This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft File: 0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json) Hash identifier: 3KSh1sXQfmnoWW+mZC0UKuWICMIoH3cWB2HXEWECCEE= Subject key identifier: B3:BD:44:95:31:00:90:FF:A4:4F:C5:4F:C1:C1:0D:5E:D3:CE:47:41 Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Certificate serial: 019B3FB6929E6CB8B32E54D12F09BAFB2ACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft Manifest number: 0F4E Signing time: Sun 21 Dec 2025 07:01:28 +0000 Manifest this update: Sun 21 Dec 2025 07:01:28 +0000 Manifest next update: Mon 22 Dec 2025 07:01:28 +0000 Files and hashes: 1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: hHpwf/xN5LvZZLOtHpQArbtGntAwFUYibrZJBVz/shU=) 2: iNP53awYopMvAC4_B7BQl71kOxY.roa (hash: bB0RVg76/44F7S9NnPgzE3dfYBZqeAvXewkbyz58CrI=) 3: lsnXG1QZQcE8MO7Sy6Rk0--VHVo.roa (hash: H6uKA8IXZMicdWaKzhjJe9pvq8QiwubQ+Jp2iPiiq2o=) 4: tO7FKCFax-gtGeKJuusgZ6pHQQ8.roa (hash: o1Lh17vyaKAVv+dEziVl9qAFWYzZNADmVMYgNFzVQxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:92:9e:6c:b8:b3:2e:54:d1:2f:09:ba:fb:2a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Validity Not Before: Dec 21 07:01:28 2025 GMT Not After : Dec 22 07:01:28 2025 GMT Subject: CN=b3bd4495310090ffa44fc54fc1c10d5ed3ce4741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:d7:92:69:5c:54:59:ad:8c:7e:c3:c5:fe: 11:c4:d9:4a:9a:d5:a2:7e:fa:23:0e:e3:2e:8f:71: b0:01:d7:f1:3a:86:3d:ee:b0:0a:4b:54:01:12:f0: 1d:2c:d7:be:96:8c:de:f9:a7:ca:de:d7:0f:34:e3: 86:f2:81:e2:cb:48:a4:64:1e:9b:80:dc:ec:ba:fb: e7:5a:ff:d2:72:40:d8:9b:53:03:bd:b1:5f:5f:3f: 8f:56:6b:0b:e4:d1:46:e2:84:b3:c3:af:0b:6f:4a: 22:bb:d8:15:09:53:d5:e8:ce:44:76:a8:fd:8e:73: 73:cf:70:36:72:c4:bd:bf:b4:40:ab:07:7e:64:96: 77:44:24:03:51:98:d2:7f:f9:08:24:49:7a:87:f8: 0e:75:29:d4:81:9e:a8:3e:33:8d:44:d7:71:70:72: d5:d6:bf:d9:db:20:cc:a1:2a:19:cf:ba:cb:68:17: 16:ab:61:c1:7b:e6:09:44:90:9c:6a:f0:79:ef:38: eb:5c:c4:53:5c:22:40:aa:c9:23:53:81:dd:ff:38: 7e:ac:95:fe:85:31:68:64:6f:b0:e5:5b:e0:ed:63: 67:6e:80:4f:28:6d:55:6e:2e:fe:c2:f7:8a:d3:e1: 17:95:4d:67:43:7a:21:08:63:2b:f3:0a:91:57:30: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BD:44:95:31:00:90:FF:A4:4F:C5:4F:C1:C1:0D:5E:D3:CE:47:41 X509v3 Authority Key Identifier: keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ad:dc:13:06:dd:e0:a7:4d:5a:bc:a7:3b:35:eb:eb:a8:74: 97:e5:f1:58:55:28:fa:83:f6:51:52:d5:3d:a9:69:b3:2e:61: 49:55:a0:09:45:68:24:8b:11:b6:6b:7e:fc:1e:e7:96:ce:80: 2f:b6:73:7d:f0:e1:a0:4f:10:a0:74:29:6d:78:2a:fb:1f:4c: 0f:c0:ac:ff:87:cf:a7:94:14:2a:d3:bd:27:b1:01:fa:71:ff: 92:e5:c3:e3:ee:19:2f:98:4f:e0:7e:29:e4:9a:91:51:34:5c: 8e:af:08:d6:3a:9d:15:fb:18:64:a2:79:6a:d3:06:03:15:23: e1:d7:6d:26:35:db:9a:c8:3a:65:aa:b2:a4:9c:61:70:d2:8c: d3:58:ab:6a:d3:0d:a5:1f:ec:01:8a:16:e4:e0:d4:7d:95:ed: 13:e6:d4:34:cf:ce:59:c9:d7:da:4c:fe:e5:1f:41:ae:75:b5: 54:39:a5:c9:3b:49:2c:6c:a2:de:ed:b0:10:69:6d:ea:f0:14: f5:09:52:77:b5:e1:53:7d:d7:28:dc:e1:1b:54:02:6d:a9:45: 34:65:4e:e4:ad:fd:72:fc:9d:6c:11:84:84:34:da:f5:21:5f: 23:0b:40:66:2a:d1:78:58:b5:83:7f:50:9d:5f:63:ff:34:1f: 83:9e:e7:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tpKebLizLlTRLwm6+yrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZDc4ODI2ZTE3MTdlYzk5M2ViNjRkZDExODc4NzZiMDY1 ZThmNTgwHhcNMjUxMjIxMDcwMTI4WhcNMjUxMjIyMDcwMTI4WjAzMTEwLwYDVQQD EyhiM2JkNDQ5NTMxMDA5MGZmYTQ0ZmM1NGZjMWMxMGQ1ZWQzY2U0NzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UHXkmlcVFmtjH7Dxf4RxNlKmtWi fvojDuMuj3GwAdfxOoY97rAKS1QBEvAdLNe+loze+afK3tcPNOOG8oHiy0ikZB6b gNzsuvvnWv/SckDYm1MDvbFfXz+PVmsL5NFG4oSzw68Lb0oiu9gVCVPV6M5Edqj9 jnNzz3A2csS9v7RAqwd+ZJZ3RCQDUZjSf/kIJEl6h/gOdSnUgZ6oPjONRNdxcHLV 1r/Z2yDMoSoZz7rLaBcWq2HBe+YJRJCcavB57zjrXMRTXCJAqskjU4Hd/zh+rJX+ hTFoZG+w5Vvg7WNnboBPKG1Vbi7+wveK0+EXlU1nQ3ohCGMr8wqRVzCjnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLO9RJUxAJD/pE/FT8HBDV7TzkdBMB8GA1UdIwQY MBaAFNHXiCbhcX7Jk+tk3RGHh2sGXo9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgt YjU5YzJhYzk1MWNiLzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNi LzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW63cEwbd 4KdNWrynOzXr66h0l+XxWFUo+oP2UVLVPalpsy5hSVWgCUVoJIsRtmt+/B7nls6A L7ZzffDhoE8QoHQpbXgq+x9MD8Cs/4fPp5QUKtO9J7EB+nH/kuXD4+4ZL5hP4H4p 5JqRUTRcjq8I1jqdFfsYZKJ5atMGAxUj4ddtJjXbmsg6ZaqypJxhcNKM01iratMN pR/sAYoW5ODUfZXtE+bUNM/OWcnX2kz+5R9BrnW1VDmlyTtJLGyi3u2wEGlt6vAU 9QlSd7XhU33XKNzhG1QCbalFNGVO5K39cvydbBGEhDTa9SFfIwtAZirReFi1g39Q nV9j/zQfg57nDQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:57:38 2025 by rpki-client