This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft File: 0LYdHx2czatrbY4UUMLJNtOX5nA.mft (raw, json) Hash identifier: LQf2YIzk1Zq1tQN/bQ+bxwwzlKRpO/bvgpoP9braB/Y= Subject key identifier: 47:5E:16:2C:A6:E2:2D:1E:EB:6B:19:24:18:1E:89:C4:C9:3E:17:28 Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70 Certificate issuer: /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670 Certificate serial: 019B6E45F199150953232B1972097D15975F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft Manifest number: 0486 Signing time: Tue 30 Dec 2025 08:00:36 +0000 Manifest this update: Tue 30 Dec 2025 08:00:36 +0000 Manifest next update: Wed 31 Dec 2025 08:00:36 +0000 Files and hashes: 1: 0LYdHx2czatrbY4UUMLJNtOX5nA.crl (hash: J8b2WaqgT/sICLQgma+5ABVVqnys7wQe/4ubLahNGFY=) 2: DhPaCGROVzc_RyLkimAXvuteooA.roa (hash: 7GJwuhnVTvbxl3b1/oKcnOg3a/h9WeQA7faf/qH9pFA=) 3: WtuPQAz22oEnCEx3Rc-9J0U0Qbk.roa (hash: LqsVaHB6US9lWput6TNuWvOyM8xnvQFU16n5uBdiSPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:45:f1:99:15:09:53:23:2b:19:72:09:7d:15:97:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670 Validity Not Before: Dec 30 08:00:36 2025 GMT Not After : Dec 31 08:00:36 2025 GMT Subject: CN=475e162ca6e22d1eeb6b1924181e89c4c93e1728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:6e:41:da:48:bc:cc:b1:d0:e7:fc:95:79: fd:58:24:8c:b8:48:de:ed:d3:dd:f0:ba:c3:57:7b: e7:d8:5f:0e:9c:da:51:34:bf:a7:75:53:fa:c8:f0: c5:e9:65:c3:3f:6b:1a:76:11:e4:7f:60:b1:f9:2f: f0:1a:aa:c7:37:66:18:25:d5:23:dc:27:0c:86:cb: 49:2f:0e:d5:f8:5b:00:c3:3c:be:1d:db:0b:ca:bf: f1:68:dc:35:48:d2:5b:2c:9c:36:52:b1:85:a3:c8: 71:5e:e7:61:e6:2e:ec:64:ca:7a:84:56:6a:b2:b5: 6b:d4:4a:14:35:62:20:05:17:b2:cd:3a:7e:9e:be: 08:0e:08:f4:45:d5:e0:cb:03:ae:bb:08:5e:9c:5e: 7d:78:c9:84:15:1c:c4:20:c2:e7:1b:3a:a8:cb:6a: 5d:93:69:d3:d2:7a:63:71:ae:2b:df:63:77:f6:a6: 50:0d:12:11:3f:ce:a2:78:36:ed:57:1f:54:d9:83: d7:2d:73:63:9f:52:9d:10:cb:46:d3:50:10:40:be: 7e:ba:00:e8:4d:6c:ac:25:6d:8f:b8:df:f4:a9:b6: 60:84:ba:ea:b1:16:c3:74:71:11:23:bd:04:fc:e3: 48:12:5a:0e:74:e4:0b:de:6a:f5:1f:05:4f:b9:e2: e4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5E:16:2C:A6:E2:2D:1E:EB:6B:19:24:18:1E:89:C4:C9:3E:17:28 X509v3 Authority Key Identifier: keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c6:83:a9:c5:e4:71:f7:d8:c2:69:a9:e9:d0:94:54:25:7e: 6b:a1:ac:7f:f9:5b:b9:13:f3:16:b7:d0:68:4f:63:b8:05:c4: 62:57:80:c5:92:fa:3a:3d:65:9e:91:ec:40:99:db:a5:7d:93: 87:85:30:9d:82:76:70:57:94:cc:b3:95:b6:ac:6c:a8:36:0d: 82:c3:12:8e:11:af:c7:40:eb:3b:8a:af:27:5f:8a:0a:3d:09: df:d5:70:0f:95:cd:f6:cb:38:95:84:1b:7a:98:cb:e3:62:41: 89:30:c5:d0:c9:c0:9d:32:05:e0:9c:45:95:7b:a0:84:ff:b8: 17:ae:41:59:1b:31:86:9d:5a:16:8d:6c:20:db:95:5e:ec:63: e8:1c:af:56:fd:90:56:60:d9:3f:05:2e:29:41:b1:9c:4c:48: 46:7d:c0:1a:08:52:87:59:73:25:b6:c9:19:19:41:bd:84:8c: c8:bf:cf:a8:e8:df:72:4a:87:b4:c7:e8:d0:de:bb:87:72:c4: ce:46:3c:09:9b:8e:9c:e7:85:44:30:3b:56:6b:3c:d1:4a:60: 8d:2f:57:17:c9:26:46:04:7d:9a:b7:f4:71:94:44:dc:56:f8: 62:7c:68:1a:d2:f0:e3:6e:cd:83:e7:f2:a5:e8:e6:87:b0:17: ea:5b:cb:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuRfGZFQlTIysZcgl9FZdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYjYxZDFmMWQ5Y2NkYWI2YjZkOGUxNDUwYzJjOTM2ZDM5 N2U2NzAwHhcNMjUxMjMwMDgwMDM2WhcNMjUxMjMxMDgwMDM2WjAzMTEwLwYDVQQD Eyg0NzVlMTYyY2E2ZTIyZDFlZWI2YjE5MjQxODFlODljNGM5M2UxNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPhuQdpIvMyx0Of8lXn9WCSMuEje 7dPd8LrDV3vn2F8OnNpRNL+ndVP6yPDF6WXDP2sadhHkf2Cx+S/wGqrHN2YYJdUj 3CcMhstJLw7V+FsAwzy+HdsLyr/xaNw1SNJbLJw2UrGFo8hxXudh5i7sZMp6hFZq srVr1EoUNWIgBReyzTp+nr4IDgj0RdXgywOuuwhenF59eMmEFRzEIMLnGzqoy2pd k2nT0npjca4r32N39qZQDRIRP86ieDbtVx9U2YPXLXNjn1KdEMtG01AQQL5+ugDo TWysJW2PuN/0qbZghLrqsRbDdHERI70E/ONIEloOdOQL3mr1HwVPueLkxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdeFiym4i0e62sZJBgeicTJPhcoMB8GA1UdIwQY MBaAFNC2HR8dnM2ra22OFFDCyTbTl+ZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExZZEh4MmN6YXRyYlk0VVVNTEpOdE9YNW5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zMTc2MzUtYTkwYS00NzA0LTk2NzIt MTVmNjJjODkwYWY4LzEvMExZZEh4MmN6YXRyYlk0VVVNTEpOdE9YNW5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8zMTc2MzUtYTkwYS00NzA0LTk2NzItMTVmNjJjODkwYWY4 LzEvMExZZEh4MmN6YXRyYlk0VVVNTEpOdE9YNW5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8aDqcXk cffYwmmp6dCUVCV+a6Gsf/lbuRPzFrfQaE9juAXEYleAxZL6Oj1lnpHsQJnbpX2T h4UwnYJ2cFeUzLOVtqxsqDYNgsMSjhGvx0DrO4qvJ1+KCj0J39VwD5XN9ss4lYQb epjL42JBiTDF0MnAnTIF4JxFlXughP+4F65BWRsxhp1aFo1sINuVXuxj6ByvVv2Q VmDZPwUuKUGxnExIRn3AGghSh1lzJbbJGRlBvYSMyL/PqOjfckqHtMfo0N67h3LE zkY8CZuOnOeFRDA7Vms80UpgjS9XF8kmRgR9mrf0cZRE3Fb4YnxoGtLw427Ng+fy pejmh7AX6lvLxQ== -----END CERTIFICATE-----Generated at Tue Dec 30 14:57:33 2025 by rpki-client