This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json) Hash identifier: hXNcM1JT3ipIV5yNROsi9WcCeX4JyrOQ9Rxoy1395Zo= Subject key identifier: 66:FE:E8:33:D2:F4:B0:0D:45:35:98:93:1B:07:B5:05:1E:F8:C0:C6 Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f Certificate serial: 019B5A1AFF1AAE59E68A447FC072D1B188C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 10:01:17 +0000 Manifest this update: Fri 26 Dec 2025 10:01:17 +0000 Manifest next update: Sat 27 Dec 2025 10:01:17 +0000 Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: 12RJfGRt9OnomCaPcxRtrTYqCZZQeoVCnMctftmElCY=) 2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:ff:1a:ae:59:e6:8a:44:7f:c0:72:d1:b1:88:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f Validity Not Before: Dec 26 10:01:17 2025 GMT Not After : Dec 27 10:01:17 2025 GMT Subject: CN=66fee833d2f4b00d453598931b07b5051ef8c0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f7:ef:ad:d8:40:be:8a:8e:e2:80:ce:14:f1: 1b:1a:f2:23:24:0e:91:57:5b:87:dc:d9:ac:5c:85: 4f:86:30:f1:aa:c2:91:5d:9e:e8:31:39:16:37:c9: 24:fa:38:c0:8c:5c:17:19:c9:da:93:86:10:38:b9: cb:6e:69:54:47:89:07:b2:ef:4e:df:85:d1:29:17: 01:9d:83:c2:08:f2:2b:76:58:1d:00:6e:f5:1b:18: 44:7d:13:99:45:8b:68:bf:17:e9:95:3f:97:77:8f: 72:2e:28:a9:34:c9:58:a8:87:c1:2d:c7:40:e2:a2: 4e:c5:90:ad:d1:d1:5d:c9:28:cf:16:0f:0f:67:a7: 68:77:89:29:75:d6:47:27:a7:bc:83:75:d9:f8:25: 71:f8:c9:e4:0d:1f:ea:1d:a3:e1:bd:e6:db:36:b1: 29:83:c8:a9:59:d1:0a:cb:6f:56:82:1c:43:98:20: 72:05:aa:b2:e0:c5:9c:4f:70:eb:ed:c5:cb:0d:89: 64:95:23:9d:4a:5e:c0:8f:08:30:ed:d4:59:9e:5d: 8b:d7:dd:ba:40:c5:00:7a:6d:c5:06:f2:bc:18:53: b0:5a:65:5f:c0:72:d5:36:d9:67:60:63:4b:63:0c: 7f:d4:28:07:3b:fa:0b:ae:27:3a:66:ef:c5:72:ee: 95:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FE:E8:33:D2:F4:B0:0D:45:35:98:93:1B:07:B5:05:1E:F8:C0:C6 X509v3 Authority Key Identifier: keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d1:20:02:d1:67:2c:b0:ed:e2:60:be:aa:3e:fc:4a:61:52: 36:9c:bd:df:06:e4:a3:6f:af:5b:d3:f1:d3:72:18:5a:67:fe: f1:43:c8:87:81:2d:aa:90:bd:28:db:53:c2:b1:a8:cd:dd:2e: 1d:38:64:87:98:5c:b2:2c:93:e4:8e:4a:f1:79:3d:1b:80:b9: 93:7d:1f:6d:cd:a4:7e:4f:19:c5:b4:ca:0a:b8:fd:3d:1f:b4: 91:5e:41:f2:7b:2e:64:22:69:af:0b:35:1a:1c:fe:8a:58:80: 1b:64:b1:ec:22:1d:e0:e4:17:f6:90:bb:2b:62:ae:22:9e:2f: 5d:90:97:94:8e:99:0c:26:7e:ca:2f:82:be:d2:3d:d3:04:dc: 29:17:d4:42:39:c5:87:d8:76:21:6f:c5:d4:89:c7:fe:ef:38: ec:95:05:25:ef:9a:64:66:c9:24:55:88:da:04:ff:25:99:a0: 14:f7:15:2d:1f:fd:cb:13:ad:cd:81:ba:05:af:9c:78:35:eb: 1f:12:82:2a:54:d7:26:1a:50:e7:6e:0e:7b:0a:48:50:b1:fe: 44:d3:81:9e:f0:de:23:28:68:33:10:a8:92:3e:4d:12:1d:1f: 36:2a:bf:92:54:f8:3e:25:3d:6e:3f:4c:14:b2:fd:9b:4a:b6: b6:71:e0:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGv8arlnmikR/wHLRsYjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjZjZDMwYjRjZmExOTNlMjI2YmJhOTI4MmUzNjZhMjJh MzExMGYwHhcNMjUxMjI2MTAwMTE3WhcNMjUxMjI3MTAwMTE3WjAzMTEwLwYDVQQD Eyg2NmZlZTgzM2QyZjRiMDBkNDUzNTk4OTMxYjA3YjUwNTFlZjhjMGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PfvrdhAvoqO4oDOFPEbGvIjJA6R V1uH3NmsXIVPhjDxqsKRXZ7oMTkWN8kk+jjAjFwXGcnak4YQOLnLbmlUR4kHsu9O 34XRKRcBnYPCCPIrdlgdAG71GxhEfROZRYtovxfplT+Xd49yLiipNMlYqIfBLcdA 4qJOxZCt0dFdySjPFg8PZ6dod4kpddZHJ6e8g3XZ+CVx+MnkDR/qHaPhvebbNrEp g8ipWdEKy29WghxDmCByBaqy4MWcT3Dr7cXLDYlklSOdSl7Ajwgw7dRZnl2L1926 QMUAem3FBvK8GFOwWmVfwHLVNtlnYGNLYwx/1CgHO/oLric6Zu/Fcu6VOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGb+6DPS9LANRTWYkxsHtQUe+MDGMB8GA1UdIwQY MBaAFND2zTC0z6GT4ia7qSguNmoioxEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQt ZTI5OWU5MTAwMzllLzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQtZTI5OWU5MTAwMzll LzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNEgAtFn LLDt4mC+qj78SmFSNpy93wbko2+vW9Px03IYWmf+8UPIh4EtqpC9KNtTwrGozd0u HThkh5hcsiyT5I5K8Xk9G4C5k30fbc2kfk8ZxbTKCrj9PR+0kV5B8nsuZCJprws1 Ghz+iliAG2Sx7CId4OQX9pC7K2KuIp4vXZCXlI6ZDCZ+yi+CvtI90wTcKRfUQjnF h9h2IW/F1InH/u847JUFJe+aZGbJJFWI2gT/JZmgFPcVLR/9yxOtzYG6Ba+ceDXr HxKCKlTXJhpQ524OewpIULH+RNOBnvDeIyhoMxCokj5NEh0fNiq/klT4PiU9bj9M FLL9m0q2tnHgyA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:28 2025 by rpki-client