This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft File: 0Dxztg8hA-47Kiw8vpIOISqS7mU.mft (raw, json) Hash identifier: /vBvN7vl4we5IICd+oYyNLR/3yZkFLVUVyrdZs6/zno= Subject key identifier: 30:FC:1A:FB:5B:D0:C3:EC:CE:27:32:B0:79:17:85:92:BE:B3:34:C1 Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65 Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65 Certificate serial: 019B51BC0C584E24CC70F395C508B84646A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft Manifest number: 0700 Signing time: Wed 24 Dec 2025 19:00:36 +0000 Manifest this update: Wed 24 Dec 2025 19:00:36 +0000 Manifest next update: Thu 25 Dec 2025 19:00:36 +0000 Files and hashes: 1: 0Dxztg8hA-47Kiw8vpIOISqS7mU.crl (hash: /fJacpJ8OKWyzHVZ/3ndtHKi1qQl62vh/+Sx87QeeH4=) 2: tDVvrqtQQCwl2jE6yV_v8vBSPyI.roa (hash: qiENM6J31Gqa4rOEk4JnN/zBbLfxSy0s2Ydx5h5QGk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:0c:58:4e:24:cc:70:f3:95:c5:08:b8:46:46:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65 Validity Not Before: Dec 24 19:00:36 2025 GMT Not After : Dec 25 19:00:36 2025 GMT Subject: CN=30fc1afb5bd0c3ecce2732b079178592beb334c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3d:3e:5c:5b:3d:a3:05:0a:01:7a:06:39:e9: 50:f0:c4:42:77:e6:1f:3c:f3:b5:d4:e8:b9:68:83: f4:52:45:07:07:a9:bd:d2:fb:ff:24:bd:67:47:b2: da:16:ff:7d:ce:96:c3:5d:5d:15:81:a3:32:09:6b: 54:fb:aa:9f:5f:19:24:b0:e8:45:a6:c8:8c:5d:1a: ac:06:54:c9:68:9e:87:08:62:f3:b9:7a:e6:df:89: 6b:54:99:7b:96:62:0c:e4:54:09:1f:7c:3d:90:5e: 48:47:6d:a0:cd:35:97:32:03:9a:11:4c:d5:75:13: 70:0f:49:c8:c9:ed:ca:51:c2:2c:44:87:d1:96:5c: 68:ed:ae:26:7c:d6:08:ea:d7:cc:2d:a1:7c:35:2e: 43:24:ad:41:23:db:01:b7:98:53:3a:11:a9:17:7c: 82:20:14:03:84:26:fc:5d:e7:c8:ec:0c:16:b8:e6: e9:12:d7:0b:ec:f5:59:90:7e:c4:9b:cc:7f:d4:0a: 52:2d:28:a6:7b:5f:b0:ed:12:ba:46:06:79:bc:6d: 6b:04:46:a1:2e:06:9d:34:e7:82:27:5f:00:69:87: 13:56:86:3c:fb:5b:7f:e3:e0:d8:7b:41:d3:b2:c1: ee:4f:d3:aa:59:89:a9:69:54:43:f0:71:c6:b5:f0: 15:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FC:1A:FB:5B:D0:C3:EC:CE:27:32:B0:79:17:85:92:BE:B3:34:C1 X509v3 Authority Key Identifier: keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e6:21:12:d5:04:b8:f5:4c:f7:35:74:19:54:63:f0:3d:89: 39:13:2e:7e:23:09:ee:fb:fc:07:e9:79:fe:6f:e8:a6:95:24: fb:23:04:1e:53:25:0b:ae:e6:66:74:f5:94:0a:2b:62:5e:7d: 8f:02:ac:3c:4f:d3:9b:77:3c:8d:ba:b6:3c:b6:9a:fe:89:8d: eb:f4:22:96:56:b1:22:a5:14:33:76:bb:b6:28:41:d0:f9:13: 02:07:63:f5:e1:14:9d:8d:83:80:41:dd:a0:3e:ac:94:ec:dc: 93:45:f6:2c:7d:9c:9e:82:cf:40:3e:d7:4f:7f:50:3c:bc:98: 27:38:90:fa:22:7b:a4:7a:20:50:0e:18:70:6f:c7:98:2f:36: f4:c8:94:49:ae:b8:f0:4a:59:dc:4e:c0:cd:51:b9:d7:ec:bd: b6:fd:7a:51:1e:a3:1d:70:a7:34:ae:21:ed:85:39:85:af:27: cf:08:c6:93:67:b2:ec:3f:55:6b:50:a7:3e:36:97:af:ba:1d: d3:43:62:68:8d:96:bf:9d:5f:85:08:c5:f3:b1:9f:5a:00:c4: 86:ac:fb:e9:7d:08:0a:c8:6e:c1:2b:55:02:d0:be:16:41:3d: f7:c9:6f:e0:5d:ba:91:06:d7:ea:bb:f7:02:6a:ec:8e:1d:79: 8e:93:b0:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvAxYTiTMcPOVxQi4RkahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwM2M3M2I2MGYyMTAzZWUzYjJhMmMzY2JlOTIwZTIxMmE5 MmVlNjUwHhcNMjUxMjI0MTkwMDM2WhcNMjUxMjI1MTkwMDM2WjAzMTEwLwYDVQQD EygzMGZjMWFmYjViZDBjM2VjY2UyNzMyYjA3OTE3ODU5MmJlYjMzNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7z0+XFs9owUKAXoGOelQ8MRCd+Yf PPO11Oi5aIP0UkUHB6m90vv/JL1nR7LaFv99zpbDXV0VgaMyCWtU+6qfXxkksOhF psiMXRqsBlTJaJ6HCGLzuXrm34lrVJl7lmIM5FQJH3w9kF5IR22gzTWXMgOaEUzV dRNwD0nIye3KUcIsRIfRllxo7a4mfNYI6tfMLaF8NS5DJK1BI9sBt5hTOhGpF3yC IBQDhCb8XefI7AwWuObpEtcL7PVZkH7Em8x/1ApSLSime1+w7RK6RgZ5vG1rBEah LgadNOeCJ18AaYcTVoY8+1t/4+DYe0HTssHuT9OqWYmpaVRD8HHGtfAVmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDD8Gvtb0MPszicysHkXhZK+szTBMB8GA1UdIwQY MBaAFNA8c7YPIQPuOyosPL6SDiEqku5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAt NDZmMDA0YTE5NTkxLzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAtNDZmMDA0YTE5NTkx LzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+YhEtUE uPVM9zV0GVRj8D2JORMufiMJ7vv8B+l5/m/oppUk+yMEHlMlC67mZnT1lAorYl59 jwKsPE/Tm3c8jbq2PLaa/omN6/QillaxIqUUM3a7tihB0PkTAgdj9eEUnY2DgEHd oD6slOzck0X2LH2cnoLPQD7XT39QPLyYJziQ+iJ7pHogUA4YcG/HmC829MiUSa64 8EpZ3E7AzVG51+y9tv16UR6jHXCnNK4h7YU5ha8nzwjGk2ey7D9Va1CnPjaXr7od 00NiaI2Wv51fhQjF87GfWgDEhqz76X0ICshuwStVAtC+FkE998lv4F26kQbX6rv3 Amrsjh15jpOw6Q== -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:07 2025 by rpki-client