This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json) Hash identifier: c6wUuWlKH5RwgrakqgeC6kwWfgcW5ujFNURPecKLs3I= Subject key identifier: 82:DC:4E:6A:EE:99:F4:FD:1F:66:BA:CA:66:0E:FC:3B:50:75:A8:16 Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb Certificate serial: 019B5788BD3108FD4A1AB50ED0978F84D3E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft Manifest number: 1695 Signing time: Thu 25 Dec 2025 22:02:17 +0000 Manifest this update: Thu 25 Dec 2025 22:02:17 +0000 Manifest next update: Fri 26 Dec 2025 22:02:17 +0000 Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: +Gqco0xlhNWIjqy2k2erGXhr37JqMgKOUa5K+BwT1Ts=) 2: RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa (hash: mZqoFIWYuSZ97LTT9lIF7CSJPGIZ96DKu7+NicnF+sU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:88:bd:31:08:fd:4a:1a:b5:0e:d0:97:8f:84:d3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb Validity Not Before: Dec 25 22:02:17 2025 GMT Not After : Dec 26 22:02:17 2025 GMT Subject: CN=82dc4e6aee99f4fd1f66baca660efc3b5075a816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:08:6d:22:d2:28:23:d0:f5:88:f3:af:d2: f0:21:86:a9:80:f0:69:42:84:69:79:23:4d:62:95: 67:df:03:03:ae:d6:76:bf:43:d1:14:6d:00:1a:97: 0f:ff:88:c8:f1:9a:48:56:cc:07:23:0c:95:c0:12: d8:bf:74:6d:e1:bc:07:33:c8:27:52:b3:b5:d2:c3: 2b:7e:5d:d8:09:d1:f6:1a:e6:07:9e:5e:02:96:01: ca:1a:70:c2:a7:ff:8e:8a:d0:7a:97:a6:c9:b9:e3: b2:fc:c0:db:6c:7e:bc:36:65:19:f3:8b:46:41:89: 99:56:27:d2:64:73:41:eb:62:2a:8e:f2:7e:2f:9c: d1:f7:fb:a1:72:8a:75:07:07:ef:4f:b7:c6:53:50: de:55:ca:d9:91:10:13:a5:56:de:1d:e6:5a:f9:3d: 0d:e9:77:ae:7c:ba:2f:6a:b9:0a:d6:c6:30:ca:0e: 82:47:00:a4:15:33:45:62:aa:35:57:ec:52:c7:8a: 5a:40:3a:4e:7a:b4:7e:06:5f:89:71:db:09:c5:c7: 6b:29:dc:a9:66:f6:99:3b:67:7b:2e:86:0c:2d:35: f7:30:92:35:66:82:44:20:53:54:d2:8f:f4:00:70: af:1e:70:5f:e0:90:10:a7:60:2c:63:c7:aa:27:c1: 89:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DC:4E:6A:EE:99:F4:FD:1F:66:BA:CA:66:0E:FC:3B:50:75:A8:16 X509v3 Authority Key Identifier: keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:1d:4e:9b:1e:5c:f3:02:b1:09:d1:2d:79:de:57:33:88:c2: 70:57:2c:5d:e2:4b:0b:fa:01:c5:ee:09:b5:08:0a:da:6b:fe: cc:56:18:21:1a:a2:4c:e2:be:22:6b:a4:77:a0:6c:b5:04:4f: 74:b3:81:de:52:14:fc:4d:04:37:aa:e5:2f:b8:7c:ba:3c:a8: 52:03:dc:e3:0e:cc:f6:77:eb:93:af:86:a4:b6:39:f0:65:47: 26:b5:9d:5e:cc:26:01:32:71:0d:06:fa:f1:54:a7:2c:ff:78: 9f:d1:a5:7f:69:5e:64:3c:ce:75:a2:88:d8:66:31:92:dd:69: 8e:32:7a:96:be:ee:20:b4:de:0f:cb:14:a2:0b:3f:64:e6:7e: 07:cf:44:25:a1:17:09:c0:d5:a5:1e:0a:03:66:6c:a9:3d:49: 11:a0:0a:72:cf:c5:f3:26:c3:90:dc:4d:3c:7d:67:2f:47:b4: 46:59:d8:87:0b:96:8a:d5:34:e8:68:63:94:06:4c:c3:60:dc: 84:ca:ec:06:f9:e4:af:eb:5b:c4:0e:a7:96:74:62:9f:9a:45: fb:8a:4b:cb:ec:fd:80:9d:54:4c:48:fd:aa:0d:ef:ca:19:c3: 58:1d:c6:c3:a2:96:5e:e8:7a:f2:8d:a9:f6:3c:76:47:ab:13: 45:19:40:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXiL0xCP1KGrUO0JePhNPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOGZjYmRmNTcyYmNhZjkzZTE1NDRkZTEwYTE3NmNiMzAx MTA2YmIwHhcNMjUxMjI1MjIwMjE3WhcNMjUxMjI2MjIwMjE3WjAzMTEwLwYDVQQD Eyg4MmRjNGU2YWVlOTlmNGZkMWY2NmJhY2E2NjBlZmMzYjUwNzVhODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAgIbSLSKCPQ9Yjzr9LwIYapgPBp QoRpeSNNYpVn3wMDrtZ2v0PRFG0AGpcP/4jI8ZpIVswHIwyVwBLYv3Rt4bwHM8gn UrO10sMrfl3YCdH2GuYHnl4ClgHKGnDCp/+OitB6l6bJueOy/MDbbH68NmUZ84tG QYmZVifSZHNB62IqjvJ+L5zR9/uhcop1BwfvT7fGU1DeVcrZkRATpVbeHeZa+T0N 6XeufLovarkK1sYwyg6CRwCkFTNFYqo1V+xSx4paQDpOerR+Bl+JcdsJxcdrKdyp ZvaZO2d7LoYMLTX3MJI1ZoJEIFNU0o/0AHCvHnBf4JAQp2AsY8eqJ8GJEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILcTmrumfT9H2a6ymYO/DtQdagWMB8GA1UdIwQY MBaAFNKPy99XK8r5PhVE3hChdsswEQa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTIt MGZlODM5OWRlNzI3LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTItMGZlODM5OWRlNzI3 LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwB1Omx5c 8wKxCdEted5XM4jCcFcsXeJLC/oBxe4JtQgK2mv+zFYYIRqiTOK+Imukd6BstQRP dLOB3lIU/E0EN6rlL7h8ujyoUgPc4w7M9nfrk6+GpLY58GVHJrWdXswmATJxDQb6 8VSnLP94n9Glf2leZDzOdaKI2GYxkt1pjjJ6lr7uILTeD8sUogs/ZOZ+B89EJaEX CcDVpR4KA2ZsqT1JEaAKcs/F8ybDkNxNPH1nL0e0RlnYhwuWitU06GhjlAZMw2Dc hMrsBvnkr+tbxA6nlnRin5pF+4pLy+z9gJ1UTEj9qg3vyhnDWB3Gw6KWXuh68o2p 9jx2R6sTRRlAkA== -----END CERTIFICATE-----Generated at Fri Dec 26 01:29:09 2025 by rpki-client