This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json) Hash identifier: 9MTJzbrPjtRLKg7WDIeksu5SI7WG4XV2eWbAshkFcmk= Subject key identifier: 2D:74:F3:68:BD:7B:89:05:03:C1:96:04:31:09:F8:5F:51:63:30:55 Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55 Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055 Certificate serial: 019B77B73904EAAE92CCAD1EFD2469F4298A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft Manifest number: 17A7 Signing time: Thu 01 Jan 2026 04:00:54 +0000 Manifest this update: Thu 01 Jan 2026 04:00:54 +0000 Manifest next update: Fri 02 Jan 2026 04:00:54 +0000 Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: SbVruD8Arb5rdJ5uriLZGhGB0v7QF2Xg/fI4hk90FwA=) 2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:b7:39:04:ea:ae:92:cc:ad:1e:fd:24:69:f4:29:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055 Validity Not Before: Jan 1 04:00:54 2026 GMT Not After : Jan 2 04:00:54 2026 GMT Subject: CN=2d74f368bd7b890503c196043109f85f51633055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:ee:27:4f:60:0e:ca:12:f5:bb:de:57:5c: 6b:da:1b:1f:72:2f:83:b1:e8:19:3d:18:ae:b9:d8: 5b:46:9d:23:3a:6e:b5:47:cb:9e:68:69:93:d5:70: ee:ab:c2:9c:c1:34:36:c7:2d:62:8a:ec:49:29:23: 46:e9:d3:4c:7e:b5:3a:eb:23:a4:fd:8b:7d:d2:c4: a2:a5:f6:fe:3d:cb:df:74:76:aa:81:b3:e1:cf:11: fb:7e:80:77:55:84:c5:05:1f:42:0c:bd:5b:ca:ca: ab:d2:f4:37:27:06:42:d2:a5:24:8f:4c:8d:97:d8: 22:e3:1c:66:8d:ee:51:b3:3c:e2:08:32:91:9a:e6: ef:0a:5b:18:e9:31:34:78:11:8a:f8:3c:12:05:46: 90:c2:fc:bb:b2:f1:9b:36:71:b0:fa:3f:c1:8a:a2: ee:3f:3d:09:c3:b0:fb:ac:2f:dc:d1:7d:f1:ab:8b: 7d:07:df:ad:df:cf:ba:1d:bd:c6:5c:b8:48:9a:ca: c7:15:34:03:e1:00:c3:f3:6e:86:03:66:cc:d8:83: f1:ef:d9:41:37:3c:3a:e5:f0:4b:ae:7f:4a:32:90: 55:f7:2c:62:f1:b2:13:3c:58:e3:65:f7:48:9b:03: c9:a8:2c:a8:19:1a:2d:c2:9f:db:04:4e:07:84:37: cf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:74:F3:68:BD:7B:89:05:03:C1:96:04:31:09:F8:5F:51:63:30:55 X509v3 Authority Key Identifier: keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:5b:e0:67:2c:00:58:2e:0f:32:05:dc:f0:f4:2d:e9:d2:4f: b5:ce:f2:a1:cb:3c:84:64:33:bf:4a:64:4e:0c:b1:16:ec:a2: a3:77:0f:f7:04:70:f0:bc:e5:69:fa:f5:aa:d5:a7:14:ff:e2: fb:e4:f2:34:5a:76:78:4d:f0:32:82:75:56:ea:8b:de:81:16: f0:72:26:13:7f:93:36:b5:0f:7e:a7:44:b7:c8:cd:9b:f7:6f: 1b:9a:36:c1:c9:99:96:5e:45:96:1f:e8:ef:48:58:82:09:dc: 20:5f:cc:e7:8d:1c:94:f2:79:27:e3:25:dc:d8:8a:f4:88:65: 96:d9:fd:4e:38:56:e8:d5:2f:bc:3d:03:f9:79:7d:22:ca:0f: dc:b4:03:40:98:37:b5:49:d6:d1:6d:58:6b:9f:27:30:a2:a2: c6:23:9f:3f:f2:2f:99:d9:db:d6:7b:c9:6e:d6:7c:09:bb:ac: 34:63:2a:98:8a:48:e3:a0:4b:d4:ba:39:ed:31:d9:22:02:d4: d7:d6:64:56:e0:99:49:a8:21:62:28:40:a2:d3:84:6a:18:fe: ae:55:be:c6:c4:cd:6c:ca:5c:8b:d9:c1:c4:1e:74:7a:a8:43: 12:4a:2e:b9:e0:6c:63:ea:cf:b2:05:b4:d1:3e:81:a6:94:7d: 6b:53:4b:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3tzkE6q6SzK0e/SRp9CmKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNTJiNGMxZjVkNDg0ZWVmYzJiMTU5N2Y0NTUwMDNhYjY1 NGIwNTUwHhcNMjYwMTAxMDQwMDU0WhcNMjYwMTAyMDQwMDU0WjAzMTEwLwYDVQQD EygyZDc0ZjM2OGJkN2I4OTA1MDNjMTk2MDQzMTA5Zjg1ZjUxNjMzMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW/uJ09gDsoS9bveV1xr2hsfci+D segZPRiuudhbRp0jOm61R8ueaGmT1XDuq8KcwTQ2xy1iiuxJKSNG6dNMfrU66yOk /Yt90sSipfb+PcvfdHaqgbPhzxH7foB3VYTFBR9CDL1bysqr0vQ3JwZC0qUkj0yN l9gi4xxmje5RszziCDKRmubvClsY6TE0eBGK+DwSBUaQwvy7svGbNnGw+j/BiqLu Pz0Jw7D7rC/c0X3xq4t9B9+t38+6Hb3GXLhImsrHFTQD4QDD826GA2bM2IPx79lB Nzw65fBLrn9KMpBV9yxi8bITPFjjZfdImwPJqCyoGRotwp/bBE4HhDfPbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1082i9e4kFA8GWBDEJ+F9RYzBVMB8GA1UdIwQY MBaAFNFStMH11ITu/CsVl/RVADq2VLBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmIt MmY3NTE5NTIxNmI5LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmItMmY3NTE5NTIxNmI5 LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1vgZywA WC4PMgXc8PQt6dJPtc7yocs8hGQzv0pkTgyxFuyio3cP9wRw8Lzlafr1qtWnFP/i ++TyNFp2eE3wMoJ1VuqL3oEW8HImE3+TNrUPfqdEt8jNm/dvG5o2wcmZll5Flh/o 70hYggncIF/M540clPJ5J+Ml3NiK9Ihlltn9TjhW6NUvvD0D+Xl9IsoP3LQDQJg3 tUnW0W1Ya58nMKKixiOfP/Ivmdnb1nvJbtZ8CbusNGMqmIpI46BL1Lo57THZIgLU 19ZkVuCZSaghYihAotOEahj+rlW+xsTNbMpci9nBxB50eqhDEkouueBsY+rPsgW0 0T6BppR9a1NLGA== -----END CERTIFICATE-----Generated at Thu Jan 1 14:13:22 2026 by rpki-client