This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft File: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json) Hash identifier: 5LEOnda/H6E1ocpCtnJvLNw+mKBGmhL4Gq1xlBJykZI= Subject key identifier: 88:C9:F1:B8:34:12:9C:B9:26:26:92:48:2E:19:20:8B:15:2C:DD:4C Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32 Certificate issuer: /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632 Certificate serial: 019B51BC9D3469EDC58BECFAA418DF4FB0A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft Manifest number: 1462 Signing time: Wed 24 Dec 2025 19:01:14 +0000 Manifest this update: Wed 24 Dec 2025 19:01:14 +0000 Manifest next update: Thu 25 Dec 2025 19:01:14 +0000 Files and hashes: 1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: lwvjD6aM0hFCvSUgpIBLdcNZFU5/SpVlNKhZn4zc+L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:9d:34:69:ed:c5:8b:ec:fa:a4:18:df:4f:b0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632 Validity Not Before: Dec 24 19:01:14 2025 GMT Not After : Dec 25 19:01:14 2025 GMT Subject: CN=88c9f1b834129cb9262692482e19208b152cdd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:76:4b:2d:0a:ae:cb:4a:9f:b4:98:33:72: fc:d5:12:09:25:fb:0a:2e:02:ad:df:6a:f1:71:36: ab:69:30:c9:dc:f3:9c:1c:c7:dd:ab:be:e7:87:19: 1e:f4:d9:a1:e0:59:d7:e0:73:58:22:30:85:de:74: 93:db:10:51:9b:4d:20:c5:67:08:93:15:84:03:c2: ae:2f:ad:aa:66:17:71:92:a4:61:23:21:f5:41:21: 25:2d:a3:19:30:74:61:45:8a:0a:91:28:13:66:2f: 3a:b8:97:a7:05:9a:96:e1:91:d8:9e:54:06:92:0c: f4:41:4c:e5:78:74:a6:d0:66:73:d9:25:ff:0e:5b: 76:c3:2f:4d:af:34:97:8c:7f:35:b0:1f:7d:1b:eb: 95:bc:4f:92:1d:3a:c0:1f:4c:39:69:9e:fa:c4:22: 70:2f:f6:d3:77:be:be:cb:62:78:19:d2:28:6e:78: fa:3e:af:6c:20:89:d6:cd:03:fd:51:01:8d:9e:cc: 39:6f:f1:b5:37:e4:88:4f:75:1b:2e:cc:b6:be:e6: 22:63:7e:ad:66:93:30:1d:e8:b1:5a:79:a3:3d:a8: c6:c4:cc:e8:fb:ca:52:92:39:ae:a1:67:15:51:52: 41:71:54:ae:4e:40:80:3e:16:30:7c:da:3c:4c:33: 1d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C9:F1:B8:34:12:9C:B9:26:26:92:48:2E:19:20:8B:15:2C:DD:4C X509v3 Authority Key Identifier: keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5e:61:02:28:25:0e:d3:e2:87:1d:1b:9e:ae:1d:82:07:94: c1:a5:91:f6:5f:e7:24:c0:46:46:5a:8f:94:8d:4b:1c:66:f7: 11:ba:05:3f:a8:df:d9:30:20:d8:06:ef:0a:23:2d:ee:00:c6: fd:9b:98:35:4e:d7:a4:4a:62:e2:22:35:52:8d:fe:18:cd:78: 2c:82:a9:6c:1e:62:8b:74:b8:88:7a:20:fb:f4:2e:8e:51:f3: 1a:f5:28:58:25:04:38:d2:c3:37:6c:60:a2:5d:f3:9c:5a:a7: 48:89:b7:01:41:e6:ec:f6:e2:2a:56:e1:72:4e:ec:cd:45:ba: f0:19:89:fe:93:bc:a5:ef:a0:f1:e7:eb:d5:b9:b9:93:fe:9f: b6:6a:70:3c:5c:8b:16:39:2e:c8:b2:34:df:54:fd:8a:94:97: 84:ae:55:90:2a:38:a3:89:25:00:74:32:e9:ed:59:e1:e0:05: ca:17:18:1f:19:36:e8:87:29:eb:f3:3c:14:98:57:c2:e1:b0: 97:57:80:79:73:0b:d4:cf:ae:42:9e:2d:d2:ff:63:b0:60:a9: 98:1f:a0:6f:7b:07:a6:88:ad:57:dc:00:b2:15:b4:bd:9b:70: d6:42:cd:13:36:83:95:14:7b:b9:4b:d5:28:60:ad:ae:46:54: a0:43:60:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvJ00ae3Fi+z6pBjfT7ClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTBiZDEzYjliNDY2YzMyZTEzNzY1ODA4OGQyODJhM2I3 ZDU2MzIwHhcNMjUxMjI0MTkwMTE0WhcNMjUxMjI1MTkwMTE0WjAzMTEwLwYDVQQD Eyg4OGM5ZjFiODM0MTI5Y2I5MjYyNjkyNDgyZTE5MjA4YjE1MmNkZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPF2Sy0KrstKn7SYM3L81RIJJfsK LgKt32rxcTaraTDJ3POcHMfdq77nhxke9Nmh4FnX4HNYIjCF3nST2xBRm00gxWcI kxWEA8KuL62qZhdxkqRhIyH1QSElLaMZMHRhRYoKkSgTZi86uJenBZqW4ZHYnlQG kgz0QUzleHSm0GZz2SX/Dlt2wy9NrzSXjH81sB99G+uVvE+SHTrAH0w5aZ76xCJw L/bTd76+y2J4GdIobnj6Pq9sIInWzQP9UQGNnsw5b/G1N+SIT3UbLsy2vuYiY36t ZpMwHeixWnmjPajGxMzo+8pSkjmuoWcVUVJBcVSuTkCAPhYwfNo8TDMdVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjJ8bg0Epy5JiaSSC4ZIIsVLN1MMB8GA1UdIwQY MBaAFNLgvRO5tGbDLhN2WAiNKCo7fVYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHVDOUU3bTBac011RTNaWUNJMG9LanQ5VmpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZDc5OWYtYzVlYi00NGJjLWE0Mzkt NmYzYTIzZmYwYzU4LzEvMHVDOUU3bTBac011RTNaWUNJMG9LanQ5VmpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS85ZDc5OWYtYzVlYi00NGJjLWE0MzktNmYzYTIzZmYwYzU4 LzEvMHVDOUU3bTBac011RTNaWUNJMG9LanQ5VmpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHF5hAigl DtPihx0bnq4dggeUwaWR9l/nJMBGRlqPlI1LHGb3EboFP6jf2TAg2AbvCiMt7gDG /ZuYNU7XpEpi4iI1Uo3+GM14LIKpbB5ii3S4iHog+/QujlHzGvUoWCUEONLDN2xg ol3znFqnSIm3AUHm7PbiKlbhck7szUW68BmJ/pO8pe+g8efr1bm5k/6ftmpwPFyL FjkuyLI031T9ipSXhK5VkCo4o4klAHQy6e1Z4eAFyhcYHxk26Icp6/M8FJhXwuGw l1eAeXML1M+uQp4t0v9jsGCpmB+gb3sHpoitV9wAshW0vZtw1kLNEzaDlRR7uUvV KGCtrkZUoENgzA== -----END CERTIFICATE-----Generated at Thu Dec 25 02:42:57 2025 by rpki-client