This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json) Hash identifier: bSCNu5kqylitp3ZZO0qCTigHvTC/E3kLNmcDnv4zpv8= Subject key identifier: 03:56:62:B0:2C:F3:26:11:47:D6:79:12:74:8F:BD:5B:8E:66:E3:21 Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e Certificate serial: 019B3DC777F757BF4C34A46F304681DA50CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft Manifest number: 1577 Signing time: Sat 20 Dec 2025 22:00:41 +0000 Manifest this update: Sat 20 Dec 2025 22:00:41 +0000 Manifest next update: Sun 21 Dec 2025 22:00:41 +0000 Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: Ppsztr1opoP/vEP28qA6k33fYIjEmr6nARS0viTwkhg=) 2: wC7Ohmh2aveKOZ7_Cl4a1vLomLo.roa (hash: hPiN8yhRbkkwhBqX7IPJBoamojlDhfcUtcDIIbpri30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:77:f7:57:bf:4c:34:a4:6f:30:46:81:da:50:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e Validity Not Before: Dec 20 22:00:41 2025 GMT Not After : Dec 21 22:00:41 2025 GMT Subject: CN=035662b02cf3261147d67912748fbd5b8e66e321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:06:f5:01:40:22:b8:b1:c9:99:b9:be:16: bc:e7:7c:21:6b:f3:d1:86:25:dd:84:23:e4:fd:e7: 52:5e:25:ab:c6:1e:f8:41:8f:32:e4:80:77:6d:c7: 78:6b:0e:6b:a6:78:84:a9:8d:52:b5:63:52:f9:6f: cd:c1:46:01:00:71:0e:3f:75:c2:b5:ce:9f:94:a6: 76:83:34:47:1a:98:12:32:9f:81:a2:2d:3e:86:1e: e2:a9:9f:31:ea:6c:93:2f:cb:2f:4c:bf:00:14:1b: 97:cd:8e:c8:25:1a:ee:f2:27:5e:64:72:e8:97:c3: ad:46:87:d9:12:7a:58:83:7d:a5:82:44:d1:c7:c8: 46:95:01:c9:cd:f3:12:14:ba:e9:6e:6c:fb:64:b9: 00:e6:cb:87:f3:4d:63:38:f2:da:4e:7d:fc:28:56: 65:8c:fa:1c:fc:88:da:22:cf:a1:cc:65:28:07:c7: 57:61:1b:5d:60:10:8e:fe:c2:5e:80:7c:b8:d6:5e: 4e:61:79:23:8d:67:10:0f:16:12:7d:0d:3e:e8:67: 10:f7:ec:e0:49:00:58:7f:95:55:46:46:64:3b:2a: c6:d2:56:1b:44:ba:50:91:48:41:ea:26:46:33:b9: 2f:61:5f:10:8b:9d:7d:90:ec:d7:d9:ad:27:a2:95: 3c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:56:62:B0:2C:F3:26:11:47:D6:79:12:74:8F:BD:5B:8E:66:E3:21 X509v3 Authority Key Identifier: keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7e:86:91:ed:94:66:ad:11:5a:56:ce:73:26:83:99:37:8b: f8:5b:c7:9d:4b:d7:5b:55:5c:37:74:b4:a7:b3:f4:5c:72:76: f4:ba:d7:20:50:43:ca:b1:9b:ab:14:b0:ac:6c:56:3e:c2:77: de:1b:a8:5f:cf:59:6e:ae:ef:49:22:fd:2c:89:95:ab:43:65: 4d:9f:be:6d:e5:1c:8f:1c:34:75:35:0f:1a:fa:2b:af:b5:fb: b4:82:dd:94:d8:62:ed:83:53:73:8a:0c:ce:6c:f9:9a:06:9f: 8d:04:70:f9:53:80:48:a2:54:56:69:e6:cf:87:92:e4:aa:30: d1:98:8c:7b:b3:c5:81:ab:31:79:ae:04:9f:09:5b:6e:f5:8a: ba:b2:08:fe:25:9a:ce:b5:a8:53:ec:1d:d3:77:96:ba:8d:7d: 8a:de:38:0f:58:76:4f:a0:55:ca:82:c0:c7:23:6e:fe:3c:55: a7:0d:43:0f:92:72:6c:85:57:77:ad:00:fe:d0:58:14:2b:3a: 6e:54:4e:89:00:8f:59:25:e4:bd:3e:fc:fc:f2:23:13:85:ef: 8d:09:6c:fd:20:0b:0b:17:05:b9:55:7e:1b:8b:4a:2a:d6:00: 25:96:b8:8e:b6:03:f5:d7:c3:1b:b6:44:de:3f:d2:0c:74:12: 7b:6c:86:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3f3V79MNKRvMEaB2lDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTFkYjQ2NmNmODA4MjA2MjkzZDA3ZTY1ZjIxMjFmZWI0 OWEzM2UwHhcNMjUxMjIwMjIwMDQxWhcNMjUxMjIxMjIwMDQxWjAzMTEwLwYDVQQD EygwMzU2NjJiMDJjZjMyNjExNDdkNjc5MTI3NDhmYmQ1YjhlNjZlMzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyksG9QFAIrixyZm5vha853wha/PR hiXdhCPk/edSXiWrxh74QY8y5IB3bcd4aw5rpniEqY1StWNS+W/NwUYBAHEOP3XC tc6flKZ2gzRHGpgSMp+Boi0+hh7iqZ8x6myTL8svTL8AFBuXzY7IJRru8ideZHLo l8OtRofZEnpYg32lgkTRx8hGlQHJzfMSFLrpbmz7ZLkA5suH801jOPLaTn38KFZl jPoc/IjaIs+hzGUoB8dXYRtdYBCO/sJegHy41l5OYXkjjWcQDxYSfQ0+6GcQ9+zg SQBYf5VVRkZkOyrG0lYbRLpQkUhB6iZGM7kvYV8Qi519kOzX2a0nopU8OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANWYrAs8yYRR9Z5EnSPvVuOZuMhMB8GA1UdIwQY MBaAFNCh20Zs+AggYpPQfmXyEh/rSaM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMt NDc2MmIwMTBlZjFlLzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMtNDc2MmIwMTBlZjFl LzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACn6Gke2U Zq0RWlbOcyaDmTeL+FvHnUvXW1VcN3S0p7P0XHJ29LrXIFBDyrGbqxSwrGxWPsJ3 3huoX89Zbq7vSSL9LImVq0NlTZ++beUcjxw0dTUPGvorr7X7tILdlNhi7YNTc4oM zmz5mgafjQRw+VOASKJUVmnmz4eS5Kow0ZiMe7PFgasxea4EnwlbbvWKurII/iWa zrWoU+wd03eWuo19it44D1h2T6BVyoLAxyNu/jxVpw1DD5JybIVXd60A/tBYFCs6 blROiQCPWSXkvT78/PIjE4XvjQls/SALCxcFuVV+G4tKKtYAJZa4jrYD9dfDG7ZE 3j/SDHQSe2yG8w== -----END CERTIFICATE-----Generated at Sun Dec 21 04:59:22 2025 by rpki-client