This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json) Hash identifier: 44zjAxJA87u3oyfMRecpPRgG090BoCDUm4yz4jqvxNs= Subject key identifier: 0D:CD:78:21:C8:72:87:2D:3D:9C:09:EE:0E:C4:34:A7:C3:72:DE:06 Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127 Certificate serial: 019B3C7F5DF0D999FCF2454E11FA7A5FCE3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft Manifest number: 0B9F Signing time: Sat 20 Dec 2025 16:02:18 +0000 Manifest this update: Sat 20 Dec 2025 16:02:18 +0000 Manifest next update: Sun 21 Dec 2025 16:02:18 +0000 Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: 7Kb35NaeiqR0FJfnXCoFnpSGM9LP5K5MTPLBMDw1fqE=) 2: Ve2RrvNi_87VDfl21Lq8fKe-sYc.roa (hash: Bwg7wRCqbsHk5Pn4Ah5pnRiyg8rpwcrSFyOQ2YGllyY=) 3: nc0QnNEGuF1kLi9w3egLsBhEL6Y.roa (hash: KWBWDWBG7Sj1CyJ1paoXUYeG29P/pnqgE+4DRW4DIYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:5d:f0:d9:99:fc:f2:45:4e:11:fa:7a:5f:ce:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127 Validity Not Before: Dec 20 16:02:18 2025 GMT Not After : Dec 21 16:02:18 2025 GMT Subject: CN=0dcd7821c872872d3d9c09ee0ec434a7c372de06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a8:9f:e1:f3:12:7b:f9:2b:ab:9c:07:04:15: 42:05:f4:05:f7:66:ea:82:ad:e7:7b:24:cc:b5:b4: 4f:11:af:1a:da:97:28:77:cb:18:88:6c:a2:f4:b4: fd:49:48:b0:93:28:b7:f5:64:bc:42:03:fe:33:ac: 29:39:8a:e4:4d:93:b2:7b:cb:34:4e:41:d5:fd:72: 52:30:10:ac:8e:6b:c4:8b:45:e5:5f:50:e5:32:e6: ef:01:24:aa:81:c6:65:9e:b0:1b:13:17:12:67:f3: 37:c2:e0:73:47:13:72:92:10:e7:d9:e7:74:42:1a: 90:a6:1e:73:96:eb:14:64:9b:a1:a5:29:37:ac:a6: 6f:c1:52:be:8a:18:57:12:9c:99:d2:62:63:33:fb: e5:77:3c:44:ed:4e:d0:ba:bb:11:16:92:3e:46:06: 3b:ac:67:26:c7:a2:17:e8:ab:33:47:ee:49:c0:39: c8:be:f5:9a:24:9a:4a:89:54:fd:d8:2d:dc:13:00: 3b:82:d4:07:7e:f8:e8:ce:13:fc:bf:de:53:02:ea: 2d:21:48:2d:3f:73:4f:16:8b:17:b1:8d:3d:f5:be: fa:38:cd:99:f9:22:db:ec:a6:fd:92:bf:1f:ab:ff: a9:51:44:34:cd:d2:3e:43:46:18:b4:d2:3f:26:eb: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CD:78:21:C8:72:87:2D:3D:9C:09:EE:0E:C4:34:A7:C3:72:DE:06 X509v3 Authority Key Identifier: keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:24:c8:34:13:28:cb:9d:d9:7d:ab:44:e8:eb:00:d3:93:aa: d4:a6:09:7b:d2:a7:5c:68:34:1c:00:43:86:a6:34:84:83:e9: 40:e7:62:c8:50:0d:32:32:58:8d:a7:70:1b:3c:88:7f:dd:bd: 98:ac:2e:f4:71:6f:bc:63:67:22:5d:80:61:25:4b:88:02:f5: f1:9f:db:fe:d7:a0:9b:db:c1:36:76:8c:97:3e:d1:50:51:ee: 90:32:72:c1:10:e6:4b:85:04:e0:03:e3:ed:44:61:4f:b0:96: 64:21:11:9e:f9:ae:aa:cc:65:3d:df:59:9d:bd:ce:62:e7:c0: 35:db:b0:5d:42:93:30:39:62:6a:81:5a:67:f1:bc:f5:af:75: 56:16:33:b2:1f:ea:ca:ce:8e:76:2d:b5:1a:05:7e:a6:c1:bf: 03:d0:04:8e:f3:d3:b5:75:25:c3:a0:ad:df:f4:7e:9b:31:42: 61:11:e3:ed:87:82:ee:7d:91:2d:47:89:17:57:d7:fa:fc:16: b2:d9:0c:61:ff:fd:26:fe:d1:a3:f2:01:4f:81:ee:33:86:8f: 3f:5e:7d:54:e3:1b:23:af:9f:ee:1f:44:e1:94:a2:8b:a6:c2: 93:0b:6d:28:8f:a9:4f:34:05:14:32:a2:2f:03:45:a9:1e:4b: b1:9f:5d:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f13w2Zn88kVOEfp6X846MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMTY4MzVkMDM3Nzg2NjIwYTllOWY3YTBlMzYwNDk4YmI2 NTQxMjcwHhcNMjUxMjIwMTYwMjE4WhcNMjUxMjIxMTYwMjE4WjAzMTEwLwYDVQQD EygwZGNkNzgyMWM4NzI4NzJkM2Q5YzA5ZWUwZWM0MzRhN2MzNzJkZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6if4fMSe/krq5wHBBVCBfQF92bq gq3neyTMtbRPEa8a2pcod8sYiGyi9LT9SUiwkyi39WS8QgP+M6wpOYrkTZOye8s0 TkHV/XJSMBCsjmvEi0XlX1DlMubvASSqgcZlnrAbExcSZ/M3wuBzRxNykhDn2ed0 QhqQph5zlusUZJuhpSk3rKZvwVK+ihhXEpyZ0mJjM/vldzxE7U7QursRFpI+RgY7 rGcmx6IX6KszR+5JwDnIvvWaJJpKiVT92C3cEwA7gtQHfvjozhP8v95TAuotIUgt P3NPFosXsY099b76OM2Z+SLb7Kb9kr8fq/+pUUQ0zdI+Q0YYtNI/JutQ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3NeCHIcoctPZwJ7g7ENKfDct4GMB8GA1UdIwQY MBaAFNEWg10Dd4ZiCp6feg42BJi7ZUEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMt MTZhN2Q2MGQ1YmVhLzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMtMTZhN2Q2MGQ1YmVh LzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSTINBMo y53ZfatE6OsA05Oq1KYJe9KnXGg0HABDhqY0hIPpQOdiyFANMjJYjadwGzyIf929 mKwu9HFvvGNnIl2AYSVLiAL18Z/b/tegm9vBNnaMlz7RUFHukDJywRDmS4UE4APj 7URhT7CWZCERnvmuqsxlPd9Znb3OYufANduwXUKTMDliaoFaZ/G89a91VhYzsh/q ys6Odi21GgV+psG/A9AEjvPTtXUlw6Ct3/R+mzFCYRHj7YeC7n2RLUeJF1fX+vwW stkMYf/9Jv7Ro/IBT4HuM4aPP159VOMbI6+f7h9E4ZSii6bCkwttKI+pTzQFFDKi LwNFqR5LsZ9dEQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:39:46 2025 by rpki-client