This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft File: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json) Hash identifier: XbzvD8oRSwrre3FyWM5Zv+l/9rK7PVhwu/aG/3slPzw= Subject key identifier: CA:FA:81:7C:73:96:19:D2:02:11:5B:14:BF:60:B0:D7:02:77:BD:A6 Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d Certificate serial: 019B3A58855AE6C3931454ABBE10A56C1DB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft Manifest number: 0AF2 Signing time: Sat 20 Dec 2025 06:00:38 +0000 Manifest this update: Sat 20 Dec 2025 06:00:38 +0000 Manifest next update: Sun 21 Dec 2025 06:00:38 +0000 Files and hashes: 1: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: dIpaRXZQgdmM4zWWP2EX3IyY63BbT1t1Ts4Eh7gcY+Q=) 2: sKN4W1XQgBRPMLqN0BmAh5exg2s.roa (hash: IHu6vZ3N6G+PYxes9sQszliF8LVxezHAOlnn1uRbGYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:85:5a:e6:c3:93:14:54:ab:be:10:a5:6c:1d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d Validity Not Before: Dec 20 06:00:38 2025 GMT Not After : Dec 21 06:00:38 2025 GMT Subject: CN=cafa817c739619d202115b14bf60b0d70277bda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:11:80:c6:63:86:da:7f:36:fa:7a:1d:49: 77:cf:00:f7:fd:c0:12:2d:26:6f:62:7c:76:4f:45: c4:ed:80:45:72:0b:cc:11:18:70:cd:9a:93:5c:2e: 76:39:d2:3d:d7:b7:61:7a:fb:be:16:4f:c5:b1:14: 3d:c4:82:c8:1d:7e:ab:18:8d:ab:98:57:55:1f:bd: a2:13:d1:02:ce:87:cc:a0:12:56:67:72:ee:1e:38: 15:a9:b6:2a:3c:d7:a0:df:70:a5:d7:67:24:d4:df: df:3b:4f:ba:a1:8d:4a:cb:ed:7a:03:23:ba:eb:cd: 57:4c:b3:e4:2c:71:85:e3:9c:00:67:18:16:5b:18: d7:45:ad:8d:0e:cb:18:a8:c5:da:ff:c0:dc:38:e5: 39:9c:b6:7b:ec:4a:cf:ee:0d:e8:5d:89:f2:ab:f1: 43:d8:71:ea:49:40:a0:e5:fd:b5:0c:62:86:30:8a: a8:2f:5c:07:8d:cf:e2:1d:04:35:13:5b:07:cf:04: 23:06:a5:6e:84:45:f7:1d:23:c7:6a:8a:17:e4:29: eb:59:3a:6b:0b:85:6e:1c:ad:b7:ef:50:50:19:e6: de:ba:28:bb:44:ff:c1:76:51:16:8b:e1:72:d5:ee: f5:e1:53:de:bf:0c:3f:7d:04:b4:46:cc:83:6f:5c: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FA:81:7C:73:96:19:D2:02:11:5B:14:BF:60:B0:D7:02:77:BD:A6 X509v3 Authority Key Identifier: keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:44:2e:56:b1:34:2c:16:6a:87:c2:53:75:b7:0c:b1:cd:74: 0b:e3:cf:e9:b9:95:ed:ce:dd:7b:3b:6b:ae:64:f6:74:ca:53: 70:a9:8d:97:a1:0a:f1:03:f6:2e:db:40:fa:b8:40:cb:96:71: dd:e2:00:03:f5:21:80:43:ce:ce:26:73:38:ac:20:55:38:03: 96:8c:bf:e9:f6:95:c7:9c:5c:92:96:12:b2:94:74:c9:58:73: 1f:08:60:4b:08:61:ee:dd:80:b4:35:70:b5:40:4b:2f:13:a8: 22:c1:8f:e9:44:54:9d:91:5d:ba:e0:cd:70:d9:4e:d6:84:36: 12:f7:cc:8a:9e:2f:9c:da:83:4a:1d:97:50:a3:24:31:12:7c: ed:d9:5d:06:fc:a5:8b:3c:61:a5:6e:1f:a8:a8:47:56:f9:30: 28:52:c4:94:71:3b:3a:87:69:c1:8b:37:fd:56:01:7d:e5:30: 5b:e7:5c:39:78:9e:4a:fa:f2:27:f2:93:97:2d:bb:51:13:d7: f0:ff:1f:6b:b9:03:38:dc:75:41:2c:b1:42:e4:06:c8:a2:e8: e7:f1:70:c2:3b:1f:0f:f2:18:02:ba:97:a9:45:02:7d:57:d3: 81:a6:07:e6:e1:60:b5:d1:c6:51:03:1e:81:73:33:e9:1e:c1: b7:5b:5b:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WIVa5sOTFFSrvhClbB2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMjU2M2VkOTk2NGU0MjY4MWExYzVkMjk1YjBjNjE0ODYw NmU3M2QwHhcNMjUxMjIwMDYwMDM4WhcNMjUxMjIxMDYwMDM4WjAzMTEwLwYDVQQD EyhjYWZhODE3YzczOTYxOWQyMDIxMTViMTRiZjYwYjBkNzAyNzdiZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MYRgMZjhtp/Nvp6HUl3zwD3/cAS LSZvYnx2T0XE7YBFcgvMERhwzZqTXC52OdI917dhevu+Fk/FsRQ9xILIHX6rGI2r mFdVH72iE9ECzofMoBJWZ3LuHjgVqbYqPNeg33Cl12ck1N/fO0+6oY1Ky+16AyO6 681XTLPkLHGF45wAZxgWWxjXRa2NDssYqMXa/8DcOOU5nLZ77ErP7g3oXYnyq/FD 2HHqSUCg5f21DGKGMIqoL1wHjc/iHQQ1E1sHzwQjBqVuhEX3HSPHaooX5CnrWTpr C4VuHK2371BQGebeuii7RP/BdlEWi+Fy1e714VPevww/fQS0RsyDb1wKawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMr6gXxzlhnSAhFbFL9gsNcCd72mMB8GA1UdIwQY MBaAFNMlY+2ZZOQmgaHF0pWwxhSGBuc9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHlWajdabGs1Q2FCb2NYU2xiREdGSVlHNXowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82YmY1ZWQtNmZlNi00NTYyLWI4NTMt OWE0ZWMxMDYwN2M1LzEvMHlWajdabGs1Q2FCb2NYU2xiREdGSVlHNXowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82YmY1ZWQtNmZlNi00NTYyLWI4NTMtOWE0ZWMxMDYwN2M1 LzEvMHlWajdabGs1Q2FCb2NYU2xiREdGSVlHNXowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0QuVrE0 LBZqh8JTdbcMsc10C+PP6bmV7c7deztrrmT2dMpTcKmNl6EK8QP2LttA+rhAy5Zx 3eIAA/UhgEPOziZzOKwgVTgDloy/6faVx5xckpYSspR0yVhzHwhgSwhh7t2AtDVw tUBLLxOoIsGP6URUnZFduuDNcNlO1oQ2EvfMip4vnNqDSh2XUKMkMRJ87dldBvyl izxhpW4fqKhHVvkwKFLElHE7OodpwYs3/VYBfeUwW+dcOXieSvryJ/KTly27URPX 8P8fa7kDONx1QSyxQuQGyKLo5/FwwjsfD/IYArqXqUUCfVfTgaYH5uFgtdHGUQMe gXMz6R7Bt1tbyw== -----END CERTIFICATE-----Generated at Sat Dec 20 11:40:13 2025 by rpki-client