This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json) Hash identifier: VxIxyqD6C80CJXCoOkQfRsn/VQSsRGvBWhLIbnpZESs= Subject key identifier: 9F:46:C2:1F:53:51:C8:4A:D9:6A:48:9C:EF:E2:02:CC:43:1A:A7:43 Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50 Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50 Certificate serial: 019B676859A299627CB595960C06D1C3DDCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft Manifest number: 0C86 Signing time: Mon 29 Dec 2025 00:00:50 +0000 Manifest this update: Mon 29 Dec 2025 00:00:50 +0000 Manifest next update: Tue 30 Dec 2025 00:00:50 +0000 Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: r2YXRyCVyoO4HEKOIAkuKWU3KxqAtLAdq4eh8mzhY1I=) 2: 5LrP6fsEeipB-xjaCGTQi9KsiHU.roa (hash: IUrzC+/E4lKM4F7rtTCN//MYlbyHBk9E/FLwLHHLeZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:59:a2:99:62:7c:b5:95:96:0c:06:d1:c3:dd:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50 Validity Not Before: Dec 29 00:00:50 2025 GMT Not After : Dec 30 00:00:50 2025 GMT Subject: CN=9f46c21f5351c84ad96a489cefe202cc431aa743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:78:88:e2:89:ee:46:73:dc:33:e8:1b:b4: b1:d8:30:78:ef:b4:c9:3f:30:c3:cc:8e:ce:cd:22: f5:a7:31:a3:59:4f:d2:38:1c:12:7e:26:b4:fd:37: fa:ff:21:01:0a:93:20:ed:9e:79:33:a7:9a:57:d3: 84:dd:b7:3a:89:14:c2:b5:e2:b2:8a:e5:22:8b:65: 13:df:e7:23:97:6f:2c:a8:71:37:6d:92:a9:96:ee: a9:c3:88:8d:44:fe:d2:ad:ab:8a:63:20:f7:f5:63: 9c:37:9e:a6:cd:6e:3e:70:ab:b2:44:16:96:b6:1b: db:b7:62:52:c4:d9:e7:03:6e:22:b9:7d:2e:ee:4a: 4e:db:0e:c5:ea:05:43:89:f7:b5:08:8a:61:68:08: 47:17:73:c8:e4:50:a4:b7:e5:f1:e4:f2:88:08:c8: 5e:24:16:2e:7d:a8:ab:7d:fe:86:08:37:a4:cf:22: 1e:b5:c0:8f:b2:2f:f3:a4:e8:95:72:b7:00:05:a3: ac:6d:17:48:b6:f7:16:3d:8b:f7:8f:9c:5d:3f:26: cf:41:a8:a4:55:a1:8e:11:e8:55:58:9a:9e:39:4f: b1:13:00:a5:cb:32:d1:e5:16:c2:0d:7e:63:29:88: 0f:33:b1:25:be:4b:fd:4e:a3:74:9d:e8:0d:b7:92: 3e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:46:C2:1F:53:51:C8:4A:D9:6A:48:9C:EF:E2:02:CC:43:1A:A7:43 X509v3 Authority Key Identifier: keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:28:25:e3:ca:4f:bd:26:aa:c0:58:2d:0d:e6:d0:44:d0:31: 52:b2:17:c8:22:d4:ad:f0:fd:b5:87:8e:c7:72:a0:80:fc:9a: 7e:05:6f:33:9a:3f:ab:d5:26:8c:61:63:0a:04:0e:39:7f:4b: 07:c5:c7:be:2a:f3:50:f5:d8:50:3e:42:cd:74:ee:3d:d5:aa: e1:75:24:f1:d7:c8:66:62:84:4f:3c:5c:8a:fc:9f:7a:65:3a: a8:0c:dd:11:f6:89:ab:fb:62:01:3e:18:d9:46:f6:7e:03:bb: 22:a6:86:bb:b4:95:0a:f6:50:f3:ae:c1:3e:7d:b9:fa:a8:e3: b1:02:75:1c:c5:06:27:81:18:3d:9a:cc:28:53:27:5e:0a:d7: 9d:fe:9f:be:49:e1:9d:45:9b:87:9a:8e:22:6a:c3:1f:9c:56: 43:d8:4e:21:1f:7e:94:6b:fa:ee:08:7f:19:76:17:c2:66:eb: 07:ee:f2:01:1f:61:cc:80:d5:dd:98:3d:e5:44:f8:d6:41:0c: c5:32:08:87:95:b7:0f:ba:1e:76:df:68:c4:e7:e5:a5:3b:39: b9:a7:93:04:70:23:30:bc:a7:1d:4c:fb:7b:26:c9:82:72:c8: 65:fd:1f:e0:51:f5:8a:18:b7:0a:e4:c4:1e:af:03:f1:ae:1e: eb:8b:fd:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaFmimWJ8tZWWDAbRw93NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZjk4N2FmNWFkYjIzMDRkNDI2ZjU0MGRlNWQ2NTA1NDUy MzFlNTAwHhcNMjUxMjI5MDAwMDUwWhcNMjUxMjMwMDAwMDUwWjAzMTEwLwYDVQQD Eyg5ZjQ2YzIxZjUzNTFjODRhZDk2YTQ4OWNlZmUyMDJjYzQzMWFhNzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsh4iOKJ7kZz3DPoG7Sx2DB477TJ PzDDzI7OzSL1pzGjWU/SOBwSfia0/Tf6/yEBCpMg7Z55M6eaV9OE3bc6iRTCteKy iuUii2UT3+cjl28sqHE3bZKplu6pw4iNRP7SrauKYyD39WOcN56mzW4+cKuyRBaW thvbt2JSxNnnA24iuX0u7kpO2w7F6gVDife1CIphaAhHF3PI5FCkt+Xx5PKICMhe JBYufairff6GCDekzyIetcCPsi/zpOiVcrcABaOsbRdItvcWPYv3j5xdPybPQaik VaGOEehVWJqeOU+xEwClyzLR5RbCDX5jKYgPM7Elvkv9TqN0negNt5I+9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9Gwh9TUchK2WpInO/iAsxDGqdDMB8GA1UdIwQY MBaAFNH5h69a2yME1Cb1QN5dZQVFIx5QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGZtSHIxcmJJd1RVSnZWQTNsMWxCVVVqSGxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81ZWE1NjktZjE3NC00NWM1LTlkYjct MmFmMDk1ZmZjOWJiLzEvMGZtSHIxcmJJd1RVSnZWQTNsMWxCVVVqSGxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS81ZWE1NjktZjE3NC00NWM1LTlkYjctMmFmMDk1ZmZjOWJi LzEvMGZtSHIxcmJJd1RVSnZWQTNsMWxCVVVqSGxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdygl48pP vSaqwFgtDebQRNAxUrIXyCLUrfD9tYeOx3KggPyafgVvM5o/q9UmjGFjCgQOOX9L B8XHvirzUPXYUD5CzXTuPdWq4XUk8dfIZmKETzxcivyfemU6qAzdEfaJq/tiAT4Y 2Ub2fgO7IqaGu7SVCvZQ867BPn25+qjjsQJ1HMUGJ4EYPZrMKFMnXgrXnf6fvknh nUWbh5qOImrDH5xWQ9hOIR9+lGv67gh/GXYXwmbrB+7yAR9hzIDV3Zg95UT41kEM xTIIh5W3D7oedt9oxOflpTs5uaeTBHAjMLynHUz7eybJgnLIZf0f4FH1ihi3CuTE Hq8D8a4e64v9GQ== -----END CERTIFICATE-----Generated at Mon Dec 29 02:39:34 2025 by rpki-client