This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft File: 0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json) Hash identifier: LxchyytEZ6xKZ0LaQ5FfVO7TqWM4D+CBlDNfO/aX9x4= Subject key identifier: 52:76:F7:EB:88:8B:8E:8E:DA:DE:EB:69:A3:2A:F3:C4:20:1B:9E:CD Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77 Certificate issuer: /CN=d0cbf6ba097a76b610c856035bc18de797c2a677 Certificate serial: 019B35A0277DF0867A37D91D61EC088597C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft Manifest number: 096D Signing time: Fri 19 Dec 2025 08:00:46 +0000 Manifest this update: Fri 19 Dec 2025 08:00:46 +0000 Manifest next update: Sat 20 Dec 2025 08:00:46 +0000 Files and hashes: 1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: rdeXuayu6zDGouQWaNgL0Z+SJOa/sJdOnBSuPiDv/Kc=) 2: kAhsl83sRH6W4s8jtU8YJb8qwhQ.roa (hash: +uG81eC9noWL3YdfTYPyy1nu/3IN2ObXCeDG/BCSpTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:27:7d:f0:86:7a:37:d9:1d:61:ec:08:85:97:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677 Validity Not Before: Dec 19 08:00:46 2025 GMT Not After : Dec 20 08:00:46 2025 GMT Subject: CN=5276f7eb888b8e8edadeeb69a32af3c4201b9ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:a3:88:01:e4:6c:b5:cb:4e:e4:00:82:59: 46:34:7c:ed:3b:ed:f9:0f:78:22:f1:fd:a2:b4:7f: 25:c7:06:ef:e1:3a:a9:1a:6d:96:43:68:80:70:b7: c6:76:49:17:5b:21:2e:56:0c:64:7d:85:5f:c3:aa: a5:82:e7:8d:31:cb:bf:ac:9f:cf:f4:72:7b:49:be: 71:cf:5b:c6:8f:b4:97:1d:36:c0:27:e5:6d:88:0f: 34:71:cc:69:7c:b9:a6:ee:55:70:a0:1b:00:55:9a: 77:7c:b4:d9:fc:1e:94:c4:36:74:3a:8e:80:d8:59: f2:a8:58:3a:2a:cf:47:2c:72:66:a3:9d:d5:36:51: 6c:57:07:a0:d0:9d:a5:99:50:6a:17:b7:d4:ab:87: 27:1a:95:2b:78:09:fa:bb:b4:16:05:b5:00:8a:38: af:75:c0:1e:1b:75:cd:47:27:5d:b3:bd:14:ec:61: a4:dc:d9:dc:7a:08:ad:64:34:5c:fd:86:a2:cc:e8: 49:48:6d:ab:e1:87:aa:4e:ed:4d:0a:82:cf:fd:5f: 83:27:18:8d:a9:29:b7:71:d2:83:20:db:f3:5d:23: 6c:fa:7d:f2:6f:27:b7:44:3c:8a:90:d3:24:11:85: 48:02:b9:80:65:2c:2f:97:25:f8:20:66:63:b6:22: 0b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:76:F7:EB:88:8B:8E:8E:DA:DE:EB:69:A3:2A:F3:C4:20:1B:9E:CD X509v3 Authority Key Identifier: keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:aa:3b:4f:33:1f:9f:c7:3b:96:64:34:39:42:01:52:97:34: 25:25:cf:a4:5a:89:f3:61:4b:da:5a:82:ec:04:f8:0c:41:7c: 86:9e:ef:a6:fc:c1:db:f3:84:64:ac:f9:39:f3:3c:89:ff:53: 6d:73:6c:9f:7f:51:64:7e:5f:bd:a7:70:70:38:83:b3:e1:d8: 1d:50:85:94:a9:cd:7c:26:9b:25:72:17:06:3c:51:99:d9:6a: 49:b0:fb:6e:e5:b7:b6:b2:ba:00:f3:8a:62:f9:1c:b7:65:9e: 0c:48:de:e1:06:c1:2a:45:db:9e:50:b3:00:df:c2:c0:29:ef: 5b:f7:7c:26:73:40:52:77:ef:4e:68:a9:d5:c4:34:a3:7f:b3: 87:a9:ea:db:fc:3a:d7:d3:5c:23:aa:1a:75:08:36:cb:b4:87: 9a:6d:6c:18:59:d4:a2:82:9f:49:dc:c3:54:11:ee:90:71:f5: cd:cf:ae:5c:bd:15:b2:a5:24:f4:75:43:ed:81:31:10:af:67: f2:51:15:53:2d:16:df:f2:c2:60:23:b3:9e:9d:35:c9:67:34: 17:42:44:14:00:d0:33:a5:36:c9:17:32:a3:5d:9c:7f:bb:13: c4:54:f9:1f:e2:fd:fa:af:19:4f:2d:21:80:d5:70:ed:f1:c1: 33:ce:fd:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oCd98IZ6N9kdYewIhZfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwY2JmNmJhMDk3YTc2YjYxMGM4NTYwMzViYzE4ZGU3OTdj MmE2NzcwHhcNMjUxMjE5MDgwMDQ2WhcNMjUxMjIwMDgwMDQ2WjAzMTEwLwYDVQQD Eyg1Mjc2ZjdlYjg4OGI4ZThlZGFkZWViNjlhMzJhZjNjNDIwMWI5ZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwySjiAHkbLXLTuQAgllGNHztO+35 D3gi8f2itH8lxwbv4TqpGm2WQ2iAcLfGdkkXWyEuVgxkfYVfw6qlgueNMcu/rJ/P 9HJ7Sb5xz1vGj7SXHTbAJ+VtiA80ccxpfLmm7lVwoBsAVZp3fLTZ/B6UxDZ0Oo6A 2FnyqFg6Ks9HLHJmo53VNlFsVweg0J2lmVBqF7fUq4cnGpUreAn6u7QWBbUAijiv dcAeG3XNRydds70U7GGk3NncegitZDRc/YaizOhJSG2r4YeqTu1NCoLP/V+DJxiN qSm3cdKDINvzXSNs+n3ybye3RDyKkNMkEYVIArmAZSwvlyX4IGZjtiILxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJ29+uIi46O2t7raaMq88QgG57NMB8GA1UdIwQY MBaAFNDL9roJena2EMhWA1vBjeeXwqZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYt ZDY2OGM1M2Y2NjEyLzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYtZDY2OGM1M2Y2NjEy LzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKo7TzMf n8c7lmQ0OUIBUpc0JSXPpFqJ82FL2lqC7AT4DEF8hp7vpvzB2/OEZKz5OfM8if9T bXNsn39RZH5fvadwcDiDs+HYHVCFlKnNfCabJXIXBjxRmdlqSbD7buW3trK6APOK Yvkct2WeDEje4QbBKkXbnlCzAN/CwCnvW/d8JnNAUnfvTmip1cQ0o3+zh6nq2/w6 19NcI6oadQg2y7SHmm1sGFnUooKfSdzDVBHukHH1zc+uXL0VsqUk9HVD7YExEK9n 8lEVUy0W3/LCYCOznp01yWc0F0JEFADQM6U2yRcyo12cf7sTxFT5H+L9+q8ZTy0h gNVw7fHBM879vQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:00:11 2025 by rpki-client