This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json) Hash identifier: rumjRH3Cy55Fs1o1SG7qvmflGx57own4LHf/Si+Qn3k= Subject key identifier: EF:43:51:43:90:32:30:D9:46:1A:B7:4B:5A:25:31:D2:A1:EC:70:90 Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Certificate serial: 019B5229D9E8DCF9C6945F46B02FDCB35C48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft Manifest number: 11CE Signing time: Wed 24 Dec 2025 21:00:32 +0000 Manifest this update: Wed 24 Dec 2025 21:00:32 +0000 Manifest next update: Thu 25 Dec 2025 21:00:32 +0000 Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: fIjh76krEGfz2K59r2bLPc1wCd94D1u4MKvMCOJkZDg=) 2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:29:d9:e8:dc:f9:c6:94:5f:46:b0:2f:dc:b3:5c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Validity Not Before: Dec 24 21:00:32 2025 GMT Not After : Dec 25 21:00:32 2025 GMT Subject: CN=ef435143903230d9461ab74b5a2531d2a1ec7090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:df:db:b5:a6:39:2f:78:ef:a0:30:d0:e8:70: 4f:96:1a:79:c3:8a:d0:5c:f4:bc:e5:27:8a:86:ba: 4a:2e:1d:98:d8:06:89:5b:dd:68:5f:3f:ad:87:1a: 96:80:f2:c5:2a:61:b9:1b:6f:76:b9:fe:6d:82:6e: bf:1d:cb:79:af:c6:ac:94:3c:9e:f0:9b:ea:f2:2b: c4:cb:7a:d2:d4:13:0f:cc:d1:4b:68:d6:79:66:73: 3f:d0:70:44:37:a4:63:d8:b2:75:35:25:98:c3:6b: f2:a7:9f:2c:d1:d4:7e:fd:e5:94:81:ad:54:e4:20: 9f:ad:a0:11:6d:ad:f8:35:f7:35:97:54:29:55:32: f8:c0:fc:5f:4c:64:90:63:1f:10:54:d8:60:26:39: 42:ee:f6:4a:ab:75:13:e2:56:02:65:94:d6:86:0b: 83:5a:a6:1d:74:c2:0c:69:c1:24:e1:9d:66:9e:30: eb:10:71:b8:67:d4:4e:b6:52:4f:c5:24:43:6b:b8: ef:0c:5f:e9:5a:07:5b:87:41:de:4c:c6:a9:f4:79: 04:a9:76:e4:72:e9:61:62:82:99:2b:61:7f:4f:7b: 16:ed:fc:8e:05:e2:45:01:e0:53:40:ce:38:af:9d: d1:a2:1a:a6:89:23:c7:23:90:1a:ee:6d:e5:72:e5: 5e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:43:51:43:90:32:30:D9:46:1A:B7:4B:5A:25:31:D2:A1:EC:70:90 X509v3 Authority Key Identifier: keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:38:6d:f9:d7:72:ed:c2:4d:80:1f:b3:dc:8c:4d:da:9f:4f: 6d:fd:9f:f9:64:45:66:99:05:d5:4a:71:0c:66:c4:4b:52:eb: e9:79:fe:79:b0:ba:2a:e7:11:e4:0d:9b:8f:1d:ce:f3:16:16: 27:4d:8e:5c:38:5f:71:96:d1:ad:aa:a2:3d:84:bf:ad:8a:fb: d7:6e:8e:88:8f:2f:ae:f0:8f:cd:af:af:61:d5:f0:29:ef:2e: 6d:a8:56:10:f7:5d:9d:07:bb:39:38:55:38:56:42:0a:1d:58: 4a:b4:e3:7b:3e:84:f2:c9:67:c7:18:c4:bf:4f:8c:f4:5b:06: 1b:80:94:23:9e:2d:47:67:a0:c8:78:58:cf:96:66:07:61:be: e2:11:d4:00:7c:2c:71:55:ee:cf:15:61:cf:f0:26:dc:65:b3: 2e:b9:95:f3:93:c5:9d:a4:0e:cb:98:c4:e9:09:95:a5:34:8b: 4b:eb:c6:a4:ae:c6:5f:dd:7d:86:50:53:13:76:30:d5:ae:ee: 25:b4:b4:94:f0:ab:7f:58:31:46:9b:a8:52:92:43:fd:f9:89: bc:9a:81:5c:81:4c:58:ae:de:f3:eb:a5:e0:ce:33:b1:ed:ab: 1c:3d:1a:96:f1:e6:c9:3f:a1:8c:7a:94:47:70:a0:38:c3:40: 9b:17:67:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKdno3PnGlF9GsC/cs1xIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTE2YmY3ZTBlM2I5MzMwYjU0NDgzZTE5ZjYxM2IwMmI2 MjdiZWYwHhcNMjUxMjI0MjEwMDMyWhcNMjUxMjI1MjEwMDMyWjAzMTEwLwYDVQQD EyhlZjQzNTE0MzkwMzIzMGQ5NDYxYWI3NGI1YTI1MzFkMmExZWM3MDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt/btaY5L3jvoDDQ6HBPlhp5w4rQ XPS85SeKhrpKLh2Y2AaJW91oXz+thxqWgPLFKmG5G292uf5tgm6/Hct5r8aslDye 8Jvq8ivEy3rS1BMPzNFLaNZ5ZnM/0HBEN6Rj2LJ1NSWYw2vyp58s0dR+/eWUga1U 5CCfraARba34Nfc1l1QpVTL4wPxfTGSQYx8QVNhgJjlC7vZKq3UT4lYCZZTWhguD WqYddMIMacEk4Z1mnjDrEHG4Z9ROtlJPxSRDa7jvDF/pWgdbh0HeTMap9HkEqXbk culhYoKZK2F/T3sW7fyOBeJFAeBTQM44r53RohqmiSPHI5Aa7m3lcuVeZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9DUUOQMjDZRhq3S1olMdKh7HCQMB8GA1UdIwQY MBaAFNCha/fg47kzC1RIPhn2E7ArYnvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2Mt NGVmMDNjMTA4MWY4LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2MtNGVmMDNjMTA4MWY4 LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjht+ddy 7cJNgB+z3IxN2p9Pbf2f+WRFZpkF1UpxDGbES1Lr6Xn+ebC6KucR5A2bjx3O8xYW J02OXDhfcZbRraqiPYS/rYr7126OiI8vrvCPza+vYdXwKe8ubahWEPddnQe7OThV OFZCCh1YSrTjez6E8slnxxjEv0+M9FsGG4CUI54tR2egyHhYz5ZmB2G+4hHUAHws cVXuzxVhz/Am3GWzLrmV85PFnaQOy5jE6QmVpTSLS+vGpK7GX919hlBTE3Yw1a7u JbS0lPCrf1gxRpuoUpJD/fmJvJqBXIFMWK7e8+ul4M4zse2rHD0alvHmyT+hjHqU R3CgOMNAmxdnVA== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:24 2025 by rpki-client