This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json) Hash identifier: mjdRs4ibOlzSZ7SBhaD0pSjuh4ioOlX0uMGj08WwlIc= Subject key identifier: AB:15:77:0E:36:0A:AF:D2:13:52:3F:3C:29:D9:3B:D5:23:FE:B0:43 Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91 Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91 Certificate serial: 019B4F601F30C1966CDD62AEFE2EC0349978 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft Manifest number: 036A Signing time: Wed 24 Dec 2025 08:00:58 +0000 Manifest this update: Wed 24 Dec 2025 08:00:58 +0000 Manifest next update: Thu 25 Dec 2025 08:00:58 +0000 Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: Czk6leAOlqFx8Ij+G0wHzw96OnOebmeV+w10tkmDypg=) 2: Xp2PmSoyw6vuED7OfEi_QaL00dc.roa (hash: ELBh/LCD8srsbWF+z8quU7XGWuHLmHPUfcz10VuYxEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:1f:30:c1:96:6c:dd:62:ae:fe:2e:c0:34:99:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91 Validity Not Before: Dec 24 08:00:58 2025 GMT Not After : Dec 25 08:00:58 2025 GMT Subject: CN=ab15770e360aafd213523f3c29d93bd523feb043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:a9:19:4f:0d:82:aa:98:91:46:f3:09:4b: 18:0e:bc:e9:dd:d1:3d:48:e5:dd:78:87:8b:14:2d: ce:26:19:82:12:e2:79:25:52:09:62:6a:dd:7b:1c: bf:23:c5:ff:a5:11:f6:03:b0:25:46:83:82:4a:79: 70:84:26:a1:cb:2d:a8:71:27:dc:31:3e:12:32:3b: bc:c7:39:1b:49:34:44:77:da:68:01:fa:dc:7d:2e: 53:fb:d5:0e:35:c7:d4:d5:2f:81:49:18:d1:8e:48: 25:c1:e0:83:9f:54:40:ba:44:18:64:52:48:38:48: 92:4b:58:84:c6:ff:1c:b5:4c:c5:46:a9:b2:2e:a3: ec:70:8b:a3:d9:be:08:99:a0:a2:e2:9a:ed:06:2c: 20:ce:d3:55:58:5b:77:79:72:8a:99:be:d2:10:21: 53:36:c4:2c:f7:4f:73:01:8e:27:41:42:7f:13:a9: 18:e2:dc:7a:9e:fc:8c:57:31:ed:9d:71:3b:9a:76: b0:d2:4a:29:89:76:e0:bb:07:71:2f:b4:f3:bc:f1: d0:77:aa:6d:bb:ba:0b:a0:7d:d4:fb:57:e3:b9:d5: 4f:7d:df:80:16:d6:df:bb:3a:56:e2:2b:0e:aa:68: 54:20:9a:cb:34:f9:51:3d:97:4d:fa:b1:fb:c6:5c: c8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:15:77:0E:36:0A:AF:D2:13:52:3F:3C:29:D9:3B:D5:23:FE:B0:43 X509v3 Authority Key Identifier: keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b7:3c:98:61:35:0b:bf:10:19:43:47:40:82:92:62:80:ff: 06:c5:39:88:58:ce:b9:3d:02:ad:65:ee:08:68:7b:7e:3f:a7: 7f:8c:cf:c4:86:17:8d:5f:62:41:56:f1:86:6a:b8:df:62:d3: 14:10:ba:08:a4:ee:b1:ba:95:47:34:5f:5f:07:39:c8:eb:32: 35:3e:46:0c:11:2a:b1:6e:8d:a6:cc:cf:ac:3b:8f:55:bb:af: 47:54:f1:6d:20:0d:eb:6a:0d:a8:ae:e1:e3:44:20:e7:13:1d: c2:00:5c:f3:81:61:4a:96:48:08:68:38:f5:f6:02:4e:a8:30: eb:b6:c0:3f:94:ae:27:bd:3b:76:5d:24:ff:72:06:88:dd:1d: da:31:13:7e:a7:ae:79:fb:9b:88:e6:1f:de:ec:37:27:e2:f9: 72:08:8a:ff:28:7c:41:cd:52:78:f7:b0:75:88:69:44:d1:84: c9:8c:a9:4a:15:10:87:8e:58:39:6a:8d:72:21:1a:e0:8b:d2: f0:8e:4f:ec:de:22:03:bd:11:09:0b:de:66:12:4d:51:b6:b5: 1e:8a:14:e8:50:5a:cb:9a:e6:18:4b:c5:e8:8a:04:c5:ca:be: fb:f8:2c:32:7b:ca:10:c1:5e:13:9b:f9:f9:6e:ac:6f:0e:48: af:3b:7c:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYB8wwZZs3WKu/i7ANJl4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZmY5NzQ5ZWUyMmYwMDkyNTdiODlkODM0MGNjNjRmYjQw YmZjOTEwHhcNMjUxMjI0MDgwMDU4WhcNMjUxMjI1MDgwMDU4WjAzMTEwLwYDVQQD EyhhYjE1NzcwZTM2MGFhZmQyMTM1MjNmM2MyOWQ5M2JkNTIzZmViMDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJCpGU8NgqqYkUbzCUsYDrzp3dE9 SOXdeIeLFC3OJhmCEuJ5JVIJYmrdexy/I8X/pRH2A7AlRoOCSnlwhCahyy2ocSfc MT4SMju8xzkbSTREd9poAfrcfS5T+9UONcfU1S+BSRjRjkglweCDn1RAukQYZFJI OEiSS1iExv8ctUzFRqmyLqPscIuj2b4ImaCi4prtBiwgztNVWFt3eXKKmb7SECFT NsQs909zAY4nQUJ/E6kY4tx6nvyMVzHtnXE7mnaw0kopiXbguwdxL7TzvPHQd6pt u7oLoH3U+1fjudVPfd+AFtbfuzpW4isOqmhUIJrLNPlRPZdN+rH7xlzIcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsVdw42Cq/SE1I/PCnZO9Uj/rBDMB8GA1UdIwQY MBaAFNP/l0nuIvAJJXuJ2DQMxk+0C/yRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmIt MDBmYWVjYWM3ZGViLzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmItMDBmYWVjYWM3ZGVi LzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrc8mGE1 C78QGUNHQIKSYoD/BsU5iFjOuT0CrWXuCGh7fj+nf4zPxIYXjV9iQVbxhmq432LT FBC6CKTusbqVRzRfXwc5yOsyNT5GDBEqsW6NpszPrDuPVbuvR1TxbSAN62oNqK7h 40Qg5xMdwgBc84FhSpZICGg49fYCTqgw67bAP5SuJ707dl0k/3IGiN0d2jETfqeu efubiOYf3uw3J+L5cgiK/yh8Qc1SePewdYhpRNGEyYypShUQh45YOWqNciEa4IvS 8I5P7N4iA70RCQveZhJNUba1HooU6FBay5rmGEvF6IoExcq++/gsMnvKEMFeE5v5 +W6sbw5Irzt8/g== -----END CERTIFICATE-----Generated at Wed Dec 24 13:36:03 2025 by rpki-client