This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json) Hash identifier: wj8BGl4KS6hkC3/v/9MqRY3eK/iAwZRlOfxCsGO5Te8= Subject key identifier: E4:33:66:00:9A:68:44:36:72:83:EC:06:77:23:CC:71:F4:52:9A:7F Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a Certificate serial: 019B3DC7C6C630C30BB0C3EDBF03DCB42E9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft Manifest number: 0A81 Signing time: Sat 20 Dec 2025 22:01:01 +0000 Manifest this update: Sat 20 Dec 2025 22:01:01 +0000 Manifest next update: Sun 21 Dec 2025 22:01:01 +0000 Files and hashes: 1: 24PmMpD-bHbUV8mxF_RlzuSRjLU.roa (hash: ohLVMvfqoqKO1xPsU0QfK7dKJZtv+ZBmQ14II/YiXms=) 2: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: NeNW20wrU8jvrDm2VsYPhfh70NQJlZjnIrMIkDlz7zM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:c6:c6:30:c3:0b:b0:c3:ed:bf:03:dc:b4:2e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a Validity Not Before: Dec 20 22:01:01 2025 GMT Not After : Dec 21 22:01:01 2025 GMT Subject: CN=e43366009a6844367283ec067723cc71f4529a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:7e:cc:4d:64:af:d3:51:73:21:ef:fa:f5: 8c:87:89:7a:a7:1f:6b:20:8f:e6:cc:7c:6c:b6:e2: 21:f7:03:b0:84:d7:ba:ea:ce:72:91:55:59:87:f9: 81:4d:e9:0f:56:8d:bb:22:d1:ab:ee:92:62:6a:0d: 29:98:2f:fc:e8:ed:bd:b0:30:96:18:d4:d6:0c:ee: 16:bb:05:97:85:6c:57:41:91:2e:ab:c1:c6:ef:07: 00:e4:f7:43:49:9b:9d:26:ba:41:12:19:94:55:ad: f6:e0:d0:e9:3c:10:46:6e:b0:dc:15:08:7b:4e:cf: 81:7f:cb:d8:6d:ba:62:52:d6:81:48:90:e4:6b:79: 4f:71:27:f8:91:c0:00:27:62:19:86:18:d8:3b:d1: 5d:ec:1c:7d:90:f5:45:31:98:3d:df:de:0c:0a:a4: 07:80:b5:d8:2a:91:5e:cd:ac:16:b6:fb:04:ac:85: 30:93:9e:39:fd:2e:cb:86:25:61:ec:19:b1:78:71: e5:55:b6:b8:b0:d3:0a:06:43:a8:c4:ca:9c:42:9a: 50:92:c6:bd:dc:ab:24:23:41:c4:e5:fa:6b:4d:a5: b5:41:06:ec:78:41:15:43:e9:c0:ac:02:cb:d8:7d: f1:32:13:2e:45:1b:88:26:83:3c:cf:d0:dd:9f:fc: 17:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:66:00:9A:68:44:36:72:83:EC:06:77:23:CC:71:F4:52:9A:7F X509v3 Authority Key Identifier: keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:71:6c:32:5c:cb:f6:e2:de:2b:25:26:54:07:08:62:40:f9: c0:71:f4:81:4d:4e:bd:a0:8a:8f:97:22:20:7f:ef:ef:f5:42: 46:71:37:7b:2e:65:8f:60:12:a1:e9:eb:07:f1:aa:d6:a5:b3: 9b:2a:0e:34:ec:3f:64:af:cc:59:32:5f:6c:ba:fa:bf:5c:ce: 82:b6:1a:b0:2b:b2:23:d3:13:81:2a:ca:6c:f3:19:de:7b:d8: 0e:85:36:78:db:8b:f0:3d:31:02:9c:d4:ef:69:fd:30:07:1b: 64:ca:6c:aa:3b:eb:6c:92:45:1a:0e:07:96:ac:bb:66:ae:4f: 2a:ba:26:2c:1a:27:8d:21:8b:dd:89:fe:42:a6:42:f6:d4:64: 24:f5:c4:e4:5a:24:a0:ec:3c:01:41:04:a5:50:27:7c:52:c2: b7:5c:cc:47:d2:c6:04:4d:15:6c:3a:79:70:ff:97:ce:c0:37: 63:f4:12:cc:ef:33:6c:f4:44:24:3c:4d:b4:e8:0d:5e:e3:45: 04:c9:56:a3:68:19:f7:06:85:0e:44:a7:d9:2a:0b:49:be:91: 1c:98:2e:b1:74:c6:8c:28:63:8b:5b:bb:2c:e2:d5:5a:8a:15: 94:a3:11:12:3b:dd:9f:3c:fc:fe:e3:bd:ac:16:57:10:8c:42: 73:2a:41:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x8bGMMMLsMPtvwPctC6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZDA2ZGQyN2JkOTNhMzgwZGE0Yzc1ZDFhOGJmMDc2ODI4 ZmQ2NGEwHhcNMjUxMjIwMjIwMTAxWhcNMjUxMjIxMjIwMTAxWjAzMTEwLwYDVQQD EyhlNDMzNjYwMDlhNjg0NDM2NzI4M2VjMDY3NzIzY2M3MWY0NTI5YTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK9+zE1kr9NRcyHv+vWMh4l6px9r II/mzHxstuIh9wOwhNe66s5ykVVZh/mBTekPVo27ItGr7pJiag0pmC/86O29sDCW GNTWDO4WuwWXhWxXQZEuq8HG7wcA5PdDSZudJrpBEhmUVa324NDpPBBGbrDcFQh7 Ts+Bf8vYbbpiUtaBSJDka3lPcSf4kcAAJ2IZhhjYO9Fd7Bx9kPVFMZg9394MCqQH gLXYKpFezawWtvsErIUwk545/S7LhiVh7BmxeHHlVba4sNMKBkOoxMqcQppQksa9 3KskI0HE5fprTaW1QQbseEEVQ+nArALL2H3xMhMuRRuIJoM8z9Ddn/wXrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQzZgCaaEQ2coPsBncjzHH0Upp/MB8GA1UdIwQY MBaAFArQbdJ72To4DaTHXRqL8HaCj9ZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3RCdDBudlpPamdOcE1kZEdvdndkb0tQMWtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kYjc1ZGItMjViMi00M2RjLWFhMTIt ZWQwMDFhMjg4OWFkLzEvQ3RCdDBudlpPamdOcE1kZEdvdndkb0tQMWtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kYjc1ZGItMjViMi00M2RjLWFhMTItZWQwMDFhMjg4OWFk LzEvQ3RCdDBudlpPamdOcE1kZEdvdndkb0tQMWtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXFsMlzL 9uLeKyUmVAcIYkD5wHH0gU1OvaCKj5ciIH/v7/VCRnE3ey5lj2ASoenrB/Gq1qWz myoONOw/ZK/MWTJfbLr6v1zOgrYasCuyI9MTgSrKbPMZ3nvYDoU2eNuL8D0xApzU 72n9MAcbZMpsqjvrbJJFGg4Hlqy7Zq5PKromLBonjSGL3Yn+QqZC9tRkJPXE5Fok oOw8AUEEpVAnfFLCt1zMR9LGBE0VbDp5cP+XzsA3Y/QSzO8zbPREJDxNtOgNXuNF BMlWo2gZ9waFDkSn2SoLSb6RHJgusXTGjChji1u7LOLVWooVlKMREjvdnzz8/uO9 rBZXEIxCcypBcA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:29:51 2025 by rpki-client