This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json) Hash identifier: +jlOBDPanxesXnwGYjDMx0O0QqrxlLXaQ/OfipqFI4c= Subject key identifier: 74:86:C1:32:7E:1E:7E:B1:FA:79:C2:8C:C3:AB:80:DD:19:5D:43:A7 Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08 Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208 Certificate serial: 019B3EA3A3FA14CC0D0670E9D380FB296389 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft Manifest number: 0A7B Signing time: Sun 21 Dec 2025 02:01:10 +0000 Manifest this update: Sun 21 Dec 2025 02:01:10 +0000 Manifest next update: Mon 22 Dec 2025 02:01:10 +0000 Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: 8Gqd533iu8/0g/9FBkVS8dA/zjv7hiGKpA+rVe7PpIo=) 2: 3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa (hash: oLSU3YNaGRS7ljQgete6uiDJRLwSKNoaWdOvOIOXxdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:a3:fa:14:cc:0d:06:70:e9:d3:80:fb:29:63:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208 Validity Not Before: Dec 21 02:01:10 2025 GMT Not After : Dec 22 02:01:10 2025 GMT Subject: CN=7486c1327e1e7eb1fa79c28cc3ab80dd195d43a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ed:d7:fe:63:ee:5c:51:4c:3e:d0:51:5a:2e: cb:5e:0e:3f:01:f4:27:65:10:2f:f2:55:b8:2d:73: 13:52:b5:d2:c6:89:e2:7a:ae:c9:7c:e9:8f:49:64: 3e:06:bb:00:cf:d0:c6:4d:e4:19:7b:49:e8:25:a3: eb:65:17:46:2d:aa:89:dd:80:3d:77:ad:d2:a6:8e: 6b:8c:db:31:85:a1:f1:90:a7:f1:19:5a:ad:8b:1e: 77:36:35:1b:e9:be:17:1d:63:3a:6b:08:30:a5:cc: 97:b8:ac:e1:dc:3a:66:76:73:53:7f:00:b8:b1:34: b0:80:62:d3:a0:96:54:d9:f7:28:89:8d:7d:39:8f: c8:4d:8e:3a:de:2e:dc:f7:b0:25:38:72:18:55:4c: c0:7e:49:68:00:7c:cb:b3:6b:a6:d8:c8:e3:84:b6: 58:f1:b2:c8:47:a0:ca:5c:76:b2:9f:5e:b4:61:7d: 7b:7f:9d:b3:1b:d7:4f:7a:3c:3a:a2:16:25:c3:10: 52:5d:35:16:c7:77:d3:59:74:53:e1:6f:55:c7:3a: b7:27:9b:c8:37:eb:09:2f:c3:f0:41:49:db:22:a4: 14:d7:0a:1b:f1:09:eb:12:41:d2:cd:bd:5b:68:b8: bb:32:17:b6:5f:c5:20:99:82:19:ab:3b:b3:1e:8f: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:86:C1:32:7E:1E:7E:B1:FA:79:C2:8C:C3:AB:80:DD:19:5D:43:A7 X509v3 Authority Key Identifier: keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c8:7e:2a:a3:2c:ce:2c:a5:3a:87:b3:06:6b:fc:71:eb:9d: 99:3c:0e:3f:16:27:21:ff:d9:ff:6a:5f:19:0a:e8:c3:6c:30: 10:23:20:9b:f2:63:2f:67:e6:20:9c:54:f6:16:31:f6:b1:09: 47:bc:f4:9d:ba:c4:13:92:54:96:cd:c7:07:a8:06:54:65:43: 66:40:07:57:5a:34:b5:8f:e3:03:c5:89:b3:b8:81:00:e6:88: 6a:c6:35:b3:a3:35:c8:a3:a9:cb:1f:83:44:9c:a0:7b:69:79: 3b:f6:1f:8f:17:33:5f:b1:48:b8:0d:8c:44:ca:21:f7:64:4f: cc:e1:53:4b:f7:95:17:f9:bd:d1:6b:ea:fd:3c:28:a8:02:77: f5:66:a3:9e:39:01:a8:91:ca:ab:ee:79:c0:65:cc:59:1c:f1: 9c:54:b4:1a:c5:d7:fc:ed:10:ba:d8:aa:11:0e:57:25:f0:b9: 8d:78:da:83:a6:9c:8c:ac:94:fc:60:13:c4:f0:7f:b9:20:d2: 05:73:e5:f5:75:94:5d:2d:b6:1f:83:73:a9:50:d0:14:93:5b: 78:5d:d7:02:66:e1:9e:12:71:85:10:42:de:9c:b9:64:52:d4: 95:f1:f8:f9:a5:73:6a:78:27:e4:0f:52:98:cf:32:69:06:05: 0f:10:aa:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o6P6FMwNBnDp04D7KWOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMTBlZTc4YmJkNDg3ZDM5ZDc5Y2IxOTgwODVlOTg0Zjcw MmEyMDgwHhcNMjUxMjIxMDIwMTEwWhcNMjUxMjIyMDIwMTEwWjAzMTEwLwYDVQQD Eyg3NDg2YzEzMjdlMWU3ZWIxZmE3OWMyOGNjM2FiODBkZDE5NWQ0M2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO3X/mPuXFFMPtBRWi7LXg4/AfQn ZRAv8lW4LXMTUrXSxonieq7JfOmPSWQ+BrsAz9DGTeQZe0noJaPrZRdGLaqJ3YA9 d63Spo5rjNsxhaHxkKfxGVqtix53NjUb6b4XHWM6awgwpcyXuKzh3DpmdnNTfwC4 sTSwgGLToJZU2fcoiY19OY/ITY463i7c97AlOHIYVUzAfkloAHzLs2um2MjjhLZY 8bLIR6DKXHayn160YX17f52zG9dPejw6ohYlwxBSXTUWx3fTWXRT4W9Vxzq3J5vI N+sJL8PwQUnbIqQU1wob8QnrEkHSzb1baLi7Mhe2X8UgmYIZqzuzHo8a0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSGwTJ+Hn6x+nnCjMOrgN0ZXUOnMB8GA1UdIwQY MBaAFNAQ7ni71IfTnXnLGYCF6YT3AqIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEJEdWVMdlVoOU9kZWNzWmdJWHBoUGNDb2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wYWQ0NmUtZThmZi00MmE5LTk4YzUt ZDc4ZjYxNzJiMTU1LzEvMEJEdWVMdlVoOU9kZWNzWmdJWHBoUGNDb2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8wYWQ0NmUtZThmZi00MmE5LTk4YzUtZDc4ZjYxNzJiMTU1 LzEvMEJEdWVMdlVoOU9kZWNzWmdJWHBoUGNDb2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8h+KqMs ziylOoezBmv8ceudmTwOPxYnIf/Z/2pfGQrow2wwECMgm/JjL2fmIJxU9hYx9rEJ R7z0nbrEE5JUls3HB6gGVGVDZkAHV1o0tY/jA8WJs7iBAOaIasY1s6M1yKOpyx+D RJyge2l5O/YfjxczX7FIuA2MRMoh92RPzOFTS/eVF/m90Wvq/TwoqAJ39WajnjkB qJHKq+55wGXMWRzxnFS0GsXX/O0QutiqEQ5XJfC5jXjag6acjKyU/GATxPB/uSDS BXPl9XWUXS22H4NzqVDQFJNbeF3XAmbhnhJxhRBC3py5ZFLUlfH4+aVzangn5A9S mM8yaQYFDxCqdg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:52:04 2025 by rpki-client