This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft File: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft (raw, json) Hash identifier: zumnwOmLns19wVh6XyLTXEPnnpDvtvaob0sbObUHm2U= Subject key identifier: 42:89:8A:9B:4D:8E:4A:C4:DE:21:4F:BB:7A:57:A2:5D:7F:B8:D6:0E Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13 Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13 Certificate serial: 019B288932CBDDF4275BE146265B9C362E16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft Manifest number: 1367 Signing time: Tue 16 Dec 2025 19:00:38 +0000 Manifest this update: Tue 16 Dec 2025 19:00:38 +0000 Manifest next update: Wed 17 Dec 2025 19:00:38 +0000 Files and hashes: 1: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl (hash: 1qTUd4gPcbAKq2N6UK0BM/0A1srfoMAPh1ANTdmXHdo=) 2: f3ZAgsX9I3hAxsDfGccuc4frEIc.roa (hash: 4M3tVBuY11wpuTelZy7jmaALqx1HzWsWmiuVNlUHSTM=) 3: m2ywJd2kQJYTADIv61wmJdARYH0.roa (hash: ZTRMQxv3ksCR8s54WLYLbJtFtPpGkhVtVd7EKUXjlqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:89:32:cb:dd:f4:27:5b:e1:46:26:5b:9c:36:2e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13 Validity Not Before: Dec 16 19:00:38 2025 GMT Not After : Dec 17 19:00:38 2025 GMT Subject: CN=42898a9b4d8e4ac4de214fbb7a57a25d7fb8d60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:e0:48:f8:dc:02:ba:a9:a0:23:d1:28:85: 03:df:9a:b5:a6:13:97:c9:db:e6:96:57:15:cd:06: 4f:64:ee:27:ee:56:b3:1f:e8:c3:8d:c3:ff:a4:98: 1b:5d:1e:55:98:b2:fa:24:f9:e7:ba:b5:c2:ac:33: fa:f7:64:63:d9:af:68:bd:48:90:12:b8:fe:c8:99: 86:18:1a:ef:47:12:91:fa:b2:15:c5:38:b6:b2:36: 9f:bd:20:15:7c:28:77:5f:0f:ba:77:89:ad:07:46: 30:3b:a8:4d:c9:c1:56:fa:0b:ac:f2:10:54:39:a0: 13:2b:4d:a7:f7:ff:04:0a:9a:28:9a:d8:ab:6a:2c: 41:11:44:c3:88:12:57:10:03:42:f4:ad:2f:25:e4: c6:ba:8a:fa:78:9b:ce:b9:cf:dd:e3:ba:67:78:73: 0e:09:e4:29:cd:09:ff:da:f5:6e:86:70:54:5a:4f: 57:9b:29:44:fa:9b:a1:d2:07:ce:04:2f:a8:20:b0: 47:b0:d4:d8:8b:5c:13:4b:2d:62:ab:38:5c:70:84: 9b:de:53:36:f5:ff:bc:a5:68:bc:d7:13:66:e3:e1: b7:d6:02:58:b4:ad:fd:e0:a2:3b:a2:6a:76:a8:11: 56:49:a0:cf:24:ee:d1:f6:89:0c:f5:e7:28:00:78: 6b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:89:8A:9B:4D:8E:4A:C4:DE:21:4F:BB:7A:57:A2:5D:7F:B8:D6:0E X509v3 Authority Key Identifier: keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7b:18:7f:8c:b6:92:fb:28:c0:0b:a2:11:aa:e0:46:83:b8: 35:78:4a:82:4e:a4:b1:61:30:d3:b4:6a:61:eb:67:e3:a1:0a: 12:f3:1e:34:ea:af:30:07:6e:e5:c8:b4:f5:10:0e:95:75:ba: e8:54:f1:e1:c1:3d:ce:7a:79:86:58:4e:61:04:d6:38:a6:7b: ce:08:a1:b9:ff:cd:a0:ae:a6:c9:65:59:ed:14:cd:74:ff:4b: be:eb:6f:21:30:24:9d:4e:54:a5:03:35:22:2d:81:04:18:cf: 2f:c7:fe:0f:6b:86:fc:55:f2:9f:25:66:72:0c:a1:99:05:74: fb:f7:d5:df:f4:18:0c:d3:12:2c:ce:dd:3e:c2:fe:72:6d:df: 61:33:11:62:87:24:6c:d4:31:df:c8:9b:a7:0c:ae:c9:89:0d: 5b:9c:17:a3:c2:a4:f6:1e:0a:5d:99:7f:fc:13:82:2c:c5:11: 9f:40:3c:54:6c:4b:95:c7:9e:0d:69:d1:42:56:23:20:e9:3e: 26:82:ca:4c:c0:1b:5b:75:ce:36:50:f8:94:12:0c:40:b1:65: d3:53:0e:41:9f:75:61:3e:cc:22:29:b1:6f:44:3f:80:e2:11: 40:b8:e3:e1:6c:1e:40:40:db:67:c3:a2:53:fb:36:38:6f:7e: 02:57:cb:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoiTLL3fQnW+FGJlucNi4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMjVmYzUwOGE3MzczMjU2NzIwYTU0ZDczZmE5MDU3ZDhh MjFjMTMwHhcNMjUxMjE2MTkwMDM4WhcNMjUxMjE3MTkwMDM4WjAzMTEwLwYDVQQD Eyg0Mjg5OGE5YjRkOGU0YWM0ZGUyMTRmYmI3YTU3YTI1ZDdmYjhkNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZXgSPjcArqpoCPRKIUD35q1phOX ydvmllcVzQZPZO4n7lazH+jDjcP/pJgbXR5VmLL6JPnnurXCrDP692Rj2a9ovUiQ Erj+yJmGGBrvRxKR+rIVxTi2sjafvSAVfCh3Xw+6d4mtB0YwO6hNycFW+gus8hBU OaATK02n9/8ECpoomtiraixBEUTDiBJXEANC9K0vJeTGuor6eJvOuc/d47pneHMO CeQpzQn/2vVuhnBUWk9XmylE+puh0gfOBC+oILBHsNTYi1wTSy1iqzhccISb3lM2 9f+8pWi81xNm4+G31gJYtK394KI7omp2qBFWSaDPJO7R9okM9ecoAHhr+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKJiptNjkrE3iFPu3pXol1/uNYOMB8GA1UdIwQY MBaAFNMl/FCKc3MlZyClTXP6kFfYohwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHlYOFVJcHpjeVZuSUtWTmNfcVFWOWlpSEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kYzE3MjQtMzE2NS00N2VmLWE2ZmUt MWM2YWExZjZiNzBiLzEvMHlYOFVJcHpjeVZuSUtWTmNfcVFWOWlpSEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9kYzE3MjQtMzE2NS00N2VmLWE2ZmUtMWM2YWExZjZiNzBi LzEvMHlYOFVJcHpjeVZuSUtWTmNfcVFWOWlpSEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXsYf4y2 kvsowAuiEargRoO4NXhKgk6ksWEw07RqYetn46EKEvMeNOqvMAdu5ci09RAOlXW6 6FTx4cE9znp5hlhOYQTWOKZ7zgihuf/NoK6myWVZ7RTNdP9LvutvITAknU5UpQM1 Ii2BBBjPL8f+D2uG/FXynyVmcgyhmQV0+/fV3/QYDNMSLM7dPsL+cm3fYTMRYock bNQx38ibpwyuyYkNW5wXo8Kk9h4KXZl//BOCLMURn0A8VGxLlceeDWnRQlYjIOk+ JoLKTMAbW3XONlD4lBIMQLFl01MOQZ91YT7MIimxb0Q/gOIRQLjj4WweQEDbZ8Oi U/s2OG9+AlfLag== -----END CERTIFICATE-----Generated at Tue Dec 16 23:20:40 2025 by rpki-client