This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json) Hash identifier: HCGGvDEs70M0MirYltTKGXJmPU9pDPrkOmc0cUX18cE= Subject key identifier: D1:BA:97:9C:42:C5:02:FA:28:52:77:23:BC:90:AE:5A:19:A3:F9:C4 Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c Certificate serial: 019B334445A5F2ECC037D5C087D389AA5CAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft Manifest number: 10EB Signing time: Thu 18 Dec 2025 21:01:10 +0000 Manifest this update: Thu 18 Dec 2025 21:01:10 +0000 Manifest next update: Fri 19 Dec 2025 21:01:10 +0000 Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: LarIrlzFm4EqALLkg6JQmDgUfJIF+U5SQWdcQ8LMA5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:45:a5:f2:ec:c0:37:d5:c0:87:d3:89:aa:5c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c Validity Not Before: Dec 18 21:01:10 2025 GMT Not After : Dec 19 21:01:10 2025 GMT Subject: CN=d1ba979c42c502fa28527723bc90ae5a19a3f9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ef:b9:29:29:15:de:d3:7d:c9:d8:dd:3a:a9: 84:1a:72:76:c9:4d:2f:43:57:fb:97:c7:7f:b5:f8: 4a:a9:dd:48:ff:24:a2:cf:ee:08:8c:bd:10:08:f5: c1:04:e5:dc:d2:31:a7:9d:72:23:f6:d5:5f:60:f6: 97:d6:1a:ce:f7:6e:d2:35:c3:14:88:11:ad:76:da: 3d:9d:8f:92:11:4b:3e:90:76:f5:a6:70:4d:a8:c3: 1b:3f:05:f6:7c:b3:46:5d:70:3a:71:88:75:ee:42: 81:d5:03:6b:8e:6e:f6:f8:0d:d8:03:06:f9:eb:8e: ba:cb:7f:b7:77:8f:c0:6b:03:36:a5:5e:03:db:28: 17:af:6d:42:07:b9:60:33:73:32:fb:00:de:46:8b: a2:16:d4:39:68:bd:9f:dd:89:fe:b5:bf:ab:04:3e: 65:11:39:0f:40:a2:f1:37:c0:66:23:fa:7d:d1:51: cb:e3:b8:2b:38:2a:fa:df:c4:40:c9:5b:4a:b9:34: 6f:11:40:08:cb:9e:72:2b:59:1c:75:e9:f5:69:4c: 2e:ab:4c:9f:8b:be:52:ee:95:b7:57:ac:3b:aa:30: 30:93:a2:80:23:f6:1a:25:98:a5:b3:59:d8:6c:0e: 07:e5:8e:ff:5a:69:fd:76:58:13:2c:eb:62:f4:ce: 03:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BA:97:9C:42:C5:02:FA:28:52:77:23:BC:90:AE:5A:19:A3:F9:C4 X509v3 Authority Key Identifier: keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5d:8b:16:33:09:3f:35:9a:43:0f:a9:ee:be:b1:8a:e2:f5: e3:d1:94:ec:87:32:0b:4e:b9:ec:a9:ff:4f:29:5a:8e:b0:a6: a2:b5:13:d2:5c:f2:89:2f:fc:ad:0c:59:e7:2a:e0:88:59:cd: e1:d2:aa:59:b7:4d:94:c4:88:85:1b:ce:a4:13:9e:d9:6e:bf: 8c:af:65:89:ed:21:49:32:b3:ae:99:17:8f:28:cd:a7:e0:b9: 9f:c2:02:bc:39:32:8b:4d:54:b2:c7:c4:c3:fa:e0:da:63:4f: 3e:d6:75:f8:5d:9f:b6:bb:3c:46:68:11:af:40:5b:91:91:3f: 17:84:0d:18:61:8e:cf:f7:94:93:a3:88:a4:d7:f1:3f:ce:cf: be:82:b7:af:2e:90:27:ce:63:6d:70:96:e6:da:c2:60:09:f9: 16:6a:77:c6:e8:19:5b:f0:7b:d6:b7:05:5c:09:ff:fe:35:76: e0:ad:85:f8:ca:c7:5a:ee:69:bf:17:90:5f:71:d1:33:1c:c0: 6f:d3:90:76:ab:b8:18:c8:4d:50:eb:67:0d:bb:30:c5:8d:94: a0:5c:87:25:57:10:e9:90:ea:a7:35:9e:7f:29:3d:7c:92:b3: d9:73:a3:26:6a:f9:6b:19:9e:eb:26:65:c1:7f:f5:de:b3:ba: 5a:60:56:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszREWl8uzAN9XAh9OJqlysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMDUxYWY4NjYxZTk0MjUyZDE3NTkzNWQzNzk3ZTllY2Ey Y2Q4MGMwHhcNMjUxMjE4MjEwMTEwWhcNMjUxMjE5MjEwMTEwWjAzMTEwLwYDVQQD EyhkMWJhOTc5YzQyYzUwMmZhMjg1Mjc3MjNiYzkwYWU1YTE5YTNmOWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz++5KSkV3tN9ydjdOqmEGnJ2yU0v Q1f7l8d/tfhKqd1I/ySiz+4IjL0QCPXBBOXc0jGnnXIj9tVfYPaX1hrO927SNcMU iBGtdto9nY+SEUs+kHb1pnBNqMMbPwX2fLNGXXA6cYh17kKB1QNrjm72+A3YAwb5 6466y3+3d4/AawM2pV4D2ygXr21CB7lgM3My+wDeRouiFtQ5aL2f3Yn+tb+rBD5l ETkPQKLxN8BmI/p90VHL47grOCr638RAyVtKuTRvEUAIy55yK1kcden1aUwuq0yf i75S7pW3V6w7qjAwk6KAI/YaJZils1nYbA4H5Y7/Wmn9dlgTLOti9M4DxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNG6l5xCxQL6KFJ3I7yQrloZo/nEMB8GA1UdIwQY MBaAFNMFGvhmHpQlLRdZNdN5fp7KLNgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHdVYS1HWWVsQ1V0RjFrMTAzbC1uc29zMkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83NjcyZTItMWM3Zi00ZDJlLTg5NjEt YzI2YzNlMjNiYWY2LzEvMHdVYS1HWWVsQ1V0RjFrMTAzbC1uc29zMkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83NjcyZTItMWM3Zi00ZDJlLTg5NjEtYzI2YzNlMjNiYWY2 LzEvMHdVYS1HWWVsQ1V0RjFrMTAzbC1uc29zMkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN12LFjMJ PzWaQw+p7r6xiuL149GU7IcyC0657Kn/TylajrCmorUT0lzyiS/8rQxZ5yrgiFnN 4dKqWbdNlMSIhRvOpBOe2W6/jK9lie0hSTKzrpkXjyjNp+C5n8ICvDkyi01UssfE w/rg2mNPPtZ1+F2ftrs8RmgRr0BbkZE/F4QNGGGOz/eUk6OIpNfxP87PvoK3ry6Q J85jbXCW5trCYAn5Fmp3xugZW/B71rcFXAn//jV24K2F+MrHWu5pvxeQX3HRMxzA b9OQdqu4GMhNUOtnDbswxY2UoFyHJVcQ6ZDqpzWefyk9fJKz2XOjJmr5axme6yZl wX/13rO6WmBWrw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:47:45 2025 by rpki-client