This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft File: 0BqOdIpGO0lQg_dHaROSBdyzObY.mft (raw, json) Hash identifier: 2piIWGQUDxX4e7sNa1dgZu/xDq1CSkKL3XvcesZyixU= Subject key identifier: D7:61:DC:09:69:6C:6B:05:96:28:50:97:40:F1:3D:76:21:CE:92:EA Authority key identifier: D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6 Certificate issuer: /CN=d01a8e748a463b495083f74769139205dcb339b6 Certificate serial: 019B59AC7F5A1AFA72ADF366085D35BABA31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft Manifest number: DA Signing time: Fri 26 Dec 2025 08:00:35 +0000 Manifest this update: Fri 26 Dec 2025 08:00:35 +0000 Manifest next update: Sat 27 Dec 2025 08:00:35 +0000 Files and hashes: 1: 0BqOdIpGO0lQg_dHaROSBdyzObY.crl (hash: 5tGhXvdWuOqGqocWDOR9ZCRAl8dUEK4Tkla1RDY6olM=) 2: Ni9cQ-__7IlFIEScWKkm8nTwcNM.roa (hash: KZYmuutPEp1K/Rtla/BK3MqBgIvimyKNEmmqmQ1JLcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:7f:5a:1a:fa:72:ad:f3:66:08:5d:35:ba:ba:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d01a8e748a463b495083f74769139205dcb339b6 Validity Not Before: Dec 26 08:00:35 2025 GMT Not After : Dec 27 08:00:35 2025 GMT Subject: CN=d761dc09696c6b059628509740f13d7621ce92ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c7:4e:6e:c8:66:c9:a9:4b:b3:09:2a:9d:ef: ba:03:3b:82:18:0a:d2:f5:02:a8:55:fe:8f:ff:29: 8e:af:18:9f:75:73:a7:60:dd:45:40:b6:55:32:d7: 29:ce:82:a3:4b:e0:0b:ed:b8:8c:55:db:cb:60:27: ff:a8:e4:4e:91:ee:59:14:bf:f3:60:fc:74:42:3e: ec:c4:b3:8f:db:e7:8a:ac:86:c7:f0:33:7a:c2:6c: 7d:e5:ca:56:da:c3:64:e8:bf:cf:5b:4e:a4:e6:72: f1:b2:69:cb:ba:f0:17:36:1f:18:51:e0:3d:02:b4: 59:1b:92:f3:0d:9b:47:6c:16:b0:c4:16:d3:0f:8d: 4c:bf:51:e2:b3:97:eb:01:8a:ea:7b:f8:33:6a:b7: 86:90:12:29:ed:ec:a1:9e:6b:b0:51:52:95:73:0f: f8:39:d9:f5:37:74:7f:1c:02:d3:f4:d6:b7:97:7b: 6b:bf:e4:a8:cf:bc:5b:8b:e1:f9:09:e5:b9:6d:5e: 59:e9:0d:0d:39:5f:e8:82:46:a5:e8:5f:11:fc:b5: cc:c9:be:a5:0d:15:39:49:d9:59:f5:79:7c:13:a5: 2d:bd:e6:62:63:c3:3c:aa:e5:28:d3:26:dc:2a:1a: f3:97:16:f3:5d:35:e4:9a:5f:6f:3a:6b:7b:6e:07: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:61:DC:09:69:6C:6B:05:96:28:50:97:40:F1:3D:76:21:CE:92:EA X509v3 Authority Key Identifier: keyid:D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a9:2e:1c:da:bc:57:07:e4:06:07:97:63:6e:f9:4c:72:68: a2:29:94:7c:4f:82:23:6e:3f:52:7f:27:9d:f3:58:16:38:28: b5:1c:6b:4b:ad:17:a9:36:fd:dd:18:7d:18:ee:28:8e:c9:60: d5:1d:17:e0:fe:c2:a2:49:00:4e:fb:53:c5:b3:fe:2b:2e:6d: 91:22:76:e0:80:d7:a9:91:d6:94:53:56:06:01:a8:9d:95:03: b9:54:fc:cf:9e:8a:89:89:17:e3:e4:30:3b:fe:e3:0f:a9:4f: b7:25:fb:be:00:ff:2c:4a:82:6a:8d:a4:9d:89:9a:7b:e7:ac: 66:87:19:1c:09:6a:40:20:12:80:d7:38:8e:9f:a3:d6:f8:92: c6:a6:88:41:66:5b:7e:e1:d1:25:f1:91:0e:f5:0c:4e:91:94: b5:86:72:23:4b:33:06:7a:b4:49:0e:b1:0b:f5:12:53:47:5f: 6f:60:da:ec:26:97:bd:04:93:26:74:a6:78:a1:d1:1e:55:1a: 92:43:d5:ce:56:b9:d0:a1:51:23:b1:6e:a6:18:dc:1b:5b:f8: e4:39:b6:79:b3:82:06:66:74:2d:19:f7:e5:c8:bf:6d:75:13: eb:d9:59:27:26:7a:12:e8:84:d6:60:97:32:02:e4:51:79:05: cb:96:04:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrH9aGvpyrfNmCF01uroxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMWE4ZTc0OGE0NjNiNDk1MDgzZjc0NzY5MTM5MjA1ZGNi MzM5YjYwHhcNMjUxMjI2MDgwMDM1WhcNMjUxMjI3MDgwMDM1WjAzMTEwLwYDVQQD EyhkNzYxZGMwOTY5NmM2YjA1OTYyODUwOTc0MGYxM2Q3NjIxY2U5MmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosdObshmyalLswkqne+6AzuCGArS 9QKoVf6P/ymOrxifdXOnYN1FQLZVMtcpzoKjS+AL7biMVdvLYCf/qOROke5ZFL/z YPx0Qj7sxLOP2+eKrIbH8DN6wmx95cpW2sNk6L/PW06k5nLxsmnLuvAXNh8YUeA9 ArRZG5LzDZtHbBawxBbTD41Mv1His5frAYrqe/gzareGkBIp7eyhnmuwUVKVcw/4 Odn1N3R/HALT9Na3l3trv+Soz7xbi+H5CeW5bV5Z6Q0NOV/ogkal6F8R/LXMyb6l DRU5SdlZ9Xl8E6UtveZiY8M8quUo0ybcKhrzlxbzXTXkml9vOmt7bgffswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdh3AlpbGsFlihQl0DxPXYhzpLqMB8GA1UdIwQY MBaAFNAajnSKRjtJUIP3R2kTkgXcszm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEJxT2RJcEdPMGxRZ19kSGFST1NCZHl6T2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZmZiYTYtMjQ4OS00MDcyLTgyOTgt ZmUxYzg1NjcyOTdiLzEvMEJxT2RJcEdPMGxRZ19kSGFST1NCZHl6T2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83ZmZiYTYtMjQ4OS00MDcyLTgyOTgtZmUxYzg1NjcyOTdi LzEvMEJxT2RJcEdPMGxRZ19kSGFST1NCZHl6T2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKkuHNq8 VwfkBgeXY275THJooimUfE+CI24/Un8nnfNYFjgotRxrS60XqTb93Rh9GO4ojslg 1R0X4P7CokkATvtTxbP+Ky5tkSJ24IDXqZHWlFNWBgGonZUDuVT8z56KiYkX4+Qw O/7jD6lPtyX7vgD/LEqCao2knYmae+esZocZHAlqQCASgNc4jp+j1viSxqaIQWZb fuHRJfGRDvUMTpGUtYZyI0szBnq0SQ6xC/USU0dfb2Da7CaXvQSTJnSmeKHRHlUa kkPVzla50KFRI7FuphjcG1v45Dm2ebOCBmZ0LRn35ci/bXUT69lZJyZ6EuiE1mCX MgLkUXkFy5YESA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:36 2025 by rpki-client