This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json) Hash identifier: BDR3tkyWix/BoV5+0JK0DXvXqbiFhDfmrtzal1OJvUI= Subject key identifier: E8:2C:66:07:00:A0:6E:B9:2A:03:86:5E:85:88:1E:36:22:4A:64:46 Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7 Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7 Certificate serial: 019B5F4282002D84F9EBD74472FC13F0A4F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 10:02:32 +0000 Manifest this update: Sat 27 Dec 2025 10:02:32 +0000 Manifest next update: Sun 28 Dec 2025 10:02:32 +0000 Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: mgrUmWQjujrzavqr8q/MBOV3SA0as0h5+17bEW90GJk=) 2: KzJRm4blhpQ22QWdKYNtwSo9hec.roa (hash: VvdDpNHANgnzHXSd6NFNAPGvygHgdOqLpMuWRNVTc78=) 3: baZe32PKXIeppnY8Yaja4T-a3tY.roa (hash: tWsZkF/TWyoJvpRhiK8XSrqOZGwxm+EMQruE+7kHGHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:42:82:00:2d:84:f9:eb:d7:44:72:fc:13:f0:a4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7 Validity Not Before: Dec 27 10:02:32 2025 GMT Not After : Dec 28 10:02:32 2025 GMT Subject: CN=e82c660700a06eb92a03865e85881e36224a6446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:37:cd:d3:a6:dc:0e:de:56:be:18:43:41: 44:65:3c:a5:cd:18:e2:c2:23:50:0d:bc:72:6d:a5: c8:b2:07:a8:99:52:89:3e:e5:ad:98:63:be:18:7d: 96:60:f5:c9:a2:2b:cf:7b:15:af:b7:3b:b2:3c:4c: eb:68:96:ed:06:71:1c:f6:cc:90:83:f8:78:42:48: 6a:89:e9:75:98:23:39:1f:18:a0:e6:e9:15:77:82: 60:ff:d8:b3:50:9c:96:4f:b6:9c:a2:76:a2:9e:0f: fa:a0:90:23:11:01:9f:eb:90:c8:40:f6:ac:28:d6: 0f:de:de:e8:50:45:43:41:b9:9d:73:42:96:ca:b4: 8a:3b:1d:41:50:f8:38:83:75:19:b6:0c:bf:32:5e: 25:b5:2e:7e:e7:e4:00:5f:43:aa:f5:d3:bc:b7:f0: 8e:70:67:48:50:55:ba:4c:c2:66:34:5c:20:4d:22: 77:6c:4c:63:9f:3f:94:7c:19:aa:bf:d6:df:4e:4e: c6:48:5e:94:13:6e:ff:a4:ac:20:47:64:d3:f6:96: e6:89:c6:da:10:88:12:2d:b9:b1:16:e5:6a:a6:9c: 59:57:2c:92:36:68:e4:16:80:ae:0f:51:2d:f9:c8: 49:a3:9c:86:e0:80:d4:aa:c4:b8:cd:b2:ee:d1:63: 0d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2C:66:07:00:A0:6E:B9:2A:03:86:5E:85:88:1E:36:22:4A:64:46 X509v3 Authority Key Identifier: keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e7:52:02:14:7c:4a:32:53:d1:34:43:30:aa:ba:85:db:27: 23:34:f1:de:36:94:6b:77:96:31:6f:ff:24:fc:a5:2c:10:54: e9:20:38:12:f3:42:83:76:dd:85:b7:6d:ce:f2:06:d2:7f:00: 0b:0e:55:4f:3a:26:8b:b9:da:2c:96:5f:5f:7b:7c:2b:64:6f: 0e:03:8b:9a:93:ac:b7:0d:63:69:0b:7c:7a:56:66:21:db:5e: 2e:ca:c4:a6:81:43:72:ec:54:65:04:64:a8:2d:7f:b7:bc:c5: 2e:3a:65:e3:ec:9d:c1:d1:df:0b:ca:b0:12:14:b5:68:1b:ae: 25:c5:d6:f5:57:01:f9:0f:13:de:9e:4e:02:ef:85:f6:cc:ea: 09:41:20:f2:df:e6:9a:84:ac:58:0d:4a:5b:b5:31:02:03:cd: 43:7e:7c:15:f3:0e:04:2c:3b:cf:9a:a1:c2:f3:42:c9:56:cd: 66:05:cf:e6:67:84:a1:72:67:b7:55:83:f4:f9:5b:57:b2:8f: a2:28:48:0d:b8:ce:b6:a7:89:3b:7e:ea:2e:68:e9:d5:ce:31: 4f:0c:06:41:63:0c:2e:7f:1a:a7:6a:ef:5e:02:7c:4b:d5:86: 2c:c3:85:0d:c9:ea:8c:ba:56:61:0d:b2:62:c5:0c:cf:a2:13: 69:7b:2c:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQoIALYT569dEcvwT8KT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzgxYjFkMDI4ZjJhZjYxZWE5YjQyMjY3OWE1ZjhkZTkw NTcyZTcwHhcNMjUxMjI3MTAwMjMyWhcNMjUxMjI4MTAwMjMyWjAzMTEwLwYDVQQD EyhlODJjNjYwNzAwYTA2ZWI5MmEwMzg2NWU4NTg4MWUzNjIyNGE2NDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uU3zdOm3A7eVr4YQ0FEZTylzRji wiNQDbxybaXIsgeomVKJPuWtmGO+GH2WYPXJoivPexWvtzuyPEzraJbtBnEc9syQ g/h4Qkhqiel1mCM5Hxig5ukVd4Jg/9izUJyWT7aconaing/6oJAjEQGf65DIQPas KNYP3t7oUEVDQbmdc0KWyrSKOx1BUPg4g3UZtgy/Ml4ltS5+5+QAX0Oq9dO8t/CO cGdIUFW6TMJmNFwgTSJ3bExjnz+UfBmqv9bfTk7GSF6UE27/pKwgR2TT9pbmicba EIgSLbmxFuVqppxZVyySNmjkFoCuD1Et+chJo5yG4IDUqsS4zbLu0WMN0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgsZgcAoG65KgOGXoWIHjYiSmRGMB8GA1UdIwQY MBaAFNLIGx0Cjyr2Hqm0ImeaX43pBXLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNnYkhRS1BLdlllcWJRaVo1cGZqZWtGY3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMjc1ZmUtODZmMC00MWU5LTgyNjMt NjlkYjZhOGY1OGQ3LzEvMHNnYkhRS1BLdlllcWJRaVo1cGZqZWtGY3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hMjc1ZmUtODZmMC00MWU5LTgyNjMtNjlkYjZhOGY1OGQ3 LzEvMHNnYkhRS1BLdlllcWJRaVo1cGZqZWtGY3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAudSAhR8 SjJT0TRDMKq6hdsnIzTx3jaUa3eWMW//JPylLBBU6SA4EvNCg3bdhbdtzvIG0n8A Cw5VTzomi7naLJZfX3t8K2RvDgOLmpOstw1jaQt8elZmIdteLsrEpoFDcuxUZQRk qC1/t7zFLjpl4+ydwdHfC8qwEhS1aBuuJcXW9VcB+Q8T3p5OAu+F9szqCUEg8t/m moSsWA1KW7UxAgPNQ358FfMOBCw7z5qhwvNCyVbNZgXP5meEoXJnt1WD9PlbV7KP oihIDbjOtqeJO37qLmjp1c4xTwwGQWMMLn8ap2rvXgJ8S9WGLMOFDcnqjLpWYQ2y YsUMz6ITaXssdA== -----END CERTIFICATE-----Generated at Sat Dec 27 17:47:54 2025 by rpki-client