This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json) Hash identifier: 046dYO/H2Hemx6Xypxa4yDzn6JlZP0N2zWCeXpBmRWU= Subject key identifier: 3E:BF:77:31:AB:EF:57:A6:7E:EE:01:EF:7F:36:84:31:92:E0:9D:DB Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7 Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7 Certificate serial: 019B68E92408705809577AE4FF7CFA1B9985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft Manifest number: 1678 Signing time: Mon 29 Dec 2025 07:01:08 +0000 Manifest this update: Mon 29 Dec 2025 07:01:08 +0000 Manifest next update: Tue 30 Dec 2025 07:01:08 +0000 Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: cYihnr6sj8b2r/l8Cy4r6OTa/dC7HtcQ9yDzITEAaMw=) 2: FIvNNxujkeosaQmK-8zL99U8I-8.roa (hash: xdptKNwYHkOXesPFH1LxyuhIbU4UE4ZRfmuf1MyhTcI=) 3: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (hash: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:24:08:70:58:09:57:7a:e4:ff:7c:fa:1b:99:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7 Validity Not Before: Dec 29 07:01:08 2025 GMT Not After : Dec 30 07:01:08 2025 GMT Subject: CN=3ebf7731abef57a67eee01ef7f36843192e09ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:64:d1:bf:d6:b8:aa:2f:ae:50:07:80:b6: 28:32:e7:a3:6e:46:de:0d:af:6c:aa:f3:28:b0:c9: fb:f8:81:02:7c:41:94:4a:54:62:62:6b:ea:92:c0: f9:5c:fa:d1:46:89:cc:82:e6:dc:b8:5a:8b:19:e3: e0:cd:fd:f4:5f:fe:b8:5d:d6:8a:75:52:0a:58:4e: 4b:f4:79:7f:43:a1:24:db:29:55:7f:89:78:86:e9: 32:58:93:42:30:cd:d1:5c:d2:65:6d:d5:72:17:f3: ad:8c:8d:83:6e:94:4b:94:43:86:e4:0d:fe:ae:b7: 65:4f:33:29:90:6f:32:08:6e:ba:2a:02:87:13:6c: b8:f7:d1:ee:fd:15:6a:d7:70:ee:46:37:c5:f7:e2: 44:06:63:77:3a:d4:47:27:9d:af:85:57:87:7a:24: fb:16:89:f9:2a:56:59:95:ab:06:e8:ee:b5:02:db: 0f:b3:0e:0d:5b:8d:70:4e:96:e7:78:bb:c5:f6:dd: ad:7e:50:3e:28:6b:24:35:40:68:92:2d:e3:a5:59: 5e:3b:44:ad:d9:1e:7b:ec:57:ec:09:3f:e3:52:e6: a8:70:df:87:f5:4b:e2:a0:5e:a6:d8:06:5c:46:ed: 3e:f6:3b:68:16:b1:d6:eb:26:24:c9:09:07:18:7f: 14:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BF:77:31:AB:EF:57:A6:7E:EE:01:EF:7F:36:84:31:92:E0:9D:DB X509v3 Authority Key Identifier: keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8b:e6:ec:b2:69:39:8d:d8:b7:e5:5e:f2:53:60:99:0c:bf: 0c:ac:c9:c3:41:b7:f3:4d:0b:f8:0c:3e:9a:ad:94:16:14:32: 9b:80:fc:fd:0f:f0:3e:58:9e:b4:8a:de:21:99:05:49:ad:f4: 8c:75:11:e8:99:58:ab:62:f4:e8:1a:fb:e8:87:e3:3e:a5:68: ca:71:f2:0d:e9:9a:98:9c:c3:d2:5e:9b:76:9e:6f:d6:f7:94: 31:26:2a:94:8a:4e:a7:14:4b:b1:bd:6c:14:e8:dd:41:c3:d5: f4:de:48:b7:e1:ea:3f:a5:a7:75:7f:51:77:b5:50:96:25:3d: 8b:e6:ae:e8:a7:9e:65:7d:e8:46:a4:41:7c:cb:0c:10:df:06: b1:82:d1:95:bb:a5:a7:d0:45:f6:3c:f8:a5:cd:a3:45:75:48: 81:84:e2:d0:7b:6d:66:28:c0:4a:f1:1a:f8:8f:76:08:c3:6f: c9:82:47:0e:89:5c:be:25:24:90:44:52:f0:9d:68:31:a2:15: ec:1d:52:70:e5:91:18:85:da:61:e8:b4:ce:6e:9e:18:29:23: 3f:59:2e:f0:96:cb:78:08:6f:11:4e:26:bd:01:14:eb:fe:7d: 89:96:64:f0:e5:4e:d5:57:92:c5:a5:7b:f6:4f:87:ed:31:5d: 96:13:3d:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6SQIcFgJV3rk/3z6G5mFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzQ5MTMwOTRhMjEyNjhjNzNhNjc2NTNhMzczOGQ3M2U1 YzU5YTcwHhcNMjUxMjI5MDcwMTA4WhcNMjUxMjMwMDcwMTA4WjAzMTEwLwYDVQQD EygzZWJmNzczMWFiZWY1N2E2N2VlZTAxZWY3ZjM2ODQzMTkyZTA5ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRZk0b/WuKovrlAHgLYoMuejbkbe Da9sqvMosMn7+IECfEGUSlRiYmvqksD5XPrRRonMgubcuFqLGePgzf30X/64XdaK dVIKWE5L9Hl/Q6Ek2ylVf4l4hukyWJNCMM3RXNJlbdVyF/OtjI2DbpRLlEOG5A3+ rrdlTzMpkG8yCG66KgKHE2y499Hu/RVq13DuRjfF9+JEBmN3OtRHJ52vhVeHeiT7 Fon5KlZZlasG6O61AtsPsw4NW41wTpbneLvF9t2tflA+KGskNUBoki3jpVleO0St 2R577FfsCT/jUuaocN+H9UvioF6m2AZcRu0+9jtoFrHW6yYkyQkHGH8UawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6/dzGr71emfu4B7382hDGS4J3bMB8GA1UdIwQY MBaAFNHEkTCUohJoxzpnZTo3ONc+XFmnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAt MzNhODJhYjVmNTEzLzEvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAtMzNhODJhYjVmNTEz LzEvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYvm7LJp OY3Yt+Ve8lNgmQy/DKzJw0G3800L+Aw+mq2UFhQym4D8/Q/wPlietIreIZkFSa30 jHUR6JlYq2L06Br76IfjPqVoynHyDemamJzD0l6bdp5v1veUMSYqlIpOpxRLsb1s FOjdQcPV9N5It+HqP6WndX9Rd7VQliU9i+au6KeeZX3oRqRBfMsMEN8GsYLRlbul p9BF9jz4pc2jRXVIgYTi0HttZijASvEa+I92CMNvyYJHDolcviUkkERS8J1oMaIV 7B1ScOWRGIXaYei0zm6eGCkjP1ku8JbLeAhvEU4mvQEU6/59iZZk8OVO1VeSxaV7 9k+H7TFdlhM9zQ== -----END CERTIFICATE-----Generated at Mon Dec 29 16:17:07 2025 by rpki-client