This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json) Hash identifier: b4u/t2hup4ZjHE2m8R5zyl1utuJ8Jc0RYkhoGf+7X0c= Subject key identifier: CC:4F:DA:57:93:53:BA:67:70:E9:4A:C5:E5:0A:29:C8:03:63:55:B1 Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0 Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0 Certificate serial: 019B593EC9F9184C08CCEF03681E657B3CDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft Manifest number: 0ADC Signing time: Fri 26 Dec 2025 06:00:45 +0000 Manifest this update: Fri 26 Dec 2025 06:00:45 +0000 Manifest next update: Sat 27 Dec 2025 06:00:45 +0000 Files and hashes: 1: 9h0IDYCPr58Ccxg81AcMZ_13oWo.roa (hash: l+FTuWjUD+EZ0mXchVkunlX52jPEdy8UaVQG+ZcxDvM=) 2: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: Ugsec8io/ZXws4ep9S/S5XxfO6X9WSN1BhbSIDC/hIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:c9:f9:18:4c:08:cc:ef:03:68:1e:65:7b:3c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0 Validity Not Before: Dec 26 06:00:45 2025 GMT Not After : Dec 27 06:00:45 2025 GMT Subject: CN=cc4fda579353ba6770e94ac5e50a29c8036355b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:0c:36:f1:d9:da:f7:1d:9a:f2:b6:15:06: 4d:5c:8f:09:5e:9e:0f:48:1e:a7:06:a5:27:3f:36: ad:b0:3c:3a:2b:9b:ad:63:06:14:8d:2c:e7:3f:92: 18:57:5a:84:a0:39:5a:3f:11:89:d1:7e:60:b8:2d: 4a:5c:8c:e4:7d:e3:e4:dc:a2:bf:6b:7a:6b:ee:db: 7c:71:11:b6:7a:e4:b4:bc:8b:7e:23:9a:3b:15:e1: a4:8e:56:5f:a3:05:0c:c1:89:7f:bd:a0:99:c4:c4: 28:bd:f0:94:0a:fc:25:31:a0:09:f0:fe:5b:ed:15: 23:14:58:bc:52:6f:c9:32:9a:09:1f:cb:e8:cb:3c: b4:6a:68:5f:6b:59:95:64:22:0e:3d:b8:72:86:e0: 2d:b0:cb:41:72:d4:93:71:2e:b5:04:1b:b2:00:cb: 74:0b:b1:d3:26:1f:fb:0b:c8:50:14:f2:95:88:f9: e6:c7:38:58:88:0e:06:47:90:95:03:fc:6a:85:55: e0:6e:cc:ce:1a:ca:ca:ce:2b:fd:2e:fb:20:47:50: c3:ab:30:4f:c9:83:8c:fd:82:7b:32:df:2f:fc:a3: 47:2a:c0:60:1e:3d:6a:3a:b7:33:89:61:7e:b7:f9: 05:d0:87:6f:f2:f1:43:20:79:1c:b6:59:5f:ca:49: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4F:DA:57:93:53:BA:67:70:E9:4A:C5:E5:0A:29:C8:03:63:55:B1 X509v3 Authority Key Identifier: keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:2b:a8:e1:cb:70:8e:29:78:b4:47:6c:54:80:c0:6b:d5:79: 31:74:49:af:e7:1f:31:eb:1c:97:73:84:e9:36:d0:89:a1:c2: 61:b8:c5:88:86:70:62:96:8c:ee:44:fe:2b:08:31:7d:c2:72: ec:e9:9c:ad:3d:b4:8a:2d:c4:d7:10:47:55:ed:48:8d:46:07: 8d:36:0b:3d:3d:bd:42:b4:9a:a6:7c:7b:9b:ba:ea:05:15:14: 5f:79:a4:4c:e9:b3:a2:c7:f9:56:51:88:83:be:db:e9:50:38: 23:eb:21:32:35:cc:e9:f3:3f:b9:84:53:51:17:f1:f7:0d:a8: 22:42:bc:9a:62:9a:65:47:48:a9:bd:c7:83:c7:33:c8:c3:73: 8d:c2:ea:4d:cf:07:76:41:c3:3c:dc:8d:61:1a:0f:f2:d1:ac: 50:a8:52:c5:45:c8:fe:e1:df:00:89:52:bc:fc:3e:65:2b:62: 29:02:a9:cc:e3:ea:57:0e:15:dd:c3:1c:65:d6:2c:78:ef:20: 45:c0:04:e6:65:88:e1:79:57:72:65:a3:f3:54:9c:50:fd:d9: fc:36:52:3b:f4:40:e8:5e:7c:28:1e:73:a5:e5:c8:eb:a6:f6: 85:59:cf:6b:56:8a:dd:23:6b:fb:8a:a4:48:a1:7a:d2:07:bb: e9:82:17:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPsn5GEwIzO8DaB5lezzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNDUzYjQxMGQzNTg2YTYyMzdhOTUxZWVmM2IwM2Y0YzQ0 MTE4ZjAwHhcNMjUxMjI2MDYwMDQ1WhcNMjUxMjI3MDYwMDQ1WjAzMTEwLwYDVQQD EyhjYzRmZGE1NzkzNTNiYTY3NzBlOTRhYzVlNTBhMjljODAzNjM1NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWIMNvHZ2vcdmvK2FQZNXI8JXp4P SB6nBqUnPzatsDw6K5utYwYUjSznP5IYV1qEoDlaPxGJ0X5guC1KXIzkfePk3KK/ a3pr7tt8cRG2euS0vIt+I5o7FeGkjlZfowUMwYl/vaCZxMQovfCUCvwlMaAJ8P5b 7RUjFFi8Um/JMpoJH8voyzy0amhfa1mVZCIOPbhyhuAtsMtBctSTcS61BBuyAMt0 C7HTJh/7C8hQFPKViPnmxzhYiA4GR5CVA/xqhVXgbszOGsrKziv9LvsgR1DDqzBP yYOM/YJ7Mt8v/KNHKsBgHj1qOrcziWF+t/kF0Idv8vFDIHkctllfykmF+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxP2leTU7pncOlKxeUKKcgDY1WxMB8GA1UdIwQY MBaAFAtFO0ENNYamI3qVHu87A/TEQRjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kNjNmOGUtNGIxYS00OGJmLTg3ZWIt MjlmYTQ3YjY4MDkzLzEvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kNjNmOGUtNGIxYS00OGJmLTg3ZWItMjlmYTQ3YjY4MDkz LzEvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiuo4ctw jil4tEdsVIDAa9V5MXRJr+cfMescl3OE6TbQiaHCYbjFiIZwYpaM7kT+KwgxfcJy 7OmcrT20ii3E1xBHVe1IjUYHjTYLPT29QrSapnx7m7rqBRUUX3mkTOmzosf5VlGI g77b6VA4I+shMjXM6fM/uYRTURfx9w2oIkK8mmKaZUdIqb3Hg8czyMNzjcLqTc8H dkHDPNyNYRoP8tGsUKhSxUXI/uHfAIlSvPw+ZStiKQKpzOPqVw4V3cMcZdYseO8g RcAE5mWI4XlXcmWj81ScUP3Z/DZSO/RA6F58KB5zpeXI66b2hVnPa1aK3SNr+4qk SKF60ge76YIXNw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:26 2025 by rpki-client