This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json) Hash identifier: A4ugX02RUJVQyg12VTzQcv1hfzPcbTIhCELl40OT/ug= Subject key identifier: B8:AF:B6:2D:0C:7D:13:40:B7:CE:14:7E:27:8E:70:57:F3:BB:EE:AE Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c Certificate serial: 019B409198ABD12DC3610F372C797521457D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft Manifest number: 14B0 Signing time: Sun 21 Dec 2025 11:00:42 +0000 Manifest this update: Sun 21 Dec 2025 11:00:42 +0000 Manifest next update: Mon 22 Dec 2025 11:00:42 +0000 Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: DhtAr6Kws8bvIb6frpgYWrt0RrWPdWEbFt/OQ55cFSA=) 2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=) 3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:98:ab:d1:2d:c3:61:0f:37:2c:79:75:21:45:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c Validity Not Before: Dec 21 11:00:42 2025 GMT Not After : Dec 22 11:00:42 2025 GMT Subject: CN=b8afb62d0c7d1340b7ce147e278e7057f3bbeeae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:1c:08:6d:53:ba:eb:96:4d:da:db:a8:46: 4b:6d:72:d4:5c:80:3c:36:ff:c4:45:56:b7:cc:d9: fe:cc:3c:a2:41:86:98:9f:7a:5d:ba:e0:a0:64:2f: 0a:d9:b0:c3:d2:10:1e:b9:87:e6:4e:60:e1:69:38: 07:31:5b:66:e2:0e:04:52:57:e3:45:d1:a2:71:30: 41:56:97:b7:17:ab:ed:56:2d:db:5e:55:85:c7:62: 90:73:db:f1:69:7a:32:11:c5:a9:b2:62:bd:4b:96: 46:2e:18:5d:b0:97:2c:4a:2f:54:9a:17:c0:35:f8: dc:6e:4d:0e:75:83:b8:28:81:0a:f8:d4:a3:d7:3b: 82:ca:f2:66:24:c3:97:df:5e:b6:a5:cc:fc:9e:0f: a8:00:ef:e9:2a:ef:29:3f:5f:b8:9e:86:0f:0b:54: c6:6a:3d:74:5b:c4:e7:e7:ef:cf:d4:0d:03:40:cc: d7:b4:03:10:75:60:2e:b5:5f:03:09:1c:ac:b0:41: ca:82:1e:10:9a:01:31:48:8d:95:2b:c2:96:63:86: a0:c3:7a:83:bc:45:84:da:ce:3a:f7:ab:ae:7e:fd: 81:97:91:df:36:07:59:c6:94:bc:3e:02:43:3c:f7: b3:e5:99:cc:98:8a:78:d8:69:6e:b1:cb:79:52:35: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AF:B6:2D:0C:7D:13:40:B7:CE:14:7E:27:8E:70:57:F3:BB:EE:AE X509v3 Authority Key Identifier: keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0d:28:84:a5:ce:c6:26:ea:3e:16:ca:09:25:73:20:84:60: 38:d7:fa:1b:85:24:c7:a6:75:43:6a:3a:62:93:49:ff:4c:78: 92:11:64:d8:cc:b8:cd:18:d9:f7:57:1d:a4:cd:23:07:bc:a2: a5:22:91:d3:68:2a:0a:ac:34:80:1a:c2:24:17:c6:d3:25:83: d1:3a:f2:25:c5:31:1a:5c:eb:28:d7:5c:5e:f8:31:86:a0:aa: 91:36:5c:83:54:b2:c7:0d:07:3a:f1:db:3a:68:78:02:95:91: 02:00:40:f2:47:28:d7:0e:f6:09:e8:48:56:4b:8e:3b:80:9c: d5:b4:6c:2e:58:f3:ab:eb:9f:39:12:0e:6d:dc:c5:6e:f0:6d: b3:05:2d:26:9e:df:28:61:04:11:55:08:ed:3b:6e:a2:1e:7e: 18:90:ec:0c:63:a0:9b:dd:28:d0:d4:fd:69:8b:00:c6:73:00: 57:d9:1d:a6:c2:9b:46:47:73:f4:7d:04:80:18:dd:fe:09:6b: 2d:e2:e5:07:47:32:bf:90:47:b3:a5:85:8f:62:95:c7:7a:83: 20:65:4f:1e:08:fc:6d:06:ae:1c:79:33:23:62:cd:e2:c6:5a: b6:e4:c8:bb:00:2d:8e:47:b2:c7:10:34:92:89:e3:73:ff:c2: 46:f0:a6:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkZir0S3DYQ83LHl1IUV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMmQ0ZDJmYjc1YTc1NTlhMjBmNzk1NDhjNDU4NTQyZmQw YTlhNGMwHhcNMjUxMjIxMTEwMDQyWhcNMjUxMjIyMTEwMDQyWjAzMTEwLwYDVQQD EyhiOGFmYjYyZDBjN2QxMzQwYjdjZTE0N2UyNzhlNzA1N2YzYmJlZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkgcCG1TuuuWTdrbqEZLbXLUXIA8 Nv/ERVa3zNn+zDyiQYaYn3pduuCgZC8K2bDD0hAeuYfmTmDhaTgHMVtm4g4EUlfj RdGicTBBVpe3F6vtVi3bXlWFx2KQc9vxaXoyEcWpsmK9S5ZGLhhdsJcsSi9UmhfA Nfjcbk0OdYO4KIEK+NSj1zuCyvJmJMOX3162pcz8ng+oAO/pKu8pP1+4noYPC1TG aj10W8Tn5+/P1A0DQMzXtAMQdWAutV8DCRyssEHKgh4QmgExSI2VK8KWY4agw3qD vEWE2s4696uufv2Bl5HfNgdZxpS8PgJDPPez5ZnMmIp42Glusct5UjXKhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLivti0MfRNAt84UfieOcFfzu+6uMB8GA1UdIwQY MBaAFNEtTS+3WnVZog95VIxFhUL9CppMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUt MWVlY2Q1ODVkYjhjLzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUtMWVlY2Q1ODVkYjhj LzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQ0ohKXO xibqPhbKCSVzIIRgONf6G4Ukx6Z1Q2o6YpNJ/0x4khFk2My4zRjZ91cdpM0jB7yi pSKR02gqCqw0gBrCJBfG0yWD0TryJcUxGlzrKNdcXvgxhqCqkTZcg1Syxw0HOvHb Omh4ApWRAgBA8kco1w72CehIVkuOO4Cc1bRsLljzq+ufORIObdzFbvBtswUtJp7f KGEEEVUI7Ttuoh5+GJDsDGOgm90o0NT9aYsAxnMAV9kdpsKbRkdz9H0EgBjd/glr LeLlB0cyv5BHs6WFj2KVx3qDIGVPHgj8bQauHHkzI2LN4sZatuTIuwAtjkeyxxA0 konjc//CRvCmlA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:25:20 2025 by rpki-client