This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json) Hash identifier: qXiLX5K9yv0WpjQkEOKWH8SKbBShZ7AZwdZ6dheEH00= Subject key identifier: F6:68:D2:9F:BD:1E:34:45:9F:F9:BC:C5:38:8C:23:02:49:9A:BE:B9 Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37 Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537 Certificate serial: 019B27AE3CF93307AB686B10DC1BF58E488A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft Manifest number: 170E Signing time: Tue 16 Dec 2025 15:01:28 +0000 Manifest this update: Tue 16 Dec 2025 15:01:28 +0000 Manifest next update: Wed 17 Dec 2025 15:01:28 +0000 Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: 42FLSMQs64IOIqKxfkd/Xg6fReVAXXc1faVy4g9LNQs=) 2: cednPNYKxfRsr4W4osQ0UxWr_xg.roa (hash: bAnClABodJAGvw6mOL61pHv3A1a0Gmryz3vjrqAKOxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:3c:f9:33:07:ab:68:6b:10:dc:1b:f5:8e:48:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537 Validity Not Before: Dec 16 15:01:28 2025 GMT Not After : Dec 17 15:01:28 2025 GMT Subject: CN=f668d29fbd1e34459ff9bcc5388c2302499abeb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a2:ac:42:38:3b:5b:39:d0:35:37:62:d5:97: b8:47:12:97:d3:98:0b:4b:33:10:e5:83:af:f0:9e: 18:59:07:64:51:93:93:87:d2:5d:e4:cb:a5:8c:38: 19:70:49:25:92:53:f2:f6:0a:db:b0:3d:fc:2e:16: 61:2a:c4:d9:16:bf:87:24:40:ef:7d:f4:2b:cf:d3: 1b:fc:4a:cf:b9:c0:cb:aa:32:d6:00:c9:45:0c:d4: d8:27:5c:83:45:6e:9b:88:71:2f:2f:00:93:19:96: b9:b3:5c:1d:55:27:22:9f:f8:bd:1d:53:17:84:54: 5b:b3:7e:55:b8:c2:82:d2:61:92:da:16:63:05:50: 85:64:17:72:ed:70:10:58:25:63:85:f5:c9:fb:7f: dd:1d:fc:85:1f:88:56:0c:fb:ce:b4:e6:17:6d:b0: 0e:3f:0f:4b:01:79:fd:9f:13:63:31:6a:e7:ec:7e: de:61:06:14:0e:cd:38:0a:d8:b0:63:80:b3:ce:5a: 3e:98:c3:f9:22:87:39:1e:e9:ed:05:8b:0d:3a:e6: 9c:e0:3a:85:39:06:2b:cd:41:b4:48:21:01:ca:ea: 97:a1:8c:42:47:1b:64:e1:a6:61:46:4a:75:8f:8c: 7c:f2:88:6b:6f:cb:25:02:90:65:24:6b:cb:6e:3d: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:68:D2:9F:BD:1E:34:45:9F:F9:BC:C5:38:8C:23:02:49:9A:BE:B9 X509v3 Authority Key Identifier: keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:8d:eb:56:12:f3:7a:bf:07:1d:39:ed:db:5f:90:cf:57:7a: 0c:f8:76:55:6f:96:47:ca:9f:cf:b8:29:e9:20:ab:a2:a0:5e: 47:a6:b1:b2:73:8e:03:fb:fd:15:2d:05:2a:cf:d9:ac:1f:c7: 17:1b:bf:c7:cd:ea:9d:96:22:42:bd:98:20:f3:33:c6:ba:c5: c0:90:df:e5:a9:a7:23:37:89:ac:96:42:8f:13:1b:2c:18:b1: b3:30:5d:e9:ec:0b:57:03:42:1e:e7:9e:2b:9e:4d:70:59:51: 44:a5:3e:57:55:87:bb:85:d1:79:4c:75:c6:f7:de:4d:e8:00: 14:a8:d6:7a:05:f6:db:98:43:9e:16:4e:9a:c2:72:5e:b4:93: d3:c3:e0:c3:99:8c:28:59:2a:e9:89:d7:5c:d1:b1:de:75:3b: 63:34:9c:d6:96:2a:eb:33:d8:ad:f7:5c:11:80:0d:86:3d:16: 9a:e2:9b:7b:e6:08:03:03:f8:a1:f9:72:14:26:11:04:50:75: c7:e7:82:7f:93:59:4c:94:54:14:68:c2:46:02:d7:e9:73:28: 69:8e:79:35:61:a4:3a:dd:a8:d4:a5:82:d1:e7:91:87:61:14: 06:f3:53:29:e1:4e:e5:06:b7:60:b1:fd:05:af:40:a9:e5:4e: 44:ba:ec:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrjz5MweraGsQ3Bv1jkiKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTM0M2EzN2VjYWQyYmZiMmMzNWJkOWIyNmQ3ZjQ4YmNi NTc1MzcwHhcNMjUxMjE2MTUwMTI4WhcNMjUxMjE3MTUwMTI4WjAzMTEwLwYDVQQD EyhmNjY4ZDI5ZmJkMWUzNDQ1OWZmOWJjYzUzODhjMjMwMjQ5OWFiZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qKsQjg7WznQNTdi1Ze4RxKX05gL SzMQ5YOv8J4YWQdkUZOTh9Jd5MuljDgZcEklklPy9grbsD38LhZhKsTZFr+HJEDv ffQrz9Mb/ErPucDLqjLWAMlFDNTYJ1yDRW6biHEvLwCTGZa5s1wdVScin/i9HVMX hFRbs35VuMKC0mGS2hZjBVCFZBdy7XAQWCVjhfXJ+3/dHfyFH4hWDPvOtOYXbbAO Pw9LAXn9nxNjMWrn7H7eYQYUDs04CtiwY4Czzlo+mMP5Ioc5HuntBYsNOuac4DqF OQYrzUG0SCEByuqXoYxCRxtk4aZhRkp1j4x88ohrb8slApBlJGvLbj2XuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZo0p+9HjRFn/m8xTiMIwJJmr65MB8GA1UdIwQY MBaAFNCjQ6N+ytK/ssNb2bJtf0i8tXU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtORG8zN0swci15dzF2WnNtMV9TTHkxZFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yMDEyNzMtNzA4ZC00YTQ2LTlhYjYt YzdiMzZiOGEyNjg1LzEvMEtORG8zN0swci15dzF2WnNtMV9TTHkxZFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yMDEyNzMtNzA4ZC00YTQ2LTlhYjYtYzdiMzZiOGEyNjg1 LzEvMEtORG8zN0swci15dzF2WnNtMV9TTHkxZFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtI3rVhLz er8HHTnt21+Qz1d6DPh2VW+WR8qfz7gp6SCroqBeR6axsnOOA/v9FS0FKs/ZrB/H Fxu/x83qnZYiQr2YIPMzxrrFwJDf5amnIzeJrJZCjxMbLBixszBd6ewLVwNCHuee K55NcFlRRKU+V1WHu4XReUx1xvfeTegAFKjWegX225hDnhZOmsJyXrST08Pgw5mM KFkq6YnXXNGx3nU7YzSc1pYq6zPYrfdcEYANhj0WmuKbe+YIAwP4oflyFCYRBFB1 x+eCf5NZTJRUFGjCRgLX6XMoaY55NWGkOt2o1KWC0eeRh2EUBvNTKeFO5Qa3YLH9 Ba9AqeVORLrs4Q== -----END CERTIFICATE-----Generated at Tue Dec 16 22:33:04 2025 by rpki-client