This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft File: r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json) Hash identifier: DEwsTVtPP+gkGzWfd8KSXazMKD0Otmm8HGqf/jZv5S4= Subject key identifier: 31:2E:FD:C3:4C:06:B0:76:36:0B:CE:63:54:54:1F:C3:FD:B2:34:E2 Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68 Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68 Certificate serial: 019B66562C415E9E77A92EF79665DB9BCBCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft Manifest number: 08A6 Signing time: Sun 28 Dec 2025 19:01:22 +0000 Manifest this update: Sun 28 Dec 2025 19:01:22 +0000 Manifest next update: Mon 29 Dec 2025 19:01:22 +0000 Files and hashes: 1: ZRG74paviVX-XS90B8J_nR1og6Y.roa (hash: RiJuDSGI6phByjHDly7Ub5V9tWyhmJNeE34595qod9o=) 2: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: yMEE0EL4Cl6Nqewm0yhPG3oCRgmjv2sOIzyB/ool4PI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:56:2c:41:5e:9e:77:a9:2e:f7:96:65:db:9b:cb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68 Validity Not Before: Dec 28 19:01:22 2025 GMT Not After : Dec 29 19:01:22 2025 GMT Subject: CN=312efdc34c06b076360bce6354541fc3fdb234e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3a:07:c8:bc:7b:da:ce:0d:d8:f4:c5:08:7c: 8b:63:96:86:e1:19:aa:3a:49:ef:97:66:5d:71:84: 41:ee:ac:5c:1b:49:79:e5:3d:3a:4a:37:b2:bc:bf: 72:33:02:78:e5:f7:ae:f9:b1:12:d3:af:6d:c4:12: 4f:ad:a3:f3:4b:86:07:7c:f1:0a:64:b9:4e:33:e8: 9e:46:13:62:de:81:46:e0:cf:4d:95:77:3d:7d:5d: 0a:9e:0f:68:54:3f:e9:b3:96:9a:08:27:7b:fb:a3: 41:c3:f4:31:7c:6f:71:e2:89:af:8a:74:89:9b:be: 97:6a:e9:18:09:ea:db:fe:df:ce:94:b7:1e:7e:c3: 3d:38:25:f5:51:df:03:82:30:5f:1e:3a:8b:4a:04: 17:36:97:20:62:29:0d:16:39:ee:2c:f7:ca:28:f2: 84:82:48:1c:d8:b6:16:73:ed:90:a6:44:46:c2:06: 6a:c3:6a:3f:16:ea:c0:b6:6b:b1:d3:e1:9f:92:0a: 57:3f:af:e4:0a:42:6d:86:b0:02:ed:0a:75:64:fe: 85:bd:96:cf:0b:68:65:eb:c7:fa:c1:03:ca:7c:0b: f4:d3:c3:f9:33:9a:0c:47:a4:0a:d7:f5:b5:21:5c: 5c:c2:26:de:19:79:74:74:05:1f:8c:ed:d3:cf:b6: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2E:FD:C3:4C:06:B0:76:36:0B:CE:63:54:54:1F:C3:FD:B2:34:E2 X509v3 Authority Key Identifier: keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:6a:12:18:0a:09:b2:03:aa:b3:c9:b7:3c:ea:f3:b1:b2:be: 7c:87:f2:bb:69:3b:f6:d9:30:a8:06:6d:9d:c1:c8:f3:d5:0b: b6:40:c3:04:68:6f:56:47:c6:36:6b:10:5c:be:31:f1:fa:b3: ff:e4:50:46:10:af:fb:3c:96:63:c1:c2:d4:d4:69:a4:0f:5e: d2:ab:c6:fb:ca:d4:fc:37:de:43:ad:e0:23:9e:ba:db:7b:58: ef:e8:a9:89:34:08:69:88:3a:08:a3:a1:48:95:17:4c:e6:6b: d6:8d:05:49:2f:1e:1a:91:06:e3:a7:4a:ac:3b:11:38:e5:ba: 1f:80:af:74:48:20:d8:86:df:db:b4:26:58:a5:83:d7:d5:ae: c8:3c:32:ad:42:ac:b1:11:47:1c:b8:4c:0a:55:b9:21:ae:61: 5f:f6:68:0c:66:55:0d:08:ba:d7:92:11:87:66:9f:19:06:01: ff:39:bb:51:4a:b4:4e:bc:0d:60:f7:10:f9:95:88:32:01:16: 25:f6:78:87:80:04:24:6d:85:be:c3:e8:ba:c0:78:35:9e:9d: b0:be:d5:8e:ea:f4:c2:d9:30:e5:d3:00:3a:b5:2a:aa:a5:48: 5a:95:26:26:b6:a0:1d:0f:75:40:ea:fc:4e:d9:ed:9c:b3:4b: 11:35:6c:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVixBXp53qS73lmXbm8vNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNDEzZmQyYWQ5ZTI1Yzg0YmMwYjU5ZTYwOGE2NDM2NjNl NmJiNjgwHhcNMjUxMjI4MTkwMTIyWhcNMjUxMjI5MTkwMTIyWjAzMTEwLwYDVQQD EygzMTJlZmRjMzRjMDZiMDc2MzYwYmNlNjM1NDU0MWZjM2ZkYjIzNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DoHyLx72s4N2PTFCHyLY5aG4Rmq Oknvl2ZdcYRB7qxcG0l55T06SjeyvL9yMwJ45feu+bES069txBJPraPzS4YHfPEK ZLlOM+ieRhNi3oFG4M9NlXc9fV0Kng9oVD/ps5aaCCd7+6NBw/QxfG9x4omvinSJ m76XaukYCerb/t/OlLcefsM9OCX1Ud8DgjBfHjqLSgQXNpcgYikNFjnuLPfKKPKE gkgc2LYWc+2QpkRGwgZqw2o/FurAtmux0+GfkgpXP6/kCkJthrAC7Qp1ZP6FvZbP C2hl68f6wQPKfAv008P5M5oMR6QK1/W1IVxcwibeGXl0dAUfjO3Tz7ZehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEu/cNMBrB2NgvOY1RUH8P9sjTiMB8GA1UdIwQY MBaAFK9BP9KtniXIS8C1nmCKZDZj5rtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YWY2MTUtMmM0ZS00Y2FmLWI1YWYt ZWJiZTFmNDc3ZjY4LzEvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC85YWY2MTUtMmM0ZS00Y2FmLWI1YWYtZWJiZTFmNDc3ZjY4 LzEvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGoSGAoJ sgOqs8m3POrzsbK+fIfyu2k79tkwqAZtncHI89ULtkDDBGhvVkfGNmsQXL4x8fqz /+RQRhCv+zyWY8HC1NRppA9e0qvG+8rU/DfeQ63gI56623tY7+ipiTQIaYg6CKOh SJUXTOZr1o0FSS8eGpEG46dKrDsROOW6H4CvdEgg2Ibf27QmWKWD19WuyDwyrUKs sRFHHLhMClW5Ia5hX/ZoDGZVDQi615IRh2afGQYB/zm7UUq0TrwNYPcQ+ZWIMgEW JfZ4h4AEJG2FvsPousB4NZ6dsL7Vjur0wtkw5dMAOrUqqqVIWpUmJragHQ91QOr8 TtntnLNLETVs1A== -----END CERTIFICATE-----Generated at Sun Dec 28 21:57:11 2025 by rpki-client