This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft File: 0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json) Hash identifier: Y+Nlj0WhAo5dD+NzesW0tA+kgiBf5QSCbfZe/0Gb3+Y= Subject key identifier: 31:D1:DA:A4:DE:D3:3D:CB:0F:9C:59:F6:2C:6B:B5:19:E9:51:1A:97 Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E Certificate issuer: /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e Certificate serial: 019B59ACBDB4EBB7E3B09B25D5E641184565 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 08:00:51 +0000 Manifest this update: Fri 26 Dec 2025 08:00:51 +0000 Manifest next update: Sat 27 Dec 2025 08:00:51 +0000 Files and hashes: 1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: QpB75UfcT6iu+EoUh65WlA9E9xx8kenY1BlFUFsxwfM=) 2: 814d1F1Lpiv2ZmQt3nv-Q0MhR14.roa (hash: vJZyCty8aaf+QpA3OskD2b+GSFI6e+26K8I9XWLd+A4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:bd:b4:eb:b7:e3:b0:9b:25:d5:e6:41:18:45:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e Validity Not Before: Dec 26 08:00:51 2025 GMT Not After : Dec 27 08:00:51 2025 GMT Subject: CN=31d1daa4ded33dcb0f9c59f62c6bb519e9511a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b7:47:35:20:2d:e3:81:41:8e:cd:4e:98:da: 92:da:78:3d:0a:97:5e:6a:72:62:20:bf:1c:e7:c9: b4:77:dc:a7:05:0f:1e:7c:8f:d2:bb:26:ee:a7:ad: ce:0f:61:fb:5d:0e:e9:30:86:99:e8:18:1a:7c:7a: b1:ed:4c:69:fd:1f:e4:2b:1a:fc:2f:6d:c8:96:f6: f5:7d:ac:fa:46:ba:32:1a:0d:8a:a8:45:c9:2c:14: fc:8e:81:e5:2d:54:79:9d:bb:5a:8e:4b:06:7e:62: 7e:85:74:20:04:66:ab:1e:eb:25:12:4a:2f:1b:6d: 43:73:98:c5:b4:cf:9d:e8:de:45:a3:22:e4:ed:9b: 87:8e:83:b3:9f:37:8a:e9:59:f5:df:f7:52:b0:30: f6:cf:9c:3e:d1:4d:15:70:ff:5d:de:a6:0d:5c:cf: 87:9b:f8:1b:d2:fd:9e:0f:0b:10:03:e5:cd:01:e6: c0:b9:5c:f5:ec:9f:27:5c:bd:91:8f:09:f6:f2:b7: 95:c6:bd:2d:69:ee:00:b3:0f:aa:83:57:4c:fc:71: f7:9e:e6:77:f9:b7:35:de:cf:13:10:24:98:df:11: 10:82:1d:b7:4e:a1:01:14:f3:4e:47:b9:3f:c9:94: 13:17:6a:24:21:68:81:01:f7:8e:65:f3:76:2a:05: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D1:DA:A4:DE:D3:3D:CB:0F:9C:59:F6:2C:6B:B5:19:E9:51:1A:97 X509v3 Authority Key Identifier: keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:27:1b:33:68:1d:b7:f8:cc:9f:42:58:91:8c:45:f5:ef:54: cc:19:dc:65:08:32:1f:ed:f6:b6:ba:52:c2:34:0a:4e:10:16: da:52:05:50:f8:a0:58:3c:64:42:a9:07:8d:d6:66:e8:b7:a9: 16:e5:43:e1:45:48:d1:06:6c:eb:6f:10:22:0e:e5:e7:41:38: 4a:c9:30:f3:1e:26:4b:f6:c9:b0:9d:22:91:c7:45:80:8b:d1: 09:f6:d3:27:49:89:a4:c8:7e:b1:30:75:d0:f9:1f:66:aa:0a: 1f:74:d4:5b:ed:03:33:67:9a:85:fb:49:af:11:52:b6:82:5e: 44:54:a9:52:6e:b4:c1:23:51:0f:6c:61:1f:ba:43:1f:6b:5b: f1:aa:28:a6:8e:1f:4d:ed:99:95:a3:fa:e0:28:ae:62:8a:e8: 47:97:d6:f9:04:ce:57:64:79:9c:f5:4c:2b:68:a4:42:d3:87: 8b:6e:d8:05:f8:de:7d:b5:68:eb:c1:e0:c6:d0:07:0d:b7:4c: 56:36:5d:f5:e6:a3:48:2d:63:45:1f:f2:c1:ac:67:a0:8e:d7: 7e:9f:7f:74:33:d0:22:57:06:63:f9:ff:13:0e:9b:9d:4f:0a: b9:6a:87:28:43:92:4d:a9:00:f7:66:75:9a:1e:2a:30:77:9b: 0f:9d:45:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrL2067fjsJsl1eZBGEVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZThkNGNiOGU0NDJlYzM4YTZiYzNmYTQwMGEyYTUxN2Nl ZTBkMWUwHhcNMjUxMjI2MDgwMDUxWhcNMjUxMjI3MDgwMDUxWjAzMTEwLwYDVQQD EygzMWQxZGFhNGRlZDMzZGNiMGY5YzU5ZjYyYzZiYjUxOWU5NTExYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLdHNSAt44FBjs1OmNqS2ng9Cpde anJiIL8c58m0d9ynBQ8efI/Suybup63OD2H7XQ7pMIaZ6BgafHqx7Uxp/R/kKxr8 L23Ilvb1faz6RroyGg2KqEXJLBT8joHlLVR5nbtajksGfmJ+hXQgBGarHuslEkov G21Dc5jFtM+d6N5FoyLk7ZuHjoOznzeK6Vn13/dSsDD2z5w+0U0VcP9d3qYNXM+H m/gb0v2eDwsQA+XNAebAuVz17J8nXL2Rjwn28reVxr0tae4Asw+qg1dM/HH3nuZ3 +bc13s8TECSY3xEQgh23TqEBFPNOR7k/yZQTF2okIWiBAfeOZfN2KgV5ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHR2qTe0z3LD5xZ9ixrtRnpURqXMB8GA1UdIwQY MBaAFNPo1MuORC7DimvD+kAKKlF87g0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYt NWQ1ODcxMWYzNjYyLzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYtNWQ1ODcxMWYzNjYy LzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCcbM2gd t/jMn0JYkYxF9e9UzBncZQgyH+32trpSwjQKThAW2lIFUPigWDxkQqkHjdZm6Lep FuVD4UVI0QZs628QIg7l50E4Sskw8x4mS/bJsJ0ikcdFgIvRCfbTJ0mJpMh+sTB1 0PkfZqoKH3TUW+0DM2eahftJrxFStoJeRFSpUm60wSNRD2xhH7pDH2tb8aoopo4f Te2ZlaP64CiuYoroR5fW+QTOV2R5nPVMK2ikQtOHi27YBfjefbVo68HgxtAHDbdM VjZd9eajSC1jRR/ywaxnoI7Xfp9/dDPQIlcGY/n/Ew6bnU8KuWqHKEOSTakA92Z1 mh4qMHebD51FEw== -----END CERTIFICATE-----Generated at Fri Dec 26 13:08:17 2025 by rpki-client