This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json) Hash identifier: B9oSxydl9D4fX/w5nNA/zC+s/ZYRLNqJBGfRTkvjANo= Subject key identifier: FC:93:BF:0F:95:67:8C:D0:A0:1B:B4:51:25:06:8B:B6:DC:E4:C0:52 Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Certificate serial: 019B3C7E1A51474E4CDE155BF0A6B3E024B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:00:55 +0000 Manifest this update: Sat 20 Dec 2025 16:00:55 +0000 Manifest next update: Sun 21 Dec 2025 16:00:55 +0000 Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: iZVolZQZhISSGfe2ICjN5k69ws+AnQFCHAGToLMt6/Y=) 2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:1a:51:47:4e:4c:de:15:5b:f0:a6:b3:e0:24:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Validity Not Before: Dec 20 16:00:55 2025 GMT Not After : Dec 21 16:00:55 2025 GMT Subject: CN=fc93bf0f95678cd0a01bb45125068bb6dce4c052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:11:26:c3:82:a2:08:5c:4a:c7:99:be:ec:a4: f9:03:b2:5b:ff:38:73:6d:f7:45:de:bf:f4:f5:e4: dd:73:57:34:48:12:6e:39:2b:76:11:22:a4:84:1c: 0a:f1:f5:72:8a:f1:b4:a4:24:8a:8a:95:8f:73:22: 4c:0e:ec:5f:ad:82:36:2b:ab:34:89:18:63:7a:fc: 96:5d:22:d2:a0:02:dd:7c:16:5f:31:a8:50:cc:25: 44:b3:f4:56:e2:f6:39:0e:29:45:c5:82:19:b9:b9: c9:10:ef:b2:a4:88:a5:97:ca:74:1b:28:2e:25:04: 57:c2:28:e6:5e:5d:9f:b7:06:08:3e:c2:d4:54:de: 8f:84:82:df:d6:2c:b4:95:c7:67:26:73:1f:9d:6b: 62:a9:36:47:27:fe:0f:34:44:f3:93:84:81:b1:5c: 9b:a4:74:16:39:15:e4:f2:b8:1b:6d:9b:12:1c:fd: 9b:96:5a:94:94:d6:1d:5b:ad:e2:56:61:1d:d3:bd: 71:fa:d5:d4:ca:17:94:8c:5b:0b:a7:ca:da:6b:80: 48:be:b4:a9:e4:8e:80:91:92:a7:32:28:81:1b:72: 66:4b:96:ef:ad:0f:56:e5:9a:42:01:5f:19:fe:d9: f7:a1:81:87:75:ad:74:24:f2:6b:46:eb:9d:aa:e0: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:93:BF:0F:95:67:8C:D0:A0:1B:B4:51:25:06:8B:B6:DC:E4:C0:52 X509v3 Authority Key Identifier: keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:26:d6:fb:46:d9:23:6f:da:47:1c:a5:a3:ec:c8:ff:96:8c: d5:08:1a:b8:e1:76:3f:f0:86:f0:ce:75:b2:32:c6:85:d5:6b: 5f:f7:4d:b3:21:1e:29:48:57:ea:94:fb:27:14:8c:14:48:7e: f4:f2:66:0c:e1:6b:a1:40:46:b4:8e:02:89:90:a9:21:9f:75: 61:05:4c:d1:7a:1b:b2:96:30:ae:ca:06:a9:13:79:5e:09:89: c0:8e:05:35:29:dc:c1:b4:ab:ef:44:cb:05:62:e5:04:f9:05: 73:3a:b4:a3:f3:e8:e2:f9:83:cf:5d:04:87:d8:92:54:0a:99: 1d:e1:02:b0:5a:61:9a:20:a7:14:ec:74:76:73:fc:39:7e:35: 31:a0:91:d5:e9:f9:92:de:99:cb:06:22:21:ee:fc:b4:dd:fd: 51:4f:98:62:97:ae:60:43:a0:aa:55:c9:2b:72:1a:10:2c:f1: d6:f7:78:93:68:c0:f7:4d:97:91:52:bb:79:29:41:85:a0:4f: 57:c2:17:3b:6a:73:08:81:a0:a6:4c:7c:9b:e1:66:37:55:f7: e0:84:9a:96:9d:fc:c9:59:09:7c:5f:cb:44:c8:bb:f8:09:3b: 99:33:d3:a5:56:00:f3:dd:4d:02:74:6e:fc:8a:bd:b5:41:e5: e1:fc:c4:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhpRR05M3hVb8Kaz4CS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMmU5NWM0NTE5ZGU5MjA4ZTNkMjIzMzJhYWJlYzZiMWEy ZWE3NTYwHhcNMjUxMjIwMTYwMDU1WhcNMjUxMjIxMTYwMDU1WjAzMTEwLwYDVQQD EyhmYzkzYmYwZjk1Njc4Y2QwYTAxYmI0NTEyNTA2OGJiNmRjZTRjMDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xEmw4KiCFxKx5m+7KT5A7Jb/zhz bfdF3r/09eTdc1c0SBJuOSt2ESKkhBwK8fVyivG0pCSKipWPcyJMDuxfrYI2K6s0 iRhjevyWXSLSoALdfBZfMahQzCVEs/RW4vY5DilFxYIZubnJEO+ypIill8p0Gygu JQRXwijmXl2ftwYIPsLUVN6PhILf1iy0lcdnJnMfnWtiqTZHJ/4PNETzk4SBsVyb pHQWORXk8rgbbZsSHP2bllqUlNYdW63iVmEd071x+tXUyheUjFsLp8raa4BIvrSp 5I6AkZKnMiiBG3JmS5bvrQ9W5ZpCAV8Z/tn3oYGHda10JPJrRuudquCWqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyTvw+VZ4zQoBu0USUGi7bc5MBSMB8GA1UdIwQY MBaAFNIulcRRnekgjj0iMyqr7GsaLqdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQt ZjJlNTRkZGVhM2IzLzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQtZjJlNTRkZGVhM2Iz LzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACybW+0bZ I2/aRxylo+zI/5aM1QgauOF2P/CG8M51sjLGhdVrX/dNsyEeKUhX6pT7JxSMFEh+ 9PJmDOFroUBGtI4CiZCpIZ91YQVM0XobspYwrsoGqRN5XgmJwI4FNSncwbSr70TL BWLlBPkFczq0o/Po4vmDz10Eh9iSVAqZHeECsFphmiCnFOx0dnP8OX41MaCR1en5 kt6ZywYiIe78tN39UU+YYpeuYEOgqlXJK3IaECzx1vd4k2jA902XkVK7eSlBhaBP V8IXO2pzCIGgpkx8m+FmN1X34ISalp38yVkJfF/LRMi7+Ak7mTPTpVYA891NAnRu /Iq9tUHl4fzE/w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:48:08 2025 by rpki-client