This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json) Hash identifier: xPsbEtwbLMNHgTIqLhJ+eWPfKCeTnMmwMn/vGVxg68E= Subject key identifier: C7:27:E8:EB:9D:E8:9F:06:0D:1A:B1:A4:40:77:F4:7C:4F:B6:D2:0F Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7 Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7 Certificate serial: 019B3F7EEA5D1CA30B65AA9EED8B46C0721E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft Manifest number: 0B8E Signing time: Sun 21 Dec 2025 06:00:40 +0000 Manifest this update: Sun 21 Dec 2025 06:00:40 +0000 Manifest next update: Mon 22 Dec 2025 06:00:40 +0000 Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: eV0hh4gCa3z3h3fhF9Zkxb6BVME+g+o7668U1nYys3w=) 2: sW1FbXnmMLs31PJCKJCZsxmeKF0.roa (hash: gPwTFuA8vjPg7PCIOrBM62Yfp57prUWNjPVJTmJKnuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:ea:5d:1c:a3:0b:65:aa:9e:ed:8b:46:c0:72:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7 Validity Not Before: Dec 21 06:00:40 2025 GMT Not After : Dec 22 06:00:40 2025 GMT Subject: CN=c727e8eb9de89f060d1ab1a44077f47c4fb6d20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:9d:a0:da:eb:6d:7e:20:51:2d:3b:f3:39: 5f:72:e2:71:91:e5:8d:45:8f:9e:6e:d2:3d:b3:2f: af:0f:6c:3e:1c:7a:71:f3:84:e7:c6:93:36:17:82: 6f:17:f7:af:d5:41:67:d5:f9:98:0a:8b:94:c8:79: cd:0e:b5:0c:42:5f:d4:c5:a1:fb:01:e7:eb:19:06: ec:d8:61:24:81:15:49:d8:07:62:74:87:f8:1b:1c: ba:15:60:d0:5f:ff:de:e9:34:a5:a2:37:c6:70:1f: 99:5d:8a:5c:ef:be:b6:bb:99:e1:ca:53:a5:ca:3d: 8f:89:66:02:2a:89:22:ed:e2:82:89:ca:78:9c:0f: 08:60:c6:ad:7f:39:42:ee:e5:44:1c:46:44:f7:89: 55:75:f5:02:4b:e8:e2:a5:8e:e7:cb:bb:f7:ba:f7: a7:60:f5:01:84:81:00:d3:ff:23:76:18:1c:7c:87: bb:bf:66:2b:8e:9b:ef:2a:87:be:2d:81:bd:6f:00: ae:33:a4:8f:ed:28:83:09:1b:88:df:d8:b9:ff:77: f6:fa:cc:3a:cb:05:87:83:3a:70:2d:de:7c:ec:31: a3:82:80:3b:69:68:1e:4b:5b:d8:83:43:73:92:55: 20:b1:40:f0:a4:a2:89:30:8e:b6:9a:18:cf:0a:d9: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:27:E8:EB:9D:E8:9F:06:0D:1A:B1:A4:40:77:F4:7C:4F:B6:D2:0F X509v3 Authority Key Identifier: keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:2b:de:1e:28:d1:b0:4b:48:32:58:16:3e:0f:0c:3d:2b:dd: f0:c1:dc:75:49:66:07:be:df:f8:61:55:b5:f4:39:4b:7f:27: 61:59:81:2f:30:23:58:95:98:d8:9a:b5:0e:04:58:ef:0a:9b: db:d2:1f:1f:40:d8:d3:b9:ef:23:c4:23:2e:10:a9:57:b0:b4: 56:52:fb:e8:9a:16:a6:21:85:d9:3b:0f:02:77:37:d6:67:09: da:56:01:3b:0f:df:bc:a3:8d:04:58:1d:6f:59:f8:2c:b7:17: c0:af:de:77:4a:4d:6e:71:b2:52:c5:3c:3a:3d:92:71:ef:25: 67:86:10:f6:74:ab:00:23:93:d5:c9:4d:a9:36:22:0a:f2:17: fc:7d:9d:f1:2e:c7:5c:f6:d0:5e:0b:d8:c1:64:9e:08:bc:ae: 9e:54:da:ca:89:9c:e0:9a:05:6f:7b:9f:a8:d5:4c:fc:35:61: 69:23:c6:4a:fc:95:34:8c:0e:b1:f5:92:0a:b8:6c:69:a4:24: 2a:6d:09:c2:2c:df:2b:36:a2:31:c3:e1:0e:4e:b5:2e:bb:ad: 65:94:3a:0e:0d:a8:1b:1f:da:2a:24:47:bb:24:93:b2:02:e7: 56:48:f7:f6:14:d0:c6:f6:82:39:c7:1b:01:b8:ab:d4:f1:81: 0d:a8:72:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fupdHKMLZaqe7YtGwHIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMjVmYWM0YTVkOTViNDFhMDcyZWJiZjRmMDM1ZDA5YjNh YTU5YzcwHhcNMjUxMjIxMDYwMDQwWhcNMjUxMjIyMDYwMDQwWjAzMTEwLwYDVQQD EyhjNzI3ZThlYjlkZTg5ZjA2MGQxYWIxYTQ0MDc3ZjQ3YzRmYjZkMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR+doNrrbX4gUS078zlfcuJxkeWN RY+ebtI9sy+vD2w+HHpx84TnxpM2F4JvF/ev1UFn1fmYCouUyHnNDrUMQl/UxaH7 AefrGQbs2GEkgRVJ2AdidIf4Gxy6FWDQX//e6TSlojfGcB+ZXYpc7762u5nhylOl yj2PiWYCKoki7eKCicp4nA8IYMatfzlC7uVEHEZE94lVdfUCS+jipY7ny7v3uven YPUBhIEA0/8jdhgcfIe7v2YrjpvvKoe+LYG9bwCuM6SP7SiDCRuI39i5/3f2+sw6 ywWHgzpwLd587DGjgoA7aWgeS1vYg0NzklUgsUDwpKKJMI62mhjPCtnY8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcn6Oud6J8GDRqxpEB39HxPttIPMB8GA1UdIwQY MBaAFNEl+sSl2VtBoHLrv08DXQmzqlnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMt MGRlZDA2ZTQwYTc1LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMtMGRlZDA2ZTQwYTc1 LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCveHijR sEtIMlgWPg8MPSvd8MHcdUlmB77f+GFVtfQ5S38nYVmBLzAjWJWY2Jq1DgRY7wqb 29IfH0DY07nvI8QjLhCpV7C0VlL76JoWpiGF2TsPAnc31mcJ2lYBOw/fvKONBFgd b1n4LLcXwK/ed0pNbnGyUsU8Oj2Sce8lZ4YQ9nSrACOT1clNqTYiCvIX/H2d8S7H XPbQXgvYwWSeCLyunlTayomc4JoFb3ufqNVM/DVhaSPGSvyVNIwOsfWSCrhsaaQk Km0JwizfKzaiMcPhDk61LrutZZQ6Dg2oGx/aKiRHuySTsgLnVkj39hTQxvaCOccb Abir1PGBDahyIg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:52:18 2025 by rpki-client