This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft File: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json) Hash identifier: qX1caOFhbsrLjC127sx3QMXoH1PTVJcUMRnoHCRHgYA= Subject key identifier: 25:1B:4E:0E:49:1B:E1:87:69:7B:1D:36:C2:54:75:32:CC:13:6E:01 Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A Certificate issuer: /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a Certificate serial: 019B481579E47214CF68911DFC20D954F1C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 22:02:05 +0000 Manifest this update: Mon 22 Dec 2025 22:02:05 +0000 Manifest next update: Tue 23 Dec 2025 22:02:05 +0000 Files and hashes: 1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: 2cb3NLw4M4NzpOYcaVmmg4dQbD+xpHUcpmjoDGF5ud8=) 2: AddwdaQYSDgJ_-W9pipGLPibD4Q.roa (hash: YjKAFD6jnw8P32xCITagf8KVgpNGeRxCswidFmsKIOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:79:e4:72:14:cf:68:91:1d:fc:20:d9:54:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a Validity Not Before: Dec 22 22:02:05 2025 GMT Not After : Dec 23 22:02:05 2025 GMT Subject: CN=251b4e0e491be187697b1d36c2547532cc136e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:86:8a:27:b2:1e:c5:ca:1b:b7:2b:30:47:e1: 2a:c1:9b:43:b1:7b:79:60:08:6e:b4:7e:4b:1b:ec: fe:96:78:9e:a8:e5:47:91:ad:ec:b3:f4:d4:67:f9: d6:af:bc:01:a2:08:50:a4:76:1f:d3:4f:2c:28:17: 0a:db:8c:a4:b2:9c:70:c6:70:46:80:f7:55:68:67: 5f:99:51:96:e9:d7:0b:23:ef:d9:4c:17:cc:80:95: 42:54:53:e8:01:bf:d3:4e:8f:72:af:26:15:98:26: 33:c3:f6:90:35:a4:c8:09:98:b1:de:ce:45:7c:d9: cc:b4:25:eb:da:3c:0d:1f:96:25:3c:1d:9b:5a:4c: 39:4b:f1:9f:e7:60:f4:fb:fe:c4:07:8d:36:49:f4: 47:ca:b9:d4:ce:0c:b2:98:8d:03:aa:25:a2:63:f2: 51:a9:bb:ed:0a:a7:26:6c:b5:16:ac:55:eb:22:a9: e1:35:f0:3c:9c:fa:49:0b:1b:54:91:c8:48:28:9c: 91:79:c7:ac:be:45:86:aa:22:94:cc:ba:93:be:d1: 1e:d4:1d:7e:13:10:03:05:34:26:a6:da:f8:a1:79: bc:04:75:0d:a8:3e:4e:05:0f:f9:cf:7b:27:77:2d: 9a:2d:dd:30:a1:3e:03:84:11:57:d0:95:46:c0:95: 5b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1B:4E:0E:49:1B:E1:87:69:7B:1D:36:C2:54:75:32:CC:13:6E:01 X509v3 Authority Key Identifier: keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:74:ec:89:e3:28:49:e7:a9:52:10:d0:4b:f5:e8:77:e4:70: 7e:f4:ae:83:f4:91:2a:b0:c2:1e:e8:46:32:0a:0c:73:0f:9c: d5:b4:16:09:4d:f3:7d:9b:ed:88:ed:10:0f:a8:dc:41:d4:fd: 1f:98:46:3e:95:ce:f4:5d:97:63:dd:50:a6:20:4a:b6:9e:16: f4:1b:4e:4d:56:e6:90:7a:e2:7a:01:7f:4c:c7:8d:14:c9:ac: 30:72:a8:ef:d9:fd:9a:a7:68:70:37:1f:42:a6:61:eb:8f:61: 49:1c:a7:be:bf:8a:aa:56:71:43:75:82:b3:fd:4b:43:20:f4: 41:07:48:45:3f:15:63:3a:37:b7:5c:73:c0:f7:01:a2:45:0f: 8f:d6:ba:7e:a0:83:67:fd:6b:65:99:30:2b:04:43:20:a6:6c: 45:9c:d9:95:59:f0:a5:92:36:6b:91:2e:36:fb:a6:8e:78:3e: d2:ef:96:8f:33:70:c6:8c:aa:22:d3:a6:4e:3e:cb:24:8d:a4: 56:38:6d:05:22:3c:88:30:bb:67:ef:02:ea:e0:4e:eb:e1:dc: 53:db:c7:ec:9e:ac:ad:53:19:81:ea:7c:95:2e:d8:3f:38:cc: 31:78:8d:de:d7:32:0e:4f:dd:d9:f5:63:9f:31:ce:b8:48:84: 32:c2:ef:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFXnkchTPaJEd/CDZVPHAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZTY1YmVjNWM3NjVjODUwZWU4ZmY5N2NjNDFiMzgwMzFk MWQ4M2EwHhcNMjUxMjIyMjIwMjA1WhcNMjUxMjIzMjIwMjA1WjAzMTEwLwYDVQQD EygyNTFiNGUwZTQ5MWJlMTg3Njk3YjFkMzZjMjU0NzUzMmNjMTM2ZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IaKJ7IexcobtyswR+EqwZtDsXt5 YAhutH5LG+z+lnieqOVHka3ss/TUZ/nWr7wBoghQpHYf008sKBcK24ykspxwxnBG gPdVaGdfmVGW6dcLI+/ZTBfMgJVCVFPoAb/TTo9yryYVmCYzw/aQNaTICZix3s5F fNnMtCXr2jwNH5YlPB2bWkw5S/Gf52D0+/7EB402SfRHyrnUzgyymI0DqiWiY/JR qbvtCqcmbLUWrFXrIqnhNfA8nPpJCxtUkchIKJyRecesvkWGqiKUzLqTvtEe1B1+ ExADBTQmptr4oXm8BHUNqD5OBQ/5z3sndy2aLd0woT4DhBFX0JVGwJVb1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUbTg5JG+GHaXsdNsJUdTLME24BMB8GA1UdIwQY MBaAFNDmW+xcdlyFDuj/l8xBs4Ax0dg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME9aYjdGeDJYSVVPNlAtWHpFR3pnREhSMkRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82YmI3Y2ItZDBlZC00NjUwLWFkMGEt MjdhNDc0NTA1NDk5LzEvME9aYjdGeDJYSVVPNlAtWHpFR3pnREhSMkRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS82YmI3Y2ItZDBlZC00NjUwLWFkMGEtMjdhNDc0NTA1NDk5 LzEvME9aYjdGeDJYSVVPNlAtWHpFR3pnREhSMkRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHTsieMo SeepUhDQS/Xod+RwfvSug/SRKrDCHuhGMgoMcw+c1bQWCU3zfZvtiO0QD6jcQdT9 H5hGPpXO9F2XY91QpiBKtp4W9BtOTVbmkHriegF/TMeNFMmsMHKo79n9mqdocDcf QqZh649hSRynvr+KqlZxQ3WCs/1LQyD0QQdIRT8VYzo3t1xzwPcBokUPj9a6fqCD Z/1rZZkwKwRDIKZsRZzZlVnwpZI2a5EuNvumjng+0u+WjzNwxoyqItOmTj7LJI2k VjhtBSI8iDC7Z+8C6uBO6+HcU9vH7J6srVMZgep8lS7YPzjMMXiN3tcyDk/d2fVj nzHOuEiEMsLvkA== -----END CERTIFICATE-----Generated at Tue Dec 23 02:52:38 2025 by rpki-client