This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft File: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json) Hash identifier: 9u8YMH5EiT8JyEsvsffdkPAsru4YgCFaOBwJsExSkMI= Subject key identifier: E1:77:60:F8:64:FA:79:23:6D:90:44:4C:EC:A3:44:05:CA:C4:30:02 Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C Certificate issuer: /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c Certificate serial: 019B6957676DF41405A03AB49F74DACDBFC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 09:01:34 +0000 Manifest this update: Mon 29 Dec 2025 09:01:34 +0000 Manifest next update: Tue 30 Dec 2025 09:01:34 +0000 Files and hashes: 1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: z0hflvd6lIRwcdHztqWQvjf/yYhmLNBkF4IFmulyZdU=) 2: sndMGN9hrwytu8M86g8e17_E-wk.roa (hash: 5lmWBoAQNAypsv2KN0NMYJT+hXVE7BGT1N8Z8n2QPIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:57:67:6d:f4:14:05:a0:3a:b4:9f:74:da:cd:bf:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c Validity Not Before: Dec 29 09:01:34 2025 GMT Not After : Dec 30 09:01:34 2025 GMT Subject: CN=e17760f864fa79236d90444ceca34405cac43002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:19:97:46:1b:07:b2:6b:f4:42:5e:b0:9e:8b: 2e:13:23:3f:79:1b:35:ff:ad:53:f9:b3:4e:fb:8e: f2:75:3f:23:5c:b6:5f:93:9b:bd:59:00:08:f3:30: 49:ef:9a:5e:82:a4:6a:96:ac:65:96:b5:2e:75:33: fc:d0:86:df:7f:ad:5e:be:72:66:4c:e4:92:94:d7: f4:97:74:74:19:57:0c:53:28:49:b7:78:18:e1:fc: a6:e7:5d:d9:1d:58:2c:1f:52:91:98:09:49:f4:e2: 0a:2d:05:7a:f9:32:ab:e9:eb:4c:49:4f:9a:69:77: 63:38:92:49:e4:d6:14:f8:ba:0b:00:d3:d3:6a:39: 13:cd:e3:29:81:3f:dc:51:4e:53:5e:1d:03:99:81: 63:02:87:dd:db:10:61:20:eb:77:e7:16:fd:89:37: f4:5e:51:5c:f0:bc:53:33:15:e0:e5:dd:58:1b:b6: 7a:0e:90:28:dd:14:86:1b:e6:56:d0:a1:be:67:37: 3f:6b:d2:91:24:75:9b:92:cd:ae:7c:38:14:24:07: 50:8a:3d:32:42:14:38:51:da:07:94:ce:da:76:f8: dc:13:36:99:22:0f:c5:1e:73:aa:7c:c7:49:4a:cb: 9c:04:ec:35:f9:dd:07:7f:3f:e3:4a:d4:78:b4:2d: 19:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:77:60:F8:64:FA:79:23:6D:90:44:4C:EC:A3:44:05:CA:C4:30:02 X509v3 Authority Key Identifier: keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:74:4d:1f:8c:d3:37:df:06:31:71:92:c6:86:2d:6e:76:93: 65:ba:cf:83:d2:1c:ef:a3:cc:9b:8d:10:c8:b5:1f:c6:52:b6: b3:13:56:77:cf:19:fc:69:57:6b:ab:5c:08:f3:6a:a0:82:e3: 8e:1b:11:2f:e7:ca:d9:47:18:15:5f:b5:b6:10:35:8a:b0:85: 4c:a5:83:1f:cb:53:d2:e9:a8:dd:ac:26:94:69:8a:e2:b8:f8: 24:fb:21:30:ca:4b:a3:3e:a1:ed:75:16:e4:78:8c:c7:4c:fd: d1:36:7c:17:83:d5:9c:93:07:6a:31:7d:64:8e:a2:4e:da:b6: e8:4c:2e:0b:92:5e:29:14:15:c6:52:df:f8:1a:12:43:e1:c5: db:48:64:cb:66:90:59:46:d5:7d:af:35:f0:e4:48:29:ed:3c: 68:cb:9f:0b:11:d5:f8:0e:4a:c0:88:ba:c4:ad:4b:e2:8a:9b: f0:44:29:9c:82:43:fd:7f:c9:e0:ec:0d:34:c7:28:83:fa:5b: a9:50:3e:bb:08:d9:b5:7a:d2:ad:25:32:bc:3a:1c:80:91:75: f5:d7:c9:e9:9f:16:60:60:78:3d:7e:f7:3c:be:d8:a1:27:04: 1f:ef:fd:22:92:36:5d:c2:db:64:91:3f:c2:b2:7a:22:1a:f5: 6a:42:5c:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpV2dt9BQFoDq0n3Tazb/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDk4Y2QzMjdlYTMzYmZmODYyOWQ3ZjQ5ZDZiZTNhZGM1 ZmYzMmMwHhcNMjUxMjI5MDkwMTM0WhcNMjUxMjMwMDkwMTM0WjAzMTEwLwYDVQQD EyhlMTc3NjBmODY0ZmE3OTIzNmQ5MDQ0NGNlY2EzNDQwNWNhYzQzMDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xmXRhsHsmv0Ql6wnosuEyM/eRs1 /61T+bNO+47ydT8jXLZfk5u9WQAI8zBJ75pegqRqlqxllrUudTP80Ibff61evnJm TOSSlNf0l3R0GVcMUyhJt3gY4fym513ZHVgsH1KRmAlJ9OIKLQV6+TKr6etMSU+a aXdjOJJJ5NYU+LoLANPTajkTzeMpgT/cUU5TXh0DmYFjAofd2xBhIOt35xb9iTf0 XlFc8LxTMxXg5d1YG7Z6DpAo3RSGG+ZW0KG+Zzc/a9KRJHWbks2ufDgUJAdQij0y QhQ4UdoHlM7advjcEzaZIg/FHnOqfMdJSsucBOw1+d0Hfz/jStR4tC0ZdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOF3YPhk+nkjbZBETOyjRAXKxDACMB8GA1UdIwQY MBaAFNdJjNMn6jO/+GKdf0nWvjrcX/MsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBtTTB5ZnFNN180WXAxX1NkYS1PdHhmOHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yN2M0YzEtMTU3Ny00ZWUxLWFhMjQt YWRlMmJhYmNiOGQwLzEvMTBtTTB5ZnFNN180WXAxX1NkYS1PdHhmOHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yN2M0YzEtMTU3Ny00ZWUxLWFhMjQtYWRlMmJhYmNiOGQw LzEvMTBtTTB5ZnFNN180WXAxX1NkYS1PdHhmOHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3RNH4zT N98GMXGSxoYtbnaTZbrPg9Ic76PMm40QyLUfxlK2sxNWd88Z/GlXa6tcCPNqoILj jhsRL+fK2UcYFV+1thA1irCFTKWDH8tT0umo3awmlGmK4rj4JPshMMpLoz6h7XUW 5HiMx0z90TZ8F4PVnJMHajF9ZI6iTtq26EwuC5JeKRQVxlLf+BoSQ+HF20hky2aQ WUbVfa818ORIKe08aMufCxHV+A5KwIi6xK1L4oqb8EQpnIJD/X/J4OwNNMcog/pb qVA+uwjZtXrSrSUyvDocgJF19dfJ6Z8WYGB4PX73PL7YoScEH+/9IpI2XcLbZJE/ wrJ6Ihr1akJc/Q== -----END CERTIFICATE-----Generated at Mon Dec 29 13:23:18 2025 by rpki-client