This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json) Hash identifier: c7TLEZbYFpk9WBXu4BZSVg9wQayScnPPKfjNf6FjRoA= Subject key identifier: CB:2D:FE:B0:2B:7C:59:10:4E:99:13:83:BF:51:84:5A:B4:46:32:7C Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd Certificate serial: 019B405B0C92657F1DEC9E71BBF637C849F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft Manifest number: 1320 Signing time: Sun 21 Dec 2025 10:01:07 +0000 Manifest this update: Sun 21 Dec 2025 10:01:07 +0000 Manifest next update: Mon 22 Dec 2025 10:01:07 +0000 Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: n3Ow8QC4CHHoeSf2XCflyR7q6GRBe19x6ksaU5Zz2R0=) 2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:0c:92:65:7f:1d:ec:9e:71:bb:f6:37:c8:49:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd Validity Not Before: Dec 21 10:01:07 2025 GMT Not After : Dec 22 10:01:07 2025 GMT Subject: CN=cb2dfeb02b7c59104e991383bf51845ab446327c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:6e:e6:94:9d:f1:aa:5e:0b:63:41:32:bd: 0f:55:db:72:9e:ab:bc:e8:d2:4b:dd:95:25:aa:0e: eb:19:cc:23:8c:83:c1:52:92:d7:03:7b:b6:6a:c0: 6b:0f:12:c0:d3:a9:24:bb:25:8e:f4:6f:f4:8f:7e: 26:6c:2d:37:3c:25:a5:4f:08:39:27:03:c7:28:09: bd:3a:e7:b0:8f:94:5f:51:98:f1:76:67:e3:7c:bd: 9c:bc:e2:35:20:d9:91:da:92:03:bd:0a:34:b8:1d: a9:4f:53:64:7e:7f:8d:8f:a8:20:07:c9:86:52:19: 05:1e:60:1f:04:c0:98:f3:61:20:79:c3:5d:80:d7: 3a:d8:ca:f2:2c:f8:c6:ca:4d:d7:29:5f:7c:f2:c3: 13:ef:74:3f:7f:c6:c8:99:ff:e7:33:53:3b:77:48: 16:6b:2e:5b:a0:74:5c:cf:bc:e9:21:de:c5:d9:77: 1f:8f:7e:2a:70:8a:fc:55:9d:ff:6b:f9:3e:14:70: 47:9b:b9:b1:ec:33:43:4e:c2:c4:9e:97:05:d3:ae: 44:49:4a:e2:f2:cd:67:b1:bd:d6:19:d2:9f:a8:58: ff:b2:1c:4d:19:b7:06:c5:45:18:c5:04:ee:c8:82: 15:99:99:68:fc:40:fd:82:ae:fa:a8:cf:32:99:70: 36:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2D:FE:B0:2B:7C:59:10:4E:99:13:83:BF:51:84:5A:B4:46:32:7C X509v3 Authority Key Identifier: keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:37:84:33:c1:9b:2c:83:cc:4a:fa:35:a4:28:3c:7b:7e:44: 0b:6f:99:ee:0a:fe:ac:11:6e:f4:d9:d3:a7:88:91:12:d8:35: eb:a2:de:a6:c6:53:b0:03:86:a5:c0:3f:cb:39:b7:c1:c8:a7: 13:0c:65:95:41:ae:02:52:71:ad:32:77:19:20:e3:d2:fa:86: 02:f4:74:db:93:00:0b:ac:93:81:c6:f0:6f:bc:8e:5e:e7:67: cf:76:ac:0c:99:50:94:37:ec:bb:88:79:96:67:39:c9:64:ac: 42:f5:a7:73:33:e0:76:2d:b9:70:f4:9c:6f:0a:0a:ae:6f:40: 48:76:7d:0d:ff:db:16:5e:9f:db:67:2e:b8:8b:4e:fd:c2:71: 4b:37:98:60:ab:8b:27:04:aa:42:4d:02:1c:7a:bf:3c:98:d2: 64:bf:e3:33:41:4f:df:a0:96:85:9a:07:9e:5a:df:d1:e4:4c: da:81:ea:a4:49:b1:72:fa:e0:3e:6a:d4:8c:12:5f:11:04:85: 38:62:d4:5f:11:8e:16:4d:30:45:70:36:03:51:39:a9:0f:23: c8:9c:6b:20:83:46:18:62:3d:a3:87:a8:56:05:b4:ee:8a:28: 0b:d2:71:a8:8a:36:75:07:b1:e0:75:4d:66:69:93:ef:00:10: d6:9c:1d:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWwySZX8d7J5xu/Y3yEn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUwN2ExYTFmNjViZDExNmUxMWY5ZjExMDg2MDRiNmU5 NWNjZmQwHhcNMjUxMjIxMTAwMTA3WhcNMjUxMjIyMTAwMTA3WjAzMTEwLwYDVQQD EyhjYjJkZmViMDJiN2M1OTEwNGU5OTEzODNiZjUxODQ1YWI0NDYzMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5lu5pSd8apeC2NBMr0PVdtynqu8 6NJL3ZUlqg7rGcwjjIPBUpLXA3u2asBrDxLA06kkuyWO9G/0j34mbC03PCWlTwg5 JwPHKAm9Ouewj5RfUZjxdmfjfL2cvOI1INmR2pIDvQo0uB2pT1Nkfn+Nj6ggB8mG UhkFHmAfBMCY82EgecNdgNc62MryLPjGyk3XKV988sMT73Q/f8bImf/nM1M7d0gW ay5boHRcz7zpId7F2Xcfj34qcIr8VZ3/a/k+FHBHm7mx7DNDTsLEnpcF065ESUri 8s1nsb3WGdKfqFj/shxNGbcGxUUYxQTuyIIVmZlo/ED9gq76qM8ymXA2RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMst/rArfFkQTpkTg79RhFq0RjJ8MB8GA1UdIwQY MBaAFNHeB6Gh9lvRFuEfnxEIYEtulcz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2Mt OTlmMTgyMjEzZDRmLzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2MtOTlmMTgyMjEzZDRm LzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDeEM8Gb LIPMSvo1pCg8e35EC2+Z7gr+rBFu9NnTp4iREtg166LepsZTsAOGpcA/yzm3wcin EwxllUGuAlJxrTJ3GSDj0vqGAvR025MAC6yTgcbwb7yOXudnz3asDJlQlDfsu4h5 lmc5yWSsQvWnczPgdi25cPScbwoKrm9ASHZ9Df/bFl6f22cuuItO/cJxSzeYYKuL JwSqQk0CHHq/PJjSZL/jM0FP36CWhZoHnlrf0eRM2oHqpEmxcvrgPmrUjBJfEQSF OGLUXxGOFk0wRXA2A1E5qQ8jyJxrIINGGGI9o4eoVgW07oooC9JxqIo2dQex4HVN ZmmT7wAQ1pwdew== -----END CERTIFICATE-----Generated at Sun Dec 21 18:56:11 2025 by rpki-client