This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json) Hash identifier: 0a1alGyEJHcncIf+6aIBl1qDSB/yix+bnnVigGgsV0U= Subject key identifier: D9:F8:81:78:BE:27:0E:C5:06:25:4A:CA:9A:97:5F:34:FF:9F:76:ED Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7 Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7 Certificate serial: 019B4FCFAAACDBBB4BD7610736E98149BE9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft Manifest number: 166B Signing time: Wed 24 Dec 2025 10:02:48 +0000 Manifest this update: Wed 24 Dec 2025 10:02:48 +0000 Manifest next update: Thu 25 Dec 2025 10:02:48 +0000 Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: sG3kahpaxOrpiKm36saADp4U384IjiWMexL8FbQwJGM=) 2: FIvNNxujkeosaQmK-8zL99U8I-8.roa (hash: xdptKNwYHkOXesPFH1LxyuhIbU4UE4ZRfmuf1MyhTcI=) 3: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (hash: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:aa:ac:db:bb:4b:d7:61:07:36:e9:81:49:be:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7 Validity Not Before: Dec 24 10:02:48 2025 GMT Not After : Dec 25 10:02:48 2025 GMT Subject: CN=d9f88178be270ec506254aca9a975f34ff9f76ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:6b:df:8a:55:38:f6:6f:50:02:1e:d5:7d: 3f:60:ca:3c:36:c6:54:3e:bd:6d:29:79:bd:82:e6: 5f:eb:7d:07:6f:f5:2d:2d:7d:eb:3e:5e:42:a7:7f: d3:9d:19:2f:c0:0d:e0:9f:7b:14:86:3f:48:79:ed: 6d:89:74:2e:69:90:f0:c3:ef:91:c4:62:fb:b5:44: f3:44:ee:bc:ad:8f:c5:40:15:e4:88:3d:55:e1:19: 02:d6:9b:31:e5:27:a4:48:df:bc:cc:0c:80:cb:65: 7f:32:24:32:17:99:79:19:d3:55:f5:b2:f4:7f:b6: f4:f9:a1:94:46:78:6d:a6:37:22:e9:0c:ba:e7:b2: d8:23:7a:f3:38:24:3b:86:2d:87:50:2f:11:63:87: 22:96:3d:05:d0:7f:91:4d:5d:b9:b1:37:cc:dd:d4: b0:1e:e4:4e:52:3d:ab:de:e8:9b:d9:6d:5f:26:78: c2:39:0c:29:38:3e:57:eb:f9:79:a1:a1:4a:92:f8: 83:a4:30:2b:aa:93:a1:8e:fd:57:50:2f:fd:a8:56: eb:90:85:de:3e:26:f9:ba:fa:66:ec:15:68:b3:9c: 13:7d:9b:3d:8b:f1:e6:d9:21:e3:93:fd:10:58:27: f0:40:c1:d4:f2:e2:53:db:57:2b:f6:d9:56:7a:f5: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F8:81:78:BE:27:0E:C5:06:25:4A:CA:9A:97:5F:34:FF:9F:76:ED X509v3 Authority Key Identifier: keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d3:d0:e1:86:8d:01:0f:6c:a7:91:d4:a3:14:c9:cc:3f:b5: 1d:fe:8d:70:8a:12:5e:63:dd:49:9f:27:d6:e9:41:5f:0d:f9: 91:5a:38:57:a0:94:4d:47:25:58:9e:41:8d:28:94:f4:5f:7a: 06:d5:1e:9c:bd:58:a5:0c:41:3a:5e:cb:b9:65:ab:8a:b7:04: 8e:18:88:6c:24:8c:01:b7:d1:fd:55:18:ab:fa:89:dd:68:59: 51:ec:82:eb:8d:84:6f:c2:37:59:ab:89:bf:0a:f4:df:6f:58: 0b:6f:fb:43:2e:96:4d:f9:4a:30:e7:67:18:70:6d:72:77:ee: 33:8e:7b:80:2e:c7:bd:15:47:64:19:ba:b4:de:b6:33:fe:38: 26:b0:bb:ee:0f:3d:f4:56:e4:25:cb:29:79:4c:7a:4d:d6:e5: 61:9d:1a:2f:7d:7c:10:34:d8:2e:1d:c3:fc:2e:75:d2:3a:ed: d2:e7:31:48:e9:bd:fd:21:99:5f:8b:7d:7e:2f:9b:ef:45:21: 47:d1:c2:e7:fd:33:d9:da:af:45:de:a2:37:97:ef:57:d5:82: f8:f9:aa:a7:79:ca:55:3a:e9:22:33:e6:06:85:86:fb:b6:3b: 52:33:17:c5:1a:5c:c9:85:02:45:7c:f9:d7:14:6d:85:63:99: d1:40:b5:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz6qs27tL12EHNumBSb6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzQ5MTMwOTRhMjEyNjhjNzNhNjc2NTNhMzczOGQ3M2U1 YzU5YTcwHhcNMjUxMjI0MTAwMjQ4WhcNMjUxMjI1MTAwMjQ4WjAzMTEwLwYDVQQD EyhkOWY4ODE3OGJlMjcwZWM1MDYyNTRhY2E5YTk3NWYzNGZmOWY3NmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuhr34pVOPZvUAIe1X0/YMo8NsZU Pr1tKXm9guZf630Hb/UtLX3rPl5Cp3/TnRkvwA3gn3sUhj9Iee1tiXQuaZDww++R xGL7tUTzRO68rY/FQBXkiD1V4RkC1psx5SekSN+8zAyAy2V/MiQyF5l5GdNV9bL0 f7b0+aGURnhtpjci6Qy657LYI3rzOCQ7hi2HUC8RY4cilj0F0H+RTV25sTfM3dSw HuROUj2r3uib2W1fJnjCOQwpOD5X6/l5oaFKkviDpDArqpOhjv1XUC/9qFbrkIXe Pib5uvpm7BVos5wTfZs9i/Hm2SHjk/0QWCfwQMHU8uJT21cr9tlWevUPMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNn4gXi+Jw7FBiVKypqXXzT/n3btMB8GA1UdIwQY MBaAFNHEkTCUohJoxzpnZTo3ONc+XFmnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAt MzNhODJhYjVmNTEzLzEvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAtMzNhODJhYjVmNTEz LzEvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdPQ4YaN AQ9sp5HUoxTJzD+1Hf6NcIoSXmPdSZ8n1ulBXw35kVo4V6CUTUclWJ5BjSiU9F96 BtUenL1YpQxBOl7LuWWrircEjhiIbCSMAbfR/VUYq/qJ3WhZUeyC642Eb8I3WauJ vwr0329YC2/7Qy6WTflKMOdnGHBtcnfuM457gC7HvRVHZBm6tN62M/44JrC77g89 9FbkJcspeUx6TdblYZ0aL318EDTYLh3D/C510jrt0ucxSOm9/SGZX4t9fi+b70Uh R9HC5/0z2dqvRd6iN5fvV9WC+Pmqp3nKVTrpIjPmBoWG+7Y7UjMXxRpcyYUCRXz5 1xRthWOZ0UC1lQ== -----END CERTIFICATE-----Generated at Wed Dec 24 15:12:42 2025 by rpki-client