This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json) Hash identifier: oOfl9NFn5rU49xT9FKAyt/1ZKeZ3+ef9MHnLuujuBv8= Subject key identifier: E0:87:FA:9C:40:5E:C0:EB:CB:BB:65:C2:A8:32:72:CA:A8:99:0F:DC Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f Certificate serial: 019B44384014D3D071D866E7F13AD36EE359 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft Manifest number: 06A4 Signing time: Mon 22 Dec 2025 04:01:35 +0000 Manifest this update: Mon 22 Dec 2025 04:01:35 +0000 Manifest next update: Tue 23 Dec 2025 04:01:35 +0000 Files and hashes: 1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=) 2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: WiGMPjs6q+OtXB1q8qQiZ6mipOtHTtf5zP2bqLCytb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:40:14:d3:d0:71:d8:66:e7:f1:3a:d3:6e:e3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f Validity Not Before: Dec 22 04:01:35 2025 GMT Not After : Dec 23 04:01:35 2025 GMT Subject: CN=e087fa9c405ec0ebcbbb65c2a83272caa8990fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:16:16:8e:0a:88:0d:53:d0:42:7c:75:88: 96:b1:f5:e4:9d:1d:2d:92:f6:9a:b7:21:e0:bd:ba: 79:85:9f:af:5b:1c:bf:de:a0:a4:a9:91:70:e9:dc: 20:df:88:34:2a:31:69:8f:59:b3:9d:75:61:5c:b1: 09:b0:0a:f2:0d:1c:4b:d6:39:21:38:df:2c:c6:78: 68:ad:89:91:3b:ca:c3:6a:7b:d9:ee:a2:34:98:80: e1:3f:19:1e:b0:d2:4f:ab:b9:0b:82:0b:9d:76:88: e5:56:9d:34:62:4c:30:48:40:ac:b2:59:91:53:97: bb:7c:3c:4c:aa:03:03:44:63:3c:4e:51:b0:5d:3c: 64:4c:16:b6:b7:c4:ea:e1:28:29:ba:34:9c:18:b2: 53:e8:60:37:2e:4d:cd:2c:29:81:74:32:0b:bd:57: c7:4d:00:41:8b:b5:fe:6b:45:f5:18:5e:53:f7:26: 3c:49:1f:3e:f1:46:ce:a5:43:45:60:0a:0b:1a:3c: f0:6b:4d:15:f2:0f:83:b3:be:74:40:51:7d:97:f2: 64:88:c3:20:cd:79:f0:59:56:e3:12:e8:83:c5:bc: d6:90:53:87:85:08:23:b7:c5:f0:98:67:54:8a:8a: ff:bb:2b:0d:4e:f8:13:ac:07:0d:e3:48:f5:43:f0: a6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:87:FA:9C:40:5E:C0:EB:CB:BB:65:C2:A8:32:72:CA:A8:99:0F:DC X509v3 Authority Key Identifier: keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:4f:2c:f3:7f:52:e9:45:a0:01:03:94:14:ce:80:3e:05:a1: 1b:1e:92:b8:05:0f:9c:45:35:6c:ec:96:92:5b:fe:a6:2a:30: b5:0c:30:68:49:56:77:7c:88:c8:da:13:77:46:50:ce:80:46: ec:76:ba:8e:65:e8:fb:2f:0f:4a:1e:fa:61:39:1b:c3:6d:7f: 21:6a:5c:ef:9b:57:a7:20:e5:c1:ff:7b:96:b3:7e:3f:a7:a5: 84:22:05:03:2c:0a:93:82:54:7b:a1:5e:1d:2e:1a:f8:f6:ad: 82:28:b6:58:a8:73:0a:09:76:75:0f:6a:48:98:c1:35:1c:76: 82:eb:93:27:a5:6c:5a:04:09:49:12:7b:a4:a9:56:a4:cc:2c: 7b:31:ea:91:fb:d9:6a:89:42:cd:5e:c1:81:d9:9d:34:6c:73: 64:93:55:b7:c4:ec:a8:18:c1:2f:1b:27:e1:24:b2:e6:2e:d2: 43:a2:12:18:77:ee:33:73:bd:9a:3e:b2:af:d8:72:3c:96:1f: 1f:81:e4:0c:e8:88:37:d7:1c:2e:4f:7a:fc:9f:56:e3:68:80: 1a:ad:dd:45:37:44:72:d0:ae:09:36:a7:cb:fd:75:97:42:9f: cd:e7:8d:2b:08:a3:9b:63:aa:ca:6a:22:6c:58:cf:70:ff:b5: fc:f5:03:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOEAU09Bx2Gbn8TrTbuNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy NTI3OGYwHhcNMjUxMjIyMDQwMTM1WhcNMjUxMjIzMDQwMTM1WjAzMTEwLwYDVQQD EyhlMDg3ZmE5YzQwNWVjMGViY2JiYjY1YzJhODMyNzJjYWE4OTkwZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GUWFo4KiA1T0EJ8dYiWsfXknR0t kvaatyHgvbp5hZ+vWxy/3qCkqZFw6dwg34g0KjFpj1mznXVhXLEJsAryDRxL1jkh ON8sxnhorYmRO8rDanvZ7qI0mIDhPxkesNJPq7kLgguddojlVp00YkwwSECsslmR U5e7fDxMqgMDRGM8TlGwXTxkTBa2t8Tq4SgpujScGLJT6GA3Lk3NLCmBdDILvVfH TQBBi7X+a0X1GF5T9yY8SR8+8UbOpUNFYAoLGjzwa00V8g+Ds750QFF9l/JkiMMg zXnwWVbjEuiDxbzWkFOHhQgjt8XwmGdUior/uysNTvgTrAcN40j1Q/CmIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCH+pxAXsDry7tlwqgycsqomQ/cMB8GA1UdIwQY MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZk8s839S 6UWgAQOUFM6APgWhGx6SuAUPnEU1bOyWklv+piowtQwwaElWd3yIyNoTd0ZQzoBG 7Ha6jmXo+y8PSh76YTkbw21/IWpc75tXpyDlwf97lrN+P6elhCIFAywKk4JUe6Fe HS4a+Patgii2WKhzCgl2dQ9qSJjBNRx2guuTJ6VsWgQJSRJ7pKlWpMwsezHqkfvZ aolCzV7BgdmdNGxzZJNVt8TsqBjBLxsn4SSy5i7SQ6ISGHfuM3O9mj6yr9hyPJYf H4HkDOiIN9ccLk96/J9W42iAGq3dRTdEctCuCTany/11l0KfzeeNKwijm2Oqymoi bFjPcP+1/PUD6Q== -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:16 2025 by rpki-client