This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json) Hash identifier: IMXOh9KuoURXK9u71e8Pi+egvTJZnQxLcc1//nwphF0= Subject key identifier: BF:3A:24:D2:C3:4C:13:D1:B3:68:4F:73:17:1E:DA:7B:0B:B5:19:25 Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f Certificate serial: 019B6FFD78E219EBE7F3884DBEBFDD208877 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft Manifest number: 045D Signing time: Tue 30 Dec 2025 16:00:40 +0000 Manifest this update: Tue 30 Dec 2025 16:00:40 +0000 Manifest next update: Wed 31 Dec 2025 16:00:40 +0000 Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: xzjoSW24QKj06uRrGfXA2NoONXVm1dwdJFb4Dis/itM=) 2: GqXg2NC5IUxRI1mWcJNsyZxesng.roa (hash: wIFPJcYLl1DLySOyYumJerZ6TcbUU8g29XL5Yzwhz2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:78:e2:19:eb:e7:f3:88:4d:be:bf:dd:20:88:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f Validity Not Before: Dec 30 16:00:40 2025 GMT Not After : Dec 31 16:00:40 2025 GMT Subject: CN=bf3a24d2c34c13d1b3684f73171eda7b0bb51925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:5a:c7:79:07:12:82:6b:10:79:f3:d8:58: 31:84:3b:66:bd:f8:5a:27:b3:d2:6a:6a:e3:d1:57: 3c:19:2d:99:ad:91:ab:69:0a:dd:5b:00:9f:58:6b: 98:7e:3c:e5:c1:af:46:13:47:dc:95:d2:c2:4c:df: 73:75:83:95:89:d4:a0:4f:76:45:20:73:99:74:93: 22:77:df:66:2a:ec:10:5e:05:51:23:9f:2f:e1:4c: 38:24:61:4a:4e:d1:4a:70:60:b7:b2:30:0e:35:0a: 13:01:ab:1a:6d:bb:6a:9d:79:19:f3:e0:a7:fb:99: b6:bc:3c:93:10:e4:8f:02:97:25:c5:ab:a0:02:dc: 2b:bd:96:c9:ac:5d:46:db:61:9c:1d:cd:cd:93:d5: 8e:fb:fb:cd:f9:03:19:ef:7d:9a:aa:f4:74:41:5b: f6:3f:48:97:2e:a1:f4:0a:b1:a2:61:e1:bd:e6:d7: 13:d2:d2:70:5d:7b:d5:11:a9:9b:13:7a:71:6d:d9: 65:8d:f2:bf:75:ed:49:91:e5:84:7e:20:81:40:d8: 84:f4:e7:bd:6b:47:ce:13:4b:78:b4:0e:c9:1d:ec: 07:18:8d:aa:06:0e:2b:2e:91:a0:a5:94:95:e8:db: aa:71:57:85:62:24:91:40:f8:8f:37:1e:20:cd:dc: f4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3A:24:D2:C3:4C:13:D1:B3:68:4F:73:17:1E:DA:7B:0B:B5:19:25 X509v3 Authority Key Identifier: keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:de:8b:1b:5b:da:5b:97:b2:2e:c2:a1:7d:dc:7e:c3:7b:74: d2:3c:9f:54:eb:80:66:2f:d8:59:1a:35:9d:2b:b1:9c:df:0a: fe:1e:8b:18:1a:df:75:63:fa:c7:45:4d:a1:ef:c1:37:95:a0: 93:c8:89:e7:3d:d1:22:fd:61:8b:2a:c8:c6:f5:0a:86:12:3e: 70:df:ce:40:d5:af:b6:f5:a3:6a:72:a0:0a:d4:fe:3c:1d:c3: a8:bd:96:68:f0:34:f9:05:b6:62:77:70:3a:6e:5e:e3:a5:7b: a7:95:25:30:26:a3:98:1a:02:bc:01:cf:e6:03:17:ec:95:e0: ad:62:40:c2:28:e3:33:f3:c0:7f:2c:bd:08:8a:e9:ba:c3:e0: ba:cd:4b:ad:af:ac:b3:bb:d9:97:e5:09:e4:3d:85:df:50:5b: 0f:02:82:6b:fc:25:d7:94:8f:86:8d:7a:b6:5e:ac:f1:60:f4: ae:ca:aa:ba:de:e0:13:d6:21:d0:80:3a:16:1d:4a:74:88:47: b1:34:e4:bd:fe:82:ae:57:f8:10:58:72:64:79:1b:bc:38:76: b5:9e:59:d0:56:79:31:3c:fd:05:0d:d3:c4:5a:7c:5d:fe:5c: e2:dc:c7:40:5b:3c:87:38:a0:1d:35:38:02:10:56:5c:47:3d: 26:3e:2f:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/XjiGevn84hNvr/dIIh3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZTVlYjc1MzY2MjBiNTg1N2QxYmY1OTAxODNkNjUwY2Ey MzIyN2YwHhcNMjUxMjMwMTYwMDQwWhcNMjUxMjMxMTYwMDQwWjAzMTEwLwYDVQQD EyhiZjNhMjRkMmMzNGMxM2QxYjM2ODRmNzMxNzFlZGE3YjBiYjUxOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpNax3kHEoJrEHnz2FgxhDtmvfha J7PSamrj0Vc8GS2ZrZGraQrdWwCfWGuYfjzlwa9GE0fcldLCTN9zdYOVidSgT3ZF IHOZdJMid99mKuwQXgVRI58v4Uw4JGFKTtFKcGC3sjAONQoTAasabbtqnXkZ8+Cn +5m2vDyTEOSPApclxaugAtwrvZbJrF1G22GcHc3Nk9WO+/vN+QMZ732aqvR0QVv2 P0iXLqH0CrGiYeG95tcT0tJwXXvVEambE3pxbdlljfK/de1JkeWEfiCBQNiE9Oe9 a0fOE0t4tA7JHewHGI2qBg4rLpGgpZSV6NuqcVeFYiSRQPiPNx4gzdz0UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL86JNLDTBPRs2hPcxce2nsLtRklMB8GA1UdIwQY MBaAFNHl63U2YgtYV9G/WQGD1lDKIyJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82NWZhM2MtMDE3NS00Y2VlLTk5MzAt NTljZmQ0NTNkZDE3LzEvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82NWZhM2MtMDE3NS00Y2VlLTk5MzAtNTljZmQ0NTNkZDE3 LzEvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQd6LG1va W5eyLsKhfdx+w3t00jyfVOuAZi/YWRo1nSuxnN8K/h6LGBrfdWP6x0VNoe/BN5Wg k8iJ5z3RIv1hiyrIxvUKhhI+cN/OQNWvtvWjanKgCtT+PB3DqL2WaPA0+QW2Yndw Om5e46V7p5UlMCajmBoCvAHP5gMX7JXgrWJAwijjM/PAfyy9CIrpusPgus1Lra+s s7vZl+UJ5D2F31BbDwKCa/wl15SPho16tl6s8WD0rsqqut7gE9Yh0IA6Fh1KdIhH sTTkvf6Crlf4EFhyZHkbvDh2tZ5Z0FZ5MTz9BQ3TxFp8Xf5c4tzHQFs8hzigHTU4 AhBWXEc9Jj4v3A== -----END CERTIFICATE-----Generated at Wed Dec 31 01:59:27 2025 by rpki-client