This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json) Hash identifier: XM5X36cjQ69f7Q0hYKTsNLGrjzPj6i3d8ardxvV9ywY= Subject key identifier: 95:9E:D9:31:E6:87:84:12:0F:F8:D5:A1:45:00:44:11:57:71:24:6C Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97 Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797 Certificate serial: 019B72908D4AD7D4B9C00ECE0FFAD2931B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft Manifest number: 0D91 Signing time: Wed 31 Dec 2025 04:00:34 +0000 Manifest this update: Wed 31 Dec 2025 04:00:34 +0000 Manifest next update: Thu 01 Jan 2026 04:00:34 +0000 Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: VOdtk864mrW2IHp8B+C+3sHJ6Vd6fH65HgTUOVMGS2s=) 2: IakaUVIwolxABf_iFG6RX8yq8dc.roa (hash: 7jt2eahvNjy4JlonD7RGKwXoWtuGwCznkksLfkvVUZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:90:8d:4a:d7:d4:b9:c0:0e:ce:0f:fa:d2:93:1b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797 Validity Not Before: Dec 31 04:00:34 2025 GMT Not After : Jan 1 04:00:34 2026 GMT Subject: CN=959ed931e68784120ff8d5a1450044115771246c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:1a:1a:03:a5:66:03:99:64:db:8b:b7:38: 77:54:45:01:e5:0a:fe:c9:44:75:94:83:31:d4:ec: e7:3e:1b:ec:09:9b:9d:dc:67:fd:20:f4:ea:fc:75: e4:04:b1:ca:76:98:fe:5c:21:84:a4:21:35:22:cb: 08:f6:f4:96:f4:65:e1:07:4f:25:4e:22:02:17:e2: 8e:8d:85:d9:7a:a1:96:dd:cf:be:30:e5:3d:b4:96: 67:4f:3c:c8:a6:f9:1a:74:01:22:ab:40:7a:e2:97: 00:85:fb:bd:ff:65:9a:19:55:08:61:04:d4:46:87: 3b:a6:bc:bf:96:73:c9:7a:7c:ba:7e:4b:e4:4d:fb: 23:d2:e1:8b:2f:3b:2d:39:6f:07:ea:9c:d1:32:74: 5e:3e:19:d4:6f:0d:bb:6b:0a:40:7f:be:1c:d1:9a: 6b:2d:04:86:cf:a1:5f:88:f4:6c:ec:2f:08:f9:6f: b9:81:f1:01:f9:e8:ee:6e:43:2e:0b:79:88:61:81: 8d:67:b6:27:27:30:21:3a:fe:00:a2:da:f4:4f:ba: 5e:50:b1:bf:58:12:c9:a4:61:52:ca:62:c5:b3:14: 69:d6:e5:39:93:21:b1:6d:77:de:bf:18:9c:c4:33: 8d:6c:53:11:cd:c1:ff:65:4a:3e:b9:dc:72:e7:e5: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9E:D9:31:E6:87:84:12:0F:F8:D5:A1:45:00:44:11:57:71:24:6C X509v3 Authority Key Identifier: keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:45:f3:bd:09:39:52:ce:0e:d8:92:d1:60:a7:29:51:61:b6: 39:50:10:fe:57:26:1b:74:34:1d:9f:1f:e1:c3:56:f8:60:ac: a3:a3:78:d6:9f:0e:c1:b4:ed:58:3d:66:4e:6e:b0:8a:ac:d6: 48:b3:d2:8d:3e:96:de:eb:a4:72:a9:26:fe:cb:72:06:e2:15: 09:d6:ee:65:84:2c:34:e7:1b:cd:19:36:a2:33:f6:08:53:24: 92:92:06:db:f8:34:a1:95:d9:f1:34:42:8e:0d:43:eb:b4:36: c5:b6:3c:f2:f1:07:4f:71:93:8d:50:93:96:0c:55:06:f9:94: 32:18:b0:c7:07:15:9b:23:77:9f:e4:45:b6:16:6d:4e:03:e5: b6:50:3e:0b:4d:9c:84:3b:3a:38:88:96:d3:99:8b:8e:93:5c: 49:9c:d0:fe:1c:49:66:be:56:f2:e6:63:27:40:98:d1:d2:2f: 92:a6:a8:5f:a0:b5:68:d4:72:ae:74:64:cd:b5:72:94:97:96: 1b:69:2a:a9:47:3e:86:c2:c9:93:61:c6:5f:21:3f:52:2e:d8: 2d:59:96:73:4a:c4:30:90:8d:3c:26:f9:4a:f5:f5:a9:23:22: 9e:0f:c7:f8:23:0a:6c:e5:cd:d0:20:e4:c9:f9:86:33:a0:40: dc:6f:aa:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykI1K19S5wA7OD/rSkxs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYjdmYzhiMDU4ZDFmNDk5OTAxYThjMmY4NmU2MmFlOTUx MzY3OTcwHhcNMjUxMjMxMDQwMDM0WhcNMjYwMTAxMDQwMDM0WjAzMTEwLwYDVQQD Eyg5NTllZDkzMWU2ODc4NDEyMGZmOGQ1YTE0NTAwNDQxMTU3NzEyNDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve0aGgOlZgOZZNuLtzh3VEUB5Qr+ yUR1lIMx1OznPhvsCZud3Gf9IPTq/HXkBLHKdpj+XCGEpCE1IssI9vSW9GXhB08l TiICF+KOjYXZeqGW3c++MOU9tJZnTzzIpvkadAEiq0B64pcAhfu9/2WaGVUIYQTU Roc7pry/lnPJeny6fkvkTfsj0uGLLzstOW8H6pzRMnRePhnUbw27awpAf74c0Zpr LQSGz6FfiPRs7C8I+W+5gfEB+ejubkMuC3mIYYGNZ7YnJzAhOv4Aotr0T7peULG/ WBLJpGFSymLFsxRp1uU5kyGxbXfevxicxDONbFMRzcH/ZUo+udxy5+WANQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWe2THmh4QSD/jVoUUARBFXcSRsMB8GA1UdIwQY MBaAFNC3/IsFjR9JmQGowvhuYq6VE2eXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExmOGl3V05IMG1aQWFqQy1HNWlycFVUWjVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85Y2IzNGEtYzM3Mi00ODJlLTgxY2Et OGY2MzljNWExYTcyLzEvMExmOGl3V05IMG1aQWFqQy1HNWlycFVUWjVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85Y2IzNGEtYzM3Mi00ODJlLTgxY2EtOGY2MzljNWExYTcy LzEvMExmOGl3V05IMG1aQWFqQy1HNWlycFVUWjVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUXzvQk5 Us4O2JLRYKcpUWG2OVAQ/lcmG3Q0HZ8f4cNW+GCso6N41p8OwbTtWD1mTm6wiqzW SLPSjT6W3uukcqkm/styBuIVCdbuZYQsNOcbzRk2ojP2CFMkkpIG2/g0oZXZ8TRC jg1D67Q2xbY88vEHT3GTjVCTlgxVBvmUMhiwxwcVmyN3n+RFthZtTgPltlA+C02c hDs6OIiW05mLjpNcSZzQ/hxJZr5W8uZjJ0CY0dIvkqaoX6C1aNRyrnRkzbVylJeW G2kqqUc+hsLJk2HGXyE/Ui7YLVmWc0rEMJCNPCb5SvX1qSMing/H+CMKbOXN0CDk yfmGM6BA3G+qfQ== -----END CERTIFICATE-----Generated at Wed Dec 31 09:24:13 2025 by rpki-client