This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft File: 0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json) Hash identifier: n+APQWCc7EdbEUy3IAh10ureN/V9PXrFefn8hz2TgHc= Subject key identifier: 17:AD:46:14:9C:C1:BB:90:E0:89:C2:5C:70:1D:5E:1A:40:98:D2:95 Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC Certificate issuer: /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc Certificate serial: 019B360DED7E81AFB7271083F237C6BB58DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft Manifest number: 0F36 Signing time: Fri 19 Dec 2025 10:00:41 +0000 Manifest this update: Fri 19 Dec 2025 10:00:41 +0000 Manifest next update: Sat 20 Dec 2025 10:00:41 +0000 Files and hashes: 1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: +kO25ptcEOJDaqSQA/QilyhGqxoCM/Xc1cbnbWVf8ZQ=) 2: ED7irA7lmwh5tHPGbkFIIeJv-bg.roa (hash: Ig5tcq1zw9JQCpzSA6FZ4ETNZF6mc/oaQxjv4KTG32g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0d:ed:7e:81:af:b7:27:10:83:f2:37:c6:bb:58:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc Validity Not Before: Dec 19 10:00:41 2025 GMT Not After : Dec 20 10:00:41 2025 GMT Subject: CN=17ad46149cc1bb90e089c25c701d5e1a4098d295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7c:d2:40:0b:5d:00:4b:e8:2c:d6:11:45:0d: 74:05:c2:ea:96:6f:65:35:50:90:94:50:38:fa:e0: a6:65:c4:e3:af:a7:1f:ae:a2:a4:69:5a:1a:c2:53: 73:85:c5:24:2c:1f:82:82:5b:eb:53:fe:9d:7a:3b: 3f:cf:9f:ba:80:54:6d:35:2d:e3:42:8c:c1:46:87: 7b:ee:1a:3b:00:a1:d1:3d:0c:65:97:db:52:78:2c: de:d0:da:ab:15:e0:52:66:cd:58:e0:81:f2:cd:77: 5a:2e:0d:37:8f:a8:39:44:5a:95:c1:cf:6c:7c:43: 28:d3:f5:bd:99:d5:17:fd:ed:75:33:12:2e:2a:86: 74:46:b5:4c:66:c0:f1:4b:7b:86:97:7c:e6:db:f4: a1:61:7f:91:fe:a2:72:48:ca:a7:26:2d:7d:be:23: b5:50:f3:ae:6a:24:32:4e:90:96:76:51:a0:74:30: 55:70:e5:83:6e:f6:50:48:a6:49:ca:9c:12:20:19: 12:bd:ef:46:01:84:33:03:53:e8:a0:11:85:13:06: 42:87:b1:14:10:77:74:da:96:41:97:09:64:c8:e7: 35:73:24:59:d0:9c:87:b7:cd:c0:94:46:6b:ff:02: b5:8a:78:23:01:8d:f5:2f:af:20:ee:c0:4f:1f:ec: 39:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AD:46:14:9C:C1:BB:90:E0:89:C2:5C:70:1D:5E:1A:40:98:D2:95 X509v3 Authority Key Identifier: keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6a:1d:94:4d:9a:28:13:5c:e2:76:62:f6:67:1e:11:3a:d1: 9e:a4:bd:a5:97:46:7f:e5:5d:98:23:60:4c:93:8c:81:bc:9e: 3a:d0:46:c2:40:92:61:bc:6f:2e:49:15:1e:39:22:71:e5:b2: 50:8e:d5:07:cc:af:78:13:6c:fa:0a:3a:3a:2c:aa:87:84:c2: f8:a7:4e:b6:71:fd:43:4c:c8:37:c7:2f:45:eb:34:f7:3f:ea: 16:65:ee:10:83:c5:b1:24:89:1b:58:69:70:4e:aa:e1:aa:da: ff:8a:2e:5d:52:81:4a:08:74:c3:20:29:fd:d8:42:1d:18:c0: 79:b7:db:67:4b:90:6a:26:a6:3a:1a:a8:75:f7:a3:e2:bb:86: 8a:22:87:19:16:61:c6:82:ad:7c:c8:8a:04:46:0f:3c:36:29: 28:f1:02:92:c7:f8:38:d5:47:9a:5e:2f:b3:d1:e9:17:7a:c1: 1d:95:36:fe:57:c0:00:05:44:17:36:42:5d:60:2a:17:1e:43: 3d:4a:7a:a5:65:20:ca:20:76:de:3f:72:67:9b:d9:ba:f9:9b: 81:fc:8e:e1:cf:4c:87:e0:8f:93:af:98:81:0d:60:eb:50:87: e6:f5:15:bd:4e:08:53:36:b9:0c:ff:13:bf:9a:2d:e2:e1:45: 6d:44:e6:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2De1+ga+3JxCD8jfGu1jaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYmZhZGYyOTIzOWVkOGNmM2Y2YzY5M2Q4YmRiNzlmNDIw MDBhYmMwHhcNMjUxMjE5MTAwMDQxWhcNMjUxMjIwMTAwMDQxWjAzMTEwLwYDVQQD EygxN2FkNDYxNDljYzFiYjkwZTA4OWMyNWM3MDFkNWUxYTQwOThkMjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HzSQAtdAEvoLNYRRQ10BcLqlm9l NVCQlFA4+uCmZcTjr6cfrqKkaVoawlNzhcUkLB+CglvrU/6dejs/z5+6gFRtNS3j QozBRod77ho7AKHRPQxll9tSeCze0NqrFeBSZs1Y4IHyzXdaLg03j6g5RFqVwc9s fEMo0/W9mdUX/e11MxIuKoZ0RrVMZsDxS3uGl3zm2/ShYX+R/qJySMqnJi19viO1 UPOuaiQyTpCWdlGgdDBVcOWDbvZQSKZJypwSIBkSve9GAYQzA1PooBGFEwZCh7EU EHd02pZBlwlkyOc1cyRZ0JyHt83AlEZr/wK1ingjAY31L68g7sBPH+w5RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBetRhScwbuQ4InCXHAdXhpAmNKVMB8GA1UdIwQY MBaAFNC/rfKSOe2M8/bGk9i9t59CAAq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAt N2JiMzY1ZjM0YzZjLzEvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAtN2JiMzY1ZjM0YzZj LzEvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmodlE2a KBNc4nZi9mceETrRnqS9pZdGf+VdmCNgTJOMgbyeOtBGwkCSYbxvLkkVHjkiceWy UI7VB8yveBNs+go6Oiyqh4TC+KdOtnH9Q0zIN8cvRes09z/qFmXuEIPFsSSJG1hp cE6q4ara/4ouXVKBSgh0wyAp/dhCHRjAebfbZ0uQaiamOhqodfej4ruGiiKHGRZh xoKtfMiKBEYPPDYpKPECksf4ONVHml4vs9HpF3rBHZU2/lfAAAVEFzZCXWAqFx5D PUp6pWUgyiB23j9yZ5vZuvmbgfyO4c9Mh+CPk6+YgQ1g61CH5vUVvU4IUza5DP8T v5ot4uFFbUTmqg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:07:57 2025 by rpki-client