This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json) Hash identifier: 4L74wjtvaTs48t8YZIvuuAx9yH03jSUo5SmaoIVlxOE= Subject key identifier: B0:77:52:48:83:81:20:C5:4B:D1:C1:EF:D6:E1:CD:82:E3:94:C4:C0 Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37 Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737 Certificate serial: 019B3D90EE09AECFD0576637E87E720D59FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft Manifest number: 0972 Signing time: Sat 20 Dec 2025 21:01:06 +0000 Manifest this update: Sat 20 Dec 2025 21:01:06 +0000 Manifest next update: Sun 21 Dec 2025 21:01:06 +0000 Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: xJbh10LFfHGKHkcbqVyIyfTV7GcvGvsiB5eVmGupfIQ=) 2: VjYlerEh7qVTQBqqPATO88eK6NQ.roa (hash: 5FRpnrVjan0/lQPhlwWwVDFcy2JjA8zi7jlobrQ41Zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:ee:09:ae:cf:d0:57:66:37:e8:7e:72:0d:59:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737 Validity Not Before: Dec 20 21:01:06 2025 GMT Not After : Dec 21 21:01:06 2025 GMT Subject: CN=b0775248838120c54bd1c1efd6e1cd82e394c4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e9:04:3f:26:51:6b:e0:b4:04:50:a5:7c:3a: 57:50:6b:e5:e8:5d:79:0e:d5:c8:75:77:c9:19:f6: ba:53:12:eb:f4:4f:67:47:c6:69:9d:f8:49:85:22: fa:38:6a:d2:87:75:92:be:d0:5b:8c:fe:70:e5:e8: 11:27:e0:15:69:c2:ef:b9:fb:b2:07:3d:f1:4d:4d: 54:52:6b:ba:66:ba:3e:80:4b:02:70:c3:c4:e6:3d: 0f:28:cd:65:8d:bb:90:92:4a:ba:a4:61:b9:41:62: 99:de:ba:15:b7:94:d5:bf:31:00:da:e4:69:99:1b: f3:3f:f1:70:95:40:7e:5b:8e:35:3e:c0:4b:42:02: 31:a0:d0:60:72:84:8f:e8:d0:53:80:78:52:5c:b9: 7b:ec:aa:78:03:2b:5d:2c:aa:1f:03:22:e2:f0:b7: 5e:c9:77:12:6e:28:c2:cb:c7:c9:05:88:e6:40:e2: 82:9c:4e:fd:1f:ae:c3:ed:8d:9b:cb:35:ff:07:3e: e9:0a:b8:05:d0:1e:f3:c9:a8:87:82:6e:1e:c5:74: 09:ff:09:6d:01:6c:6d:f5:b6:45:29:2f:4a:f7:bb: cc:5e:6e:72:c2:b1:81:8d:7a:70:3d:06:4a:ad:a6: 9d:79:8f:c2:dc:9b:d5:13:46:a4:5b:ff:44:9a:b9: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:77:52:48:83:81:20:C5:4B:D1:C1:EF:D6:E1:CD:82:E3:94:C4:C0 X509v3 Authority Key Identifier: keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:31:f1:7f:5c:91:75:5b:e9:65:1d:a9:f8:a7:38:4b:ef:2b: 6b:dc:e0:bc:48:6f:0e:63:c3:62:eb:c5:a6:25:72:07:59:ee: 82:78:62:d0:1e:d4:62:cc:2a:fc:78:b9:39:50:4a:e7:7a:ad: 76:e6:60:78:6f:02:e1:6c:ee:45:20:22:1e:6d:0e:0d:8d:ce: e1:dd:18:a9:32:4e:c6:a5:c2:a3:d8:ab:3e:39:6a:20:2b:5c: ec:0a:e0:ef:cf:3b:c3:89:b4:89:fb:87:14:c3:f6:07:73:6b: 9a:5b:f3:f0:a8:6d:b0:d5:aa:a9:d6:c4:09:b4:76:ae:5c:1d: 43:40:12:21:68:75:f5:72:a2:a6:90:9b:d5:6a:b8:ad:0e:0c: de:e9:76:48:ef:16:59:b0:30:a1:f1:e9:b9:c9:24:32:eb:4d: 18:15:8a:8c:ef:bb:e7:a3:90:9b:ca:80:b0:e0:1b:8b:ba:42: c5:ad:10:70:ce:da:d4:95:9c:9f:4c:c0:64:f1:59:3f:05:21: f0:12:ef:71:17:ad:37:2b:90:e3:65:e4:de:21:9f:4b:e4:6a: e8:5b:2d:71:f9:66:ed:e3:7d:8a:23:ec:87:02:82:1b:21:4b: ac:ad:ee:cd:d1:0c:6c:84:60:cc:31:23:36:d6:42:da:0e:49: 39:e2:20:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kO4Jrs/QV2Y36H5yDVn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZGQ0ZGRkNTM2ZjE4YTg3MmNiYWMxNWU1ODk1NDJhZWRj ZDA3MzcwHhcNMjUxMjIwMjEwMTA2WhcNMjUxMjIxMjEwMTA2WjAzMTEwLwYDVQQD EyhiMDc3NTI0ODgzODEyMGM1NGJkMWMxZWZkNmUxY2Q4MmUzOTRjNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ukEPyZRa+C0BFClfDpXUGvl6F15 DtXIdXfJGfa6UxLr9E9nR8ZpnfhJhSL6OGrSh3WSvtBbjP5w5egRJ+AVacLvufuy Bz3xTU1UUmu6Zro+gEsCcMPE5j0PKM1ljbuQkkq6pGG5QWKZ3roVt5TVvzEA2uRp mRvzP/FwlUB+W441PsBLQgIxoNBgcoSP6NBTgHhSXLl77Kp4AytdLKofAyLi8Lde yXcSbijCy8fJBYjmQOKCnE79H67D7Y2byzX/Bz7pCrgF0B7zyaiHgm4exXQJ/wlt AWxt9bZFKS9K97vMXm5ywrGBjXpwPQZKraadeY/C3JvVE0akW/9EmrncJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLB3UkiDgSDFS9HB79bhzYLjlMTAMB8GA1UdIwQY MBaAFNLdTd1TbxiocsusFeWJVCrtzQc3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQt NWIxMzJmN2QzYjQ5LzEvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQtNWIxMzJmN2QzYjQ5 LzEvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzHxf1yR dVvpZR2p+Kc4S+8ra9zgvEhvDmPDYuvFpiVyB1nugnhi0B7UYswq/Hi5OVBK53qt duZgeG8C4WzuRSAiHm0ODY3O4d0YqTJOxqXCo9irPjlqICtc7Arg7887w4m0ifuH FMP2B3Nrmlvz8KhtsNWqqdbECbR2rlwdQ0ASIWh19XKippCb1Wq4rQ4M3ul2SO8W WbAwofHpuckkMutNGBWKjO+756OQm8qAsOAbi7pCxa0QcM7a1JWcn0zAZPFZPwUh 8BLvcRetNyuQ42Xk3iGfS+Rq6Fstcflm7eN9iiPshwKCGyFLrK3uzdEMbIRgzDEj NtZC2g5JOeIgdg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:29:21 2025 by rpki-client