This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json) Hash identifier: Kt0lwmVfsxVBcpDo2gAopaAv/3G2AdWd+YoDimie0L4= Subject key identifier: 66:34:21:27:C1:4D:A0:A0:9A:F2:89:74:EC:CF:65:C7:A6:80:7C:D8 Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf Certificate serial: 019B27ADCED08732F256215EA3FEA486C9A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft Manifest number: 05D3 Signing time: Tue 16 Dec 2025 15:01:00 +0000 Manifest this update: Tue 16 Dec 2025 15:01:00 +0000 Manifest next update: Wed 17 Dec 2025 15:01:00 +0000 Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: MyvwuPkQDgZhmCCcGP22DA8aWAgoNmyWu3hf/TDqqFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:ce:d0:87:32:f2:56:21:5e:a3:fe:a4:86:c9:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf Validity Not Before: Dec 16 15:01:00 2025 GMT Not After : Dec 17 15:01:00 2025 GMT Subject: CN=66342127c14da0a09af28974eccf65c7a6807cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:e8:c4:a0:ce:3b:71:21:ec:4e:5f:29:21: 45:aa:6b:72:8f:8b:71:35:b0:02:d0:29:72:66:ad: 0a:90:3b:f4:b3:a2:95:8f:2f:aa:9b:25:3a:b1:a8: ca:91:21:52:e4:da:c4:2c:71:38:82:85:e7:b4:3a: be:1c:4b:66:d7:d4:2e:d6:2e:37:47:bb:2e:76:f1: 43:2b:a5:d3:4e:9d:2c:90:f1:e2:d9:32:3f:e4:8c: 10:8f:e2:d1:ac:5e:ff:8e:cf:39:63:c7:c1:bb:03: fa:96:90:bc:56:8a:50:d6:d2:21:07:e8:e1:fd:71: c1:08:88:36:9c:e6:b1:be:7b:fe:c9:97:b5:08:d8: 0a:84:ca:5c:6b:e2:4e:16:77:b4:35:99:77:1a:b1: 5e:63:39:30:ff:e9:46:28:26:e4:b7:dc:74:38:18: 3b:9f:d7:df:c3:17:5f:fa:33:89:11:ac:c6:9a:d3: 93:1c:b1:73:42:ba:89:70:84:65:2f:29:70:e8:05: eb:37:24:0c:3c:da:99:e2:5c:4c:76:0e:ba:78:9d: db:72:ff:3f:b1:b6:b1:42:39:a3:f9:53:bb:a4:30: 31:18:5b:bf:38:01:70:5e:d5:a5:54:a6:70:33:32: 35:a5:88:59:45:21:44:9f:e4:1e:6f:c4:a3:bf:04: 34:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:34:21:27:C1:4D:A0:A0:9A:F2:89:74:EC:CF:65:C7:A6:80:7C:D8 X509v3 Authority Key Identifier: keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:54:4e:e1:fe:ed:6d:4c:a7:b5:ae:7c:12:b6:c9:e8:5e:10: 08:62:77:c4:f5:b9:23:e8:f2:82:55:02:6e:a4:86:2c:a1:80: 9f:4a:a0:47:9b:1c:d4:90:87:6a:e2:d4:2a:25:f4:56:83:9c: ca:5c:e3:9a:9a:e0:ae:37:ca:79:c9:7a:fc:a8:47:cc:1c:54: 02:09:35:bf:ae:fc:d4:f6:c2:3b:74:02:34:84:b9:26:05:54: 88:c2:c8:3e:98:57:35:a0:38:c6:bd:76:05:99:bd:1c:af:9c: da:76:f6:cc:37:a0:43:19:fc:c3:a5:2b:86:ba:6a:ae:94:97: 85:ea:66:b0:ac:03:bd:18:6a:1f:9c:50:bb:9b:cc:6c:d9:fd: 30:d9:b3:c9:0e:22:58:31:12:fc:cc:35:ce:8b:4f:72:08:e0: 87:23:4b:01:c6:6a:92:e1:d3:3a:2c:76:7c:c8:05:44:9b:2a: ce:34:6a:db:b7:a0:2e:a8:56:37:25:8d:40:77:94:37:81:12: ce:70:15:3a:a2:30:1a:2d:3e:44:0c:87:4d:07:b4:2c:d6:d8: 91:f0:20:0e:39:07:ae:d0:49:8e:71:48:34:82:38:78:5c:57: 0d:89:50:35:8d:da:38:89:bd:8a:7e:04:2f:c4:30:35:56:16: 71:2b:73:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrc7QhzLyViFeo/6khsmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYjBlODY4NmY3ZGFiMWY2NGM4MGQ0MzgyYzNjNTk0OWZm MTFkYmYwHhcNMjUxMjE2MTUwMTAwWhcNMjUxMjE3MTUwMTAwWjAzMTEwLwYDVQQD Eyg2NjM0MjEyN2MxNGRhMGEwOWFmMjg5NzRlY2NmNjVjN2E2ODA3Y2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWDoxKDOO3Eh7E5fKSFFqmtyj4tx NbAC0ClyZq0KkDv0s6KVjy+qmyU6sajKkSFS5NrELHE4goXntDq+HEtm19Qu1i43 R7sudvFDK6XTTp0skPHi2TI/5IwQj+LRrF7/js85Y8fBuwP6lpC8VopQ1tIhB+jh /XHBCIg2nOaxvnv+yZe1CNgKhMpca+JOFne0NZl3GrFeYzkw/+lGKCbkt9x0OBg7 n9ffwxdf+jOJEazGmtOTHLFzQrqJcIRlLylw6AXrNyQMPNqZ4lxMdg66eJ3bcv8/ sbaxQjmj+VO7pDAxGFu/OAFwXtWlVKZwMzI1pYhZRSFEn+Qeb8SjvwQ03wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGY0ISfBTaCgmvKJdOzPZcemgHzYMB8GA1UdIwQY MBaAFNGw6GhvfasfZMgNQ4LDxZSf8R2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGJEb2FHOTlxeDlreUExRGdzUEZsSl94SGI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80NTZhMmItODc1NS00YmZjLThiNmMt ZGJiYzI1NGQxYzZjLzEvMGJEb2FHOTlxeDlreUExRGdzUEZsSl94SGI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80NTZhMmItODc1NS00YmZjLThiNmMtZGJiYzI1NGQxYzZj LzEvMGJEb2FHOTlxeDlreUExRGdzUEZsSl94SGI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1RO4f7t bUynta58ErbJ6F4QCGJ3xPW5I+jyglUCbqSGLKGAn0qgR5sc1JCHauLUKiX0VoOc ylzjmprgrjfKecl6/KhHzBxUAgk1v6781PbCO3QCNIS5JgVUiMLIPphXNaA4xr12 BZm9HK+c2nb2zDegQxn8w6UrhrpqrpSXhepmsKwDvRhqH5xQu5vMbNn9MNmzyQ4i WDES/Mw1zotPcgjghyNLAcZqkuHTOix2fMgFRJsqzjRq27egLqhWNyWNQHeUN4ES znAVOqIwGi0+RAyHTQe0LNbYkfAgDjkHrtBJjnFINII4eFxXDYlQNY3aOIm9in4E L8QwNVYWcStzUw== -----END CERTIFICATE-----Generated at Tue Dec 16 22:33:06 2025 by rpki-client