This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json) Hash identifier: WqQU15QY9Lc2kgSGQ7O5t3JopW2GsdUMbPq847d+rOg= Subject key identifier: 00:AB:AD:95:82:6E:C5:48:C5:18:5E:0A:2D:23:F4:B6:87:2F:98:C2 Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0 Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0 Certificate serial: 019B30B0A01C3A7677D81D53A6EC05413E89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft Manifest number: 0AC7 Signing time: Thu 18 Dec 2025 09:00:40 +0000 Manifest this update: Thu 18 Dec 2025 09:00:40 +0000 Manifest next update: Fri 19 Dec 2025 09:00:40 +0000 Files and hashes: 1: 9h0IDYCPr58Ccxg81AcMZ_13oWo.roa (hash: l+FTuWjUD+EZ0mXchVkunlX52jPEdy8UaVQG+ZcxDvM=) 2: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: 9om69kUzLGS/vZimbQDlCGl9AoQZWqugKxc5BAQBqek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:b0:a0:1c:3a:76:77:d8:1d:53:a6:ec:05:41:3e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0 Validity Not Before: Dec 18 09:00:40 2025 GMT Not After : Dec 19 09:00:40 2025 GMT Subject: CN=00abad95826ec548c5185e0a2d23f4b6872f98c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:38:af:70:65:84:4e:54:2b:41:51:23:10: c1:c6:a0:6d:da:26:2b:6b:60:42:3d:c6:c5:01:1b: a3:70:24:b8:70:e2:c1:da:d6:18:f0:e9:af:f1:ba: ca:2a:14:20:cc:23:cb:36:f0:a6:00:ac:8c:18:50: 89:e5:bb:7e:71:31:7e:23:ee:bb:3e:84:20:24:49: 70:03:bf:bc:30:ff:1a:36:25:74:df:52:30:f3:f5: 82:21:ef:94:e9:b7:e7:a3:16:1d:30:8d:84:11:05: 63:ce:36:33:f8:1f:c1:29:1c:15:81:3f:06:fd:fe: 00:48:4c:ed:d3:a6:3d:5b:06:55:f8:75:96:7f:8f: 56:2d:eb:f4:7b:38:e7:32:56:f9:d3:e7:c8:1a:2a: 02:d2:1f:7a:81:52:39:22:34:c4:ef:01:ed:71:a6: ab:21:c9:94:d6:9e:e2:ab:57:34:a2:2b:71:70:6f: 87:24:38:ae:16:c9:6f:c2:cd:ef:fb:5d:75:54:93: de:5b:79:8b:14:4a:a7:ad:c5:01:ed:0b:80:44:66: ef:bb:a3:e0:19:87:81:29:8e:3d:2a:c3:fd:26:cf: 85:d9:ee:41:bd:99:87:8a:7d:81:32:99:93:67:cc: c2:2c:21:29:56:e2:ea:83:78:4a:9a:b7:af:73:3d: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AB:AD:95:82:6E:C5:48:C5:18:5E:0A:2D:23:F4:B6:87:2F:98:C2 X509v3 Authority Key Identifier: keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:d9:38:82:b0:c8:a3:e6:1b:0c:f8:fa:5d:c4:18:c4:7e:04: 81:99:28:1f:3e:cf:93:18:73:e9:60:ed:a0:db:21:9a:47:58: b3:1d:9d:a5:66:c7:9b:70:33:44:ca:ef:1b:7b:4f:2a:09:b5: e9:1e:c6:eb:22:bf:e7:5c:78:67:e8:e7:6f:b2:d8:94:a1:0f: 18:ed:65:06:e9:74:e1:0e:e6:71:7e:29:63:95:6a:08:a7:63: 72:61:74:e3:00:a0:18:37:34:01:c1:bb:ee:22:d2:ed:2b:9e: 4d:66:6b:1b:f9:89:33:eb:b0:f4:b3:16:4f:08:4e:1f:55:57: e8:89:17:a0:95:4b:b3:92:5e:d8:89:30:97:b2:c1:eb:a1:5d: c4:d0:bd:e5:39:a9:ea:15:5b:c7:9e:dd:c2:39:f2:39:fa:e2: 02:4c:ae:79:21:1d:2f:25:57:7b:e5:b5:53:6b:07:57:5c:a6: 4c:33:24:e9:fe:3b:7d:e2:7f:ea:c2:4c:fb:19:0f:92:4e:67: 39:7e:a2:b3:bb:62:86:a9:1d:44:6f:27:ce:7a:9b:68:c0:de: 6e:88:07:7d:2a:23:84:24:ac:84:9e:30:a4:1e:af:72:10:73: 12:c6:1b:b6:c4:d6:ce:9d:15:53:60:45:9b:7d:4b:ba:b6:38: 8a:d5:20:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswsKAcOnZ32B1TpuwFQT6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNDUzYjQxMGQzNTg2YTYyMzdhOTUxZWVmM2IwM2Y0YzQ0 MTE4ZjAwHhcNMjUxMjE4MDkwMDQwWhcNMjUxMjE5MDkwMDQwWjAzMTEwLwYDVQQD EygwMGFiYWQ5NTgyNmVjNTQ4YzUxODVlMGEyZDIzZjRiNjg3MmY5OGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxs4r3BlhE5UK0FRIxDBxqBt2iYr a2BCPcbFARujcCS4cOLB2tYY8Omv8brKKhQgzCPLNvCmAKyMGFCJ5bt+cTF+I+67 PoQgJElwA7+8MP8aNiV031Iw8/WCIe+U6bfnoxYdMI2EEQVjzjYz+B/BKRwVgT8G /f4ASEzt06Y9WwZV+HWWf49WLev0ezjnMlb50+fIGioC0h96gVI5IjTE7wHtcaar IcmU1p7iq1c0oitxcG+HJDiuFslvws3v+111VJPeW3mLFEqnrcUB7QuARGbvu6Pg GYeBKY49KsP9Js+F2e5BvZmHin2BMpmTZ8zCLCEpVuLqg3hKmrevcz26JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACrrZWCbsVIxRheCi0j9LaHL5jCMB8GA1UdIwQY MBaAFAtFO0ENNYamI3qVHu87A/TEQRjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kNjNmOGUtNGIxYS00OGJmLTg3ZWIt MjlmYTQ3YjY4MDkzLzEvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kNjNmOGUtNGIxYS00OGJmLTg3ZWItMjlmYTQ3YjY4MDkz LzEvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9k4grDI o+YbDPj6XcQYxH4EgZkoHz7Pkxhz6WDtoNshmkdYsx2dpWbHm3AzRMrvG3tPKgm1 6R7G6yK/51x4Z+jnb7LYlKEPGO1lBul04Q7mcX4pY5VqCKdjcmF04wCgGDc0AcG7 7iLS7SueTWZrG/mJM+uw9LMWTwhOH1VX6IkXoJVLs5Je2Ikwl7LB66FdxNC95Tmp 6hVbx57dwjnyOfriAkyueSEdLyVXe+W1U2sHV1ymTDMk6f47feJ/6sJM+xkPkk5n OX6is7tihqkdRG8nznqbaMDebogHfSojhCSshJ4wpB6vchBzEsYbtsTWzp0VU2BF m31LurY4itUg7A== -----END CERTIFICATE-----Generated at Thu Dec 18 12:42:25 2025 by rpki-client