This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json) Hash identifier: 5KfYoXNxtADlvi4j1jlGrEhx9n86UzcjxGtK5Xrd5lQ= Subject key identifier: 52:9B:82:05:B5:5E:48:97:07:A9:95:ED:63:67:0C:A1:5D:64:B5:7A Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8 Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8 Certificate serial: 019B3D2338008B154E50DF244A5889DBD911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft Manifest number: 040D Signing time: Sat 20 Dec 2025 19:01:16 +0000 Manifest this update: Sat 20 Dec 2025 19:01:16 +0000 Manifest next update: Sun 21 Dec 2025 19:01:16 +0000 Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: TPh7+KvZ4tVACvK6UO2ICDINi3dyg/bcD5NpAPsVPKA=) 2: vwZ3qyY8j7AihfGsWYtA6mwINxQ.roa (hash: VBbCuPYUO8ASQ+6MrnY57WOdr+3+R3PhClJszE/T/CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:38:00:8b:15:4e:50:df:24:4a:58:89:db:d9:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8 Validity Not Before: Dec 20 19:01:16 2025 GMT Not After : Dec 21 19:01:16 2025 GMT Subject: CN=529b8205b55e489707a995ed63670ca15d64b57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:b4:55:bc:a3:9c:f7:03:b7:3f:25:a1:20: 5d:3f:f7:f8:e3:e4:91:5e:f8:fc:18:c4:58:93:04: 0c:18:fa:e2:64:7b:de:66:88:a4:f8:6c:d3:b9:d0: 12:c4:d7:f3:6c:7e:90:16:75:4f:e0:9f:2c:78:66: fa:40:94:cc:65:a2:06:57:63:b1:43:88:d3:40:0c: 73:e9:bc:87:c8:50:69:ce:47:50:ae:2a:cb:fc:cf: bf:a6:c2:0d:c5:36:80:30:fb:85:61:ec:9a:3e:8f: c5:d8:fd:88:40:51:67:6f:84:4a:54:c5:d1:18:e6: 5a:4f:06:03:28:1e:fc:cb:17:9d:d7:fb:ec:37:3e: 9a:aa:c6:fd:cd:40:3d:ef:d4:26:c7:80:57:cc:a1: 27:2e:11:07:c6:ce:4f:87:82:0c:c8:fd:8e:01:30: fa:e6:15:39:58:13:38:7b:42:4c:cd:60:bb:3d:0e: 6b:77:63:5b:12:ed:81:4e:42:3c:29:52:f8:dd:8a: e7:d4:f0:21:eb:17:31:af:53:b0:4f:18:13:45:6f: 85:1d:d3:1d:69:47:14:8a:0f:dc:8e:58:3b:c6:b4: 4e:be:e5:2b:11:d4:ef:52:5c:20:64:a3:e2:f6:0c: 7f:e6:e8:ec:b8:99:18:6f:1d:ae:a3:61:fb:a5:db: 16:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9B:82:05:B5:5E:48:97:07:A9:95:ED:63:67:0C:A1:5D:64:B5:7A X509v3 Authority Key Identifier: keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:51:d7:bc:c1:7b:9d:1f:d2:6c:97:37:f7:90:b7:4e:df:c4: e7:b8:33:7c:d2:57:b6:b1:58:f0:6a:8d:bd:fb:64:13:e2:5e: 82:5b:23:07:8e:4f:ae:27:30:41:f3:20:7c:e2:6b:f5:fd:fc: f4:00:66:e6:47:9e:0a:e6:e2:2e:04:5a:4e:cc:1d:0b:8a:6f: 4f:0e:6c:49:aa:3c:d7:e9:57:79:df:17:a7:fa:33:f4:c6:31: 70:68:05:52:0d:e7:9d:ae:44:43:77:f8:d6:80:c3:03:9a:d2: f4:df:c9:49:5f:22:ae:cc:e9:da:21:48:e0:5c:b6:5c:41:3f: bd:cf:47:94:c8:4b:35:d2:61:04:ab:c3:b4:8f:0f:bd:ee:e7: d9:3d:dd:f5:62:9a:08:80:e9:bf:ea:8d:2c:92:3a:f8:ca:80: c8:69:b9:e6:78:98:89:0b:ad:1a:18:bf:be:3b:21:e0:61:d7: 40:4c:eb:3e:ff:98:31:ee:7a:98:39:18:87:48:eb:89:9c:fb: da:a1:1b:cd:72:03:2a:58:70:4c:3a:1f:59:f9:89:dd:02:d1: fa:63:04:fc:b8:63:eb:9c:5d:df:59:21:ec:6f:76:7a:8d:6b: bb:57:27:fc:92:68:be:3d:de:ae:98:7c:67:60:e4:54:3c:18: 16:f0:f8:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IzgAixVOUN8kSliJ29kRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNDg1MGY4MDY5ZGY2MmRjNTE1NWMwMmVkMWU2MmJmNTFj ZWRiYzgwHhcNMjUxMjIwMTkwMTE2WhcNMjUxMjIxMTkwMTE2WjAzMTEwLwYDVQQD Eyg1MjliODIwNWI1NWU0ODk3MDdhOTk1ZWQ2MzY3MGNhMTVkNjRiNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI20VbyjnPcDtz8loSBdP/f44+SR Xvj8GMRYkwQMGPriZHveZoik+GzTudASxNfzbH6QFnVP4J8seGb6QJTMZaIGV2Ox Q4jTQAxz6byHyFBpzkdQrirL/M+/psINxTaAMPuFYeyaPo/F2P2IQFFnb4RKVMXR GOZaTwYDKB78yxed1/vsNz6aqsb9zUA979Qmx4BXzKEnLhEHxs5Ph4IMyP2OATD6 5hU5WBM4e0JMzWC7PQ5rd2NbEu2BTkI8KVL43Yrn1PAh6xcxr1OwTxgTRW+FHdMd aUcUig/cjlg7xrROvuUrEdTvUlwgZKPi9gx/5ujsuJkYbx2uo2H7pdsWSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKbggW1XkiXB6mV7WNnDKFdZLV6MB8GA1UdIwQY MBaAFNBIUPgGnfYtxRVcAu0eYr9RztvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMDk3ZDMtZDRiYS00MTMwLThlOTYt YWQ5NWViZmFhYWUyLzEvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kMDk3ZDMtZDRiYS00MTMwLThlOTYtYWQ5NWViZmFhYWUy LzEvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1HXvMF7 nR/SbJc395C3Tt/E57gzfNJXtrFY8GqNvftkE+JeglsjB45PricwQfMgfOJr9f38 9ABm5keeCubiLgRaTswdC4pvTw5sSao81+lXed8Xp/oz9MYxcGgFUg3nna5EQ3f4 1oDDA5rS9N/JSV8irszp2iFI4Fy2XEE/vc9HlMhLNdJhBKvDtI8Pve7n2T3d9WKa CIDpv+qNLJI6+MqAyGm55niYiQutGhi/vjsh4GHXQEzrPv+YMe56mDkYh0jriZz7 2qEbzXIDKlhwTDofWfmJ3QLR+mME/Lhj65xd31kh7G92eo1ru1cn/JJovj3erph8 Z2DkVDwYFvD43w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:46 2025 by rpki-client