This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json) Hash identifier: mt75wbXOpbtekD9aXbZR75FBR0KAwaRoEvaZWeoJJSw= Subject key identifier: D1:30:51:2C:7A:08:E1:51:AB:2D:D8:13:0B:1F:E1:FC:55:84:92:B1 Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d Certificate serial: 019B37C5DFA67E752A2E7A823D8D4215FA6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft Manifest number: 0B8B Signing time: Fri 19 Dec 2025 18:01:13 +0000 Manifest this update: Fri 19 Dec 2025 18:01:13 +0000 Manifest next update: Sat 20 Dec 2025 18:01:13 +0000 Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: /brKkpmJmLlU/tdG47egXe0ewM0B3F5InKft6uhY6ZY=) 2: HbJ_U9zbX8fxMvtFMjI0YyZaIU0.roa (hash: 2yJvKj/omVNhgQrJaORplMTqKb/JuCVSujLu6XPy7Jc=) 3: PdXLVimBA8zILWLashg1LUqBqm8.roa (hash: IrtzMysR6KSQR0SZiM1b2jUK5M57dKBFlK4qFH4B+Mo=) 4: Po_y7BTQnq0t83N4k5bzz1wi4hg.roa (hash: fdtaoOhUYPqSiYrFP8PD67S1dme/kg9U36uFUbhYCQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:df:a6:7e:75:2a:2e:7a:82:3d:8d:42:15:fa:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d Validity Not Before: Dec 19 18:01:13 2025 GMT Not After : Dec 20 18:01:13 2025 GMT Subject: CN=d130512c7a08e151ab2dd8130b1fe1fc558492b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c9:6b:0f:d1:e8:57:2a:45:b0:f0:21:c3:23: fe:75:00:b8:ea:0e:23:63:b9:08:9f:6c:dc:67:2b: 5d:73:34:5f:c0:1e:e3:9f:4a:ca:2b:a6:4a:bf:9b: 6c:dd:45:4c:ac:e0:40:2a:21:a4:71:7d:fc:73:c3: 17:61:53:56:a2:0b:b4:a0:4a:d4:c7:3c:b8:5c:15: cd:8c:28:0c:51:f9:e0:97:6f:3c:93:01:d5:83:de: 4a:c1:33:b9:3c:6d:49:15:3a:99:4f:59:2b:07:4b: 3b:83:e9:84:7a:15:d6:ba:bd:98:97:d8:07:18:cd: b0:c2:ee:f2:ed:37:5f:3d:10:55:93:f9:48:af:46: 29:18:88:dc:d5:3e:92:da:80:fe:86:62:0f:6f:70: 1a:7b:33:3e:1e:78:93:e0:e2:3d:20:92:79:5d:17: cb:03:7a:e3:1a:cf:96:3a:03:75:a5:c4:16:f4:81: 90:dd:97:79:39:3d:5d:f1:03:7d:07:a5:6e:e5:89: 05:9d:98:5c:84:ec:e5:df:fc:41:90:5b:3c:03:aa: 61:bf:94:32:aa:f6:e5:fe:28:b9:83:77:48:db:1b: 2d:13:cf:03:d1:2d:36:99:e8:38:39:3f:f0:b4:75: df:a4:9b:73:3a:b0:07:c3:63:38:f5:00:25:44:1d: fe:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:30:51:2C:7A:08:E1:51:AB:2D:D8:13:0B:1F:E1:FC:55:84:92:B1 X509v3 Authority Key Identifier: keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:60:85:3c:8a:eb:5b:9e:0e:e3:ba:fa:0b:e3:ef:30:c9:5b: b9:d0:63:44:a7:f5:1c:9a:2c:75:60:bd:3d:e0:18:d3:ab:09: 99:a0:fa:6d:46:84:20:85:cd:01:1b:19:56:7d:f1:2c:4d:d4: 06:60:6a:57:39:15:a9:a5:ca:02:a0:70:e6:3d:70:0a:e6:e0: 0d:a5:73:ed:68:e0:b5:87:20:06:eb:e9:3a:79:2d:46:72:2e: 44:c0:bd:97:41:fa:7e:88:55:03:82:de:ca:c9:bb:f3:3f:2f: fd:59:c8:cd:ad:aa:0d:fe:0f:3c:ab:d4:12:06:a0:0f:28:99: 7f:69:ce:63:4d:ba:1b:3f:19:9a:c0:e2:f9:7b:17:d8:ec:c3: e8:a5:19:2a:90:a4:2e:e9:c0:ae:3a:a1:f0:6a:da:eb:52:0e: 5a:4c:ca:9f:9a:86:c0:fe:50:55:f6:87:11:d8:ea:4e:d7:29: a0:5c:77:35:76:7f:40:0e:d4:a4:fa:ec:e5:1f:94:0a:de:d6: 52:60:9a:5a:62:db:c3:ff:71:59:6d:6e:65:04:47:bf:f4:9e: c7:b0:72:ea:d3:d6:54:a1:b3:49:d4:99:2c:ea:56:f8:e1:6d: 79:a0:ba:e9:9e:d5:d3:46:25:41:d2:a5:b5:a8:c0:fc:73:60: b6:45:b3:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xd+mfnUqLnqCPY1CFfpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyN2I4NzdmODk5MzQxMjY5YmVjNjdjNmUzYTBhODg4YmE3 YWU5OGQwHhcNMjUxMjE5MTgwMTEzWhcNMjUxMjIwMTgwMTEzWjAzMTEwLwYDVQQD EyhkMTMwNTEyYzdhMDhlMTUxYWIyZGQ4MTMwYjFmZTFmYzU1ODQ5MmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8clrD9HoVypFsPAhwyP+dQC46g4j Y7kIn2zcZytdczRfwB7jn0rKK6ZKv5ts3UVMrOBAKiGkcX38c8MXYVNWogu0oErU xzy4XBXNjCgMUfngl288kwHVg95KwTO5PG1JFTqZT1krB0s7g+mEehXWur2Yl9gH GM2wwu7y7TdfPRBVk/lIr0YpGIjc1T6S2oD+hmIPb3AaezM+HniT4OI9IJJ5XRfL A3rjGs+WOgN1pcQW9IGQ3Zd5OT1d8QN9B6Vu5YkFnZhchOzl3/xBkFs8A6phv5Qy qvbl/ii5g3dI2xstE88D0S02meg4OT/wtHXfpJtzOrAHw2M49QAlRB3+3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEwUSx6COFRqy3YEwsf4fxVhJKxMB8GA1UdIwQY MBaAFNJ7h3+Jk0Emm+xnxuOgqIi6eumNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80NDVlZDAtNDhiMy00MDhlLWExYmMt OTk3OWRmNTJiMDE4LzEvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80NDVlZDAtNDhiMy00MDhlLWExYmMtOTk3OWRmNTJiMDE4 LzEvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmCFPIrr W54O47r6C+PvMMlbudBjRKf1HJosdWC9PeAY06sJmaD6bUaEIIXNARsZVn3xLE3U BmBqVzkVqaXKAqBw5j1wCubgDaVz7WjgtYcgBuvpOnktRnIuRMC9l0H6fohVA4Le ysm78z8v/VnIza2qDf4PPKvUEgagDyiZf2nOY026Gz8ZmsDi+XsX2OzD6KUZKpCk LunArjqh8Gra61IOWkzKn5qGwP5QVfaHEdjqTtcpoFx3NXZ/QA7UpPrs5R+UCt7W UmCaWmLbw/9xWW1uZQRHv/Sex7By6tPWVKGzSdSZLOpW+OFteaC66Z7V00YlQdKl tajA/HNgtkWzZw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:20 2025 by rpki-client