This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: NaEddDOpCvi9IZzXxOB4NSGTVX/21Vw+ZFjCOZ/EmaA= Subject key identifier: 10:F0:EE:A9:10:F1:FE:10:B4:EC:84:94:98:AA:63:8C:43:7E:B9:F1 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 019B394696DAB910F5D54309AF79C0D984E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 12A9 Signing time: Sat 20 Dec 2025 01:01:25 +0000 Manifest this update: Sat 20 Dec 2025 01:01:25 +0000 Manifest next update: Sun 21 Dec 2025 01:01:25 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: nur7SvUlCWZ6+JcA4ilTQ9MZzPLUlhkYOF2+XbcMnss=) 2: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 3: GE6nRoMuniMWGyv11YMLRPKemVU.roa (hash: RaYbPvfO1sHreb2/JnG9Opl+09YsllUwocY3Ihxf+gE=) 4: LFAtM68_QsypB1yZseRwlLJq2u4.roa (hash: /957wLIuErUNU/cVyq1KNPpSgWYbgRzlgVLc/r/yFdE=) 5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 8: ghLUfufgx1VoBmbU1sZuk7NLdck.roa (hash: KlUf0BqZgjwHYa7TQ0G1F7PJPcSLF10z1HCqYwcsEU0=) 9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 10: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 11: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:96:da:b9:10:f5:d5:43:09:af:79:c0:d9:84:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Dec 20 01:01:25 2025 GMT Not After : Dec 21 01:01:25 2025 GMT Subject: CN=10f0eea910f1fe10b4ec849498aa638c437eb9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:7a:69:da:16:91:f2:83:bf:05:0a:c9:8a: 62:1a:7d:03:ca:29:1e:8c:65:56:24:a9:28:c0:f1: df:fb:5f:b4:49:95:01:d5:77:75:da:77:ab:89:65: b8:2e:ea:0d:7b:6d:30:c1:05:22:93:3f:f6:4f:c2: fd:19:8a:a5:bc:b9:e6:8a:0e:4f:f0:d1:2c:07:2b: 75:1e:0c:b4:f2:d9:94:0d:ba:01:64:71:38:68:8d: d4:ef:28:ef:c5:f0:b2:80:89:e6:aa:6f:a2:5a:a2: 95:99:9e:0a:65:2d:09:14:f1:8b:a2:17:5f:92:a1: fd:b9:4f:63:fd:8a:88:b6:34:83:e3:28:72:fa:7a: a9:a7:62:68:e9:d2:a1:cd:8a:dd:4c:70:a7:73:b2: 5d:23:22:cb:fb:9f:a3:c1:1c:d8:e1:b4:bc:06:31: 05:ef:0c:00:e4:54:ca:1c:bb:7b:62:6e:e1:26:d4: 8e:61:df:b4:3f:2d:30:d3:68:03:0a:26:04:9f:0d: 76:a0:c4:ea:8a:61:67:76:83:3a:00:2b:45:f9:7f: 5e:17:84:f5:c1:21:cb:38:9b:cc:57:b6:d4:f0:d5: 72:0a:08:41:d0:e9:9f:d3:ea:f6:a9:97:37:3a:ba: 71:15:9e:1c:d6:32:c2:d2:23:f5:32:20:fc:8b:ef: 5f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F0:EE:A9:10:F1:FE:10:B4:EC:84:94:98:AA:63:8C:43:7E:B9:F1 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:35:6f:09:95:d6:e1:1e:b2:59:29:1a:ec:14:fb:43:a3:b7: a6:f7:af:1a:12:61:9e:87:1a:5a:45:2f:3a:37:67:8a:d8:a8: e1:36:7b:0f:80:ee:1a:bf:5e:c4:f2:5b:f4:dd:79:19:3d:d2: fb:95:98:c2:89:60:b8:11:9b:78:53:69:d2:2b:5b:07:07:02: 29:e9:2a:16:33:0f:a3:e9:66:16:a3:51:57:0c:e6:4f:a0:1e: b8:a8:93:17:9b:0e:92:7f:b7:b7:f7:19:e5:de:50:25:f4:9a: 4c:f3:39:2f:27:7f:67:02:ca:e6:1b:8d:0b:aa:a6:66:8e:90: 72:89:c6:61:68:7d:71:9f:d4:c6:97:2a:79:8a:f9:7d:f8:9d: d2:fa:2c:8e:f3:4a:28:fd:b8:3e:6d:50:88:71:a0:ff:f5:cb: d2:54:bf:1f:dd:39:d5:b2:77:e1:92:d4:e0:1c:09:01:ee:48: 6d:54:28:1a:a8:71:87:db:81:11:c9:c2:f7:00:bf:bd:0c:98: e2:d4:50:02:ab:29:ad:bb:63:e2:f1:4f:1c:55:a1:87:a9:23: 09:ee:e9:7a:29:6a:16:83:09:76:c1:30:42:73:b8:60:f7:79: b7:48:0e:ff:4a:73:51:a7:9c:e0:85:36:c0:18:b5:cd:e0:b4: a1:a6:14:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RpbauRD11UMJr3nA2YTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUxMjIwMDEwMTI1WhcNMjUxMjIxMDEwMTI1WjAzMTEwLwYDVQQD EygxMGYwZWVhOTEwZjFmZTEwYjRlYzg0OTQ5OGFhNjM4YzQzN2ViOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9B6adoWkfKDvwUKyYpiGn0Dyike jGVWJKkowPHf+1+0SZUB1Xd12neriWW4LuoNe20wwQUikz/2T8L9GYqlvLnmig5P 8NEsByt1Hgy08tmUDboBZHE4aI3U7yjvxfCygInmqm+iWqKVmZ4KZS0JFPGLohdf kqH9uU9j/YqItjSD4yhy+nqpp2Jo6dKhzYrdTHCnc7JdIyLL+5+jwRzY4bS8BjEF 7wwA5FTKHLt7Ym7hJtSOYd+0Py0w02gDCiYEnw12oMTqimFndoM6ACtF+X9eF4T1 wSHLOJvMV7bU8NVyCghB0Omf0+r2qZc3OrpxFZ4c1jLC0iP1MiD8i+9fGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDw7qkQ8f4QtOyElJiqY4xDfrnxMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjVvCZXW 4R6yWSka7BT7Q6O3pvevGhJhnocaWkUvOjdnitio4TZ7D4DuGr9exPJb9N15GT3S +5WYwolguBGbeFNp0itbBwcCKekqFjMPo+lmFqNRVwzmT6AeuKiTF5sOkn+3t/cZ 5d5QJfSaTPM5Lyd/ZwLK5huNC6qmZo6QconGYWh9cZ/UxpcqeYr5ffid0vosjvNK KP24Pm1QiHGg//XL0lS/H9051bJ34ZLU4BwJAe5IbVQoGqhxh9uBEcnC9wC/vQyY 4tRQAqsprbtj4vFPHFWhh6kjCe7peilqFoMJdsEwQnO4YPd5t0gO/0pzUaec4IU2 wBi1zeC0oaYU9w== -----END CERTIFICATE-----Generated at Sat Dec 20 04:28:39 2025 by rpki-client