This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json) Hash identifier: PVkj9FnJVI/qNQpmsVlHHj26FOV6GYTnJC5QMJIgYs4= Subject key identifier: E5:43:CF:02:E4:60:73:2E:D7:A3:C6:37:8D:48:88:FF:36:6F:8C:DD Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Certificate serial: 019B503B9D5FF1464485AFE821B8E8077B43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft Manifest number: 11CD Signing time: Wed 24 Dec 2025 12:00:42 +0000 Manifest this update: Wed 24 Dec 2025 12:00:42 +0000 Manifest next update: Thu 25 Dec 2025 12:00:42 +0000 Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: wl4y4Gw9uDg1CFjmBcp4y8d5AnT+Pm88Lz/UL07tJL8=) 2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3b:9d:5f:f1:46:44:85:af:e8:21:b8:e8:07:7b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Validity Not Before: Dec 24 12:00:42 2025 GMT Not After : Dec 25 12:00:42 2025 GMT Subject: CN=e543cf02e460732ed7a3c6378d4888ff366f8cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:15:39:3c:71:31:a4:5a:56:53:4a:00:97: d5:6b:11:ed:0d:21:0c:c3:95:c3:e8:08:9f:c7:f4: 0f:42:95:ee:90:07:b2:d4:b0:73:3e:0a:b8:dd:31: 76:72:d6:2c:4d:03:ff:0c:4e:ad:11:33:ee:02:44: 23:35:53:3c:c7:46:cb:ee:d4:d6:ee:2f:ed:49:78: 30:e5:bc:c9:a9:37:5c:f7:f9:db:87:ac:7e:6d:1a: 66:5e:32:b0:7d:fa:2e:32:15:2d:fa:b1:76:df:b2: 75:75:0b:c6:32:f7:06:c9:73:48:92:8e:4b:64:09: 09:8c:d1:33:dc:79:26:bd:98:f4:a0:75:46:b6:75: 36:ef:2d:09:de:72:8c:36:d0:1a:06:d3:54:c5:1b: 96:3c:b4:25:69:fc:04:af:20:7b:3f:d0:6b:f9:4c: 76:13:38:84:5a:28:bf:08:bb:84:02:e4:ef:26:a1: c2:19:30:9d:0e:73:f5:83:a0:2b:3f:79:bd:df:ce: 5d:00:14:f5:7c:0d:77:14:08:5f:8b:e2:31:d3:59: 54:19:43:bb:fa:92:8e:a6:28:15:03:aa:5f:d5:c8: a2:39:e4:ba:df:01:e0:90:9e:dd:91:74:4c:48:ed: 06:fe:a8:64:63:68:b5:c8:df:8c:4b:a2:6c:58:9d: 29:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:43:CF:02:E4:60:73:2E:D7:A3:C6:37:8D:48:88:FF:36:6F:8C:DD X509v3 Authority Key Identifier: keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:42:b6:5c:35:47:ff:f6:41:49:8c:75:fd:95:c0:00:0c:ef: 96:b1:14:04:7e:23:dd:9d:50:17:24:68:40:d1:e7:a4:08:8e: df:b9:b2:22:1a:fe:b4:8b:be:96:78:13:43:f9:70:df:da:3b: 13:62:70:22:e6:e7:e5:87:60:a3:f2:c4:49:c7:90:f1:07:78: 79:1b:0d:36:91:0c:bf:7b:b3:71:14:fa:df:1d:b1:6f:b1:80: b4:bf:96:65:10:42:1b:8c:31:c1:d9:ac:44:be:87:4e:07:0b: 5f:2e:18:04:9e:67:8a:61:ff:a9:8c:80:de:cc:cf:6b:f9:35: c5:30:35:8f:e0:f5:8f:d3:e8:c4:f2:72:8e:28:2a:81:90:eb: 69:84:81:c5:81:24:65:5b:30:19:bc:6f:a0:40:4b:88:9d:96: 50:b0:ff:0d:3c:d1:e7:85:68:87:de:89:e1:77:4d:2b:63:fe: fb:15:08:a4:99:66:d7:f4:e9:c2:c8:a5:fe:75:e0:5f:82:4c: f4:03:29:ee:eb:b2:0f:eb:f1:c3:90:02:be:57:33:8f:e7:f2: 34:29:08:5e:06:42:a8:34:70:fc:39:a1:70:22:61:e1:2b:99: 0e:e8:6c:52:ad:1c:72:74:06:47:82:48:8f:df:ca:70:25:cc: c9:a6:6f:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQO51f8UZEha/oIbjoB3tDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTE2YmY3ZTBlM2I5MzMwYjU0NDgzZTE5ZjYxM2IwMmI2 MjdiZWYwHhcNMjUxMjI0MTIwMDQyWhcNMjUxMjI1MTIwMDQyWjAzMTEwLwYDVQQD EyhlNTQzY2YwMmU0NjA3MzJlZDdhM2M2Mzc4ZDQ4ODhmZjM2NmY4Y2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqoVOTxxMaRaVlNKAJfVaxHtDSEM w5XD6Aifx/QPQpXukAey1LBzPgq43TF2ctYsTQP/DE6tETPuAkQjNVM8x0bL7tTW 7i/tSXgw5bzJqTdc9/nbh6x+bRpmXjKwffouMhUt+rF237J1dQvGMvcGyXNIko5L ZAkJjNEz3HkmvZj0oHVGtnU27y0J3nKMNtAaBtNUxRuWPLQlafwEryB7P9Br+Ux2 EziEWii/CLuEAuTvJqHCGTCdDnP1g6ArP3m9385dABT1fA13FAhfi+Ix01lUGUO7 +pKOpigVA6pf1ciiOeS63wHgkJ7dkXRMSO0G/qhkY2i1yN+MS6JsWJ0pFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVDzwLkYHMu16PGN41IiP82b4zdMB8GA1UdIwQY MBaAFNCha/fg47kzC1RIPhn2E7ArYnvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2Mt NGVmMDNjMTA4MWY4LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2MtNGVmMDNjMTA4MWY4 LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEK2XDVH //ZBSYx1/ZXAAAzvlrEUBH4j3Z1QFyRoQNHnpAiO37myIhr+tIu+lngTQ/lw39o7 E2JwIubn5Ydgo/LESceQ8Qd4eRsNNpEMv3uzcRT63x2xb7GAtL+WZRBCG4wxwdms RL6HTgcLXy4YBJ5nimH/qYyA3szPa/k1xTA1j+D1j9PoxPJyjigqgZDraYSBxYEk ZVswGbxvoEBLiJ2WULD/DTzR54Voh96J4XdNK2P++xUIpJlm1/Tpwsil/nXgX4JM 9AMp7uuyD+vxw5ACvlczj+fyNCkIXgZCqDRw/DmhcCJh4SuZDuhsUq0ccnQGR4JI j9/KcCXMyaZvvQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:36:03 2025 by rpki-client