This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json) Hash identifier: SGDasDcjfLSLgPM3mh+BbSdzHGo2H9k5yEAOxISpuaE= Subject key identifier: 83:FE:D7:88:F9:B6:D5:2D:E6:1C:92:C8:2E:7F:1D:4E:4B:D2:4E:B0 Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Certificate serial: 019B5DC02A8379828015C03B99A6449C42C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft Manifest number: 11D4 Signing time: Sat 27 Dec 2025 03:00:33 +0000 Manifest this update: Sat 27 Dec 2025 03:00:33 +0000 Manifest next update: Sun 28 Dec 2025 03:00:33 +0000 Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: SIIScpFtC6TSYYtAlFTR0uiN3isYKENLo5Bp0TYcAOY=) 2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:2a:83:79:82:80:15:c0:3b:99:a6:44:9c:42:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Validity Not Before: Dec 27 03:00:33 2025 GMT Not After : Dec 28 03:00:33 2025 GMT Subject: CN=83fed788f9b6d52de61c92c82e7f1d4e4bd24eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:69:b6:71:7d:e4:09:65:e8:be:62:fb:fd: ed:6f:fa:fd:6b:56:f9:87:6e:e7:68:b9:c1:e2:6b: 46:99:55:b6:ab:f7:1b:45:df:c0:1f:45:41:f8:21: b8:89:1e:a3:92:77:b4:37:c1:ea:4e:5a:18:03:8d: 5d:f2:94:8b:3d:57:cd:41:4a:44:2f:64:e2:5d:d5: e9:76:05:59:ae:eb:11:1c:b0:3d:2e:a3:f0:cf:03: 5c:ba:0e:5c:17:c9:ac:a5:8e:c3:3b:e1:e7:e4:b3: cd:ce:7c:c6:ae:e8:a1:7a:28:83:8b:a5:54:de:90: 06:ae:bd:ed:b2:af:aa:70:8f:a2:fb:ec:34:f5:f1: ea:53:fc:a7:b6:99:74:0b:34:30:23:12:49:8c:aa: dc:fa:cf:39:d9:c6:5e:86:03:53:2d:b5:64:9c:8f: ee:fb:3a:a1:61:fd:5a:1c:18:41:3c:04:1f:3c:f6: ef:f4:a6:0f:1e:bc:d8:6b:a8:4f:2d:ac:a0:5d:52: 49:8c:f1:2e:6f:50:a8:08:d8:c9:90:25:85:6a:71: d1:4d:10:16:be:8b:84:c1:d6:d5:9e:e5:8b:e9:d3: 5c:81:f7:66:04:b7:75:51:4a:f7:b8:53:7d:3f:9c: 20:39:ec:02:93:d1:d0:67:e0:d3:3c:f7:04:da:e8: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FE:D7:88:F9:B6:D5:2D:E6:1C:92:C8:2E:7F:1D:4E:4B:D2:4E:B0 X509v3 Authority Key Identifier: keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5f:6d:27:a4:23:7d:ea:d1:9c:b2:c5:c4:e3:49:9f:1e:e7: a8:50:35:2e:bc:2e:fb:77:fb:b7:38:45:23:27:72:a0:48:20: 94:31:93:43:0e:22:6f:5d:46:ac:90:09:c1:6b:59:65:bb:44: fc:ab:ff:4b:bd:e3:05:c8:86:ed:ee:3b:91:16:2f:2f:12:94: cb:31:1a:31:23:3f:53:66:df:dc:25:a1:bb:a1:76:ca:00:0f: 85:88:81:20:03:27:24:01:f0:0f:17:b4:b5:16:63:0a:2a:58: fb:cd:60:2e:cc:61:08:5c:18:76:4c:eb:d2:70:aa:c8:da:9e: 48:01:3c:dc:6a:13:57:bb:78:da:c5:f7:2f:95:fd:78:e4:8e: 5d:f6:cd:96:c0:43:b9:24:ae:d2:af:cd:ea:29:38:b6:92:27: 05:a1:21:25:75:e1:c1:0c:f2:5a:f3:d6:60:f4:72:4d:1b:2b: a2:3e:d9:65:ca:70:93:e7:7d:ae:07:06:46:65:9a:8d:19:48: 70:6d:ed:87:57:72:e9:51:d0:42:8b:d0:09:9b:d8:e5:6e:39: f2:0c:02:a7:a3:8d:45:9a:76:e1:7a:d4:71:19:1c:00:be:32: 14:c4:ce:89:fb:74:b4:06:29:29:54:e7:5c:1e:ac:d5:04:fa: 49:63:76:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwCqDeYKAFcA7maZEnELHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTE2YmY3ZTBlM2I5MzMwYjU0NDgzZTE5ZjYxM2IwMmI2 MjdiZWYwHhcNMjUxMjI3MDMwMDMzWhcNMjUxMjI4MDMwMDMzWjAzMTEwLwYDVQQD Eyg4M2ZlZDc4OGY5YjZkNTJkZTYxYzkyYzgyZTdmMWQ0ZTRiZDI0ZWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4pptnF95All6L5i+/3tb/r9a1b5 h27naLnB4mtGmVW2q/cbRd/AH0VB+CG4iR6jkne0N8HqTloYA41d8pSLPVfNQUpE L2TiXdXpdgVZrusRHLA9LqPwzwNcug5cF8mspY7DO+Hn5LPNznzGruiheiiDi6VU 3pAGrr3tsq+qcI+i++w09fHqU/yntpl0CzQwIxJJjKrc+s852cZehgNTLbVknI/u +zqhYf1aHBhBPAQfPPbv9KYPHrzYa6hPLaygXVJJjPEub1CoCNjJkCWFanHRTRAW vouEwdbVnuWL6dNcgfdmBLd1UUr3uFN9P5wgOewCk9HQZ+DTPPcE2ugkwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP+14j5ttUt5hySyC5/HU5L0k6wMB8GA1UdIwQY MBaAFNCha/fg47kzC1RIPhn2E7ArYnvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2Mt NGVmMDNjMTA4MWY4LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2MtNGVmMDNjMTA4MWY4 LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbl9tJ6Qj ferRnLLFxONJnx7nqFA1Lrwu+3f7tzhFIydyoEgglDGTQw4ib11GrJAJwWtZZbtE /Kv/S73jBciG7e47kRYvLxKUyzEaMSM/U2bf3CWhu6F2ygAPhYiBIAMnJAHwDxe0 tRZjCipY+81gLsxhCFwYdkzr0nCqyNqeSAE83GoTV7t42sX3L5X9eOSOXfbNlsBD uSSu0q/N6ik4tpInBaEhJXXhwQzyWvPWYPRyTRsroj7ZZcpwk+d9rgcGRmWajRlI cG3th1dy6VHQQovQCZvY5W458gwCp6ONRZp24XrUcRkcAL4yFMTOift0tAYpKVTn XB6s1QT6SWN2dQ== -----END CERTIFICATE-----Generated at Sat Dec 27 04:42:25 2025 by rpki-client