAF7xJrhNmknGmfW0FHgysblkPHCyPC G/ZpyiJ0jlQmgqRVSX5oE+of7ucMXjvgLYciNDT8NU1WA5Tl0awg1KzRlvw7X6tW xzK/ikwPi9ez+UbkT3/+MCAfssoRuIqoiUvFXcH7oAkGlnYtPGZRYXzwW9Oo3EdI o6EK+xAHsrw5cQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:04:01 2025 by rpki-client