This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json) Hash identifier: a1k9bi/Y2xQTxECy+icce5Vpj8ly/a+mCJGFi6pkZzc= Subject key identifier: 83:D7:E1:95:2B:7C:7A:84:CB:DD:5D:97:3C:87:3E:0E:84:DC:B5:6B Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f Certificate serial: 019B6655F4537F94E441583C15E57BEDC74F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft Manifest number: 0458 Signing time: Sun 28 Dec 2025 19:01:07 +0000 Manifest this update: Sun 28 Dec 2025 19:01:07 +0000 Manifest next update: Mon 29 Dec 2025 19:01:07 +0000 Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: c35yquEtHmQlxUccqaeGYzL8R1qj0hBZitMDI3aEO+Q=) 2: GqXg2NC5IUxRI1mWcJNsyZxesng.roa (hash: wIFPJcYLl1DLySOyYumJerZ6TcbUU8g29XL5Yzwhz2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:f4:53:7f:94:e4:41:58:3c:15:e5:7b:ed:c7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f Validity Not Before: Dec 28 19:01:07 2025 GMT Not After : Dec 29 19:01:07 2025 GMT Subject: CN=83d7e1952b7c7a84cbdd5d973c873e0e84dcb56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:ec:af:57:e6:c8:d3:97:c8:52:6c:ec:9c: 74:68:0b:eb:20:3b:39:f7:30:cc:cc:61:e3:a5:c0: 43:fa:51:50:a1:08:95:d0:1d:8f:5d:78:cd:e1:40: f7:52:c9:eb:d7:47:42:b5:c9:ae:34:51:f2:28:bd: 7a:db:db:21:14:3e:f7:51:66:ec:68:7a:08:67:34: d8:ed:05:81:bd:0d:de:eb:38:5e:b7:21:8a:69:0a: 37:90:bc:22:b2:43:e3:cd:53:b4:60:5e:2e:cc:95: 4c:b3:da:54:d1:49:f0:1f:75:a0:83:d3:6c:e9:38: f2:be:19:5d:15:99:24:53:98:86:8d:29:5a:46:ab: 4c:da:74:25:bd:9b:ca:8a:0e:28:08:cd:33:5b:00: b1:8e:8f:54:43:36:cf:7b:d1:7a:c6:9b:6b:20:50: c1:16:25:7a:ad:13:01:d8:98:9e:d4:5e:85:8c:d2: e8:e9:da:22:50:0e:97:ed:04:68:60:51:70:e8:2f: e9:53:cd:09:66:2e:8a:2c:16:cd:aa:00:50:90:eb: 63:bd:7e:0a:cd:10:59:c6:85:0d:76:bb:ff:e8:c3: 27:6d:30:12:f6:7e:2d:ad:ef:c8:58:f5:de:e1:15: 51:28:48:3d:75:fa:fc:0b:50:ac:21:35:18:24:8a: 71:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D7:E1:95:2B:7C:7A:84:CB:DD:5D:97:3C:87:3E:0E:84:DC:B5:6B X509v3 Authority Key Identifier: keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0a:e0:92:14:51:05:67:76:34:a0:a1:75:c1:c2:99:67:b6: aa:4e:ce:40:e2:4a:1e:43:d7:c9:d9:2e:12:89:b0:09:3c:d1: 51:e5:44:12:9f:5e:9a:2c:e5:2e:f8:fe:de:ad:21:be:b2:65: 27:af:d6:14:66:1e:11:3b:61:7e:60:8b:59:f5:09:b9:d6:ea: cb:07:38:70:a0:85:66:71:3f:47:00:b1:c6:ed:f9:b3:72:bd: bc:6b:be:24:7a:c0:54:96:95:c8:1b:a0:de:1f:4b:6c:91:f4: d7:3d:9c:33:ad:9c:ee:7a:5c:ef:e8:ab:a4:8d:3a:85:32:68: 6d:00:5c:30:dd:ad:88:9b:3c:de:87:a8:01:e7:a3:7a:3a:6f: 64:43:68:23:b6:7e:b7:8b:e0:48:12:e8:d1:63:aa:99:15:24: 1b:47:72:f6:96:81:fd:9d:4b:45:60:80:95:d5:85:e8:1b:e6: 73:5e:a1:ee:f8:3f:88:94:ea:77:5d:c4:2a:f6:19:2c:83:ab: 2b:07:5a:c5:03:fb:f4:30:ae:70:a9:d7:da:a6:70:cb:4d:66: d0:18:a2:17:d4:2e:b5:b5:1b:04:c0:4c:71:4c:4a:19:3a:81: 5d:89:a0:ff:59:bd:40:91:e5:f8:89:13:2d:b8:ab:41:f2:ef: 45:59:db:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVfRTf5TkQVg8FeV77cdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZTVlYjc1MzY2MjBiNTg1N2QxYmY1OTAxODNkNjUwY2Ey MzIyN2YwHhcNMjUxMjI4MTkwMTA3WhcNMjUxMjI5MTkwMTA3WjAzMTEwLwYDVQQD Eyg4M2Q3ZTE5NTJiN2M3YTg0Y2JkZDVkOTczYzg3M2UwZTg0ZGNiNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNnsr1fmyNOXyFJs7Jx0aAvrIDs5 9zDMzGHjpcBD+lFQoQiV0B2PXXjN4UD3Usnr10dCtcmuNFHyKL1629shFD73UWbs aHoIZzTY7QWBvQ3e6zhetyGKaQo3kLwiskPjzVO0YF4uzJVMs9pU0UnwH3Wgg9Ns 6TjyvhldFZkkU5iGjSlaRqtM2nQlvZvKig4oCM0zWwCxjo9UQzbPe9F6xptrIFDB FiV6rRMB2Jie1F6FjNLo6doiUA6X7QRoYFFw6C/pU80JZi6KLBbNqgBQkOtjvX4K zRBZxoUNdrv/6MMnbTAS9n4tre/IWPXe4RVRKEg9dfr8C1CsITUYJIpx0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPX4ZUrfHqEy91dlzyHPg6E3LVrMB8GA1UdIwQY MBaAFNHl63U2YgtYV9G/WQGD1lDKIyJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82NWZhM2MtMDE3NS00Y2VlLTk5MzAt NTljZmQ0NTNkZDE3LzEvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82NWZhM2MtMDE3NS00Y2VlLTk5MzAtNTljZmQ0NTNkZDE3 LzEvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgrgkhRR BWd2NKChdcHCmWe2qk7OQOJKHkPXydkuEomwCTzRUeVEEp9emizlLvj+3q0hvrJl J6/WFGYeETthfmCLWfUJudbqywc4cKCFZnE/RwCxxu35s3K9vGu+JHrAVJaVyBug 3h9LbJH01z2cM62c7npc7+irpI06hTJobQBcMN2tiJs83oeoAeejejpvZENoI7Z+ t4vgSBLo0WOqmRUkG0dy9paB/Z1LRWCAldWF6Bvmc16h7vg/iJTqd13EKvYZLIOr KwdaxQP79DCucKnX2qZwy01m0BiiF9QutbUbBMBMcUxKGTqBXYmg/1m9QJHl+IkT LbirQfLvRVnbEg== -----END CERTIFICATE-----Generated at Mon Dec 29 04:13:08 2025 by rpki-client