This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json) Hash identifier: DXTGXr4zKfMwcfrS3/0kJqwQU6NLtFymIuzIXEbtelQ= Subject key identifier: 07:D9:44:5C:3E:1F:5F:26:1C:42:0F:F2:67:71:48:62:35:15:33:A5 Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df Certificate serial: 019B736CBA7AC96B99E68844CC3036BB5A6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft Manifest number: 1462 Signing time: Wed 31 Dec 2025 08:01:04 +0000 Manifest this update: Wed 31 Dec 2025 08:01:04 +0000 Manifest next update: Thu 01 Jan 2026 08:01:04 +0000 Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: ZeljNJBudRWIjMnRrtLYl7T+aTsJbEHuGHnoesdytgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:6c:ba:7a:c9:6b:99:e6:88:44:cc:30:36:bb:5a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df Validity Not Before: Dec 31 08:01:04 2025 GMT Not After : Jan 1 08:01:04 2026 GMT Subject: CN=07d9445c3e1f5f261c420ff267714862351533a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:e3:f3:3d:bb:f7:ec:b3:48:23:f5:b6:51: 4b:14:98:09:53:51:78:c7:f2:a0:80:7f:d3:2c:7f: 27:6d:0c:29:3d:22:a5:fd:09:4d:b7:ed:a3:7d:3e: 41:c4:8d:31:ed:e3:37:3d:ac:7e:81:ef:65:47:54: ab:26:17:ae:1e:13:1e:75:f7:cd:11:2a:8c:ed:f9: 1a:64:1c:29:9a:64:4c:63:25:ae:da:66:dd:44:ae: 33:72:b6:8e:2a:6c:5b:6f:48:bc:0c:67:72:9c:04: 7e:95:f8:bc:08:98:d5:c7:48:86:9e:e8:66:d1:9d: 0c:83:e3:4f:55:dd:d9:97:fa:08:ea:9a:47:a0:ec: 07:c7:46:6d:88:ef:a6:21:f5:25:1c:a1:2e:78:03: e7:09:64:f1:4e:19:d6:7d:51:ff:74:e0:1a:a0:9c: c1:97:85:5d:c0:da:34:25:26:5b:e7:20:71:a7:98: 92:90:8a:0d:15:bb:43:5f:cc:9b:1a:50:63:fc:fc: c9:f5:46:7a:16:3e:91:9e:d5:9a:99:26:52:53:f8: 97:41:45:f1:62:5d:da:3d:b5:eb:10:e9:c1:9b:4f: bb:ea:47:ce:07:1f:45:a6:db:4a:53:34:57:da:e5: 99:b5:e3:47:71:79:bd:21:f3:50:82:11:d4:e5:0b: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D9:44:5C:3E:1F:5F:26:1C:42:0F:F2:67:71:48:62:35:15:33:A5 X509v3 Authority Key Identifier: keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ef:f4:f9:13:d6:2f:8a:3f:15:55:93:cb:07:61:c1:3e:c6: f1:d2:6f:cd:7c:53:23:f0:8f:76:13:fd:d3:d0:79:42:67:aa: 8c:06:5a:db:e2:be:f3:6c:5b:6b:7f:99:1c:7b:7c:09:11:7c: e7:19:ae:b4:34:75:27:45:b5:20:c6:10:35:42:4c:35:c8:c8: 0c:0c:c9:97:a5:d6:af:5a:13:44:1d:88:12:d5:99:7b:94:98: d6:71:ef:a9:a2:c1:ae:c5:16:61:07:c1:d8:9d:f7:0e:de:64: 02:38:98:a2:e9:f2:10:86:07:8e:36:14:ac:ba:43:59:f0:75: a6:56:ff:eb:9f:e0:f6:c6:d3:33:b6:f8:6a:be:51:07:12:3d: 0c:ee:92:c7:af:39:1c:08:30:65:5a:c3:4d:d7:a8:eb:84:09: 6c:5b:4c:0d:98:f2:bd:1e:92:e9:7e:da:60:d4:20:51:a2:ae: ca:fb:33:a4:16:71:17:a5:ac:05:2f:d4:65:87:47:ac:18:b8: 48:90:d4:83:5d:0b:61:2d:9d:d3:06:53:91:6a:ea:eb:cb:bc: 7c:8f:ea:b6:33:99:d7:71:93:70:05:51:d9:06:9b:fd:9d:9f: ed:61:bd:e9:08:8b:c9:d6:cf:58:c7:8d:ec:fe:42:2c:97:6c: 0f:ba:01:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzbLp6yWuZ5ohEzDA2u1pvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNmJkMGU4Y2I1NDk4YzdmOWFjYTFiYmZjZjlkYjM3NzU2 NWU4ZGYwHhcNMjUxMjMxMDgwMTA0WhcNMjYwMTAxMDgwMTA0WjAzMTEwLwYDVQQD EygwN2Q5NDQ1YzNlMWY1ZjI2MWM0MjBmZjI2NzcxNDg2MjM1MTUzM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Tj8z279+yzSCP1tlFLFJgJU1F4 x/KggH/TLH8nbQwpPSKl/QlNt+2jfT5BxI0x7eM3Pax+ge9lR1SrJheuHhMedffN ESqM7fkaZBwpmmRMYyWu2mbdRK4zcraOKmxbb0i8DGdynAR+lfi8CJjVx0iGnuhm 0Z0Mg+NPVd3Zl/oI6ppHoOwHx0ZtiO+mIfUlHKEueAPnCWTxThnWfVH/dOAaoJzB l4VdwNo0JSZb5yBxp5iSkIoNFbtDX8ybGlBj/PzJ9UZ6Fj6RntWamSZSU/iXQUXx Yl3aPbXrEOnBm0+76kfOBx9FpttKUzRX2uWZteNHcXm9IfNQghHU5QvWoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfZRFw+H18mHEIP8mdxSGI1FTOlMB8GA1UdIwQY MBaAFNFr0OjLVJjH+ayhu/z52zd1ZejfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFd2UTZNdFVtTWY1cktHN19QbmJOM1ZsNk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iNWUyY2QtNWZiMC00OWQ1LWJjNjUt ODlmMmRmODBjMzQ1LzEvMFd2UTZNdFVtTWY1cktHN19QbmJOM1ZsNk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9iNWUyY2QtNWZiMC00OWQ1LWJjNjUtODlmMmRmODBjMzQ1 LzEvMFd2UTZNdFVtTWY1cktHN19QbmJOM1ZsNk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXO/0+RPW L4o/FVWTywdhwT7G8dJvzXxTI/CPdhP909B5QmeqjAZa2+K+82xba3+ZHHt8CRF8 5xmutDR1J0W1IMYQNUJMNcjIDAzJl6XWr1oTRB2IEtWZe5SY1nHvqaLBrsUWYQfB 2J33Dt5kAjiYounyEIYHjjYUrLpDWfB1plb/65/g9sbTM7b4ar5RBxI9DO6Sx685 HAgwZVrDTdeo64QJbFtMDZjyvR6S6X7aYNQgUaKuyvszpBZxF6WsBS/UZYdHrBi4 SJDUg10LYS2d0wZTkWrq68u8fI/qtjOZ13GTcAVR2Qab/Z2f7WG96QiLydbPWMeN 7P5CLJdsD7oBTQ== -----END CERTIFICATE-----Generated at Wed Dec 31 10:26:40 2025 by rpki-client