This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft File: _0t7padsE3FS0NDzUk_WIBuBW-8.mft (raw, json) Hash identifier: N79PLLpsPNelO+uD6nRuEvTp+PGdAxudKrMv5u3m4dw= Subject key identifier: 0F:20:AB:F6:69:9F:23:18:93:FB:00:D5:B2:C8:8E:13:65:33:DD:F9 Authority key identifier: FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF Certificate issuer: /CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef Certificate serial: 019B755AD8D81754455853857A18EFE5B292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft Manifest number: 02D6 Signing time: Wed 31 Dec 2025 17:00:46 +0000 Manifest this update: Wed 31 Dec 2025 17:00:46 +0000 Manifest next update: Thu 01 Jan 2026 17:00:46 +0000 Files and hashes: 1: _0t7padsE3FS0NDzUk_WIBuBW-8.crl (hash: 9MJj9VxW/MoLRjypwxJ5Xw3gi3+J/6XxxzYW8nI8yV0=) 2: dzWaTBaulL5kl6N51Aq9Q2INFwQ.roa (hash: qCU96anqXB1vi9FIqkKYJeT2OcA8oxOe7J0O6GEIhmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 17:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:5a:d8:d8:17:54:45:58:53:85:7a:18:ef:e5:b2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef Validity Not Before: Dec 31 17:00:46 2025 GMT Not After : Jan 1 17:00:46 2026 GMT Subject: CN=0f20abf6699f231893fb00d5b2c88e136533ddf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:32:4a:3f:c7:d9:6d:fb:b3:47:a8:bf:c7: 3a:96:96:8b:a7:09:d9:89:20:a0:42:aa:9f:4b:8f: 5e:f5:f5:a5:9e:8a:f4:1c:15:63:a1:bf:71:29:2c: f0:a3:b1:92:4a:b3:e5:8b:09:89:c5:49:09:70:3f: a0:5f:81:6d:5b:69:be:91:b7:78:6d:43:08:06:9b: 50:c7:e5:a8:49:9b:fb:d8:74:36:0b:6e:95:e8:3f: 66:08:48:a9:a2:8b:17:0a:16:6c:12:9d:9c:7b:b9: 4f:88:3e:3f:b6:35:16:eb:58:65:5f:04:29:e3:48: 0f:f2:f0:c8:e8:99:f7:cb:e2:87:33:20:25:b6:ba: 53:9d:d0:87:32:37:29:87:70:2e:93:29:81:73:67: 78:29:4b:51:b7:ae:97:a5:12:84:b7:a0:f0:b0:6b: dc:b7:11:31:e3:a5:fa:f4:54:33:0d:65:76:0c:7e: 16:4b:2d:1f:24:05:b9:39:82:7b:0e:57:d2:da:65: d2:64:82:f9:02:8c:fe:4d:5c:14:1c:11:6e:d1:76: 02:0f:2f:df:ac:c0:a3:ff:9e:63:27:2e:e1:17:c4: 31:cd:1d:e4:8c:f9:48:70:11:b5:f5:50:4d:2c:64: a3:d1:fd:6c:c9:05:13:49:99:70:e8:85:8d:35:44: 26:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:20:AB:F6:69:9F:23:18:93:FB:00:D5:B2:C8:8E:13:65:33:DD:F9 X509v3 Authority Key Identifier: keyid:FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d6:4e:a0:d2:b3:b8:06:92:db:de:75:17:57:ec:60:4d:53: 0e:9b:91:0b:58:6f:64:5b:1f:75:04:c1:81:37:62:a8:f3:8e: 46:9a:b2:de:a3:9f:e1:03:ac:52:15:70:0b:a0:15:9e:7e:97: a4:cc:a3:36:51:65:83:93:2e:63:92:7f:ac:6d:1b:c8:bc:64: 75:c1:9a:45:e6:a5:40:c0:2f:58:7a:c3:be:9d:2c:f3:a3:80: 84:1e:4e:47:fe:1b:24:58:36:5c:56:02:22:c3:42:64:9e:bc: b0:5a:13:1c:4e:f1:42:69:84:bd:6a:cf:9d:a5:0c:29:97:de: 5f:d3:82:5e:f2:97:c9:70:59:bf:1d:af:81:69:fe:2d:79:21: 48:15:1c:5b:a6:88:70:f0:32:2b:b2:b8:94:61:36:2d:9b:f7: 25:63:65:32:0d:2d:53:4f:30:16:9e:1e:5e:9c:34:cd:05:f5: b0:a8:cc:17:7e:fa:7d:f7:fa:28:f6:f6:12:c2:c9:f4:72:08: 5f:f0:96:e1:8d:01:5e:8c:be:b5:c6:b4:ee:22:f8:0e:fc:57: 57:c2:04:e8:00:5b:69:4d:5e:33:af:73:25:29:ba:c0:f2:bf: d1:cd:d2:61:70:aa:06:22:70:8a:3a:bc:99:8a:a5:20:ef:40: d1:84:67:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1WtjYF1RFWFOFehjv5bKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGI3YmE1YTc2YzEzNzE1MmQwZDBmMzUyNGZkNjIwMWI4 MTViZWYwHhcNMjUxMjMxMTcwMDQ2WhcNMjYwMTAxMTcwMDQ2WjAzMTEwLwYDVQQD EygwZjIwYWJmNjY5OWYyMzE4OTNmYjAwZDViMmM4OGUxMzY1MzNkZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfwySj/H2W37s0eov8c6lpaLpwnZ iSCgQqqfS49e9fWlnor0HBVjob9xKSzwo7GSSrPliwmJxUkJcD+gX4FtW2m+kbd4 bUMIBptQx+WoSZv72HQ2C26V6D9mCEipoosXChZsEp2ce7lPiD4/tjUW61hlXwQp 40gP8vDI6Jn3y+KHMyAltrpTndCHMjcph3AukymBc2d4KUtRt66XpRKEt6DwsGvc txEx46X69FQzDWV2DH4WSy0fJAW5OYJ7DlfS2mXSZIL5Aoz+TVwUHBFu0XYCDy/f rMCj/55jJy7hF8QxzR3kjPlIcBG19VBNLGSj0f1syQUTSZlw6IWNNUQm4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8gq/ZpnyMYk/sA1bLIjhNlM935MB8GA1UdIwQY MBaAFP9Le6WnbBNxUtDQ81JP1iAbgVvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAt OGY5NWI4NTI0YzM1LzEvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAtOGY5NWI4NTI0YzM1 LzEvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtZOoNKz uAaS2951F1fsYE1TDpuRC1hvZFsfdQTBgTdiqPOORpqy3qOf4QOsUhVwC6AVnn6X pMyjNlFlg5MuY5J/rG0byLxkdcGaRealQMAvWHrDvp0s86OAhB5OR/4bJFg2XFYC IsNCZJ68sFoTHE7xQmmEvWrPnaUMKZfeX9OCXvKXyXBZvx2vgWn+LXkhSBUcW6aI cPAyK7K4lGE2LZv3JWNlMg0tU08wFp4eXpw0zQX1sKjMF376fff6KPb2EsLJ9HII X/CW4Y0BXoy+tca07iL4DvxXV8IE6ABbaU1eM69zJSm6wPK/0c3SYXCqBiJwijq8 mYqlIO9A0YRnsg== -----END CERTIFICATE-----Generated at Wed Dec 31 23:29:52 2025 by rpki-client