This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json) Hash identifier: s1ZyVmvD4NKU24S8BMglKXq1mqlZMz6OO2JBs759WLw= Subject key identifier: 63:E9:9E:99:F2:41:39:B9:1A:81:B1:DC:8C:21:F4:23:D0:63:D3:19 Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58 Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58 Certificate serial: 019B42B6F7BC3AC3164D9D71113C7F20ABD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft Manifest number: 1620 Signing time: Sun 21 Dec 2025 21:00:45 +0000 Manifest this update: Sun 21 Dec 2025 21:00:45 +0000 Manifest next update: Mon 22 Dec 2025 21:00:45 +0000 Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: KWgYVU0krcjMWw+z6rKW1A1ICIZ1Ai12h4v2Bg07I/8=) 2: mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (hash: omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:f7:bc:3a:c3:16:4d:9d:71:11:3c:7f:20:ab:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58 Validity Not Before: Dec 21 21:00:45 2025 GMT Not After : Dec 22 21:00:45 2025 GMT Subject: CN=63e99e99f24139b91a81b1dc8c21f423d063d319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:33:7e:e3:89:f2:1a:34:5b:33:ad:dc:00: 60:44:31:71:44:a8:31:07:66:0c:d2:22:45:61:1d: d2:1e:9d:8e:a9:a0:97:20:ad:90:a1:67:b5:34:d2: e1:a8:f0:21:44:ae:13:1c:9e:e3:ba:c1:61:bf:7e: 9d:ee:c7:01:1c:5c:0e:99:04:f6:00:ea:f1:b1:9f: a4:5b:f9:a9:67:18:2b:81:72:f1:dc:00:b7:b5:51: d5:09:c4:f7:fc:50:74:c5:f8:e3:05:63:b5:1b:bd: db:24:dc:a5:ba:20:a4:b7:e6:9e:91:f5:19:0d:05: d9:dc:0c:d5:9d:32:8d:e5:d1:6e:06:c2:12:79:0d: 0a:ae:6b:eb:af:9d:7b:6d:ad:88:3e:d8:c3:57:8f: 08:a9:33:6c:44:b8:2a:57:da:58:2f:80:04:85:c1: 82:fe:71:44:27:e7:d3:35:37:fa:53:fa:9c:f1:ad: a7:2d:68:b2:2e:06:da:e9:df:68:63:7f:80:4f:33: 61:9c:f2:90:af:fa:a0:fb:e1:17:c4:29:1d:ad:95: cc:4e:42:3a:14:82:1f:dd:6f:60:18:ac:62:85:bd: 92:e6:77:e5:67:bd:eb:87:19:05:e5:96:2f:96:fb: 06:b8:15:de:b9:0e:81:55:7e:2f:9c:0c:33:18:13: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E9:9E:99:F2:41:39:B9:1A:81:B1:DC:8C:21:F4:23:D0:63:D3:19 X509v3 Authority Key Identifier: keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ba:98:d4:e5:9c:71:69:d4:bd:5f:b7:c0:82:90:8c:1e:5a: 09:8c:ae:b8:d7:f6:2f:19:6f:98:e8:01:b1:b2:1c:7f:cd:3b: 76:fd:ab:f5:79:54:c5:eb:49:b9:f3:c4:24:83:1c:90:52:83: b8:98:a9:8b:ff:d8:73:d9:b1:32:fc:a0:d0:7e:21:1b:cd:84: d5:cd:e0:3c:bc:b7:c2:2b:99:c1:10:f5:22:fb:56:88:79:6e: d1:69:86:bc:d1:f6:fd:0a:b8:de:a2:fc:d3:8c:60:be:95:9a: e9:df:61:92:a8:c0:07:7e:41:f9:7c:f1:50:f9:38:10:ce:1f: 9f:6e:24:72:06:44:0c:71:75:ac:df:7e:a1:ce:45:e8:2d:95: 25:62:38:98:09:b3:b1:ad:e8:cc:37:d5:2f:51:54:1e:ed:71: 05:06:a1:cc:26:e3:52:68:f4:3f:15:8a:78:65:c2:d6:27:26: c1:5e:06:9b:66:15:85:53:a0:4e:01:8c:32:67:56:61:b5:cd: a3:c8:43:20:98:42:9f:5a:57:dc:43:12:61:19:14:7d:2f:a9: 4e:ce:0a:5d:60:bf:33:52:28:30:13:47:5c:0f:80:05:df:fc: df:f5:22:bd:48:d8:f4:c9:00:94:28:dc:0e:43:98:42:86:6e: 34:ef:9b:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtve8OsMWTZ1xETx/IKvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYmJjOTA1NTVkNmQwZDM0MzJiYWJiOTViNjBjZGVlZWE1 ODBmNTgwHhcNMjUxMjIxMjEwMDQ1WhcNMjUxMjIyMjEwMDQ1WjAzMTEwLwYDVQQD Eyg2M2U5OWU5OWYyNDEzOWI5MWE4MWIxZGM4YzIxZjQyM2QwNjNkMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2AzfuOJ8ho0WzOt3ABgRDFxRKgx B2YM0iJFYR3SHp2OqaCXIK2QoWe1NNLhqPAhRK4THJ7jusFhv36d7scBHFwOmQT2 AOrxsZ+kW/mpZxgrgXLx3AC3tVHVCcT3/FB0xfjjBWO1G73bJNyluiCkt+aekfUZ DQXZ3AzVnTKN5dFuBsISeQ0Krmvrr517ba2IPtjDV48IqTNsRLgqV9pYL4AEhcGC /nFEJ+fTNTf6U/qc8a2nLWiyLgba6d9oY3+ATzNhnPKQr/qg++EXxCkdrZXMTkI6 FIIf3W9gGKxihb2S5nflZ73rhxkF5ZYvlvsGuBXeuQ6BVX4vnAwzGBNyKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPpnpnyQTm5GoGx3Iwh9CPQY9MZMB8GA1UdIwQY MBaAFNK7yQVV1tDTQyuruVtgze7qWA9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82ZmZjZDItNWJmMS00MWUyLTg2YTgt N2JjMWU0ZjU2Yzg4LzEvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82ZmZjZDItNWJmMS00MWUyLTg2YTgtN2JjMWU0ZjU2Yzg4 LzEvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7qY1OWc cWnUvV+3wIKQjB5aCYyuuNf2LxlvmOgBsbIcf807dv2r9XlUxetJufPEJIMckFKD uJipi//Yc9mxMvyg0H4hG82E1c3gPLy3wiuZwRD1IvtWiHlu0WmGvNH2/Qq43qL8 04xgvpWa6d9hkqjAB35B+XzxUPk4EM4fn24kcgZEDHF1rN9+oc5F6C2VJWI4mAmz sa3ozDfVL1FUHu1xBQahzCbjUmj0PxWKeGXC1icmwV4Gm2YVhVOgTgGMMmdWYbXN o8hDIJhCn1pX3EMSYRkUfS+pTs4KXWC/M1IoMBNHXA+ABd/83/UivUjY9MkAlCjc DkOYQoZuNO+bmQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:00:27 2025 by rpki-client