This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json) Hash identifier: FnmZTypArfYDAelRfqsYmaWcHS706hlb0uGp3asrf+M= Subject key identifier: 0E:40:C1:B3:FB:1E:C7:B2:CA:46:07:5E:C8:B4:9E:F7:EB:19:36:0A Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70 Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370 Certificate serial: 019B3DC7AE61C2F40F770062A975F6602E9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft Manifest number: 0817 Signing time: Sat 20 Dec 2025 22:00:54 +0000 Manifest this update: Sat 20 Dec 2025 22:00:54 +0000 Manifest next update: Sun 21 Dec 2025 22:00:54 +0000 Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: zJQQp5S8coUs2ou2w5srm44XOjFoYspiXtyAKPv/V+k=) 2: lzWZkqskGdmxyou0z2qQw2KTqoY.roa (hash: AeWymtaVk051Pxp8CZX6BkiYok3D+PBMltMiLV1wiVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:ae:61:c2:f4:0f:77:00:62:a9:75:f6:60:2e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370 Validity Not Before: Dec 20 22:00:54 2025 GMT Not After : Dec 21 22:00:54 2025 GMT Subject: CN=0e40c1b3fb1ec7b2ca46075ec8b49ef7eb19360a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:3d:26:ec:58:c9:f1:f4:78:3a:84:ab:b5: 4a:4f:12:ba:0c:9a:2e:12:3a:91:67:6b:0f:5e:03: 74:b2:85:86:13:22:8f:a3:b4:f9:59:db:74:45:06: 3b:de:06:b1:0c:17:b7:fa:48:dd:d5:7a:c2:b9:d0: 87:68:79:3f:94:cc:da:12:6a:9b:88:5e:c5:21:ef: c8:d8:24:13:e3:9d:4d:a4:cc:2d:85:35:53:ab:d5: cf:49:69:39:e3:9b:60:a9:e1:46:f5:3a:72:af:c6: 26:55:c2:81:ad:3b:9a:07:82:2f:fc:26:ef:3b:b5: c6:8a:71:79:ea:1a:d5:d1:b4:26:2a:a0:f3:c4:88: 82:3f:93:1e:08:e5:0f:e3:d1:16:44:a8:85:c2:7c: 42:4f:19:8c:97:24:d6:1e:5c:59:19:01:88:42:b2: bc:e2:39:4e:f1:cf:65:e8:32:ee:d3:38:06:27:c9: 2d:57:42:f6:3b:16:ab:d8:f9:d4:12:80:d1:e6:b3: 75:64:df:a8:97:04:e5:99:dd:a2:9b:06:15:d1:9a: 94:ad:26:58:75:be:d5:fc:8f:76:96:d6:65:5a:16: 0a:4f:af:91:79:08:97:cb:78:c2:8a:c4:bc:51:fd: e5:82:db:4c:8f:7b:17:fc:8d:20:6f:6b:10:f5:78: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:40:C1:B3:FB:1E:C7:B2:CA:46:07:5E:C8:B4:9E:F7:EB:19:36:0A X509v3 Authority Key Identifier: keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:29:28:70:80:a3:f9:0a:d0:9a:5b:dc:d0:99:a5:2b:3a:25: 1b:d1:8f:ef:18:0b:df:bf:3e:3c:ed:0f:31:03:51:eb:13:9e: 07:1c:3d:c2:4c:84:6d:2c:cd:ac:02:87:47:2b:9a:05:a9:89: 6c:0f:fe:81:78:d6:43:c5:12:16:af:52:10:13:bf:49:77:db: 90:89:1a:d9:07:8c:a5:f2:61:fb:20:da:8e:ed:74:9f:69:31: 05:75:fe:5f:5d:54:84:7b:50:08:2e:be:41:ea:9e:e3:ea:43: 74:5a:fd:eb:a7:1f:17:4b:ed:2d:f7:6c:05:95:56:ab:c0:1c: ab:ff:20:70:31:7f:17:9b:a8:41:76:7c:bb:7c:ee:2c:39:78: 2d:f8:cf:75:37:e9:35:cd:14:91:14:a1:5b:7a:53:78:36:28: 8a:7b:a5:8f:c0:22:9f:65:b2:cc:7f:fc:2e:fc:d0:25:7d:2c: 4e:1b:21:d4:40:18:03:e6:18:51:d7:78:e7:79:cc:7b:55:df: 13:ef:49:7e:1b:b3:e7:d7:65:56:0a:d5:13:ec:95:9d:4c:67: c0:49:70:69:0f:83:66:21:7a:18:9d:0c:27:17:f7:a2:a9:f2: e5:c9:0b:cb:84:17:02:35:31:da:ce:b0:2e:00:08:0a:a8:84: bf:e6:92:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x65hwvQPdwBiqXX2YC6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMzAxMTdhZTFjZGMyZGYxYzU4ODE2ZTAwZTU0NTFmODdl ZmIzNzAwHhcNMjUxMjIwMjIwMDU0WhcNMjUxMjIxMjIwMDU0WjAzMTEwLwYDVQQD EygwZTQwYzFiM2ZiMWVjN2IyY2E0NjA3NWVjOGI0OWVmN2ViMTkzNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5w9JuxYyfH0eDqEq7VKTxK6DJou EjqRZ2sPXgN0soWGEyKPo7T5Wdt0RQY73gaxDBe3+kjd1XrCudCHaHk/lMzaEmqb iF7FIe/I2CQT451NpMwthTVTq9XPSWk545tgqeFG9Tpyr8YmVcKBrTuaB4Iv/Cbv O7XGinF56hrV0bQmKqDzxIiCP5MeCOUP49EWRKiFwnxCTxmMlyTWHlxZGQGIQrK8 4jlO8c9l6DLu0zgGJ8ktV0L2Oxar2PnUEoDR5rN1ZN+olwTlmd2imwYV0ZqUrSZY db7V/I92ltZlWhYKT6+ReQiXy3jCisS8Uf3lgttMj3sX/I0gb2sQ9Xgu+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5AwbP7HseyykYHXsi0nvfrGTYKMB8GA1UdIwQY MBaAFNEwEXrhzcLfHFiBbgDlRR+H77NwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUt MjUwYTRkNzc3YmE2LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUtMjUwYTRkNzc3YmE2 LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCkocICj +QrQmlvc0JmlKzolG9GP7xgL378+PO0PMQNR6xOeBxw9wkyEbSzNrAKHRyuaBamJ bA/+gXjWQ8USFq9SEBO/SXfbkIka2QeMpfJh+yDaju10n2kxBXX+X11UhHtQCC6+ Qeqe4+pDdFr966cfF0vtLfdsBZVWq8Acq/8gcDF/F5uoQXZ8u3zuLDl4LfjPdTfp Nc0UkRShW3pTeDYoinulj8Ain2WyzH/8LvzQJX0sThsh1EAYA+YYUdd453nMe1Xf E+9Jfhuz59dlVgrVE+yVnUxnwElwaQ+DZiF6GJ0MJxf3oqny5ckLy4QXAjUx2s6w LgAICqiEv+aS3Q== -----END CERTIFICATE-----Generated at Sun Dec 21 05:02:13 2025 by rpki-client