This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json) Hash identifier: EDkzIucdbHXzkhCEb4f+BjvAJ7m+C63uKhonNNQ4yUA= Subject key identifier: D2:CE:6F:E9:65:F9:71:CF:F8:F1:49:AE:79:C7:86:52:9B:2F:88:37 Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a Certificate serial: 019B3B350ED3D7A107D9502088013219509D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 10:01:31 +0000 Manifest this update: Sat 20 Dec 2025 10:01:31 +0000 Manifest next update: Sun 21 Dec 2025 10:01:31 +0000 Files and hashes: 1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: Pn0hJluRzOElMEsE0zjHGfHQdNU1Lsm0wIuBrjOJCf8=) 2: 2LgtOWneA5YvGT4_RnemdJk10ZI.roa (hash: i3ijgdJkTo+0tXZivrTiqDYQJFUVEZ40sKvM/03kC6k=) 3: BKyeRj9qftx8WGEdxVWFVc1273A.roa (hash: nhVWVpplcnh6PS/kPe42Tn4vpV4Cv/wcOxTwDykaiQM=) 4: NyrZFNY0uejKVVI5JPC7FPtdUjc.roa (hash: F1z0p2TvKAcesacsMKTiWmQh7lfOeilS7Yll9HRgTgE=) 5: ZOG0pJ01hXVC3r9SBSUX3nP3iWU.roa (hash: M3TtUoEAKZLP5h7xNaBXjv6fTWKL5P7QGAapCue/jYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:0e:d3:d7:a1:07:d9:50:20:88:01:32:19:50:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a Validity Not Before: Dec 20 10:01:31 2025 GMT Not After : Dec 21 10:01:31 2025 GMT Subject: CN=d2ce6fe965f971cff8f149ae79c786529b2f8837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:50:c0:c6:e3:28:6d:d4:1c:49:54:a0:f1:f8: b4:78:37:37:07:80:9b:67:06:5e:1d:bd:c3:2f:95: b7:b4:70:4a:c7:e9:1f:ba:cc:a1:75:d9:89:f8:da: a1:dd:21:9b:30:26:eb:0b:34:28:e8:b1:b4:ad:ee: 0f:40:09:97:9e:1d:0d:68:cd:5b:12:b7:8a:58:c4: 74:06:08:25:1a:78:e4:d1:d2:9b:ac:23:a1:be:f6: ca:bc:cf:e6:08:bf:e2:6c:2f:88:af:56:7c:bd:bd: 4f:0b:6f:95:82:6c:90:48:02:b0:b7:7b:0d:03:58: ed:33:df:69:57:b0:ba:8b:36:5d:69:d3:5d:32:03: ab:19:f5:6d:be:58:60:eb:63:d9:47:64:a6:88:8c: 36:da:3a:cd:9b:01:4c:74:ab:be:e2:bf:00:4b:33: 38:67:40:0e:0b:73:99:82:5b:cc:55:b8:ce:7a:64: 03:81:d2:40:16:7d:94:1a:3c:a6:6b:57:9c:14:be: b3:7b:25:8c:82:8e:db:b7:5e:25:1b:b2:b4:ab:89: a9:64:a1:55:49:75:d4:33:70:a7:c5:f4:ef:df:6b: c2:86:fb:ad:37:02:bf:05:83:e4:1b:87:50:5d:05: 70:7c:00:eb:81:1e:6b:b7:6a:02:b8:a6:0f:fb:b8: 7d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CE:6F:E9:65:F9:71:CF:F8:F1:49:AE:79:C7:86:52:9B:2F:88:37 X509v3 Authority Key Identifier: keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:94:f3:1e:f8:b5:66:71:10:68:7c:b3:cd:bc:05:87:fd:ed: 9f:f6:ac:9f:9a:1a:4c:d9:0b:63:78:20:99:95:09:9b:21:68: 6c:be:e5:bb:34:42:61:2a:ca:be:6d:d1:ab:00:61:1f:e1:96: 67:60:f7:25:90:7e:42:1f:61:00:c6:b1:d5:fe:03:4e:d5:cd: a9:60:ee:95:7c:01:34:0e:d0:cc:2d:87:45:2d:b9:fa:ed:57: 28:ab:8c:e2:69:f3:98:23:5a:63:ca:a2:42:c4:2c:4e:4e:8d: 8f:b8:dc:ff:0f:93:52:09:75:b8:4d:41:43:56:c8:34:9f:75: 81:e3:ba:02:be:df:38:e4:a9:bf:e6:b1:a4:23:fd:9b:b8:84: b8:62:40:23:78:c5:6a:3e:26:c0:85:d7:a8:c9:ca:58:84:90: 64:25:7e:96:ff:25:c7:e4:0d:c7:88:dc:ae:1d:b9:71:7b:1a: 0b:57:14:6d:e6:e3:3a:27:01:bf:d0:d0:9a:01:fd:26:31:72: d5:6c:00:a8:fe:1a:0b:3c:84:c5:31:8b:78:f0:f6:11:58:d9: d5:3a:9d:7a:45:e0:38:83:c2:c8:ea:ce:c9:05:11:21:83:bb: ae:b7:89:64:15:df:c3:9d:0f:a8:0b:8a:de:76:16:a8:69:69: c9:2c:91:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NQ7T16EH2VAgiAEyGVCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZGU2MTg4MjJiOGFmNmY5ZWNhZmZjZDdkNTQ1OWI3Y2Mx MTQ0OWEwHhcNMjUxMjIwMTAwMTMxWhcNMjUxMjIxMTAwMTMxWjAzMTEwLwYDVQQD EyhkMmNlNmZlOTY1Zjk3MWNmZjhmMTQ5YWU3OWM3ODY1MjliMmY4ODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVDAxuMobdQcSVSg8fi0eDc3B4Cb ZwZeHb3DL5W3tHBKx+kfusyhddmJ+Nqh3SGbMCbrCzQo6LG0re4PQAmXnh0NaM1b EreKWMR0BgglGnjk0dKbrCOhvvbKvM/mCL/ibC+Ir1Z8vb1PC2+VgmyQSAKwt3sN A1jtM99pV7C6izZdadNdMgOrGfVtvlhg62PZR2SmiIw22jrNmwFMdKu+4r8ASzM4 Z0AOC3OZglvMVbjOemQDgdJAFn2UGjyma1ecFL6zeyWMgo7bt14lG7K0q4mpZKFV SXXUM3CnxfTv32vChvutNwK/BYPkG4dQXQVwfADrgR5rt2oCuKYP+7h98wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLOb+ll+XHP+PFJrnnHhlKbL4g3MB8GA1UdIwQY MBaAFNDeYYgiuK9vnsr/zX1UWbfMEUSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQt MDQwZTA2NDRmYmU4LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQtMDQwZTA2NDRmYmU4 LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpTzHvi1 ZnEQaHyzzbwFh/3tn/asn5oaTNkLY3ggmZUJmyFobL7luzRCYSrKvm3RqwBhH+GW Z2D3JZB+Qh9hAMax1f4DTtXNqWDulXwBNA7QzC2HRS25+u1XKKuM4mnzmCNaY8qi QsQsTk6Nj7jc/w+TUgl1uE1BQ1bINJ91geO6Ar7fOOSpv+axpCP9m7iEuGJAI3jF aj4mwIXXqMnKWISQZCV+lv8lx+QNx4jcrh25cXsaC1cUbebjOicBv9DQmgH9JjFy 1WwAqP4aCzyExTGLePD2EVjZ1TqdekXgOIPCyOrOyQURIYO7rreJZBXfw50PqAuK 3nYWqGlpySyRbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:23:53 2025 by rpki-client