This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json) Hash identifier: 530Oz0SPhDhzE5eCYCBmcLtTTBszGGIvU6O2XzM13Dk= Subject key identifier: BE:05:26:D9:58:9D:27:3C:4C:69:06:4F:A6:73:80:8B:C4:40:A3:1C Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63 Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63 Certificate serial: 019B3CEBD352C168DA6B20D1983E5BCFE5A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft Manifest number: 1060 Signing time: Sat 20 Dec 2025 18:00:46 +0000 Manifest this update: Sat 20 Dec 2025 18:00:46 +0000 Manifest next update: Sun 21 Dec 2025 18:00:46 +0000 Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: mZTkg+kTk01bAyWjZvELRlEryFWdFITPvvHVslTMTH4=) 2: H6uSFDtLoI4YQD04FkS4VSFpIhw.roa (hash: hv1JnxHOhWB0hv+54xUCZyY9gAEBPU8rdk2117x7KVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d3:52:c1:68:da:6b:20:d1:98:3e:5b:cf:e5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63 Validity Not Before: Dec 20 18:00:46 2025 GMT Not After : Dec 21 18:00:46 2025 GMT Subject: CN=be0526d9589d273c4c69064fa673808bc440a31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:9f:97:aa:04:a2:05:e5:1e:02:b4:10:05: be:6f:5a:15:f3:49:90:ee:5c:a4:d4:b8:81:50:d4: a3:eb:cc:00:e6:62:ec:58:96:cb:48:60:30:50:e0: ce:0d:d1:c5:4b:c6:1b:41:b5:dc:09:5f:4b:ad:bc: 62:db:1e:d0:67:70:0b:bf:12:39:b2:7b:f8:be:9c: 81:5f:fe:61:f7:bf:8b:89:3f:99:6f:64:6a:2d:04: 06:2a:d9:76:92:38:54:d6:e5:8d:a7:f6:99:a9:e5: b3:2e:a7:e5:e0:a5:4f:4d:ba:b3:ba:a2:97:52:a2: 7a:b4:c4:11:b3:49:f6:2d:bc:e3:70:48:dc:f6:62: 04:3e:d9:6f:a0:fa:6a:f3:dc:1d:72:23:41:7b:ac: 7f:5d:24:02:2c:0f:e4:30:05:54:b6:fb:8d:11:ef: c3:24:f0:11:e2:df:7a:ec:a2:b6:50:e1:2b:18:4b: 5f:f7:c9:b6:40:f2:72:81:fe:d7:51:b9:58:cf:3d: 45:db:40:e2:de:30:94:e1:ce:63:db:9a:74:a8:95: ef:9f:20:ee:9c:8f:16:e3:23:cb:11:ae:e6:9e:e1: a2:92:3e:5d:f2:7c:53:d0:0e:ac:ca:82:c2:3e:16: 28:e4:f1:42:a8:62:bf:f9:1f:86:a8:94:db:e4:f1: 34:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:05:26:D9:58:9D:27:3C:4C:69:06:4F:A6:73:80:8B:C4:40:A3:1C X509v3 Authority Key Identifier: keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:33:24:ad:9f:19:cd:f3:be:78:1e:17:e4:fb:8e:4a:46:e0: 6d:6c:2f:d5:2d:03:7f:08:18:58:57:d9:df:fd:ce:a1:b4:a5: 9d:d8:2a:d3:bf:28:4d:3c:64:70:3d:50:fc:f1:89:7b:91:54: 3f:ec:0a:d9:f6:0c:90:43:84:57:27:81:fa:75:57:dd:6e:99: dc:66:95:59:bd:e1:54:5d:1d:34:d9:68:5a:10:b0:1c:64:12: a6:37:97:b8:e5:99:31:4b:77:57:db:4d:69:cc:e5:f7:30:44: 2b:5e:a8:85:1c:80:b4:6e:db:f2:51:52:ff:6a:1f:9b:8e:9f: c2:69:49:4b:94:54:5b:a1:f6:3e:4d:fb:aa:64:e7:6a:3f:03: 29:dc:e2:59:d3:85:53:13:b1:8b:f9:37:33:6d:ac:5d:57:b0: 23:76:e6:46:e4:b4:01:90:e0:2e:32:7c:3a:9b:c1:88:6d:9c: 2c:8a:a1:59:29:b4:fd:25:de:47:a5:47:7d:bd:5b:7d:07:b6: 3a:3a:eb:b2:b4:0d:f3:ff:be:f4:c5:b5:9e:b0:d7:af:ae:02: 1b:94:15:34:e2:7c:05:37:35:b7:c6:96:a7:d7:07:48:d4:d6: 96:10:22:8d:93:57:90:c1:dc:4e:b2:1c:5c:b7:4e:45:4f:21: 52:6c:a4:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869NSwWjaayDRmD5bz+WoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMDU0MmE2MTM1NTI0MTQyMTk0Y2FhNzA4ZTdkYjJjY2E2 YjRlNjMwHhcNMjUxMjIwMTgwMDQ2WhcNMjUxMjIxMTgwMDQ2WjAzMTEwLwYDVQQD EyhiZTA1MjZkOTU4OWQyNzNjNGM2OTA2NGZhNjczODA4YmM0NDBhMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1Sfl6oEogXlHgK0EAW+b1oV80mQ 7lyk1LiBUNSj68wA5mLsWJbLSGAwUODODdHFS8YbQbXcCV9Lrbxi2x7QZ3ALvxI5 snv4vpyBX/5h97+LiT+Zb2RqLQQGKtl2kjhU1uWNp/aZqeWzLqfl4KVPTbqzuqKX UqJ6tMQRs0n2LbzjcEjc9mIEPtlvoPpq89wdciNBe6x/XSQCLA/kMAVUtvuNEe/D JPAR4t967KK2UOErGEtf98m2QPJygf7XUblYzz1F20Di3jCU4c5j25p0qJXvnyDu nI8W4yPLEa7mnuGikj5d8nxT0A6syoLCPhYo5PFCqGK/+R+GqJTb5PE02wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4FJtlYnSc8TGkGT6ZzgIvEQKMcMB8GA1UdIwQY MBaAFNIFQqYTVSQUIZTKpwjn2yzKa05jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUt YWI0MmI0YzkzZWQ5LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUtYWI0MmI0YzkzZWQ5 LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzMkrZ8Z zfO+eB4X5PuOSkbgbWwv1S0DfwgYWFfZ3/3OobSlndgq078oTTxkcD1Q/PGJe5FU P+wK2fYMkEOEVyeB+nVX3W6Z3GaVWb3hVF0dNNloWhCwHGQSpjeXuOWZMUt3V9tN aczl9zBEK16ohRyAtG7b8lFS/2ofm46fwmlJS5RUW6H2Pk37qmTnaj8DKdziWdOF UxOxi/k3M22sXVewI3bmRuS0AZDgLjJ8OpvBiG2cLIqhWSm0/SXeR6VHfb1bfQe2 OjrrsrQN8/++9MW1nrDXr64CG5QVNOJ8BTc1t8aWp9cHSNTWlhAijZNXkMHcTrIc XLdORU8hUmyktA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:01:26 2025 by rpki-client