This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json) Hash identifier: O+gJ+SURs7PJBziu09TEUykwEvftTi74UHV3BHoCl60= Subject key identifier: A0:D5:F9:77:C5:59:6C:18:10:EF:9A:B8:59:C7:0D:F8:02:C3:A8:06 Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06 Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06 Certificate serial: 019B3DC7B3D6FB97D1D48924D059EAAAF7F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:00:56 +0000 Manifest this update: Sat 20 Dec 2025 22:00:56 +0000 Manifest next update: Sun 21 Dec 2025 22:00:56 +0000 Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: tHv5rNqY3xnZLkU1DpmmH6BDUJ9Y+YDfAL1WOW/SgyI=) 2: 9-3CRoQW_QjusaOMGpyHscSTGa0.roa (hash: hSgLJd/C+rhopgNVHjf6fxNZLuf8+Okfp+V4kR/UeS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:b3:d6:fb:97:d1:d4:89:24:d0:59:ea:aa:f7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06 Validity Not Before: Dec 20 22:00:56 2025 GMT Not After : Dec 21 22:00:56 2025 GMT Subject: CN=a0d5f977c5596c1810ef9ab859c70df802c3a806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:02:df:fd:a1:d1:01:9f:d4:6e:a3:7a:56: 7f:a4:89:a0:31:50:d5:ab:b8:fa:4b:8a:3b:2c:c6: 9f:fa:4e:6b:14:24:7c:24:46:88:82:91:e1:3b:e1: e7:f3:52:a0:a7:11:1b:91:8d:1c:82:86:6e:dd:a7: b8:3b:8e:61:a8:df:97:8f:32:ef:87:1c:93:57:de: ab:49:0a:fa:05:83:24:e2:7c:31:87:81:41:4e:8a: 0c:ac:71:df:15:b9:34:44:b3:7c:9e:fd:c1:16:ad: c9:15:4d:1e:eb:b7:d5:50:d5:89:b8:07:32:96:b1: f7:4b:ad:f7:d2:7b:fa:23:f9:55:0e:3e:e3:21:0a: f8:4a:61:e2:95:d0:e1:88:78:0c:6b:2f:b2:92:39: 2b:2a:89:6a:f5:ef:d7:7b:b6:df:e1:45:5e:08:22: 62:2a:5d:56:2a:68:44:8b:10:05:49:2b:b5:b6:55: d5:1b:14:fd:60:b3:d4:f2:ff:51:21:5b:77:73:0f: 36:f1:4f:c6:b9:cb:1b:e6:8e:95:b0:5e:da:70:8e: 89:df:d5:f5:34:a5:a4:e1:f4:96:50:a4:b5:f6:15: 6b:b8:3c:80:f3:fb:88:79:fc:f3:50:17:60:bd:90: 2b:57:d8:d3:5d:78:bc:60:5e:e2:ed:94:fd:3f:91: d3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D5:F9:77:C5:59:6C:18:10:EF:9A:B8:59:C7:0D:F8:02:C3:A8:06 X509v3 Authority Key Identifier: keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f4:d7:e5:dc:8f:ed:1a:ec:3a:f7:f3:b3:30:6b:c1:3e:bb: 7e:93:9d:e2:02:45:79:fa:8b:3d:d7:8d:fe:f7:c8:2c:32:b4: ab:c5:ec:f5:89:ce:64:ab:fc:36:34:0d:c4:fe:4d:93:3b:6d: 2b:6b:2c:84:27:2b:6d:af:7c:22:54:c0:10:19:4f:05:64:14: 89:2e:eb:67:73:ed:46:3b:d3:72:54:81:a8:70:29:86:89:10: 5f:71:90:dc:a2:d8:12:d8:9a:bd:7e:4e:9c:5a:9c:47:f6:a0: 14:ba:c1:77:04:17:9a:1b:de:cf:62:8f:fa:1c:76:7f:54:d9: fb:1b:82:e7:8e:ae:ff:a1:1b:bd:7a:66:89:a4:0d:1b:47:98: 4f:ac:a8:c8:b7:fd:2f:a8:73:cc:fa:c7:9d:8f:51:a6:6f:0f: 53:4e:14:53:f2:d0:b3:22:cc:e7:1a:38:c0:cb:7b:a2:ad:f3: 42:de:d0:e2:5c:31:f3:b6:ae:67:a1:78:21:76:13:e2:24:35: b6:74:05:88:58:a4:ec:eb:f2:9e:bd:f2:16:27:68:09:19:de: 32:d5:c3:55:0e:23:13:58:e3:36:62:10:6b:95:f9:35:60:f5: 1e:ca:dc:dd:f3:96:3f:ae:31:f5:98:54:bd:b5:97:70:e3:d6: e8:0f:40:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x7PW+5fR1Ikk0FnqqvfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzRjMzgwNmUxZjg4ZTk5YmQ4YzVlNDkwMDc3ZjhkZTVk N2NmMDYwHhcNMjUxMjIwMjIwMDU2WhcNMjUxMjIxMjIwMDU2WjAzMTEwLwYDVQQD EyhhMGQ1Zjk3N2M1NTk2YzE4MTBlZjlhYjg1OWM3MGRmODAyYzNhODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FEC3/2h0QGf1G6jelZ/pImgMVDV q7j6S4o7LMaf+k5rFCR8JEaIgpHhO+Hn81KgpxEbkY0cgoZu3ae4O45hqN+XjzLv hxyTV96rSQr6BYMk4nwxh4FBTooMrHHfFbk0RLN8nv3BFq3JFU0e67fVUNWJuAcy lrH3S6330nv6I/lVDj7jIQr4SmHildDhiHgMay+ykjkrKolq9e/Xe7bf4UVeCCJi Kl1WKmhEixAFSSu1tlXVGxT9YLPU8v9RIVt3cw828U/Gucsb5o6VsF7acI6J39X1 NKWk4fSWUKS19hVruDyA8/uIefzzUBdgvZArV9jTXXi8YF7i7ZT9P5HTLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDV+XfFWWwYEO+auFnHDfgCw6gGMB8GA1UdIwQY MBaAFNLEw4BuH4jpm9jF5JAHf43l188GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMmIwYTItOTVlMy00MWEwLThjZGYt ZmY4MDllN2RhZWNhLzEvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kMmIwYTItOTVlMy00MWEwLThjZGYtZmY4MDllN2RhZWNh LzEvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvTX5dyP 7RrsOvfzszBrwT67fpOd4gJFefqLPdeN/vfILDK0q8Xs9YnOZKv8NjQNxP5Nkztt K2sshCcrba98IlTAEBlPBWQUiS7rZ3PtRjvTclSBqHAphokQX3GQ3KLYEtiavX5O nFqcR/agFLrBdwQXmhvez2KP+hx2f1TZ+xuC546u/6EbvXpmiaQNG0eYT6yoyLf9 L6hzzPrHnY9Rpm8PU04UU/LQsyLM5xo4wMt7oq3zQt7Q4lwx87auZ6F4IXYT4iQ1 tnQFiFik7Ovynr3yFidoCRneMtXDVQ4jE1jjNmIQa5X5NWD1Hsrc3fOWP64x9ZhU vbWXcOPW6A9A7Q== -----END CERTIFICATE-----Generated at Sat Dec 20 23:54:57 2025 by rpki-client