This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft File: 0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json) Hash identifier: dGBuDWbRjTq5muloFjfsjKeBaSICMQKartdo6JX0Oos= Subject key identifier: 44:6E:4F:ED:D1:10:A9:2E:74:06:E9:F5:15:2C:26:C9:AE:0B:54:BB Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13 Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13 Certificate serial: 019B3CB4F8644912753068EB0BFF5D410BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 17:00:51 +0000 Manifest this update: Sat 20 Dec 2025 17:00:51 +0000 Manifest next update: Sun 21 Dec 2025 17:00:51 +0000 Files and hashes: 1: 0mHHxrKDuXooxqRJqM3AcObFutU.roa (hash: 0sIJmx7yyuOdBXcmte6YeWeL6TZg8JAjxBTze6wfptI=) 2: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: 6YrJAtWAcwdWO6SWQ5a4BP3LmJkD6sj+vugb1VMhh9M=) 3: 7CJziOdAfq9jwl7KYFdQlPSS2HM.roa (hash: oYgf2+8vVMNQWr/UIAh3TmOHiKE3yvmzUsWvpHQBY4E=) 4: AA2twhj3JjqNeEtfXh_nvFIhwUI.roa (hash: 7pwyUMMRmENXJp1YdVN9DBuKjXp76GQ7r0RF+5Zw+oI=) 5: NKe-wrE2WicgBb0c0Ud-bVOtGPw.roa (hash: gADDqpEfldBNZqdg/FkPxqfMdnRA+6kZ643uxJ4620k=) 6: dV3eLvyh7dkJSKTfdErtuw7Jadc.roa (hash: NpVV1N+SDAUUoPHhUF4/SnqeySzcrRHlw0l3druFyDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f8:64:49:12:75:30:68:eb:0b:ff:5d:41:0b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13 Validity Not Before: Dec 20 17:00:51 2025 GMT Not After : Dec 21 17:00:51 2025 GMT Subject: CN=446e4fedd110a92e7406e9f5152c26c9ae0b54bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:06:36:e0:9b:f4:2d:db:86:77:2c:10:3a: 95:81:92:30:e3:66:7d:19:87:07:fb:2a:fd:36:64: 2a:5f:da:c6:f8:9b:05:c9:37:e1:78:bd:e0:46:82: 4e:e7:0a:c3:3c:44:dd:c1:82:67:ba:d0:c6:3a:4d: f1:b2:48:5b:dd:f1:98:27:29:38:b0:5f:7c:6b:85: d3:74:47:35:af:4b:47:49:79:e2:16:38:a4:ae:2a: d2:49:76:ff:10:b7:ad:22:c5:73:d5:d4:30:ec:e6: bb:d0:78:88:d2:9e:26:fd:12:1a:d4:33:2f:84:43: 6d:0d:99:f2:95:5d:f0:49:a3:07:5d:ec:56:26:12: e3:cd:93:a5:75:42:13:f2:20:4a:8b:13:bd:5b:1b: ca:08:db:c7:78:2e:d8:7d:45:73:09:c5:03:b1:ee: 4a:7e:7b:c0:66:ef:c2:92:a9:1e:8e:89:d9:c0:9b: 17:ff:0a:53:e4:cd:6f:14:97:ac:13:22:77:01:f6: 6c:d5:6e:c8:ad:de:53:45:a1:65:e1:31:0e:e2:f4: 26:37:27:8c:ad:20:53:2d:be:4d:7c:73:2c:40:13: 94:d4:ce:a5:48:83:87:70:98:48:08:5e:ac:84:4a: 50:54:48:2d:ec:bf:93:96:0e:57:e0:49:e8:3c:04: ac:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6E:4F:ED:D1:10:A9:2E:74:06:E9:F5:15:2C:26:C9:AE:0B:54:BB X509v3 Authority Key Identifier: keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:99:a1:d2:1a:63:98:b9:01:7c:f4:32:10:39:be:58:b7:9a: bc:88:e4:ce:9b:b0:7b:db:9e:57:4c:10:ce:ca:c6:f2:d4:27: 14:b1:d5:0f:87:cb:f5:fd:6e:0d:f9:3e:6b:e7:8c:f6:6f:a0: fa:d9:36:5b:ed:ff:a5:05:74:86:67:06:65:0c:e7:a3:c9:e0: 95:bd:bd:a1:6b:7c:c7:63:aa:6f:7b:7c:95:8d:1d:a3:7a:6d: fe:53:e3:ba:68:99:f7:71:8b:66:33:6e:cb:bd:5a:c8:b3:2a: c2:75:44:94:5c:6c:c3:ed:fe:84:62:20:3f:28:47:6b:ed:f2: e6:31:26:8f:e6:36:55:f8:e1:b2:bd:a4:32:e9:92:28:de:71: ba:2a:9e:e6:a6:54:f1:6e:f7:c8:53:e5:c2:f9:83:86:a3:a3: 68:48:a9:f1:87:7c:31:94:a7:34:8e:a0:1a:68:a0:7f:7b:e3: 71:63:01:e1:aa:87:2d:ce:62:b5:23:d2:bf:48:a1:71:7a:99: 03:dd:dc:9c:74:60:38:5f:b8:55:aa:fe:d3:df:c1:e9:9a:05: 67:2a:9e:04:02:4d:6c:3d:b7:63:36:c7:2c:6a:7c:1e:6c:00: bc:45:6b:8c:89:e6:ea:49:c4:72:2b:02:09:26:81:b6:58:c5: 5d:1c:b7:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPhkSRJ1MGjrC/9dQQuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzJiMGVlMTg3OTI4NDA5MDY1ZDE5ZWU5YzA4NThlOGMx N2VhMTMwHhcNMjUxMjIwMTcwMDUxWhcNMjUxMjIxMTcwMDUxWjAzMTEwLwYDVQQD Eyg0NDZlNGZlZGQxMTBhOTJlNzQwNmU5ZjUxNTJjMjZjOWFlMGI1NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4QGNuCb9C3bhncsEDqVgZIw42Z9 GYcH+yr9NmQqX9rG+JsFyTfheL3gRoJO5wrDPETdwYJnutDGOk3xskhb3fGYJyk4 sF98a4XTdEc1r0tHSXniFjikrirSSXb/ELetIsVz1dQw7Oa70HiI0p4m/RIa1DMv hENtDZnylV3wSaMHXexWJhLjzZOldUIT8iBKixO9WxvKCNvHeC7YfUVzCcUDse5K fnvAZu/CkqkejonZwJsX/wpT5M1vFJesEyJ3AfZs1W7Ird5TRaFl4TEO4vQmNyeM rSBTLb5NfHMsQBOU1M6lSIOHcJhICF6shEpQVEgt7L+Tlg5X4EnoPASssQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERuT+3REKkudAbp9RUsJsmuC1S7MB8GA1UdIwQY MBaAFNLCsO4YeShAkGXRnunAhY6MF+oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2Et YzhlODYzYzFhOGQxLzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2EtYzhlODYzYzFhOGQx LzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZmh0hpj mLkBfPQyEDm+WLeavIjkzpuwe9ueV0wQzsrG8tQnFLHVD4fL9f1uDfk+a+eM9m+g +tk2W+3/pQV0hmcGZQzno8nglb29oWt8x2Oqb3t8lY0do3pt/lPjumiZ93GLZjNu y71ayLMqwnVElFxsw+3+hGIgPyhHa+3y5jEmj+Y2Vfjhsr2kMumSKN5xuiqe5qZU 8W73yFPlwvmDhqOjaEip8Yd8MZSnNI6gGmigf3vjcWMB4aqHLc5itSPSv0ihcXqZ A93cnHRgOF+4Var+09/B6ZoFZyqeBAJNbD23YzbHLGp8HmwAvEVrjInm6knEcisC CSaBtljFXRy3eQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:02:46 2025 by rpki-client