This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json) Hash identifier: gIQxSmMs6guPTvuaqGUZ1dh8YvtCtY8vHeJIpSXHHGs= Subject key identifier: C2:58:C5:49:76:47:23:FE:83:C8:1A:EA:FF:4A:5B:0F:B8:1A:34:A3 Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd Certificate serial: 019B21E243F6B8F7785FEC03453449C386F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft Manifest number: 0BDB Signing time: Mon 15 Dec 2025 12:00:35 +0000 Manifest this update: Mon 15 Dec 2025 12:00:35 +0000 Manifest next update: Tue 16 Dec 2025 12:00:35 +0000 Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: jo/Ai/BssIlEv4YvN5yH6FJuZnmHTdC3rfBA2+Sn2ug=) 2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:43:f6:b8:f7:78:5f:ec:03:45:34:49:c3:86:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd Validity Not Before: Dec 15 12:00:35 2025 GMT Not After : Dec 16 12:00:35 2025 GMT Subject: CN=c258c549764723fe83c81aeaff4a5b0fb81a34a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:e1:98:2d:15:15:5b:88:60:ce:f1:f7:01: 26:c1:10:70:58:94:88:8c:05:5a:7c:b0:32:45:fc: c9:18:d9:19:03:fe:c4:88:d9:89:bd:db:ff:93:1e: 71:3e:18:ca:a5:57:a5:36:b2:04:46:18:e1:6f:4d: 7e:85:3b:b0:d4:61:f2:5b:cb:53:fc:62:58:dc:ae: c1:92:5f:64:ef:a6:1f:89:79:9a:2c:4e:2d:d5:96: 62:e9:ed:bd:52:6d:20:0c:ee:69:c1:54:21:88:0d: fc:78:26:3e:61:05:8b:4d:c6:6e:90:d2:02:60:9c: 34:5a:41:40:00:8c:63:bf:53:01:79:6e:9d:5d:e7: d4:77:9c:33:a1:e4:8d:1e:da:af:27:da:df:1a:e8: bf:55:fe:41:4d:f2:98:97:4a:fe:5f:f2:37:34:eb: 02:ec:b3:8e:c9:70:25:95:2b:07:70:66:11:7f:00: b9:e6:2b:e2:4e:d3:3e:36:22:34:e6:eb:fb:ae:fc: e8:1d:84:ad:92:ec:6a:80:e7:0b:6b:48:a8:70:12: 16:b5:f3:95:53:ce:60:2d:eb:f6:3e:56:df:ff:63: c4:4d:cc:d0:4d:09:3d:b2:d6:c5:64:bf:02:46:7f: 7a:05:61:a0:85:66:fb:7c:b2:c4:c6:aa:c0:ba:5e: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:58:C5:49:76:47:23:FE:83:C8:1A:EA:FF:4A:5B:0F:B8:1A:34:A3 X509v3 Authority Key Identifier: keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:83:e4:84:f2:57:7d:06:89:7f:95:01:70:18:a9:0b:f5:8d: 86:5c:51:b3:bd:6a:a1:2b:f7:db:54:6a:ba:a0:fd:2f:63:37: 1c:34:59:41:89:dd:1d:b0:82:ea:d0:e5:1c:b5:a6:8d:89:bc: 6a:06:49:78:2d:8d:41:44:8c:da:21:22:39:a4:16:21:51:10: 7f:c8:24:c1:7b:d4:28:ae:c9:5d:17:ec:4f:03:51:5e:1a:c8: bf:8f:74:da:c7:72:ae:b2:49:67:a8:dc:04:e1:ba:72:64:08: 70:c9:7c:50:8c:ae:b9:0f:e0:42:e2:93:17:ab:fe:30:08:17: 1e:c0:45:2a:78:18:9a:3c:6e:7c:35:a6:29:99:b2:c1:31:0d: 2e:4b:d1:6d:2f:13:c5:bb:d1:1f:7d:d5:ee:7f:f3:13:ba:de: 1e:93:3f:48:ae:2d:24:a8:2d:fd:11:65:a5:b0:53:ff:3e:07: df:03:e4:5a:0d:c4:02:38:8c:25:94:05:2c:cf:9b:c1:41:ea: 41:0b:06:0b:58:0e:d7:3c:29:3f:f8:28:94:b1:5f:d0:72:60: 7f:b5:b3:98:18:eb:d0:85:9c:d8:53:0f:a0:aa:27:6e:0f:c6: e3:c9:ce:26:66:8d:f4:e6:ca:b0:49:0c:5a:58:a4:01:40:59: 49:29:bd:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4kP2uPd4X+wDRTRJw4b1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1 YmJjZGQwHhcNMjUxMjE1MTIwMDM1WhcNMjUxMjE2MTIwMDM1WjAzMTEwLwYDVQQD EyhjMjU4YzU0OTc2NDcyM2ZlODNjODFhZWFmZjRhNWIwZmI4MWEzNGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaHhmC0VFVuIYM7x9wEmwRBwWJSI jAVafLAyRfzJGNkZA/7EiNmJvdv/kx5xPhjKpVelNrIERhjhb01+hTuw1GHyW8tT /GJY3K7Bkl9k76YfiXmaLE4t1ZZi6e29Um0gDO5pwVQhiA38eCY+YQWLTcZukNIC YJw0WkFAAIxjv1MBeW6dXefUd5wzoeSNHtqvJ9rfGui/Vf5BTfKYl0r+X/I3NOsC 7LOOyXAllSsHcGYRfwC55iviTtM+NiI05uv7rvzoHYStkuxqgOcLa0iocBIWtfOV U85gLev2Plbf/2PETczQTQk9stbFZL8CRn96BWGghWb7fLLExqrAul72dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJYxUl2RyP+g8ga6v9KWw+4GjSjMB8GA1UdIwQY MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt YmM1YWI4MTk4N2YwLzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIPkhPJX fQaJf5UBcBipC/WNhlxRs71qoSv321RquqD9L2M3HDRZQYndHbCC6tDlHLWmjYm8 agZJeC2NQUSM2iEiOaQWIVEQf8gkwXvUKK7JXRfsTwNRXhrIv4902sdyrrJJZ6jc BOG6cmQIcMl8UIyuuQ/gQuKTF6v+MAgXHsBFKngYmjxufDWmKZmywTENLkvRbS8T xbvRH33V7n/zE7reHpM/SK4tJKgt/RFlpbBT/z4H3wPkWg3EAjiMJZQFLM+bwUHq QQsGC1gO1zwpP/golLFf0HJgf7WzmBjr0IWc2FMPoKonbg/G48nOJmaN9ObKsEkM WlikAUBZSSm9Tw== -----END CERTIFICATE-----Generated at Mon Dec 15 19:49:12 2025 by rpki-client