This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json) Hash identifier: fSf0FNp2+5SGEsUh0mWFwnOABQVktb5mOQZoqVJLxt0= Subject key identifier: EC:9D:83:AA:5B:89:0A:36:08:93:79:0E:08:11:01:32:30:06:81:54 Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f Certificate serial: 019B36B2BECA9196E5B8F20E19529F6EBBC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft Manifest number: 069D Signing time: Fri 19 Dec 2025 13:00:42 +0000 Manifest this update: Fri 19 Dec 2025 13:00:42 +0000 Manifest next update: Sat 20 Dec 2025 13:00:42 +0000 Files and hashes: 1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=) 2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: OR+cnYKDY3gLuCt8K/kt/7Jyg/9QOJHKGRoZ3eO3O4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:be:ca:91:96:e5:b8:f2:0e:19:52:9f:6e:bb:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f Validity Not Before: Dec 19 13:00:42 2025 GMT Not After : Dec 20 13:00:42 2025 GMT Subject: CN=ec9d83aa5b890a360893790e0811013230068154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:c9:e5:62:d1:4e:fd:23:5f:f8:5d:0d:1c: 96:d7:1d:46:dd:f8:49:01:e8:33:96:21:27:31:76: 2b:e4:21:79:06:a7:6b:10:46:21:a2:64:2a:00:68: 48:5c:c5:1d:2c:65:c4:65:e0:f7:f2:87:40:9a:e4: 2e:2c:93:68:bb:81:ae:01:74:df:ab:1f:87:27:d4: ff:77:8a:67:86:3b:82:22:64:21:a5:b7:7e:9e:17: d6:5a:28:17:89:6b:d2:23:5e:89:5a:15:44:d0:86: 75:f0:de:e0:be:24:dd:f0:52:97:ad:3a:a7:0b:63: 05:c4:af:3f:52:3e:46:3c:59:80:e6:49:02:c9:ec: ea:46:e1:66:4b:c9:92:07:03:a3:d2:91:79:2f:a4: 99:8d:9a:d0:bc:4c:16:5f:84:20:e3:bd:11:8d:21: 63:ff:dc:66:60:13:30:5e:ec:0f:e3:70:a0:27:d1: b5:4d:dd:87:11:b7:b3:ff:84:35:b6:49:39:be:42: 66:69:f1:a7:44:eb:eb:21:35:32:d3:8c:dd:f2:85: 2a:78:54:69:3a:dd:3a:8a:5d:ab:cc:38:d2:0f:98: 21:9b:a3:e9:85:64:50:02:6f:fc:3e:16:a5:d6:c1: 64:f4:a1:23:bb:0b:10:96:b3:4b:a5:a4:38:f6:41: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9D:83:AA:5B:89:0A:36:08:93:79:0E:08:11:01:32:30:06:81:54 X509v3 Authority Key Identifier: keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4d:17:5f:50:f5:32:af:1f:b4:0a:e3:4a:7f:0d:20:0b:45: 93:9e:4c:57:34:89:f4:e0:4c:67:2e:96:74:70:94:c3:bd:e3: 43:29:f9:11:96:b7:fb:7c:b3:e3:1c:73:fc:97:10:9d:c2:08: 9d:79:a5:30:39:17:09:49:e5:8b:7d:2e:eb:83:37:7a:a3:4e: b6:4f:a0:f9:ed:12:7c:73:c5:e2:ab:23:03:ce:e7:7d:c0:bc: f7:d7:94:7e:a9:0b:a1:0e:42:a4:2c:f4:ee:f4:61:60:39:bf: 48:78:0f:d2:57:8e:95:5e:48:c1:06:b2:1d:f9:de:8b:1e:52: cb:1f:5f:a2:6c:d3:6d:73:91:e1:b8:f7:12:12:77:14:22:3d: 48:d5:59:40:16:a9:ac:9c:52:2a:ae:72:2a:76:71:bc:b1:a8: 33:a2:b5:5c:3a:83:4e:8d:3b:f6:3d:a6:de:30:5e:4a:f5:8c: b6:91:0b:89:fe:f0:60:e3:29:ed:76:91:8a:a5:bd:5f:ec:5e: 1f:48:ee:a3:61:e2:bd:f3:5a:15:32:36:99:16:4a:52:24:91: 4c:03:d3:d3:fb:93:f8:f1:45:d6:b0:db:5f:84:77:86:c8:9a: 4b:78:3f:94:c6:62:f7:93:24:4a:d6:54:ea:81:96:6a:17:4b: b0:1a:60:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2sr7KkZbluPIOGVKfbrvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy NTI3OGYwHhcNMjUxMjE5MTMwMDQyWhcNMjUxMjIwMTMwMDQyWjAzMTEwLwYDVQQD EyhlYzlkODNhYTViODkwYTM2MDg5Mzc5MGUwODExMDEzMjMwMDY4MTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVDJ5WLRTv0jX/hdDRyW1x1G3fhJ AegzliEnMXYr5CF5BqdrEEYhomQqAGhIXMUdLGXEZeD38odAmuQuLJNou4GuAXTf qx+HJ9T/d4pnhjuCImQhpbd+nhfWWigXiWvSI16JWhVE0IZ18N7gviTd8FKXrTqn C2MFxK8/Uj5GPFmA5kkCyezqRuFmS8mSBwOj0pF5L6SZjZrQvEwWX4Qg470RjSFj /9xmYBMwXuwP43CgJ9G1Td2HEbez/4Q1tkk5vkJmafGnROvrITUy04zd8oUqeFRp Ot06il2rzDjSD5ghm6PphWRQAm/8Phal1sFk9KEjuwsQlrNLpaQ49kHG7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOydg6pbiQo2CJN5DggRATIwBoFUMB8GA1UdIwQY MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfk0XX1D1 Mq8ftArjSn8NIAtFk55MVzSJ9OBMZy6WdHCUw73jQyn5EZa3+3yz4xxz/JcQncII nXmlMDkXCUnli30u64M3eqNOtk+g+e0SfHPF4qsjA87nfcC899eUfqkLoQ5CpCz0 7vRhYDm/SHgP0leOlV5IwQayHfneix5Syx9fomzTbXOR4bj3EhJ3FCI9SNVZQBap rJxSKq5yKnZxvLGoM6K1XDqDTo079j2m3jBeSvWMtpELif7wYOMp7XaRiqW9X+xe H0juo2HivfNaFTI2mRZKUiSRTAPT0/uT+PFF1rDbX4R3hsiaS3g/lMZi95MkStZU 6oGWahdLsBpg3Q== -----END CERTIFICATE-----Generated at Fri Dec 19 21:12:10 2025 by rpki-client