This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft File: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json) Hash identifier: Bon33j8VekV8ho/iwr2n2kwf4uyo3mpWfxFlDFny9Fk= Subject key identifier: C8:02:20:4C:9C:C9:6A:22:62:9E:2B:76:AB:EE:21:26:FD:9C:11:D6 Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87 Certificate issuer: /CN=d016cc56a995507b4fa87c6490442f06b6186687 Certificate serial: 019B4E4D2FDEBFB5A16FB0DEF2F721E1898B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 03:00:39 +0000 Manifest this update: Wed 24 Dec 2025 03:00:39 +0000 Manifest next update: Thu 25 Dec 2025 03:00:39 +0000 Files and hashes: 1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: 8MLKYExQ6qF8PSCsfEUm3MBjr3WhsMIlHXK+DO4xPSU=) 2: f7YxschREuysiSjDT6JDZ1hIzJU.roa (hash: od3isdJHCZlHUjM+HPneCDkTI9VrgHkYJNlcsSC6Dag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:2f:de:bf:b5:a1:6f:b0:de:f2:f7:21:e1:89:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687 Validity Not Before: Dec 24 03:00:39 2025 GMT Not After : Dec 25 03:00:39 2025 GMT Subject: CN=c802204c9cc96a22629e2b76abee2126fd9c11d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ff:0b:35:9b:c6:5f:8d:e7:db:af:ab:b6:fb: f9:19:ee:d8:b6:be:94:c5:62:00:44:54:d4:ce:15: 3a:76:41:47:78:30:cc:06:c2:88:be:ba:8f:9d:3b: 59:bb:00:f0:28:90:bd:c4:c0:8b:8f:82:24:8b:32: b2:71:30:0b:22:67:9b:7b:d1:2a:45:a2:9d:28:51: a5:4c:35:cb:14:2d:47:99:10:13:bd:28:5d:fc:a4: 47:7a:28:6b:06:6f:63:2d:4c:ff:2f:3f:19:99:ba: 7f:b5:7b:5e:6d:4b:0f:9e:1c:88:a3:08:7f:3c:68: 2f:81:d7:1d:0e:df:16:e2:a7:43:10:3b:a0:e0:42: 74:c8:b8:a5:d3:5a:1a:ca:60:d9:5e:89:01:5f:63: a9:08:6b:bf:0a:39:2b:c6:bb:71:19:66:93:91:2e: 12:ef:46:54:58:7d:63:9c:0e:32:23:bd:ec:64:fa: e8:65:44:8f:f7:aa:0a:d0:a2:dc:da:bb:9c:5f:f6: 30:ba:1c:ad:67:8f:bb:af:29:88:de:1e:31:e3:9c: 15:99:7e:8f:c6:86:e8:a5:52:6e:8d:70:11:d8:82: 17:b7:08:77:b2:6c:ac:50:6c:59:37:a4:7b:be:08: f5:33:7d:7d:cb:77:46:16:9d:3d:75:ee:db:82:53: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:02:20:4C:9C:C9:6A:22:62:9E:2B:76:AB:EE:21:26:FD:9C:11:D6 X509v3 Authority Key Identifier: keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b7:5d:32:93:e1:8e:27:56:42:21:2f:9b:e5:7a:5e:4d:43: 42:3b:40:1d:d8:b7:09:ea:54:65:6f:1a:75:b6:f7:4d:28:15: 5b:7b:1f:cd:26:50:08:09:2e:f9:f5:41:7a:81:6b:ff:6d:48: 28:b1:74:6f:ec:91:61:3d:b8:9d:8e:73:15:56:8e:68:df:90: 0c:fb:cc:06:55:e1:27:0c:b4:54:e5:c3:a8:72:27:96:c2:4c: 7c:f7:65:0b:a9:a7:62:b3:3f:92:ff:9f:bd:cd:b8:c5:02:f3: c6:77:fa:76:f4:e2:7b:7b:fa:75:45:e5:bf:48:87:a3:e8:9a: 37:d5:3f:6a:7a:20:e6:2e:9a:65:5c:6d:08:74:4e:b5:5d:64: c7:33:cb:a5:6d:a0:48:be:d9:c6:7a:89:d4:80:c0:48:b4:f3: ce:8e:41:80:aa:d3:3d:c8:c6:4e:39:51:27:cf:a7:6e:8d:02: 46:ad:1e:8e:5c:cf:a3:db:0c:31:c9:f6:45:69:eb:99:63:37: 9e:eb:66:59:2c:cd:ae:fe:79:5f:4a:07:24:14:34:84:a5:31: fe:cc:53:49:a8:01:9d:de:cf:76:36:7c:40:36:bf:0a:f2:f9: 36:74:ce:a3:f6:85:48:9a:5b:5b:2d:63:ec:d2:d5:49:47:01: 8e:ea:79:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTS/ev7Whb7De8vch4YmLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMTZjYzU2YTk5NTUwN2I0ZmE4N2M2NDkwNDQyZjA2YjYx ODY2ODcwHhcNMjUxMjI0MDMwMDM5WhcNMjUxMjI1MDMwMDM5WjAzMTEwLwYDVQQD EyhjODAyMjA0YzljYzk2YTIyNjI5ZTJiNzZhYmVlMjEyNmZkOWMxMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/8LNZvGX43n26+rtvv5Ge7Ytr6U xWIARFTUzhU6dkFHeDDMBsKIvrqPnTtZuwDwKJC9xMCLj4IkizKycTALImebe9Eq RaKdKFGlTDXLFC1HmRATvShd/KRHeihrBm9jLUz/Lz8Zmbp/tXtebUsPnhyIowh/ PGgvgdcdDt8W4qdDEDug4EJ0yLil01oaymDZXokBX2OpCGu/CjkrxrtxGWaTkS4S 70ZUWH1jnA4yI73sZProZUSP96oK0KLc2rucX/YwuhytZ4+7rymI3h4x45wVmX6P xobopVJujXAR2IIXtwh3smysUGxZN6R7vgj1M319y3dGFp09de7bglP0MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgCIEycyWoiYp4rdqvuISb9nBHWMB8GA1UdIwQY MBaAFNAWzFaplVB7T6h8ZJBELwa2GGaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEJiTVZxbVZVSHRQcUh4a2tFUXZCcllZWm9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wZDAzMDAtNzRlZS00Njc3LWFkNjIt YzI0YjdkYjIwZGU3LzEvMEJiTVZxbVZVSHRQcUh4a2tFUXZCcllZWm9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wZDAzMDAtNzRlZS00Njc3LWFkNjItYzI0YjdkYjIwZGU3 LzEvMEJiTVZxbVZVSHRQcUh4a2tFUXZCcllZWm9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7ddMpPh jidWQiEvm+V6Xk1DQjtAHdi3CepUZW8adbb3TSgVW3sfzSZQCAku+fVBeoFr/21I KLF0b+yRYT24nY5zFVaOaN+QDPvMBlXhJwy0VOXDqHInlsJMfPdlC6mnYrM/kv+f vc24xQLzxnf6dvTie3v6dUXlv0iHo+iaN9U/anog5i6aZVxtCHROtV1kxzPLpW2g SL7ZxnqJ1IDASLTzzo5BgKrTPcjGTjlRJ8+nbo0CRq0ejlzPo9sMMcn2RWnrmWM3 nutmWSzNrv55X0oHJBQ0hKUx/sxTSagBnd7PdjZ8QDa/CvL5NnTOo/aFSJpbWy1j 7NLVSUcBjup5PQ== -----END CERTIFICATE-----Generated at Wed Dec 24 09:18:06 2025 by rpki-client