This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft File: 0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json) Hash identifier: isQGe1H9JlOgDgsng2Vu/OssMrzjtrx4LfnccQQCUwk= Subject key identifier: 87:3C:42:1A:A9:45:75:BA:02:70:43:A3:29:DE:1C:37:17:B6:B8:D0 Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Certificate serial: 019B476F8FA258E83FE92B6896810B6A395F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft Manifest number: 0F52 Signing time: Mon 22 Dec 2025 19:00:52 +0000 Manifest this update: Mon 22 Dec 2025 19:00:52 +0000 Manifest next update: Tue 23 Dec 2025 19:00:52 +0000 Files and hashes: 1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: 48KEKNztwTA7COGNghbGQ26RMw/sIhviXw0DR28xEV8=) 2: iNP53awYopMvAC4_B7BQl71kOxY.roa (hash: bB0RVg76/44F7S9NnPgzE3dfYBZqeAvXewkbyz58CrI=) 3: lsnXG1QZQcE8MO7Sy6Rk0--VHVo.roa (hash: H6uKA8IXZMicdWaKzhjJe9pvq8QiwubQ+Jp2iPiiq2o=) 4: tO7FKCFax-gtGeKJuusgZ6pHQQ8.roa (hash: o1Lh17vyaKAVv+dEziVl9qAFWYzZNADmVMYgNFzVQxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:8f:a2:58:e8:3f:e9:2b:68:96:81:0b:6a:39:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Validity Not Before: Dec 22 19:00:52 2025 GMT Not After : Dec 23 19:00:52 2025 GMT Subject: CN=873c421aa94575ba027043a329de1c3717b6b8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:bf:a0:8a:cb:3b:34:00:47:cd:70:e1:7b: 77:8f:67:cd:8a:e8:6e:7e:c6:3e:2e:e7:b7:a4:5c: c6:27:25:23:67:72:eb:9f:22:02:e5:8a:d2:4c:ad: 03:76:7a:4d:94:04:47:5d:c0:00:ef:dc:f3:18:fe: 2f:4c:0e:88:b5:9c:07:a8:fd:21:8c:08:a3:7c:93: e2:b3:52:40:6d:24:cd:49:96:0e:62:c7:2c:7a:a1: c7:bc:7b:c5:53:af:0b:1e:8c:b1:7a:4f:0c:e7:c9: 12:0f:ea:25:3c:69:49:1f:81:a0:19:41:cd:55:e4: ae:46:49:f8:4a:1b:98:33:9d:24:e0:a2:b7:1c:60: d8:ed:aa:3b:91:c3:7b:2d:65:c2:d0:61:ac:f6:44: e6:23:71:63:70:96:1a:9c:ae:b2:af:d0:30:c2:04: d9:f7:f4:4a:5d:01:49:6b:4a:54:22:e3:35:57:b8: ae:fe:32:8f:72:9f:32:fe:37:75:cd:b8:fb:25:79: c7:32:ae:96:69:b3:c5:98:6d:12:7d:b6:cd:85:8f: 4f:b9:10:06:95:4c:09:d3:cc:9a:25:76:ba:fd:43: eb:c0:01:31:fb:98:29:75:c8:06:48:de:dd:27:8e: 03:a8:db:81:c4:12:c3:4d:75:ed:24:fb:ad:9b:6a: b0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3C:42:1A:A9:45:75:BA:02:70:43:A3:29:DE:1C:37:17:B6:B8:D0 X509v3 Authority Key Identifier: keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:55:0d:03:7f:09:52:8a:98:01:46:42:68:2c:8b:24:98:95: 66:67:f7:4b:ee:5b:2f:4b:9f:d6:f7:c5:a6:d9:e1:47:48:c7: e7:a0:97:88:4e:30:73:65:45:c5:a1:bf:02:94:96:a9:b4:1f: 11:ce:8b:bf:11:8c:98:c4:24:b6:d3:2b:4a:78:e1:a9:7a:30: bc:69:8b:91:04:85:db:3d:f7:c8:cd:f6:fd:a2:b0:58:66:75: 75:cf:62:fa:38:74:e5:3b:24:fa:29:1f:dd:9e:e9:a7:f7:bb: bb:cf:48:27:92:6b:1a:51:09:02:1b:14:d0:37:52:db:16:16: 11:b6:45:19:94:82:49:74:90:3b:1a:d9:f5:b5:4c:3a:10:e1: f9:de:71:0b:a0:bd:e9:82:05:a2:f9:da:df:c2:1b:1d:9d:8a: 95:52:9f:71:28:a4:23:8a:eb:ea:94:53:2f:1f:ab:99:5d:10: 83:68:09:76:71:d4:36:12:50:6b:53:00:5c:80:86:7d:b9:b1: 45:f6:ad:89:4e:89:bb:d6:a6:72:9d:fb:7d:5e:6d:17:b5:91: 3c:25:c0:87:36:94:db:b1:cd:de:14:89:ac:a5:c3:aa:c8:83: 59:43:29:c1:1a:d8:7f:6c:72:6b:b4:65:eb:7c:54:7d:ec:64: f8:85:25:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb4+iWOg/6StoloELajlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZDc4ODI2ZTE3MTdlYzk5M2ViNjRkZDExODc4NzZiMDY1 ZThmNTgwHhcNMjUxMjIyMTkwMDUyWhcNMjUxMjIzMTkwMDUyWjAzMTEwLwYDVQQD Eyg4NzNjNDIxYWE5NDU3NWJhMDI3MDQzYTMyOWRlMWMzNzE3YjZiOGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfC/oIrLOzQAR81w4Xt3j2fNiuhu fsY+Lue3pFzGJyUjZ3LrnyIC5YrSTK0DdnpNlARHXcAA79zzGP4vTA6ItZwHqP0h jAijfJPis1JAbSTNSZYOYscseqHHvHvFU68LHoyxek8M58kSD+olPGlJH4GgGUHN VeSuRkn4ShuYM50k4KK3HGDY7ao7kcN7LWXC0GGs9kTmI3FjcJYanK6yr9AwwgTZ 9/RKXQFJa0pUIuM1V7iu/jKPcp8y/jd1zbj7JXnHMq6WabPFmG0SfbbNhY9PuRAG lUwJ08yaJXa6/UPrwAEx+5gpdcgGSN7dJ44DqNuBxBLDTXXtJPutm2qwOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIc8QhqpRXW6AnBDoyneHDcXtrjQMB8GA1UdIwQY MBaAFNHXiCbhcX7Jk+tk3RGHh2sGXo9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgt YjU5YzJhYzk1MWNiLzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNi LzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVUNA38J UoqYAUZCaCyLJJiVZmf3S+5bL0uf1vfFptnhR0jH56CXiE4wc2VFxaG/ApSWqbQf Ec6LvxGMmMQkttMrSnjhqXowvGmLkQSF2z33yM32/aKwWGZ1dc9i+jh05Tsk+ikf 3Z7pp/e7u89IJ5JrGlEJAhsU0DdS2xYWEbZFGZSCSXSQOxrZ9bVMOhDh+d5xC6C9 6YIFovna38IbHZ2KlVKfcSikI4rr6pRTLx+rmV0Qg2gJdnHUNhJQa1MAXICGfbmx RfatiU6Ju9amcp37fV5tF7WRPCXAhzaU27HN3hSJrKXDqsiDWUMpwRrYf2xya7Rl 63xUfexk+IUlGg== -----END CERTIFICATE-----Generated at Tue Dec 23 03:44:52 2025 by rpki-client