This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json) Hash identifier: 5HnGuwq3xQ9EB/g9oCHUcMyB/1f+Zay0vmqgf0O2+XQ= Subject key identifier: D0:56:F3:9D:E1:8B:F8:1C:DD:AC:61:50:B9:FF:79:94:A1:12:9D:D5 Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36 Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436 Certificate serial: 019B4437A7D0E895F72DA0FB3E3B9EEB9DFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft Manifest number: 1424 Signing time: Mon 22 Dec 2025 04:00:56 +0000 Manifest this update: Mon 22 Dec 2025 04:00:56 +0000 Manifest next update: Tue 23 Dec 2025 04:00:56 +0000 Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: uIbSS+K8cIbThIT+EloCSLV67j/A/8AnIIgHeNj6VaA=) 2: KrQvju8wsP_1pgegWQDfP_dBbsE.roa (hash: 41ILiMyCbiBXLBStCWRCt8ZnN2evNZdt0aku7rFi6gM=) 3: MT4hr9PSkUajZkci1pWS9v2orok.roa (hash: qezGbt2cfl90iVziKgXNGmy2fO9q+dUTbPbEn9xA5FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:a7:d0:e8:95:f7:2d:a0:fb:3e:3b:9e:eb:9d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436 Validity Not Before: Dec 22 04:00:56 2025 GMT Not After : Dec 23 04:00:56 2025 GMT Subject: CN=d056f39de18bf81cddac6150b9ff7994a1129dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:fa:32:ba:62:2d:47:76:d9:46:65:1d:43: 95:b0:a7:98:45:09:85:bb:8f:9a:1b:6b:23:a5:07: 37:ca:ef:2a:5a:24:8b:7e:0b:70:99:77:29:41:2c: 0b:68:0c:8a:61:9b:ee:72:42:63:d8:64:35:19:da: 16:52:28:a5:cb:19:17:b4:39:6f:e3:12:42:4b:db: 68:bc:d4:cf:17:e9:07:f1:77:2d:bb:ba:a9:31:60: 73:98:90:da:81:73:ad:e1:7c:f0:57:d6:4a:a0:1e: e3:96:ac:a5:85:62:fa:6e:1f:42:77:7e:f5:d8:09: 41:22:73:ab:5c:52:20:cc:8e:be:5b:97:18:c0:c6: 0a:ed:35:be:8f:c6:ac:0b:db:89:67:a9:9b:c5:7a: 49:8a:35:91:30:07:b2:c7:1c:a3:17:e8:1c:a6:76: 10:2b:80:2e:33:75:e9:c8:5f:9a:15:47:82:ef:ad: b5:5c:25:a7:0e:25:be:7e:37:47:03:36:86:b7:89: 64:b2:cd:21:46:07:34:fe:ad:2d:4f:1b:7f:23:e9: 8b:c3:4e:99:27:e5:f3:01:f7:bc:da:70:fc:52:e8: 8f:f2:ef:1b:a1:46:15:77:11:a1:4d:8f:a3:02:d9: 79:3a:d5:c4:69:ec:eb:66:d6:6b:af:5b:fb:53:e6: 41:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:56:F3:9D:E1:8B:F8:1C:DD:AC:61:50:B9:FF:79:94:A1:12:9D:D5 X509v3 Authority Key Identifier: keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:35:a1:3e:ad:0b:fb:1c:6f:21:0c:1a:33:fa:46:93:0c:3f: b6:a1:9d:71:bd:2c:2c:79:72:55:25:c7:e8:f4:f9:c4:5e:fc: c6:93:9e:7b:7c:75:f0:7c:a8:a5:8e:b6:7d:56:b6:a0:2b:88: 68:22:32:60:c5:2d:6f:13:cc:21:4b:82:3a:a0:41:89:8a:18: 4e:ff:2e:57:fa:b0:28:9e:b5:5e:bd:95:83:ff:c4:dd:62:46: 95:43:c1:37:8d:8a:9a:77:d8:0c:c6:e3:f7:9e:22:a7:b6:ff: 65:55:af:77:3d:b6:0e:f5:87:32:59:0c:58:ef:59:65:72:63: 00:f4:96:24:2f:e6:65:1a:3d:b5:47:b2:d1:27:ba:5d:2a:c2: 76:0f:29:55:d5:5e:dc:df:74:bc:b3:6e:a8:34:e4:af:7c:10: 26:3d:4e:9c:9a:14:f3:26:79:a3:85:b6:0f:e6:95:e3:74:09: 96:b4:4e:43:91:e5:c6:1d:7f:a3:a4:2e:48:94:c0:c8:ce:0f: 29:65:33:19:1e:20:aa:ae:6b:c4:f8:d6:d1:d9:c0:fc:84:f1: 8f:3a:90:a0:b4:f2:a8:ac:8c:50:d0:fe:a6:1e:2f:83:92:ec: 95:4c:d6:cf:6e:6a:c9:47:50:0f:61:8e:3a:96:7e:e1:2b:b9: eb:00:67:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN6fQ6JX3LaD7Pjue6539MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTM4NTQyY2ZkYjFlZTZlMDc1ZWFlNmIxMDFlN2JiNWIx NGM0MzYwHhcNMjUxMjIyMDQwMDU2WhcNMjUxMjIzMDQwMDU2WjAzMTEwLwYDVQQD EyhkMDU2ZjM5ZGUxOGJmODFjZGRhYzYxNTBiOWZmNzk5NGExMTI5ZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLL6MrpiLUd22UZlHUOVsKeYRQmF u4+aG2sjpQc3yu8qWiSLfgtwmXcpQSwLaAyKYZvuckJj2GQ1GdoWUiilyxkXtDlv 4xJCS9tovNTPF+kH8Xctu7qpMWBzmJDagXOt4XzwV9ZKoB7jlqylhWL6bh9Cd371 2AlBInOrXFIgzI6+W5cYwMYK7TW+j8asC9uJZ6mbxXpJijWRMAeyxxyjF+gcpnYQ K4AuM3XpyF+aFUeC7621XCWnDiW+fjdHAzaGt4lkss0hRgc0/q0tTxt/I+mLw06Z J+XzAfe82nD8UuiP8u8boUYVdxGhTY+jAtl5OtXEaezrZtZrr1v7U+ZB7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBW853hi/gc3axhULn/eZShEp3VMB8GA1UdIwQY MBaAFNCjhULP2x7m4HXq5rEB57tbFMQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zZjA0YzktZTZlMS00NTA2LWI4ZmEt NDBkMTkxMWZhN2YzLzEvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8zZjA0YzktZTZlMS00NTA2LWI4ZmEtNDBkMTkxMWZhN2Yz LzEvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzWhPq0L +xxvIQwaM/pGkww/tqGdcb0sLHlyVSXH6PT5xF78xpOee3x18HyopY62fVa2oCuI aCIyYMUtbxPMIUuCOqBBiYoYTv8uV/qwKJ61Xr2Vg//E3WJGlUPBN42KmnfYDMbj 954ip7b/ZVWvdz22DvWHMlkMWO9ZZXJjAPSWJC/mZRo9tUey0Se6XSrCdg8pVdVe 3N90vLNuqDTkr3wQJj1OnJoU8yZ5o4W2D+aV43QJlrROQ5Hlxh1/o6QuSJTAyM4P KWUzGR4gqq5rxPjW0dnA/ITxjzqQoLTyqKyMUND+ph4vg5LslUzWz25qyUdQD2GO OpZ+4Su56wBnXw== -----END CERTIFICATE-----Generated at Mon Dec 22 09:31:25 2025 by rpki-client