This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft File: 0VoQmMXIU1yXWPEo2KCC33z4UQs.mft (raw, json) Hash identifier: VB7SqTRBYa8IOMQgZmKE9S+XmxkkrZ4qhBtEyYJeoKM= Subject key identifier: 45:06:45:89:0D:B3:6A:A9:1B:E3:E7:2A:01:75:4C:ED:8A:DF:89:FD Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B Certificate issuer: /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b Certificate serial: 019B3FED17CF6ED2C2E2F0ECAAA1EB7EA012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft Manifest number: 0A42 Signing time: Sun 21 Dec 2025 08:01:01 +0000 Manifest this update: Sun 21 Dec 2025 08:01:01 +0000 Manifest next update: Mon 22 Dec 2025 08:01:01 +0000 Files and hashes: 1: 0VoQmMXIU1yXWPEo2KCC33z4UQs.crl (hash: N24yy1Z8fpBQI6OG4e+jmhZKd1ZpaHdwep2dS8lrCvI=) 2: MPcncw3TBLN9O1Fy19LVCE6t17w.roa (hash: jJnn/mYRkvFLhH11P3nUb1E3/V7XDU260gIFAJXV/0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:17:cf:6e:d2:c2:e2:f0:ec:aa:a1:eb:7e:a0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b Validity Not Before: Dec 21 08:01:01 2025 GMT Not After : Dec 22 08:01:01 2025 GMT Subject: CN=450645890db36aa91be3e72a01754ced8adf89fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:81:20:6c:dd:26:c5:30:3a:8a:0d:11:d9: ed:1c:2c:03:0c:cd:f0:32:8f:fb:40:8f:36:7a:3f: 30:21:41:ff:ca:4c:bd:57:de:c1:3d:19:bd:be:12: d0:af:c5:7f:0d:19:e7:c7:2e:88:b5:3b:23:24:f8: 13:c3:f9:7b:33:70:aa:8a:22:fc:a8:e5:9c:b0:d0: a4:dd:75:10:df:9a:10:b0:00:c2:07:46:90:ea:9d: d4:b2:ec:f3:4f:ed:56:91:56:e1:15:b6:ab:b9:d7: d0:3e:e5:94:90:95:33:f8:c9:52:c0:cd:12:21:5e: 87:cf:71:dd:29:75:9a:98:15:cf:73:9f:b5:fa:00: 07:8b:7d:76:78:04:a9:b6:26:b3:35:f5:be:84:68: ff:ff:55:a3:7a:e1:ae:d2:c6:dd:a8:99:c0:a4:85: 42:63:dd:33:fe:06:ef:f3:a0:f2:98:b6:76:74:a8: e4:f0:af:b9:d8:7c:1d:5d:e4:a1:da:ed:2a:c2:e2: 5e:80:90:62:05:9e:18:b5:7e:28:b3:b9:db:c0:e5: 2a:c9:23:da:47:6f:99:05:5b:bd:ab:c3:de:a3:2e: 83:66:c1:67:f3:b8:b3:26:03:00:43:3d:10:15:96: 54:01:ed:14:61:dc:d6:45:02:14:db:3f:c4:4d:3b: 82:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:06:45:89:0D:B3:6A:A9:1B:E3:E7:2A:01:75:4C:ED:8A:DF:89:FD X509v3 Authority Key Identifier: keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:53:fa:42:5f:6f:c9:ba:2c:36:2e:06:01:2a:8a:4e:0a:95: a5:fd:a5:42:91:fc:11:4c:e6:f3:f0:39:44:ed:a5:b6:8b:4c: ac:5a:8d:6f:cc:a9:0e:3d:b0:79:ca:62:26:04:e9:b2:6e:a8: aa:66:40:52:c9:b8:a8:8b:4f:d3:f0:65:df:44:f2:13:b4:5e: 25:d3:6f:6d:7b:ce:2e:76:9d:43:02:85:ed:e4:99:5f:c4:c4: 29:fb:37:e6:51:77:f8:d7:d0:ce:be:9d:d6:25:9a:a7:73:d5: 92:45:57:23:ae:37:8c:20:77:99:b9:d3:a4:d3:9f:ec:73:bb: ff:4e:f5:77:f5:c4:90:f3:9b:f8:9f:68:e9:5c:ab:ef:02:9d: 62:96:98:66:2e:2b:cb:62:3f:44:ac:fe:9e:96:d0:95:a1:6b: 0c:f6:13:06:a7:26:8c:ee:bf:ac:a7:67:b5:63:3f:db:7b:32: 7b:c5:1c:ab:bc:5b:b6:eb:b5:42:6e:87:28:68:95:37:55:33: 79:bf:0f:62:33:35:82:33:a2:45:12:c3:a2:7e:33:dd:17:07: a9:e1:a5:f4:3d:f5:a0:ed:c8:9b:4b:fe:41:ae:3f:09:e0:e8: a5:0c:0e:96:a2:f3:91:de:2b:5b:c4:19:5c:3b:94:21:ae:56: 27:db:d6:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7RfPbtLC4vDsqqHrfqASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNWExMDk4YzVjODUzNWM5NzU4ZjEyOGQ4YTA4MmRmN2Nm ODUxMGIwHhcNMjUxMjIxMDgwMTAxWhcNMjUxMjIyMDgwMTAxWjAzMTEwLwYDVQQD Eyg0NTA2NDU4OTBkYjM2YWE5MWJlM2U3MmEwMTc1NGNlZDhhZGY4OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWCBIGzdJsUwOooNEdntHCwDDM3w Mo/7QI82ej8wIUH/yky9V97BPRm9vhLQr8V/DRnnxy6ItTsjJPgTw/l7M3CqiiL8 qOWcsNCk3XUQ35oQsADCB0aQ6p3UsuzzT+1WkVbhFbarudfQPuWUkJUz+MlSwM0S IV6Hz3HdKXWamBXPc5+1+gAHi312eASptiazNfW+hGj//1WjeuGu0sbdqJnApIVC Y90z/gbv86DymLZ2dKjk8K+52HwdXeSh2u0qwuJegJBiBZ4YtX4os7nbwOUqySPa R2+ZBVu9q8Peoy6DZsFn87izJgMAQz0QFZZUAe0UYdzWRQIU2z/ETTuCIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUGRYkNs2qpG+PnKgF1TO2K34n9MB8GA1UdIwQY MBaAFNFaEJjFyFNcl1jxKNiggt98+FELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMt MGJkZGM4MDcxMWFlLzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMtMGJkZGM4MDcxMWFl LzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVP6Ql9v ybosNi4GASqKTgqVpf2lQpH8EUzm8/A5RO2ltotMrFqNb8ypDj2wecpiJgTpsm6o qmZAUsm4qItP0/Bl30TyE7ReJdNvbXvOLnadQwKF7eSZX8TEKfs35lF3+NfQzr6d 1iWap3PVkkVXI643jCB3mbnTpNOf7HO7/071d/XEkPOb+J9o6Vyr7wKdYpaYZi4r y2I/RKz+npbQlaFrDPYTBqcmjO6/rKdntWM/23sye8Ucq7xbtuu1Qm6HKGiVN1Uz eb8PYjM1gjOiRRLDon4z3RcHqeGl9D31oO3Im0v+Qa4/CeDopQwOlqLzkd4rW8QZ XDuUIa5WJ9vWfQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:59:12 2025 by rpki-client