This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json) Hash identifier: l3qp+mzd3oV3ns2feKCqd6xTdMjulA4/uBpqEmoDTwE= Subject key identifier: 55:F6:A7:8F:2F:71:83:8A:21:E4:8B:BC:10:83:FA:12:6B:0E:BB:5D Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7 Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7 Certificate serial: 019B0F37C3F52537A0E57CF2F5951B17B2D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 21:01:11 +0000 Manifest this update: Thu 11 Dec 2025 21:01:11 +0000 Manifest next update: Fri 12 Dec 2025 21:01:11 +0000 Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: DYuBSFYJmuw57/BPipkioVoK10hM+gKjLUFqRJK3AHc=) 2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=) 3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:c3:f5:25:37:a0:e5:7c:f2:f5:95:1b:17:b2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7 Validity Not Before: Dec 11 21:01:11 2025 GMT Not After : Dec 12 21:01:11 2025 GMT Subject: CN=55f6a78f2f71838a21e48bbc1083fa126b0ebb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:f1:92:73:5a:e2:d4:73:b9:ef:46:c3:99: 36:4a:c2:c3:bd:1b:9a:e2:25:35:89:bf:0e:26:67: 71:9a:ae:b6:a5:04:58:31:5e:73:7b:6d:3d:a7:7b: bf:67:36:5a:45:90:75:72:fe:37:d4:0d:86:c2:4f: 86:92:32:c2:86:10:51:e0:b6:dc:45:f2:c0:19:3f: 4b:29:b0:9e:81:d9:1d:71:5e:12:f7:01:56:c7:6e: fe:68:49:ad:51:b0:74:55:56:41:55:7c:1c:b4:59: 2e:57:c0:2c:33:83:82:71:55:9d:e5:2d:41:c4:ed: 86:72:3a:2e:05:6a:74:44:9b:e1:8e:0c:b5:4a:a4: 3b:9c:77:ce:d9:2b:e7:bd:c7:62:5a:63:e8:94:77: 5c:df:83:f1:70:8b:b9:8b:df:e6:a2:ef:d6:0f:c0: 7a:ea:d2:7d:cb:35:3d:1c:87:0a:b7:9a:e1:2c:7b: 1b:60:00:44:8a:ba:33:fe:c2:67:ea:df:e1:cb:5d: 79:49:57:d7:99:7c:e7:8b:c3:5d:ad:b9:2e:18:03: 6d:2f:b4:89:80:09:eb:d8:5a:de:e6:90:af:78:27: 1d:8f:3b:7e:22:9c:42:b5:8c:6d:c5:08:4a:ba:f5: 31:cb:5b:f6:c3:0b:87:57:d6:d7:8e:a5:ba:2a:07: 9a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F6:A7:8F:2F:71:83:8A:21:E4:8B:BC:10:83:FA:12:6B:0E:BB:5D X509v3 Authority Key Identifier: keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d0:ae:c2:db:ee:c2:6a:77:92:fc:bd:19:2c:61:56:d9:94: f5:25:2f:6c:b3:40:8a:c5:88:9c:e2:77:eb:59:bf:34:0b:39: af:5a:c5:5d:53:7f:60:bc:79:20:f2:b6:f8:a1:e5:07:90:72: 7f:5a:4a:b2:45:77:75:c2:b4:6f:62:1f:ec:88:fa:06:aa:d8: c4:04:87:b5:b6:6b:d2:5c:67:15:8c:1d:f4:0f:1e:ac:31:c4: ee:33:a0:d5:4c:51:3a:4f:de:b3:60:c2:de:61:14:06:64:50: a5:9d:fb:48:e0:d2:08:a8:93:e5:81:29:47:db:24:e6:94:b4: 66:fb:7d:a8:90:e4:29:48:3f:a9:f4:de:d8:91:8f:2b:e8:6c: d3:76:0a:39:74:f3:4b:d9:f0:86:7f:09:6b:f2:3e:8c:8d:7e: 58:76:81:11:d1:63:2a:dd:9a:2c:54:54:a8:9d:59:67:26:26: c9:35:78:0e:da:1c:8e:80:2f:cc:3a:39:b0:99:3a:db:9c:74: 31:84:40:9b:ec:d0:d8:19:be:de:a1:08:a8:fe:5e:32:4e:51: 5b:07:df:d8:fd:0e:a8:1c:a0:9c:76:59:d0:5a:04:e1:1d:47: 2e:07:45:c7:e3:fc:f3:52:bb:e5:2a:92:2e:d7:70:5a:e9:cc: 7e:f0:3f:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN8P1JTeg5Xzy9ZUbF7LTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNTVlMGI4NmYzZjUxMjUwNTQ4NjNjZjkyNjRlNjM0NmUw OWJiYjcwHhcNMjUxMjExMjEwMTExWhcNMjUxMjEyMjEwMTExWjAzMTEwLwYDVQQD Eyg1NWY2YTc4ZjJmNzE4MzhhMjFlNDhiYmMxMDgzZmExMjZiMGViYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrvxknNa4tRzue9Gw5k2SsLDvRua 4iU1ib8OJmdxmq62pQRYMV5ze209p3u/ZzZaRZB1cv431A2Gwk+GkjLChhBR4Lbc RfLAGT9LKbCegdkdcV4S9wFWx27+aEmtUbB0VVZBVXwctFkuV8AsM4OCcVWd5S1B xO2GcjouBWp0RJvhjgy1SqQ7nHfO2SvnvcdiWmPolHdc34PxcIu5i9/mou/WD8B6 6tJ9yzU9HIcKt5rhLHsbYABEiroz/sJn6t/hy115SVfXmXzni8NdrbkuGANtL7SJ gAnr2Fre5pCveCcdjzt+IpxCtYxtxQhKuvUxy1v2wwuHV9bXjqW6Kgea/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFX2p48vcYOKIeSLvBCD+hJrDrtdMB8GA1UdIwQY MBaAFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQt Zjk4YzdmZWMxOTRlLzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQtZjk4YzdmZWMxOTRl LzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9Cuwtvu wmp3kvy9GSxhVtmU9SUvbLNAisWInOJ361m/NAs5r1rFXVN/YLx5IPK2+KHlB5By f1pKskV3dcK0b2If7Ij6BqrYxASHtbZr0lxnFYwd9A8erDHE7jOg1UxROk/es2DC 3mEUBmRQpZ37SODSCKiT5YEpR9sk5pS0Zvt9qJDkKUg/qfTe2JGPK+hs03YKOXTz S9nwhn8Ja/I+jI1+WHaBEdFjKt2aLFRUqJ1ZZyYmyTV4DtocjoAvzDo5sJk625x0 MYRAm+zQ2Bm+3qEIqP5eMk5RWwff2P0OqBygnHZZ0FoE4R1HLgdFx+P881K75SqS LtdwWunMfvA/mA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:35 2025 by rpki-client