This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json) Hash identifier: RcDvhXzCHMAVmABK0nwmBwTlztnSLXgMpm9aLHDqYLg= Subject key identifier: 1F:22:F8:C0:E8:10:66:AD:32:AE:29:86:88:4A:A5:ED:26:85:58:F0 Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73 Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773 Certificate serial: 019B53E1FE539E6B01A5212183F2AF70B614 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft Manifest number: 16C4 Signing time: Thu 25 Dec 2025 05:01:18 +0000 Manifest this update: Thu 25 Dec 2025 05:01:18 +0000 Manifest next update: Fri 26 Dec 2025 05:01:18 +0000 Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: wLthjxWV9rF5iwJeTpmSn/gie/Ho9qy6EbCsprkbPqo=) 2: TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa (hash: II597D7xa6PgwHa7AFUqvd8eYmaRnt2cxxVqhwKEKzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:fe:53:9e:6b:01:a5:21:21:83:f2:af:70:b6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773 Validity Not Before: Dec 25 05:01:18 2025 GMT Not After : Dec 26 05:01:18 2025 GMT Subject: CN=1f22f8c0e81066ad32ae2986884aa5ed268558f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:59:8a:ce:90:ed:a9:c4:91:d5:2e:ba:e8: da:10:bb:37:a4:31:36:fb:ff:08:d8:2c:21:7f:4d: e9:66:eb:d2:95:87:c7:04:f6:65:87:6f:2a:e4:f0: 4c:80:20:4d:7a:c5:6c:12:ba:43:ac:92:90:d9:2b: 88:e5:6e:04:8f:a2:04:5e:8e:3a:58:08:59:d0:61: 5b:02:a4:90:53:c9:23:b0:14:bc:9b:18:23:28:cf: 99:e0:96:50:b4:c5:d6:4a:5e:3f:a8:05:62:21:ae: ae:5e:86:18:34:dd:d8:9f:46:e5:73:9d:9a:61:10: ee:04:b9:b9:2b:0b:fc:2c:8c:ed:8c:7f:e9:78:e5: db:85:68:26:80:03:0f:aa:67:f9:52:6e:23:ba:d0: a8:05:89:f1:45:8a:7f:c2:64:03:f1:1a:e2:e6:59: 19:25:08:27:55:f4:db:19:55:cf:d2:75:8f:30:94: 1d:38:b0:f0:26:7b:f9:02:80:77:99:a8:09:6c:87: ea:db:84:92:75:d8:db:a7:1e:74:b2:4e:19:92:dd: 55:3e:cb:cb:f0:5c:ed:a7:ce:61:50:01:d4:e9:fa: 86:3a:83:de:8c:54:5f:c7:5b:33:7e:dd:41:0a:3e: 39:6b:1f:a5:c1:c9:75:9a:59:cb:82:39:96:dd:65: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:22:F8:C0:E8:10:66:AD:32:AE:29:86:88:4A:A5:ED:26:85:58:F0 X509v3 Authority Key Identifier: keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4c:04:62:bf:ba:cd:77:0d:d4:fa:ca:b4:11:37:95:b8:26: 6f:5d:a9:31:c0:65:c4:3b:b2:8b:da:a9:ef:d5:8d:8e:93:a8: 37:cf:7b:bb:bc:0f:6d:7b:09:7b:6c:dd:c6:9c:86:06:f5:d8: f0:63:e7:6b:0e:ba:da:30:f0:50:42:0c:c9:e8:88:62:21:f6: 9b:38:d3:d9:45:bd:63:9c:48:3d:5c:dc:2f:e6:99:cd:14:47: b7:e1:04:23:48:1e:4d:87:6f:1c:63:fc:75:90:69:ca:7d:a9: b4:d0:c1:14:6e:bf:8d:8e:5e:c5:14:14:e3:b7:93:d6:06:18: 14:2e:41:ae:fd:38:04:ae:71:56:ea:ea:2a:e9:82:0e:82:9b: ef:f0:27:07:db:63:7d:e9:2a:4b:7f:db:bc:88:a5:6d:5a:f3: e1:b4:46:1d:7a:50:94:f2:8c:8e:9c:62:56:4c:ed:29:e4:fa: aa:da:8f:d6:be:10:56:18:ac:bd:9a:3c:93:2a:d7:e6:23:19: 1c:04:a6:cc:98:65:65:2c:9e:a5:b3:b2:a6:eb:9f:4a:be:d3: ec:b5:f0:18:df:10:63:d9:a9:a1:bc:7a:66:41:c7:99:08:97: c6:fa:b7:ca:e4:8f:14:b0:9e:5f:8e:d0:ac:ca:6f:66:da:43: 8d:ec:e4:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4f5TnmsBpSEhg/KvcLYUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMjI3N2VhMzA0YjI4NDRhNzg2ODliM2FhMGQ5MjE5ZTMz NjY3NzMwHhcNMjUxMjI1MDUwMTE4WhcNMjUxMjI2MDUwMTE4WjAzMTEwLwYDVQQD EygxZjIyZjhjMGU4MTA2NmFkMzJhZTI5ODY4ODRhYTVlZDI2ODU1OGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuThZis6Q7anEkdUuuujaELs3pDE2 +/8I2Cwhf03pZuvSlYfHBPZlh28q5PBMgCBNesVsErpDrJKQ2SuI5W4Ej6IEXo46 WAhZ0GFbAqSQU8kjsBS8mxgjKM+Z4JZQtMXWSl4/qAViIa6uXoYYNN3Yn0blc52a YRDuBLm5Kwv8LIztjH/peOXbhWgmgAMPqmf5Um4jutCoBYnxRYp/wmQD8Rri5lkZ JQgnVfTbGVXP0nWPMJQdOLDwJnv5AoB3magJbIfq24SSddjbpx50sk4Zkt1VPsvL 8Fztp85hUAHU6fqGOoPejFRfx1szft1BCj45ax+lwcl1mlnLgjmW3WVyQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8i+MDoEGatMq4phohKpe0mhVjwMB8GA1UdIwQY MBaAFNMid+owSyhEp4aJs6oNkhnjNmdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQt MzZjODczOTY5MjNhLzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQtMzZjODczOTY5MjNh LzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekwEYr+6 zXcN1PrKtBE3lbgmb12pMcBlxDuyi9qp79WNjpOoN897u7wPbXsJe2zdxpyGBvXY 8GPnaw662jDwUEIMyeiIYiH2mzjT2UW9Y5xIPVzcL+aZzRRHt+EEI0geTYdvHGP8 dZBpyn2ptNDBFG6/jY5exRQU47eT1gYYFC5Brv04BK5xVurqKumCDoKb7/AnB9tj fekqS3/bvIilbVrz4bRGHXpQlPKMjpxiVkztKeT6qtqP1r4QVhisvZo8kyrX5iMZ HASmzJhlZSyepbOypuufSr7T7LXwGN8QY9mpobx6ZkHHmQiXxvq3yuSPFLCeX47Q rMpvZtpDjezkpQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:26:05 2025 by rpki-client