This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json) Hash identifier: fCN8wljiQf/EcOE3gzySopx0gR6DBMigbMHUneMpRIM= Subject key identifier: D4:D9:0B:DC:4B:6C:12:F3:24:64:66:A6:DB:4C:E3:70:D9:FE:28:DC Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7 Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7 Certificate serial: 019B3A8FD56EE667F76230D79580F862ED21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft Manifest number: 061D Signing time: Sat 20 Dec 2025 07:01:03 +0000 Manifest this update: Sat 20 Dec 2025 07:01:03 +0000 Manifest next update: Sun 21 Dec 2025 07:01:03 +0000 Files and hashes: 1: 00FQiMdjUQle4zFwKcr67i8rD5o.roa (hash: vAwK94aBbQ1WLXSLlow/JuiTreizX+JgqV5lHzwa2Js=) 2: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: 3T6nYw5oU3m2DOfUzfMOjEglSvqO4D/HWF6u27J8NYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:d5:6e:e6:67:f7:62:30:d7:95:80:f8:62:ed:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7 Validity Not Before: Dec 20 07:01:03 2025 GMT Not After : Dec 21 07:01:03 2025 GMT Subject: CN=d4d90bdc4b6c12f3246466a6db4ce370d9fe28dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:85:93:77:5e:76:0c:62:bf:03:b8:8e:83: 3d:d4:d2:92:bf:f2:ca:e7:1e:a2:7d:ad:4f:8b:f9: 9c:b1:83:64:43:5e:84:50:cb:7c:e5:92:cb:e3:0b: 2f:ac:92:11:d4:8a:47:70:9d:1f:ea:fa:dc:72:7d: 50:fe:49:31:ba:59:55:e7:e8:bf:16:70:45:5a:34: 44:50:52:92:ae:40:b6:37:ed:2a:9f:20:5b:0d:b7: 7f:89:44:a1:7a:43:15:d3:98:3e:3d:c9:76:8c:de: 0d:a1:41:90:3b:4c:67:12:12:c3:53:77:fa:4a:de: 4a:18:92:d6:c1:9d:16:10:0a:16:bd:ac:8c:70:51: 89:ed:23:1d:f7:92:fa:65:75:d7:67:55:0a:13:03: 3d:86:ce:da:2b:21:36:ca:23:a0:97:aa:32:fb:43: 4b:84:c9:12:e1:29:29:f6:07:44:58:c3:4c:fc:df: 0a:52:d5:7b:25:1f:0a:26:9e:c4:46:6d:3c:d4:0a: 5a:80:be:58:6c:9e:43:78:4a:b7:90:8b:2f:da:f9: 55:9b:43:98:03:d6:0d:c8:20:ae:53:8e:ac:aa:75: 33:c2:ef:96:03:ce:50:53:1a:1b:05:48:9b:11:67: 6e:17:db:aa:63:d9:4b:69:f6:d3:13:a0:3b:75:8b: 96:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D9:0B:DC:4B:6C:12:F3:24:64:66:A6:DB:4C:E3:70:D9:FE:28:DC X509v3 Authority Key Identifier: keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:86:f5:e8:f5:70:74:19:10:8a:5f:8e:c8:86:4e:91:76:d6: d1:d7:d2:28:89:dc:ea:34:f4:1b:96:5f:28:b5:d3:04:df:ce: 1b:40:a6:c4:b8:7d:3a:15:70:49:12:06:ff:e6:c3:7e:61:1d: b1:31:c8:af:a4:68:25:cc:10:d7:6e:6b:8b:df:69:cd:e5:dc: f4:b8:a5:f3:50:5f:c8:14:83:d0:e3:a3:6f:25:c6:62:1c:a6: bc:e1:69:bc:50:11:ec:b1:15:8b:8c:68:d5:92:5b:bc:c5:d0: ff:2a:08:b6:c3:e8:40:2e:24:e4:44:8e:1d:12:89:31:67:1f: f9:ba:bc:53:9e:e8:e5:83:23:ff:ca:be:6f:b6:b3:25:ae:8c: 7f:a5:82:d3:5a:5d:91:26:44:ea:59:23:81:18:08:e7:c6:1d: 2c:dc:d2:6a:cd:96:1c:d8:1c:fc:ee:79:ff:a2:cf:d1:58:59: 78:99:c5:20:0e:50:b4:fd:a3:59:39:d4:8f:6b:e4:55:89:30: e1:52:e4:e5:d1:9f:85:60:d2:a7:a3:2a:d9:2b:c6:53:24:41: 85:3b:c5:a3:b3:49:f5:6d:7b:04:48:a0:85:d2:c8:68:c7:a2: 39:64:bd:58:6e:36:16:6d:34:ac:c4:10:8f:3a:47:13:cc:35: c8:cc:65:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j9Vu5mf3YjDXlYD4Yu0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzcwZjFmMzNjNTgxZGI3OGExNDliYzg2ZDczOWNkYzdj ZTI2YTcwHhcNMjUxMjIwMDcwMTAzWhcNMjUxMjIxMDcwMTAzWjAzMTEwLwYDVQQD EyhkNGQ5MGJkYzRiNmMxMmYzMjQ2NDY2YTZkYjRjZTM3MGQ5ZmUyOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA096Fk3dedgxivwO4joM91NKSv/LK 5x6ifa1Pi/mcsYNkQ16EUMt85ZLL4wsvrJIR1IpHcJ0f6vrccn1Q/kkxullV5+i/ FnBFWjREUFKSrkC2N+0qnyBbDbd/iUShekMV05g+Pcl2jN4NoUGQO0xnEhLDU3f6 St5KGJLWwZ0WEAoWvayMcFGJ7SMd95L6ZXXXZ1UKEwM9hs7aKyE2yiOgl6oy+0NL hMkS4Skp9gdEWMNM/N8KUtV7JR8KJp7ERm081ApagL5YbJ5DeEq3kIsv2vlVm0OY A9YNyCCuU46sqnUzwu+WA85QUxobBUibEWduF9uqY9lLafbTE6A7dYuWpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTZC9xLbBLzJGRmpttM43DZ/ijcMB8GA1UdIwQY MBaAFNHHDx8zxYHbeKFJvIbXOc3HzianMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kM2QyNTctNmU0Yy00ZDYwLTljOTMt ZGZjYWUzNmEzZWY4LzEvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9kM2QyNTctNmU0Yy00ZDYwLTljOTMtZGZjYWUzNmEzZWY4 LzEvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYb16PVw dBkQil+OyIZOkXbW0dfSKInc6jT0G5ZfKLXTBN/OG0CmxLh9OhVwSRIG/+bDfmEd sTHIr6RoJcwQ125ri99pzeXc9Lil81BfyBSD0OOjbyXGYhymvOFpvFAR7LEVi4xo 1ZJbvMXQ/yoItsPoQC4k5ESOHRKJMWcf+bq8U57o5YMj/8q+b7azJa6Mf6WC01pd kSZE6lkjgRgI58YdLNzSas2WHNgc/O55/6LP0VhZeJnFIA5QtP2jWTnUj2vkVYkw 4VLk5dGfhWDSp6Mq2SvGUyRBhTvFo7NJ9W17BEighdLIaMeiOWS9WG42Fm00rMQQ jzpHE8w1yMxldw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:43:13 2025 by rpki-client