This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json) Hash identifier: mOTsAoE5UtcMNiL9CepPk2HPBn/zW2Bu8SOMcSnGhyo= Subject key identifier: EB:A1:A5:2F:D2:77:16:E9:32:C9:3C:96:2B:AF:57:99:B5:79:F6:32 Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c Certificate serial: 019B54BD4E6408F0CFC8F3A594FAAA5FBBF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft Manifest number: 0F10 Signing time: Thu 25 Dec 2025 09:00:50 +0000 Manifest this update: Thu 25 Dec 2025 09:00:50 +0000 Manifest next update: Fri 26 Dec 2025 09:00:50 +0000 Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: kruK633Pi8OQaqSOd3pzWmWLlyb9Q5E1WF+GSLmXy08=) 2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:4e:64:08:f0:cf:c8:f3:a5:94:fa:aa:5f:bb:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c Validity Not Before: Dec 25 09:00:50 2025 GMT Not After : Dec 26 09:00:50 2025 GMT Subject: CN=eba1a52fd27716e932c93c962baf5799b579f632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:a0:c7:da:a6:91:e5:37:cc:f3:2b:4c:42: 0f:59:eb:eb:44:e0:42:4b:6f:f8:2b:6e:d0:22:7e: cb:ef:4b:73:53:71:19:96:85:b5:1d:09:f0:43:06: 1f:0e:61:62:dc:69:86:4a:cf:83:09:16:d6:4f:4e: 07:60:cc:ff:10:7b:86:ae:e9:84:52:97:af:79:73: 32:ed:57:c5:14:83:4d:3b:fc:a2:0f:d4:fe:e8:4c: 18:c0:43:58:2b:e0:48:15:ea:d9:07:58:08:45:1e: b9:f5:a8:4a:59:64:e5:cd:11:60:ea:31:26:17:63: 7f:b6:0f:22:d4:94:f0:35:51:a0:4a:59:8e:dc:67: 60:6a:c8:b1:60:0d:09:99:0d:00:d5:a9:73:18:2f: bf:23:31:53:6e:e8:11:9a:aa:9b:49:0f:eb:71:31: d1:03:4e:d9:ba:3e:d4:79:4b:cd:5e:8f:ae:91:e2: e1:e9:9d:09:96:6b:67:0d:19:89:73:f1:a9:22:0a: 77:7f:79:a6:98:89:4e:3b:d5:05:85:e8:da:6b:32: 30:68:f7:77:48:4a:cb:c7:40:ed:80:34:cc:9d:22: f6:3c:94:9c:12:50:3c:1c:50:2b:04:8c:60:86:b3: c1:f9:f4:be:cc:75:05:7d:02:20:94:52:bd:2a:93: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A1:A5:2F:D2:77:16:E9:32:C9:3C:96:2B:AF:57:99:B5:79:F6:32 X509v3 Authority Key Identifier: keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:9d:45:16:9e:95:67:98:8c:0d:13:4c:c8:e0:a4:3e:4b:a7: 03:06:ed:fd:e0:8c:f5:f3:1b:c8:f8:c2:7f:08:af:0d:13:fa: df:13:7f:dd:f5:94:cb:2a:ce:49:bb:9e:3d:25:81:b4:62:89: 5a:58:66:53:b5:29:bf:15:eb:34:81:f0:fe:73:4d:ce:0d:74: 0a:7c:7f:40:31:45:cf:dc:f3:ea:6e:78:86:da:b8:84:44:aa: 57:41:ef:92:19:88:61:7b:52:4d:fb:68:e6:1d:4b:e4:32:15: cd:01:13:94:c7:e5:03:3b:95:74:3e:91:fe:1a:58:28:93:b0: 04:ad:e4:00:a5:e7:fa:2f:6b:3d:50:6d:b6:ba:f9:47:95:f9: 00:99:37:5d:eb:c6:66:3a:6d:3d:bf:60:58:83:98:77:f2:ac: 65:6b:bf:d6:b6:ed:69:8e:2d:ca:02:74:c5:d8:1c:c3:d6:37: 16:fb:97:24:cf:92:dc:d6:19:9c:45:4b:0d:31:d6:22:79:e2: 80:24:5c:fe:cb:c4:1e:f5:48:b0:97:cb:74:d6:5b:cf:2b:d7: e7:f5:72:35:9a:1b:98:59:70:a1:4c:46:36:10:bf:04:1f:f1: 85:60:9d:78:25:88:3b:80:a9:28:e9:ea:8f:e7:cb:8d:6e:ab: af:61:b2:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvU5kCPDPyPOllPqqX7vzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMjE1YmZjNDg4NzZjMzY1MTgzNTZlZmQ2ZTI4MDI1NWEx ZGVlM2MwHhcNMjUxMjI1MDkwMDUwWhcNMjUxMjI2MDkwMDUwWjAzMTEwLwYDVQQD EyhlYmExYTUyZmQyNzcxNmU5MzJjOTNjOTYyYmFmNTc5OWI1NzlmNjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaygx9qmkeU3zPMrTEIPWevrROBC S2/4K27QIn7L70tzU3EZloW1HQnwQwYfDmFi3GmGSs+DCRbWT04HYMz/EHuGrumE UpeveXMy7VfFFINNO/yiD9T+6EwYwENYK+BIFerZB1gIRR659ahKWWTlzRFg6jEm F2N/tg8i1JTwNVGgSlmO3GdgasixYA0JmQ0A1alzGC+/IzFTbugRmqqbSQ/rcTHR A07Zuj7UeUvNXo+ukeLh6Z0JlmtnDRmJc/GpIgp3f3mmmIlOO9UFhejaazIwaPd3 SErLx0DtgDTMnSL2PJScElA8HFArBIxghrPB+fS+zHUFfQIglFK9KpNLeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuhpS/SdxbpMsk8liuvV5m1efYyMB8GA1UdIwQY MBaAFNEhW/xIh2w2UYNW79bigCVaHe48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQt MDliZjQwNzFhZWEyLzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQtMDliZjQwNzFhZWEy LzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZ1FFp6V Z5iMDRNMyOCkPkunAwbt/eCM9fMbyPjCfwivDRP63xN/3fWUyyrOSbuePSWBtGKJ WlhmU7UpvxXrNIHw/nNNzg10Cnx/QDFFz9zz6m54htq4hESqV0HvkhmIYXtSTfto 5h1L5DIVzQETlMflAzuVdD6R/hpYKJOwBK3kAKXn+i9rPVBttrr5R5X5AJk3XevG ZjptPb9gWIOYd/KsZWu/1rbtaY4tygJ0xdgcw9Y3FvuXJM+S3NYZnEVLDTHWInni gCRc/svEHvVIsJfLdNZbzyvX5/VyNZobmFlwoUxGNhC/BB/xhWCdeCWIO4CpKOnq j+fLjW6rr2GyiQ== -----END CERTIFICATE-----Generated at Thu Dec 25 12:29:58 2025 by rpki-client