This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json) Hash identifier: vcofS0Jo86YZZ9ixxMnZP/N4E8OOZMjwSOLYqm4RFos= Subject key identifier: FB:2B:91:D6:EC:34:2B:74:96:82:AA:6D:DE:2D:3A:B4:63:80:90:BF Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3 Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3 Certificate serial: 019B4625C06AA2B8DFCC621C6CB773E39B2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft Manifest number: 0B64 Signing time: Mon 22 Dec 2025 13:00:37 +0000 Manifest this update: Mon 22 Dec 2025 13:00:37 +0000 Manifest next update: Tue 23 Dec 2025 13:00:37 +0000 Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: Pgdb2hn81Sui3USbuKyTnpLmB2nx0VF2UpQk7tfmzS4=) 2: p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa (hash: fmxxB5F2kwLUu456RKJpssuFKFMbicdIEkOy2yPaKKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:c0:6a:a2:b8:df:cc:62:1c:6c:b7:73:e3:9b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3 Validity Not Before: Dec 22 13:00:37 2025 GMT Not After : Dec 23 13:00:37 2025 GMT Subject: CN=fb2b91d6ec342b749682aa6dde2d3ab4638090bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:5f:ba:a6:dd:df:30:38:d8:5a:5e:21:57: 91:a0:01:77:a0:69:a9:5c:8c:87:66:17:34:b7:e9: 66:6c:a3:99:08:26:bb:cc:e9:6a:f6:5a:af:94:73: 8a:59:ec:ad:1c:a8:0d:3b:81:00:25:ae:e1:41:b6: c1:94:2b:0b:26:9c:fe:d9:87:4f:0b:42:58:5a:1b: 85:9e:14:87:f6:f8:df:12:21:23:c5:05:c2:20:ec: 3a:95:ca:dd:80:e4:aa:92:c7:1d:07:ef:72:67:e9: 44:78:d5:19:da:3d:87:63:83:d0:a0:56:3d:f4:98: f3:7e:90:5a:11:ce:de:ed:0a:8b:1d:c8:ab:4c:94: e7:58:6b:ee:f1:ba:81:d7:9c:e3:77:7e:74:41:0f: 09:4c:79:af:bb:1a:0a:e4:b4:50:71:3a:96:20:c6: 1e:14:f3:f1:d8:f8:04:a7:fb:f7:83:ff:05:1a:a0: 77:cb:ab:86:6e:9f:51:6d:f0:d3:7c:ff:fe:31:ba: 5c:c6:27:f5:fe:21:f7:42:3d:0f:86:2c:36:55:25: a5:a0:0b:e4:bf:c3:90:76:1a:25:ed:a7:9d:20:87: cb:ee:d5:61:8e:2a:43:09:e4:d6:d0:21:76:c2:0e: 3c:91:1e:f4:77:07:5c:c8:e0:e8:3b:7a:02:53:f4: a7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2B:91:D6:EC:34:2B:74:96:82:AA:6D:DE:2D:3A:B4:63:80:90:BF X509v3 Authority Key Identifier: keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2d:e4:7e:8c:ab:e3:84:d9:7f:38:c3:10:1e:2d:6b:30:41: 90:92:65:53:be:21:e4:0a:69:d7:88:98:76:ed:10:79:4a:cd: cb:9f:4d:83:0f:e0:25:6e:c1:a5:25:ae:04:20:61:fb:1c:76: 2b:0c:42:0d:02:fe:07:ea:00:de:f1:31:c2:af:c5:fa:2e:1c: 32:46:bf:29:3a:78:88:2c:45:0e:d4:a6:a0:5a:7d:e5:d4:c3: 81:31:64:18:ed:d2:d6:68:52:ab:f0:87:d5:b5:f9:75:8e:3d: 91:f4:f1:67:69:be:f8:1a:fd:68:29:90:b0:b3:9d:90:04:32: c8:58:38:c2:7c:33:00:a3:e4:94:da:94:09:8c:c1:39:26:10: 2a:6c:d3:2c:dc:9e:51:24:d3:77:d0:aa:9f:59:7d:80:fe:30: 72:ff:11:d5:3a:b5:2b:18:95:fd:66:a6:92:db:54:10:e3:13: 21:97:58:3c:2b:b1:03:1e:35:db:3c:73:06:54:cf:18:b9:85: ed:22:af:d4:be:18:51:5c:1a:0c:4f:f1:c1:9a:e0:23:a9:23: c2:f6:89:c0:7a:f5:ec:9a:44:6f:1f:99:da:4d:46:5f:d5:3a: 03:27:97:05:8c:57:de:5a:80:93:b7:93:fc:0c:ed:57:2a:96: 20:2a:18:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJcBqorjfzGIcbLdz45suMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzgxYzYyZDM5NDIwMzNkMGE3NDA0NGIwYzVhNGYxMTNl NDNkZjMwHhcNMjUxMjIyMTMwMDM3WhcNMjUxMjIzMTMwMDM3WjAzMTEwLwYDVQQD EyhmYjJiOTFkNmVjMzQyYjc0OTY4MmFhNmRkZTJkM2FiNDYzODA5MGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlVfuqbd3zA42FpeIVeRoAF3oGmp XIyHZhc0t+lmbKOZCCa7zOlq9lqvlHOKWeytHKgNO4EAJa7hQbbBlCsLJpz+2YdP C0JYWhuFnhSH9vjfEiEjxQXCIOw6lcrdgOSqkscdB+9yZ+lEeNUZ2j2HY4PQoFY9 9JjzfpBaEc7e7QqLHcirTJTnWGvu8bqB15zjd350QQ8JTHmvuxoK5LRQcTqWIMYe FPPx2PgEp/v3g/8FGqB3y6uGbp9RbfDTfP/+Mbpcxif1/iH3Qj0Phiw2VSWloAvk v8OQdhol7aedIIfL7tVhjipDCeTW0CF2wg48kR70dwdcyODoO3oCU/Sn7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsrkdbsNCt0loKqbd4tOrRjgJC/MB8GA1UdIwQY MBaAFNHIHGLTlCAz0KdARLDFpPET5D3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84N2Y5NzMtZWE2ZS00N2RmLWIxYjAt ZGYzMTM4YjQzNGM4LzEvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi84N2Y5NzMtZWE2ZS00N2RmLWIxYjAtZGYzMTM4YjQzNGM4 LzEvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHS3kfoyr 44TZfzjDEB4tazBBkJJlU74h5App14iYdu0QeUrNy59Ngw/gJW7BpSWuBCBh+xx2 KwxCDQL+B+oA3vExwq/F+i4cMka/KTp4iCxFDtSmoFp95dTDgTFkGO3S1mhSq/CH 1bX5dY49kfTxZ2m++Br9aCmQsLOdkAQyyFg4wnwzAKPklNqUCYzBOSYQKmzTLNye USTTd9Cqn1l9gP4wcv8R1Tq1KxiV/WamkttUEOMTIZdYPCuxAx412zxzBlTPGLmF 7SKv1L4YUVwaDE/xwZrgI6kjwvaJwHr17JpEbx+Z2k1GX9U6AyeXBYxX3lqAk7eT /AztVyqWICoYng== -----END CERTIFICATE-----Generated at Mon Dec 22 20:02:57 2025 by rpki-client