This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json) Hash identifier: Xmi1I4e0w5rPIraD44Q7zHq5omv1HrAxIndag0jXUuk= Subject key identifier: C5:B3:59:EF:90:91:29:9D:1B:30:B3:5D:04:4B:79:CD:D0:E4:3F:DE Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68 Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68 Certificate serial: 019B405BDF93E6837A8078A2868A713A1FD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft Manifest number: 0A0B Signing time: Sun 21 Dec 2025 10:02:01 +0000 Manifest this update: Sun 21 Dec 2025 10:02:01 +0000 Manifest next update: Mon 22 Dec 2025 10:02:01 +0000 Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=) 2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: 2AuR6nU6hfBfgXbCuOU1t5arejPcJeNh+KDwzn8cvws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:df:93:e6:83:7a:80:78:a2:86:8a:71:3a:1f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68 Validity Not Before: Dec 21 10:02:01 2025 GMT Not After : Dec 22 10:02:01 2025 GMT Subject: CN=c5b359ef9091299d1b30b35d044b79cdd0e43fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:56:9b:c9:e2:a5:40:c1:97:cc:e3:e1:d9:07: fc:fd:8c:df:d0:07:64:9f:8b:32:b5:21:4a:85:d6: b6:0b:29:4a:ee:d5:56:a1:2c:ad:15:00:94:4e:d5: 91:ae:d9:f0:66:18:b1:10:fc:d5:17:71:78:a1:20: 52:56:10:94:a4:d1:3a:33:9c:c7:68:00:9e:8a:62: 5c:66:d4:fe:a8:80:a2:ec:40:96:95:bf:d8:87:fe: e0:af:87:74:04:40:dd:d0:f2:77:0f:05:96:ce:89: cb:8b:dd:3b:a9:8e:56:cc:ad:96:cc:36:70:af:1a: 1c:60:de:b8:72:4f:44:e2:8d:bc:e1:31:e1:84:c8: cf:b1:38:c6:39:c0:1c:17:97:59:ab:82:3e:3b:70: a3:50:b0:4e:d7:93:59:75:d2:cd:e2:e6:0d:91:cb: b2:2c:55:3b:50:6c:84:68:55:74:81:eb:9d:91:21: ba:a1:6a:16:cb:1f:96:21:5d:c3:cb:d9:db:a9:75: 27:f6:01:1f:2e:f2:06:f1:78:68:d8:ec:4a:2f:06: b8:60:7b:da:9e:fa:dd:f5:a1:77:0b:2f:c1:30:26: 39:b2:b6:d8:ba:f2:8a:d2:22:5e:99:93:86:90:55: ac:08:81:fe:a1:7b:70:ab:3b:82:a9:3c:90:c1:75: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B3:59:EF:90:91:29:9D:1B:30:B3:5D:04:4B:79:CD:D0:E4:3F:DE X509v3 Authority Key Identifier: keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:6d:7b:86:9f:95:5e:c8:b8:ec:14:04:92:c4:a6:9a:08:3f: d8:7c:09:56:59:23:67:4a:71:78:9f:32:4c:e9:c1:6c:73:94: 33:3a:99:17:f2:f9:b5:4e:35:5b:fc:a3:b8:a2:de:df:d8:89: 94:72:84:fe:b0:0f:95:5b:96:0f:58:81:76:02:56:21:01:d2: b9:82:58:75:9b:fc:5e:e2:2a:bd:d3:88:46:b7:86:b6:a0:35: bc:72:6f:85:09:3e:ee:d7:5d:9f:67:b1:9f:18:a5:44:c5:ab: 22:38:e3:17:ed:39:49:12:42:99:af:5c:cc:a2:47:3c:c5:df: d7:2a:41:8f:fb:6c:a4:3f:07:db:9a:61:be:c2:34:b2:0a:84: 8c:55:18:ed:4a:46:a4:5d:36:18:66:bc:b6:b9:0c:19:43:c3: db:c6:ab:c8:46:69:4f:d5:c7:9f:df:17:46:98:24:68:50:26: 8a:c0:98:1d:50:d8:f9:57:b3:9d:50:28:16:3d:fc:7c:b3:e1: 93:18:49:07:50:cf:be:24:7a:d8:b5:51:88:ca:2b:e1:d8:63: 56:3d:34:cc:82:32:80:a6:19:17:b5:7f:ed:ba:a5:1d:d2:bf: 42:68:f2:10:bc:9a:00:2d:70:5b:9a:f5:51:61:dc:a3:5e:9f: c7:af:97:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW9+T5oN6gHiihopxOh/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNDc4Y2NkYzA0ODBhNmI0M2JhY2Q4YWFlZTAwNzliMTZl YzJlNjgwHhcNMjUxMjIxMTAwMjAxWhcNMjUxMjIyMTAwMjAxWjAzMTEwLwYDVQQD EyhjNWIzNTllZjkwOTEyOTlkMWIzMGIzNWQwNDRiNzljZGQwZTQzZmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+labyeKlQMGXzOPh2Qf8/Yzf0Adk n4sytSFKhda2CylK7tVWoSytFQCUTtWRrtnwZhixEPzVF3F4oSBSVhCUpNE6M5zH aACeimJcZtT+qICi7ECWlb/Yh/7gr4d0BEDd0PJ3DwWWzonLi907qY5WzK2WzDZw rxocYN64ck9E4o284THhhMjPsTjGOcAcF5dZq4I+O3CjULBO15NZddLN4uYNkcuy LFU7UGyEaFV0geudkSG6oWoWyx+WIV3Dy9nbqXUn9gEfLvIG8Xho2OxKLwa4YHva nvrd9aF3Cy/BMCY5srbYuvKK0iJemZOGkFWsCIH+oXtwqzuCqTyQwXVFKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWzWe+QkSmdGzCzXQRLec3Q5D/eMB8GA1UdIwQY MBaAFK9HjM3ASAprQ7rNiq7gB5sW7C5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2Yt Y2M4YmYzZmJlZjk5LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2YtY2M4YmYzZmJlZjk5 LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApm17hp+V Xsi47BQEksSmmgg/2HwJVlkjZ0pxeJ8yTOnBbHOUMzqZF/L5tU41W/yjuKLe39iJ lHKE/rAPlVuWD1iBdgJWIQHSuYJYdZv8XuIqvdOIRreGtqA1vHJvhQk+7tddn2ex nxilRMWrIjjjF+05SRJCma9czKJHPMXf1ypBj/tspD8H25phvsI0sgqEjFUY7UpG pF02GGa8trkMGUPD28aryEZpT9XHn98XRpgkaFAmisCYHVDY+VeznVAoFj38fLPh kxhJB1DPviR62LVRiMor4dhjVj00zIIygKYZF7V/7bqlHdK/QmjyELyaAC1wW5r1 UWHco16fx6+XzA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:26:53 2025 by rpki-client