This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json) Hash identifier: AhkQ/Pyiiuv84mPCLmhtM8aE4obQ949rFXOTy/3re1k= Subject key identifier: 33:99:60:2E:35:55:72:F9:E4:D6:82:AE:77:E5:21:29:07:A5:71:11 Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f Certificate serial: 019B3946AA9359DCD4A6DAB88D485E5A75E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 01:01:31 +0000 Manifest this update: Sat 20 Dec 2025 01:01:31 +0000 Manifest next update: Sun 21 Dec 2025 01:01:31 +0000 Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: puJ3RDWzoj01YLHhNP+6A5UGWhy86VQQHNTZ3Oqy7DE=) 2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:aa:93:59:dc:d4:a6:da:b8:8d:48:5e:5a:75:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f Validity Not Before: Dec 20 01:01:31 2025 GMT Not After : Dec 21 01:01:31 2025 GMT Subject: CN=3399602e355572f9e4d682ae77e5212907a57111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:80:10:87:85:df:8e:cf:4b:91:1e:d3:cd:3f: f4:07:78:ff:c4:a2:4e:b6:59:51:8f:94:da:79:97: b5:9e:82:a9:01:7d:39:e3:75:df:67:83:52:2c:28: e0:54:a0:f3:3f:7e:85:6c:ee:8e:b8:ad:6b:68:05: 76:d8:c9:fd:17:1b:34:c2:84:a1:1c:89:db:80:c9: d1:ab:3c:4c:55:78:ab:9f:45:25:d7:21:c3:f5:68: c6:99:da:9c:48:78:b8:b4:82:2d:72:75:df:00:6d: ac:a6:f3:e9:d6:a1:3f:b7:e7:ad:b3:32:32:83:15: 73:bb:02:6f:87:26:69:74:57:44:28:57:d3:bd:2a: 14:1c:f2:e1:f4:66:41:c9:d5:99:f8:9e:b9:c1:d3: 71:9d:34:02:24:79:ad:7e:c0:f1:91:64:35:c2:05: 6e:ef:13:fc:f8:54:50:21:bf:75:24:34:bc:99:0a: a9:bd:89:cd:f4:8d:7c:1c:bb:ee:94:7c:dd:c3:c9: 0d:f3:79:c3:37:59:09:12:b1:ac:99:65:6f:24:11: fa:8c:ba:7d:f4:34:9c:0b:4e:e6:d8:72:5f:af:90: 1c:b8:e9:88:b2:12:5d:84:14:16:c0:d9:fe:84:79: a3:7e:5c:d4:6f:7b:cb:65:51:3f:bf:d6:ee:d4:47: c1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:99:60:2E:35:55:72:F9:E4:D6:82:AE:77:E5:21:29:07:A5:71:11 X509v3 Authority Key Identifier: keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:24:b0:0a:4a:b1:fe:68:fa:9e:a1:f0:3e:b4:a2:b0:fe:41: a5:d3:ed:f8:ea:d9:89:10:4f:24:db:12:c2:4a:da:e4:9f:1c: 41:3e:be:aa:f0:2d:62:95:4a:d1:d1:98:22:e3:ba:6f:f8:c8: 5d:27:23:63:2a:db:94:d2:5d:bf:0a:31:24:f5:a8:68:40:5e: 46:17:da:5b:6c:bc:95:24:01:5f:17:84:a4:8c:23:bb:56:c2: 1f:6e:61:ba:8b:7f:ce:3a:54:51:ca:92:46:25:52:4a:0d:99: 7f:be:f4:0f:71:f8:27:de:db:aa:ed:d2:f0:31:09:48:b8:d8: 3a:25:14:4e:99:88:ff:e1:93:f3:f0:8a:f7:c6:d5:06:e5:f6: 20:07:fd:d5:63:dc:79:df:3d:21:36:b7:a1:16:02:b8:26:0c: 08:61:82:d8:41:7a:4a:91:3f:24:d0:8d:a2:a5:e7:00:0d:32: c0:ad:cc:24:2b:fd:58:f9:b8:ee:3f:c0:e4:93:8c:96:c3:d1: dc:68:ce:de:78:19:a3:57:f1:15:7a:8c:85:20:8d:db:9c:ab: 3a:ea:4e:22:ee:ce:ff:a9:c5:c2:de:69:71:d4:0e:1f:7d:97: a1:9f:32:ec:da:18:86:d3:fa:bd:5d:23:43:cf:08:a4:85:23: e0:54:40:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RqqTWdzUptq4jUheWnXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjZjZDMwYjRjZmExOTNlMjI2YmJhOTI4MmUzNjZhMjJh MzExMGYwHhcNMjUxMjIwMDEwMTMxWhcNMjUxMjIxMDEwMTMxWjAzMTEwLwYDVQQD EygzMzk5NjAyZTM1NTU3MmY5ZTRkNjgyYWU3N2U1MjEyOTA3YTU3MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4AQh4Xfjs9LkR7TzT/0B3j/xKJO tllRj5TaeZe1noKpAX0543XfZ4NSLCjgVKDzP36FbO6OuK1raAV22Mn9Fxs0woSh HInbgMnRqzxMVXirn0Ul1yHD9WjGmdqcSHi4tIItcnXfAG2spvPp1qE/t+etszIy gxVzuwJvhyZpdFdEKFfTvSoUHPLh9GZBydWZ+J65wdNxnTQCJHmtfsDxkWQ1wgVu 7xP8+FRQIb91JDS8mQqpvYnN9I18HLvulHzdw8kN83nDN1kJErGsmWVvJBH6jLp9 9DScC07m2HJfr5AcuOmIshJdhBQWwNn+hHmjflzUb3vLZVE/v9bu1EfBXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOZYC41VXL55NaCrnflISkHpXERMB8GA1UdIwQY MBaAFND2zTC0z6GT4ia7qSguNmoioxEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQt ZTI5OWU5MTAwMzllLzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQtZTI5OWU5MTAwMzll LzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCSwCkqx /mj6nqHwPrSisP5BpdPt+OrZiRBPJNsSwkra5J8cQT6+qvAtYpVK0dGYIuO6b/jI XScjYyrblNJdvwoxJPWoaEBeRhfaW2y8lSQBXxeEpIwju1bCH25huot/zjpUUcqS RiVSSg2Zf770D3H4J97bqu3S8DEJSLjYOiUUTpmI/+GT8/CK98bVBuX2IAf91WPc ed89ITa3oRYCuCYMCGGC2EF6SpE/JNCNoqXnAA0ywK3MJCv9WPm47j/A5JOMlsPR 3GjO3ngZo1fxFXqMhSCN25yrOupOIu7O/6nFwt5pcdQOH32XoZ8y7NoYhtP6vV0j Q88IpIUj4FRAAQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:33 2025 by rpki-client