This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json) Hash identifier: Rem1QwNEmKAYotGYq3Y7f06tXUK++qvkLmum5M/oj5M= Subject key identifier: A5:73:17:87:65:E0:2A:AC:6F:F0:40:70:50:9C:05:20:FC:C7:EC:BB Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Certificate serial: 019B39B3B2050C747AF7538F3FFD7D36FF62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft Manifest number: 1647 Signing time: Sat 20 Dec 2025 03:00:36 +0000 Manifest this update: Sat 20 Dec 2025 03:00:36 +0000 Manifest next update: Sun 21 Dec 2025 03:00:36 +0000 Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: RduFb0DLG88vxAFqPvfRucw6iHAtTOYSmLZnerbfn68=) 2: Eoa2DgYKZQhIPrEs2BVXe4pbre4.roa (hash: Lzu15VnANjg8WWEayf+Lga5VSNyXHu7NEi9f0IPI47U=) 3: N1PB4wkghMthA8l4GP9N1SzOEWE.roa (hash: 8LPlkWhxVtJM+jMtTkRPToXaYbmZ6b57zhGOgt0FEmU=) 4: V7B5ePYrHsO0XNRkMFSzpgb0L6o.roa (hash: mqOCLJjTNfcn+4Yc3m3WAArsC6xNXAO5dY/bAJctVR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:b2:05:0c:74:7a:f7:53:8f:3f:fd:7d:36:ff:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Validity Not Before: Dec 20 03:00:36 2025 GMT Not After : Dec 21 03:00:36 2025 GMT Subject: CN=a573178765e02aac6ff04070509c0520fcc7ecbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:b4:d1:16:c2:5a:b1:52:6e:3f:fa:cc:41: 56:aa:6a:93:58:e2:9f:8f:fc:6a:74:37:1b:5d:b4: df:a4:54:25:63:e0:f4:eb:21:97:c0:74:ac:4f:b7: 70:0b:26:3e:d7:d6:04:64:b8:9b:72:92:21:00:a5: 85:67:6e:57:21:99:6a:54:c4:cb:ad:38:3c:e6:06: 84:c0:f3:46:de:b0:f5:70:83:fd:79:a0:8f:74:b7: e6:58:14:4d:ca:21:b8:aa:46:6a:2c:85:fd:e3:e6: 2a:c5:9e:b4:d6:5b:16:9e:7f:e0:0a:93:25:23:94: 1a:37:c5:67:36:b0:ef:cc:bc:cc:8b:13:d3:d7:79: 19:75:e7:c1:eb:7e:f0:44:88:61:bd:29:0b:39:d0: 8f:ed:1c:35:05:17:2a:5f:1d:c7:6c:84:01:96:86: b9:8a:34:c2:e9:24:e7:59:00:22:e9:3d:c0:c5:ae: 5b:dd:17:58:c6:d5:98:59:6e:75:5f:d4:c6:21:55: 80:bb:93:a0:a0:cc:33:12:3e:22:0e:a4:4c:2f:82: 1f:f4:ad:23:dc:5e:4c:05:0b:f5:a4:94:16:4f:04: a0:01:34:8b:a2:94:bf:ac:2c:d0:bb:63:4d:a4:14: df:6e:fa:cb:12:14:b5:d4:d5:1a:1c:fb:22:ae:35: 9e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:73:17:87:65:E0:2A:AC:6F:F0:40:70:50:9C:05:20:FC:C7:EC:BB X509v3 Authority Key Identifier: keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:45:8f:f4:e1:26:c4:60:7b:74:34:7f:47:ce:ab:f6:58:8f: e6:69:ca:e3:5d:9a:a7:71:dc:cf:59:6a:ff:02:aa:bc:7d:5d: 47:28:e4:10:ae:b2:82:1e:81:51:54:61:07:bc:d2:d2:50:93: f0:ff:64:0e:b4:30:d0:5d:c9:7d:c1:e0:f8:8e:71:80:c0:e2: 66:d8:43:1d:c8:e4:92:2c:2f:30:3f:2e:0d:b6:12:7d:b5:fd: 17:2c:e1:47:8b:e7:c0:c6:a4:b8:05:64:93:f8:71:3e:d5:1e: 5f:b2:e8:e5:c3:3b:1b:5e:7a:67:59:66:b0:cf:e3:29:3e:f4: ae:f6:99:57:72:4a:d2:1b:00:d0:47:01:6d:8c:16:51:8c:10: 27:cf:a1:61:30:e4:d8:e9:06:9f:9a:5f:1d:cc:3c:a2:9c:02: 0f:32:e2:a7:e7:da:2a:18:3a:70:b4:7c:c8:ed:ed:97:5c:9a: 53:9f:3f:ca:8a:54:ec:45:a5:1a:d8:cb:8c:7b:78:68:74:2f: 89:a3:45:00:fd:e2:2e:2b:1e:56:94:66:58:88:e8:47:fa:93: 0a:91:06:92:b9:2a:22:47:cf:53:07:5b:51:0a:a6:27:c2:79: 71:61:a8:64:7c:65:49:73:5b:bd:41:e5:69:65:e3:02:59:14: f6:06:f8:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s7IFDHR691OPP/19Nv9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzFkNWZkNGUyMGFkZTVmMTFiNjZhZmIxMGE1NGM4ZmZl NGIwNDAwHhcNMjUxMjIwMDMwMDM2WhcNMjUxMjIxMDMwMDM2WjAzMTEwLwYDVQQD EyhhNTczMTc4NzY1ZTAyYWFjNmZmMDQwNzA1MDljMDUyMGZjYzdlY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWu00RbCWrFSbj/6zEFWqmqTWOKf j/xqdDcbXbTfpFQlY+D06yGXwHSsT7dwCyY+19YEZLibcpIhAKWFZ25XIZlqVMTL rTg85gaEwPNG3rD1cIP9eaCPdLfmWBRNyiG4qkZqLIX94+YqxZ601lsWnn/gCpMl I5QaN8VnNrDvzLzMixPT13kZdefB637wRIhhvSkLOdCP7Rw1BRcqXx3HbIQBloa5 ijTC6STnWQAi6T3Axa5b3RdYxtWYWW51X9TGIVWAu5OgoMwzEj4iDqRML4If9K0j 3F5MBQv1pJQWTwSgATSLopS/rCzQu2NNpBTfbvrLEhS11NUaHPsirjWe3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVzF4dl4Cqsb/BAcFCcBSD8x+y7MB8GA1UdIwQY MBaAFNLB1f1OIK3l8Rtmr7EKVMj/5LBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTkt YTA5YTg3NWY1OTAzLzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTktYTA5YTg3NWY1OTAz LzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkWP9OEm xGB7dDR/R86r9liP5mnK412ap3Hcz1lq/wKqvH1dRyjkEK6ygh6BUVRhB7zS0lCT 8P9kDrQw0F3JfcHg+I5xgMDiZthDHcjkkiwvMD8uDbYSfbX9FyzhR4vnwMakuAVk k/hxPtUeX7Lo5cM7G156Z1lmsM/jKT70rvaZV3JK0hsA0EcBbYwWUYwQJ8+hYTDk 2OkGn5pfHcw8opwCDzLip+faKhg6cLR8yO3tl1yaU58/yopU7EWlGtjLjHt4aHQv iaNFAP3iLiseVpRmWIjoR/qTCpEGkrkqIkfPUwdbUQqmJ8J5cWGoZHxlSXNbvUHl aWXjAlkU9gb4aA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:03:34 2025 by rpki-client