This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json) Hash identifier: bCGFOyrNLCiW2JEa3UkjaZugH4gmyX/i8FxKh6nGe2I= Subject key identifier: 47:4F:B7:07:25:17:97:50:3B:49:7B:72:A2:53:61:B6:F2:F3:99:55 Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73 Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773 Certificate serial: 019B6166361E1790AF9999E7D73C7D1E7DAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft Manifest number: 16CB Signing time: Sat 27 Dec 2025 20:00:46 +0000 Manifest this update: Sat 27 Dec 2025 20:00:46 +0000 Manifest next update: Sun 28 Dec 2025 20:00:46 +0000 Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: SBAf+DGi8J7Rs/GrVoWgjfl0J9emjX3qZsOCQC9d+pA=) 2: TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa (hash: II597D7xa6PgwHa7AFUqvd8eYmaRnt2cxxVqhwKEKzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:66:36:1e:17:90:af:99:99:e7:d7:3c:7d:1e:7d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773 Validity Not Before: Dec 27 20:00:46 2025 GMT Not After : Dec 28 20:00:46 2025 GMT Subject: CN=474fb707251797503b497b72a25361b6f2f39955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:b5:fb:76:fc:a3:28:d8:29:ae:6b:e7:de: 70:25:4c:55:1b:99:f9:a8:d7:29:77:32:e9:71:2b: 98:41:61:6a:35:06:cb:35:21:45:fa:59:03:ad:2b: e5:84:74:b2:73:9f:b6:62:db:25:42:ea:5b:ce:b9: 7c:a1:9f:a4:18:e9:c3:05:a2:d3:fb:53:3d:f1:f7: e5:95:80:54:d5:8b:6b:de:ca:87:76:05:00:b8:68: 56:02:17:a1:d0:c9:ab:77:84:ed:e2:d5:37:85:59: 79:2d:82:1a:13:f6:e9:d6:73:98:23:39:73:28:ed: bd:76:94:a4:a3:d6:7b:24:57:7b:68:c0:96:58:ed: b9:bf:9b:69:ae:2d:5a:ea:3f:b2:cc:0d:44:6c:bc: 8f:48:67:cd:55:ea:bb:b2:12:82:b3:30:ae:11:a7: 54:d7:9f:71:46:45:7b:6a:90:4d:9b:28:f2:65:54: 98:2f:f8:90:34:c0:a9:9e:07:4d:75:2e:6e:9d:05: 3d:b6:35:67:ce:24:5b:f6:c4:0f:22:89:9c:93:c4: 27:54:a5:cd:ba:de:10:be:f9:7c:19:2c:5d:40:b8: 7d:91:e9:59:ee:8d:0e:7e:3c:bb:56:66:bc:e5:0f: ac:19:f1:45:b3:fa:e7:1f:a2:73:ae:8d:ff:c6:80: 7f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4F:B7:07:25:17:97:50:3B:49:7B:72:A2:53:61:B6:F2:F3:99:55 X509v3 Authority Key Identifier: keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a6:de:14:60:24:fa:53:3d:77:d9:d8:59:e2:66:05:87:80: e0:4e:d1:39:89:d9:2a:0e:be:22:ff:d2:24:cf:a4:fb:59:4e: 1d:db:98:76:43:cb:88:57:3b:70:af:12:cd:73:c6:b4:f6:58: 55:61:1f:21:97:cc:0e:2b:44:db:1b:af:69:c5:33:ef:7a:44: 18:4b:a8:e0:30:23:98:95:26:d3:d1:17:dc:a8:0b:ba:d7:a2: 8a:99:71:0a:24:52:d9:ab:dc:fb:0a:c6:63:6a:0c:8c:5f:38: 34:e2:10:bb:73:cb:40:e4:42:eb:f8:f3:b3:d4:fb:13:88:06: 23:96:8e:b2:6c:d5:a6:0c:fb:7b:bb:08:6b:01:70:03:9c:e5: f6:24:81:85:3d:59:24:14:3c:07:b3:97:b0:6e:3f:76:1c:b7: 84:24:62:06:f9:c0:69:a5:c8:3f:52:77:ff:3f:99:70:bc:21: d3:53:26:b2:9d:23:8c:31:cd:40:6a:da:ac:51:0d:8d:68:89: c2:e9:61:84:2c:fd:92:1d:75:86:66:44:60:1b:0b:3c:58:71: 09:64:b5:13:23:6b:76:f8:9b:6b:84:53:43:5a:a2:d9:d0:a1: 9c:b6:1c:4e:a9:50:8a:70:60:0a:22:3e:72:2a:83:98:30:9b: f5:59:61:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthZjYeF5CvmZnn1zx9Hn2tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMjI3N2VhMzA0YjI4NDRhNzg2ODliM2FhMGQ5MjE5ZTMz NjY3NzMwHhcNMjUxMjI3MjAwMDQ2WhcNMjUxMjI4MjAwMDQ2WjAzMTEwLwYDVQQD Eyg0NzRmYjcwNzI1MTc5NzUwM2I0OTdiNzJhMjUzNjFiNmYyZjM5OTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfm1+3b8oyjYKa5r595wJUxVG5n5 qNcpdzLpcSuYQWFqNQbLNSFF+lkDrSvlhHSyc5+2YtslQupbzrl8oZ+kGOnDBaLT +1M98ffllYBU1Ytr3sqHdgUAuGhWAheh0Mmrd4Tt4tU3hVl5LYIaE/bp1nOYIzlz KO29dpSko9Z7JFd7aMCWWO25v5tpri1a6j+yzA1EbLyPSGfNVeq7shKCszCuEadU 159xRkV7apBNmyjyZVSYL/iQNMCpngdNdS5unQU9tjVnziRb9sQPIomck8QnVKXN ut4Qvvl8GSxdQLh9kelZ7o0Ofjy7Vma85Q+sGfFFs/rnH6Jzro3/xoB/ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdPtwclF5dQO0l7cqJTYbby85lVMB8GA1UdIwQY MBaAFNMid+owSyhEp4aJs6oNkhnjNmdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQt MzZjODczOTY5MjNhLzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQtMzZjODczOTY5MjNh LzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARabeFGAk +lM9d9nYWeJmBYeA4E7ROYnZKg6+Iv/SJM+k+1lOHduYdkPLiFc7cK8SzXPGtPZY VWEfIZfMDitE2xuvacUz73pEGEuo4DAjmJUm09EX3KgLuteiiplxCiRS2avc+wrG Y2oMjF84NOIQu3PLQORC6/jzs9T7E4gGI5aOsmzVpgz7e7sIawFwA5zl9iSBhT1Z JBQ8B7OXsG4/dhy3hCRiBvnAaaXIP1J3/z+ZcLwh01Mmsp0jjDHNQGrarFENjWiJ wulhhCz9kh11hmZEYBsLPFhxCWS1EyNrdviba4RTQ1qi2dChnLYcTqlQinBgCiI+ ciqDmDCb9VlhoQ== -----END CERTIFICATE-----Generated at Sun Dec 28 03:20:07 2025 by rpki-client