This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft File: 0HNWUFJtK79SUNl5fknbHZ8cwn8.mft (raw, json) Hash identifier: c8v2DDugbPgBJOta5Z8NO77SN60SYK3Ezcd71SbLuhI= Subject key identifier: 36:B6:7B:D3:FF:00:69:22:95:E1:A5:0B:67:0A:4E:7F:A2:CB:B7:A1 Authority key identifier: D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F Certificate issuer: /CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f Certificate serial: 019B35A0A48B97502165E707344F6064744B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft Manifest number: 8C Signing time: Fri 19 Dec 2025 08:01:18 +0000 Manifest this update: Fri 19 Dec 2025 08:01:18 +0000 Manifest next update: Sat 20 Dec 2025 08:01:18 +0000 Files and hashes: 1: 0HNWUFJtK79SUNl5fknbHZ8cwn8.crl (hash: YShtmkSfCdG67vXYYZn/bHJGOcHjs5f57JZqrNXRFBw=) 2: GEViIrp__zd7MRZmIGyBHixASLs.roa (hash: wj88L0dW9LTOq3jf3P0nxH1ftHshlmZInv5nkhzsxdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:a4:8b:97:50:21:65:e7:07:34:4f:60:64:74:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f Validity Not Before: Dec 19 08:01:18 2025 GMT Not After : Dec 20 08:01:18 2025 GMT Subject: CN=36b67bd3ff00692295e1a50b670a4e7fa2cbb7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:9f:92:0d:a6:83:f2:7b:9a:9e:0f:af:9a: c9:6d:71:77:cd:4b:c7:36:d2:49:4a:63:96:71:5f: 44:f6:1a:2f:f2:27:83:74:17:92:5c:cc:b0:4d:09: a1:75:fb:88:45:2f:84:97:14:1f:80:f2:75:0f:12: 12:d7:dc:aa:92:8b:ea:cd:dc:9c:e8:88:50:a9:f8: 41:27:ed:7a:9a:54:21:4a:f2:7f:3c:d8:ae:5f:ec: ba:4d:6f:42:a5:85:56:76:3c:33:7d:9f:27:d2:3a: 79:6c:3a:6b:1e:9b:a7:a2:83:d2:ef:7c:b2:c0:23: 6a:2d:dd:32:25:cd:25:40:ef:a4:11:15:92:ee:46: 42:5e:f8:e7:15:76:fa:34:d7:ef:2a:10:60:d6:92: 74:91:ca:8e:57:35:31:08:40:89:82:9f:f7:de:23: d6:c4:4f:78:ac:33:7b:4d:57:87:8f:43:5b:40:67: b1:53:2e:99:53:8f:42:2b:7b:96:b2:d9:16:85:b7: 35:df:14:59:62:4c:a2:d3:73:aa:c9:a1:ba:d1:35: 4c:b7:10:06:b0:85:44:3f:31:4a:85:8f:32:09:e3: 05:de:3b:3f:ea:f7:84:cb:2c:71:83:48:f4:b7:2f: c9:23:44:10:3a:c1:5f:ff:f2:d7:1f:46:02:1d:dc: aa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B6:7B:D3:FF:00:69:22:95:E1:A5:0B:67:0A:4E:7F:A2:CB:B7:A1 X509v3 Authority Key Identifier: keyid:D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2e:59:d8:92:6b:5f:d5:50:02:ad:66:8c:51:96:13:9e:39: 06:75:a0:a4:d9:80:0c:d9:8e:45:f3:da:11:f1:a9:3f:dc:97: ab:b7:fd:b3:2c:a9:21:ce:b9:46:dc:75:54:e3:18:19:e1:1d: bd:20:81:ee:7a:0c:95:23:a3:63:6b:f0:4b:20:e6:c1:7f:c0: 0a:98:85:aa:ee:ce:df:72:b9:77:fb:bd:ca:59:65:eb:c8:46: 4d:9d:39:6a:a8:94:3c:e4:5e:bc:75:2a:5e:1e:36:87:76:64: 33:2d:a8:36:5c:62:fd:e6:93:6c:8d:05:35:c3:47:e9:7c:67: 0c:66:37:5b:29:d8:1a:c3:a9:b7:29:84:ed:22:de:ca:dc:9e: 22:a5:55:4d:2d:e5:31:72:ad:f3:88:81:2a:71:18:bc:41:e4: 5d:45:79:a6:5f:87:82:3b:0d:3c:9f:68:e7:3f:9e:55:82:bc: 82:c8:40:e1:34:b6:81:df:50:44:e5:30:87:fd:3c:23:b8:e3: df:dd:cd:89:06:bf:35:ea:e6:14:96:da:7f:b5:3a:b4:84:23: 4f:c6:8a:5d:6b:33:6a:5c:fb:4d:85:e8:a4:2e:b6:ef:59:e2: b2:41:43:b2:ba:12:c2:d9:3a:27:0f:c6:89:20:14:98:1e:46: a5:a4:38:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oKSLl1AhZecHNE9gZHRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNzM1NjUwNTI2ZDJiYmY1MjUwZDk3OTdlNDlkYjFkOWYx Y2MyN2YwHhcNMjUxMjE5MDgwMTE4WhcNMjUxMjIwMDgwMTE4WjAzMTEwLwYDVQQD EygzNmI2N2JkM2ZmMDA2OTIyOTVlMWE1MGI2NzBhNGU3ZmEyY2JiN2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPWfkg2mg/J7mp4Pr5rJbXF3zUvH NtJJSmOWcV9E9hov8ieDdBeSXMywTQmhdfuIRS+ElxQfgPJ1DxIS19yqkovqzdyc 6IhQqfhBJ+16mlQhSvJ/PNiuX+y6TW9CpYVWdjwzfZ8n0jp5bDprHpunooPS73yy wCNqLd0yJc0lQO+kERWS7kZCXvjnFXb6NNfvKhBg1pJ0kcqOVzUxCECJgp/33iPW xE94rDN7TVeHj0NbQGexUy6ZU49CK3uWstkWhbc13xRZYkyi03OqyaG60TVMtxAG sIVEPzFKhY8yCeMF3js/6veEyyxxg0j0ty/JI0QQOsFf//LXH0YCHdyqUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDa2e9P/AGkileGlC2cKTn+iy7ehMB8GA1UdIwQY MBaAFNBzVlBSbSu/UlDZeX5J2x2fHMJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iNDk1MDAtMGI3NC00YzQ1LWE4ODIt MGM4NGZkNzU3OTkwLzEvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iNDk1MDAtMGI3NC00YzQ1LWE4ODItMGM4NGZkNzU3OTkw LzEvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjC5Z2JJr X9VQAq1mjFGWE545BnWgpNmADNmORfPaEfGpP9yXq7f9syypIc65Rtx1VOMYGeEd vSCB7noMlSOjY2vwSyDmwX/ACpiFqu7O33K5d/u9ylll68hGTZ05aqiUPORevHUq Xh42h3ZkMy2oNlxi/eaTbI0FNcNH6XxnDGY3WynYGsOptymE7SLeytyeIqVVTS3l MXKt84iBKnEYvEHkXUV5pl+HgjsNPJ9o5z+eVYK8gshA4TS2gd9QROUwh/08I7jj 393NiQa/NermFJbaf7U6tIQjT8aKXWszalz7TYXopC6271niskFDsroSwtk6Jw/G iSAUmB5GpaQ4mA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:24:14 2025 by rpki-client