This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json) Hash identifier: Mhw/+ywL60C5qAphuvJxxZkzpywhSxAEfqnF3X5mBzE= Subject key identifier: 27:17:49:BD:BD:B6:77:58:6A:5F:E0:A0:78:66:32:EB:52:FB:D6:D0 Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be Certificate serial: 019B3E6DE2E1188728A68FBCA8CFAA51B92A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft Manifest number: 10FA Signing time: Sun 21 Dec 2025 01:02:27 +0000 Manifest this update: Sun 21 Dec 2025 01:02:27 +0000 Manifest next update: Mon 22 Dec 2025 01:02:27 +0000 Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: 2bJSuab8VwZtXB7oak2AwmfIBb2AxdvERrPgVLe53Dk=) 2: Ns-TL5URBIXkWjSrsIX0f-jA8r8.roa (hash: rkMxs94A3zqfZql4p2TlDjcRtvwJLskmzewtRu09cI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:e2:e1:18:87:28:a6:8f:bc:a8:cf:aa:51:b9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d103af197645a4941c6cdb08669af008b79102be Validity Not Before: Dec 21 01:02:27 2025 GMT Not After : Dec 22 01:02:27 2025 GMT Subject: CN=271749bdbdb677586a5fe0a0786632eb52fbd6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:76:16:20:ec:3a:c1:09:cb:f8:7a:31:40:b8: 4a:8a:a5:87:e0:76:b4:08:1e:78:78:41:80:03:7d: 94:ec:b1:b0:b3:f7:b0:c8:8e:7b:65:5a:af:59:6b: 7d:87:22:31:b2:6e:74:34:3b:1b:23:b1:20:80:0d: 6e:05:0b:23:11:1d:4d:03:86:e5:22:5d:01:f7:16: 87:2e:fd:53:c1:e8:fc:63:d7:b1:d7:30:66:29:f7: d2:70:79:d3:cc:9e:b6:15:e6:9f:7c:76:f7:8a:09: 75:61:94:64:06:98:6f:45:91:7e:57:c7:11:0b:ed: be:9e:72:5b:1e:4c:e8:91:c8:5e:5b:94:d1:cf:ca: 74:54:15:33:6e:4b:a5:63:55:e9:87:b1:ce:c5:69: 61:e2:d5:de:85:ee:87:1a:09:3e:de:68:b2:c1:a0: 5d:9c:eb:23:ee:7e:d9:20:32:89:f8:44:d0:cf:71: 92:7b:36:66:7c:5f:41:02:3a:9f:67:b0:84:86:23: 9a:75:58:52:97:0d:23:9a:af:b6:6b:65:ab:73:66: 0c:8a:71:fd:8e:5d:2c:fa:17:4f:8f:c6:63:04:47: 99:51:10:79:62:1c:aa:c1:4e:33:c4:14:21:8a:db: 7f:8c:df:b0:c5:26:06:21:2e:0a:56:4d:b3:a7:96: c2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:17:49:BD:BD:B6:77:58:6A:5F:E0:A0:78:66:32:EB:52:FB:D6:D0 X509v3 Authority Key Identifier: keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c7:d0:14:68:11:5e:89:9a:2e:a0:cb:f0:dc:05:27:73:d2: 79:44:93:85:04:f4:52:a6:b8:fd:c1:8a:f1:88:7e:a8:98:06: 8d:a5:ab:ec:6b:1b:6c:76:8e:96:8a:17:ee:15:ec:e8:e5:dd: 09:0f:a8:18:92:61:50:b3:e1:1c:73:38:f6:67:a7:e3:6c:bb: c1:bc:e0:3a:38:e8:f5:8a:38:54:52:cf:3a:b9:25:95:b9:a4: 2d:c9:c4:00:72:5d:ca:11:d7:2c:2c:22:02:16:b7:86:9e:74: a7:be:4f:77:d3:2d:4d:44:f6:74:6b:5f:7c:a1:22:11:46:0f: 7d:29:e0:ae:89:84:84:89:40:94:2b:95:4f:99:8b:35:22:38: ea:b9:b0:d9:81:79:45:c5:af:a1:86:0f:40:23:6a:7e:f8:6b: 83:c5:e8:a9:3c:e7:67:52:32:6c:19:93:09:7d:1a:e6:8a:c5: f8:92:f6:11:d8:4e:ad:65:e6:a2:b7:aa:10:e7:cb:7c:cb:2c: 31:0c:72:fe:0f:3a:f9:75:53:85:91:6d:ae:38:3e:03:66:1a: 81:f1:89:94:74:ff:57:0c:19:ad:c6:d7:02:b1:12:17:ea:2c: 39:62:71:6d:40:89:13:f4:3a:ec:02:62:0d:fb:52:61:4d:fd: e5:51:3c:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+beLhGIcopo+8qM+qUbkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMDNhZjE5NzY0NWE0OTQxYzZjZGIwODY2OWFmMDA4Yjc5 MTAyYmUwHhcNMjUxMjIxMDEwMjI3WhcNMjUxMjIyMDEwMjI3WjAzMTEwLwYDVQQD EygyNzE3NDliZGJkYjY3NzU4NmE1ZmUwYTA3ODY2MzJlYjUyZmJkNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HYWIOw6wQnL+HoxQLhKiqWH4Ha0 CB54eEGAA32U7LGws/ewyI57ZVqvWWt9hyIxsm50NDsbI7EggA1uBQsjER1NA4bl Il0B9xaHLv1Twej8Y9ex1zBmKffScHnTzJ62FeaffHb3igl1YZRkBphvRZF+V8cR C+2+nnJbHkzokcheW5TRz8p0VBUzbkulY1Xph7HOxWlh4tXehe6HGgk+3miywaBd nOsj7n7ZIDKJ+ETQz3GSezZmfF9BAjqfZ7CEhiOadVhSlw0jmq+2a2Wrc2YMinH9 jl0s+hdPj8ZjBEeZURB5YhyqwU4zxBQhitt/jN+wxSYGIS4KVk2zp5bCRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcXSb29tndYal/goHhmMutS+9bQMB8GA1UdIwQY MBaAFNEDrxl2RaSUHGzbCGaa8Ai3kQK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDkt N2RiM2VjNmZhMzAyLzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDktN2RiM2VjNmZhMzAy LzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsfQFGgR XomaLqDL8NwFJ3PSeUSThQT0Uqa4/cGK8Yh+qJgGjaWr7GsbbHaOlooX7hXs6OXd CQ+oGJJhULPhHHM49men42y7wbzgOjjo9Yo4VFLPOrkllbmkLcnEAHJdyhHXLCwi Aha3hp50p75Pd9MtTUT2dGtffKEiEUYPfSngromEhIlAlCuVT5mLNSI46rmw2YF5 RcWvoYYPQCNqfvhrg8XoqTznZ1IybBmTCX0a5orF+JL2EdhOrWXmoreqEOfLfMss MQxy/g86+XVThZFtrjg+A2YagfGJlHT/VwwZrcbXArESF+osOWJxbUCJE/Q67AJi DftSYU395VE8qA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:45:21 2025 by rpki-client