This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json) Hash identifier: b/j4RFGZhHIOgbKi5a9a3YgyrX4W8byyglRu2UaSccY= Subject key identifier: D9:43:CF:95:7B:6F:F1:DA:54:D9:3F:C9:F0:03:DB:09:8B:14:1C:AF Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37 Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737 Certificate serial: 019B50E0A5C47615C28F1E0FD835AA172D58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft Manifest number: 097C Signing time: Wed 24 Dec 2025 15:00:58 +0000 Manifest this update: Wed 24 Dec 2025 15:00:58 +0000 Manifest next update: Thu 25 Dec 2025 15:00:58 +0000 Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: tXb9V8tOUEnzrzlGEk033QyGKxLZ3jquD2AtthE8H+k=) 2: VjYlerEh7qVTQBqqPATO88eK6NQ.roa (hash: 5FRpnrVjan0/lQPhlwWwVDFcy2JjA8zi7jlobrQ41Zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:a5:c4:76:15:c2:8f:1e:0f:d8:35:aa:17:2d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737 Validity Not Before: Dec 24 15:00:58 2025 GMT Not After : Dec 25 15:00:58 2025 GMT Subject: CN=d943cf957b6ff1da54d93fc9f003db098b141caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a3:e7:d5:88:d5:d5:83:a2:f9:fb:1a:9f:3b: 80:49:8e:62:19:11:f4:66:f6:9c:33:97:f2:96:b3: 7d:f8:9b:e3:d0:d4:dd:6b:2c:50:7b:77:8a:5e:dd: 5b:b8:90:a6:b7:71:03:64:c3:32:37:a2:80:fb:d6: 4a:d7:94:2e:6c:bd:c5:c1:77:7e:46:3a:cc:bf:27: 9b:6d:7a:46:59:75:8f:e9:52:01:ae:e0:b7:b5:d9: b4:46:a8:9b:b4:35:44:58:33:f3:bf:4a:78:39:bc: 56:aa:39:b5:ff:55:03:52:4c:85:1d:97:d0:01:16: ff:c9:f3:0b:95:df:ea:97:41:c0:88:83:61:7c:7c: 82:8c:2f:b5:1a:18:62:cf:10:7a:50:41:d8:51:6e: f8:7c:2e:40:70:18:12:c9:4e:2a:6a:bd:c5:7b:86: c9:0f:a1:5b:f7:0f:6d:d0:ce:3b:10:e1:91:89:74: 1c:0b:02:11:12:e4:52:80:0c:66:db:55:26:7a:46: 38:c2:85:5e:dc:de:ee:ce:ec:c4:b9:ab:a7:15:4b: 63:42:3f:90:2f:f6:45:5f:f8:c3:b8:7f:86:83:8f: e5:d4:4d:02:23:32:a3:65:97:b6:b7:c1:db:4a:41: b2:c7:8d:18:11:1a:59:d2:c4:6b:51:23:e2:3f:1c: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:43:CF:95:7B:6F:F1:DA:54:D9:3F:C9:F0:03:DB:09:8B:14:1C:AF X509v3 Authority Key Identifier: keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:64:89:46:a3:39:4b:61:24:93:db:7a:40:74:5d:1e:17:89: 4b:c0:75:d2:2f:37:72:18:dc:e0:ca:b7:15:28:e1:a8:e8:29: 77:22:85:88:25:8d:6f:40:52:00:a6:92:e0:2c:7d:24:4c:6f: 7d:d2:19:7a:1f:6c:6f:8f:d6:e1:f0:71:49:f5:44:5c:41:66: 33:16:0f:c6:e6:ee:3b:2a:f0:cf:e7:87:95:9e:76:38:85:3b: 3b:11:2e:c7:a5:9f:58:fd:97:64:6c:61:b9:03:a0:a7:97:e7: e8:5a:c2:9e:40:02:ca:11:e6:72:35:ab:43:cc:29:d0:8d:6e: fd:55:32:26:92:52:da:25:c9:f2:0a:c7:0d:bc:ad:f3:59:aa: 97:45:8a:16:ae:7c:3b:33:f1:69:a6:4b:ec:28:c8:99:0e:e6: 4b:8a:01:e2:ba:50:c2:75:85:8c:54:bd:78:8d:39:fb:d0:e7: 30:94:6e:da:7e:26:59:e8:ef:b0:e7:5e:7b:9a:9d:ba:ea:00: f3:b1:78:3e:33:ef:f0:f0:ea:0d:35:8e:dc:8b:8a:de:60:65: 7f:9f:c8:e3:cd:ab:74:d0:ab:41:07:b4:12:6a:08:42:57:b7: ae:2c:9e:8e:94:9d:97:78:c9:d2:77:5f:15:e0:70:af:ee:bd: 6e:50:f0:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4KXEdhXCjx4P2DWqFy1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZGQ0ZGRkNTM2ZjE4YTg3MmNiYWMxNWU1ODk1NDJhZWRj ZDA3MzcwHhcNMjUxMjI0MTUwMDU4WhcNMjUxMjI1MTUwMDU4WjAzMTEwLwYDVQQD EyhkOTQzY2Y5NTdiNmZmMWRhNTRkOTNmYzlmMDAzZGIwOThiMTQxY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KPn1YjV1YOi+fsanzuASY5iGRH0 ZvacM5fylrN9+Jvj0NTdayxQe3eKXt1buJCmt3EDZMMyN6KA+9ZK15QubL3FwXd+ RjrMvyebbXpGWXWP6VIBruC3tdm0RqibtDVEWDPzv0p4ObxWqjm1/1UDUkyFHZfQ ARb/yfMLld/ql0HAiINhfHyCjC+1GhhizxB6UEHYUW74fC5AcBgSyU4qar3Fe4bJ D6Fb9w9t0M47EOGRiXQcCwIREuRSgAxm21UmekY4woVe3N7uzuzEuaunFUtjQj+Q L/ZFX/jDuH+Gg4/l1E0CIzKjZZe2t8HbSkGyx40YERpZ0sRrUSPiPxzoIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlDz5V7b/HaVNk/yfAD2wmLFByvMB8GA1UdIwQY MBaAFNLdTd1TbxiocsusFeWJVCrtzQc3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQt NWIxMzJmN2QzYjQ5LzEvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQtNWIxMzJmN2QzYjQ5 LzEvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxWSJRqM5 S2Ekk9t6QHRdHheJS8B10i83chjc4Mq3FSjhqOgpdyKFiCWNb0BSAKaS4Cx9JExv fdIZeh9sb4/W4fBxSfVEXEFmMxYPxubuOyrwz+eHlZ52OIU7OxEux6WfWP2XZGxh uQOgp5fn6FrCnkACyhHmcjWrQ8wp0I1u/VUyJpJS2iXJ8grHDbyt81mql0WKFq58 OzPxaaZL7CjImQ7mS4oB4rpQwnWFjFS9eI05+9DnMJRu2n4mWejvsOdee5qduuoA 87F4PjPv8PDqDTWO3IuK3mBlf5/I482rdNCrQQe0EmoIQle3riyejpSdl3jJ0ndf FeBwr+69blDw9Q== -----END CERTIFICATE-----Generated at Wed Dec 24 20:04:44 2025 by rpki-client