This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json) Hash identifier: ML8sY3HSFMHf6fl478vWKOaS2qr2zhAVE7GPKgGduPI= Subject key identifier: 42:65:64:0E:2C:E7:E9:EE:41:85:5B:FA:CA:7E:AA:6E:ED:04:2D:56 Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae Certificate serial: 019B3AC6EBF736D619EA6CA132B4F970ACCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft Manifest number: 06F1 Signing time: Sat 20 Dec 2025 08:01:13 +0000 Manifest this update: Sat 20 Dec 2025 08:01:13 +0000 Manifest next update: Sun 21 Dec 2025 08:01:13 +0000 Files and hashes: 1: 1-T115Hn6ISqfHKEp1Ejx9Gs-LdM.roa (hash: hwD1bihujg4QKnIBffCm29/kZuX5tsYo4qsj399ZBlI=) 2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: QKdiodDjTdiAApuze8Lw3sqi4h+nYgCpaI6P3LFk5tA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:eb:f7:36:d6:19:ea:6c:a1:32:b4:f9:70:ac:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae Validity Not Before: Dec 20 08:01:13 2025 GMT Not After : Dec 21 08:01:13 2025 GMT Subject: CN=4265640e2ce7e9ee41855bfaca7eaa6eed042d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:75:6a:06:00:c9:2a:7e:65:7d:54:ef:65:3d: 9a:00:80:0e:72:05:10:1e:00:00:ae:87:31:86:b9: 15:dd:0f:bd:d3:00:7d:16:45:fa:61:d9:de:d8:34: 2a:8f:2e:26:45:63:f9:81:41:5c:8c:fd:d6:a6:06: ec:9c:fa:50:34:8a:0c:ea:34:a1:96:98:16:de:a1: f4:fe:f9:0d:5b:2e:a5:f9:1d:6b:0b:3e:09:67:ba: 14:6e:56:54:19:8a:98:33:98:c9:7d:c1:f1:b2:65: 32:21:ff:9b:64:31:3b:a6:9c:01:f0:61:da:59:24: d4:80:7f:30:60:9a:0d:e9:26:aa:60:04:be:4e:8c: be:3d:c6:51:89:39:5c:41:0c:0d:2c:7d:66:47:12: 85:f7:ad:ea:d8:fc:f5:b2:f1:bc:a5:05:49:a0:2f: 14:d2:4a:59:02:50:5d:bc:10:ec:4b:ff:bb:65:82: a7:e8:e1:ea:b5:5a:57:82:03:c5:84:7e:38:e9:27: 3a:8f:21:fa:35:17:b8:0f:58:ed:11:21:7d:d9:6d: e3:39:a2:ba:b2:ac:55:a1:65:e7:cd:8f:2c:37:4c: 26:a9:8b:a1:76:86:4e:64:93:f2:41:5c:82:7d:18: 44:87:a1:c4:57:c8:2f:60:ad:8d:45:42:be:0b:82: cd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:65:64:0E:2C:E7:E9:EE:41:85:5B:FA:CA:7E:AA:6E:ED:04:2D:56 X509v3 Authority Key Identifier: keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:1c:a1:3a:b0:0d:8a:73:dc:f8:7d:f0:a6:80:6e:ff:a9:a2: e1:b0:ab:50:ad:49:56:b7:cf:1e:e3:41:dd:ab:dd:94:71:3b: f7:53:0a:86:b1:98:37:cc:46:19:26:16:a4:55:2b:27:f5:a3: 82:a9:f3:0d:fd:04:46:33:d2:11:cd:d2:0c:33:e5:c4:8f:0f: e0:8a:76:97:2b:49:d2:c1:7d:d6:76:5f:f6:0a:33:f7:16:72: 7d:f7:0e:4b:61:1b:28:37:5c:f5:60:fa:04:be:2d:b7:5d:2a: eb:a1:5d:7e:a8:08:4b:b4:af:27:38:b2:7b:21:19:d6:92:cc: dc:50:ac:63:77:f0:f5:5d:e5:22:e8:3f:d1:dc:35:b8:03:7d: 55:22:d9:6c:51:17:1a:91:45:26:22:38:fb:b7:ff:52:91:ac: d7:c3:fd:f8:e8:8e:70:a5:bf:f9:5a:2e:4f:51:61:38:7d:78: 36:5e:87:cc:cb:70:c7:fa:76:39:fa:96:8a:b4:7e:f0:15:b8: ac:af:5c:83:d6:54:95:e7:00:ec:24:bf:aa:8f:42:e4:e6:df: 55:f1:3f:4e:b2:e3:e9:8a:6c:b9:d0:71:c5:27:2b:cc:a2:89: 11:2f:63:ed:20:88:18:4c:f9:7a:ce:93:f7:79:07:64:a4:56: 62:15:5a:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xuv3NtYZ6myhMrT5cKzKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmQxZWRjMGNjNjk3NzQyY2Y0NzM2NGJiMWQxMWI4ZmY4 MDhlYWUwHhcNMjUxMjIwMDgwMTEzWhcNMjUxMjIxMDgwMTEzWjAzMTEwLwYDVQQD Eyg0MjY1NjQwZTJjZTdlOWVlNDE4NTViZmFjYTdlYWE2ZWVkMDQyZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nVqBgDJKn5lfVTvZT2aAIAOcgUQ HgAArocxhrkV3Q+90wB9FkX6Ydne2DQqjy4mRWP5gUFcjP3WpgbsnPpQNIoM6jSh lpgW3qH0/vkNWy6l+R1rCz4JZ7oUblZUGYqYM5jJfcHxsmUyIf+bZDE7ppwB8GHa WSTUgH8wYJoN6SaqYAS+Toy+PcZRiTlcQQwNLH1mRxKF963q2Pz1svG8pQVJoC8U 0kpZAlBdvBDsS/+7ZYKn6OHqtVpXggPFhH446Sc6jyH6NRe4D1jtESF92W3jOaK6 sqxVoWXnzY8sN0wmqYuhdoZOZJPyQVyCfRhEh6HEV8gvYK2NRUK+C4LNYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJlZA4s5+nuQYVb+sp+qm7tBC1WMB8GA1UdIwQY MBaAFA4tHtwMxpd0LPRzZLsdEbj/gI6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQt NWY4MTY3MDI0OTY4LzEvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQtNWY4MTY3MDI0OTY4 LzEvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsByhOrAN inPc+H3wpoBu/6mi4bCrUK1JVrfPHuNB3avdlHE791MKhrGYN8xGGSYWpFUrJ/Wj gqnzDf0ERjPSEc3SDDPlxI8P4Ip2lytJ0sF91nZf9goz9xZyffcOS2EbKDdc9WD6 BL4tt10q66FdfqgIS7SvJziyeyEZ1pLM3FCsY3fw9V3lIug/0dw1uAN9VSLZbFEX GpFFJiI4+7f/UpGs18P9+OiOcKW/+VouT1FhOH14Nl6HzMtwx/p2OfqWirR+8BW4 rK9cg9ZUlecA7CS/qo9C5ObfVfE/TrLj6YpsudBxxScrzKKJES9j7SCIGEz5es6T 93kHZKRWYhVakA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:12:07 2025 by rpki-client