This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft File: 0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json) Hash identifier: sFdIkTDy/HbZCgEAfPQTckcVDDuE5jaeputIoC1foY0= Subject key identifier: B2:29:8F:AB:B5:2F:48:5C:11:31:ED:16:82:13:1D:21:6A:73:81:BE Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB Certificate issuer: /CN=d07267bf23b2971a4795a83ef8478a821bafb1db Certificate serial: 019B597657537C3C2724975D97816DBCC336 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft Manifest number: 17A0 Signing time: Fri 26 Dec 2025 07:01:26 +0000 Manifest this update: Fri 26 Dec 2025 07:01:26 +0000 Manifest next update: Sat 27 Dec 2025 07:01:26 +0000 Files and hashes: 1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: a7TW1kXpUBj1peZw/wo8YAV8J7jFXwKF3UUZ6axI4b4=) 2: CoNCbdPpJL-6fbcnJD3B3DbY734.roa (hash: ouhTfA8/5+dNL+YmL8KPLbr0RKoGCNyfOXLbumLXJJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:57:53:7c:3c:27:24:97:5d:97:81:6d:bc:c3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db Validity Not Before: Dec 26 07:01:26 2025 GMT Not After : Dec 27 07:01:26 2025 GMT Subject: CN=b2298fabb52f485c1131ed1682131d216a7381be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:93:6d:6d:dd:83:da:4e:a2:fb:36:23:51: 14:4a:28:cf:85:17:63:ba:dc:ab:e4:c0:38:98:4a: bd:f3:61:91:8a:19:52:bf:fd:0a:84:ef:e0:cc:a2: ab:5a:ce:07:74:f3:c8:93:10:2b:ca:4c:94:8e:88: a0:5d:57:b8:bd:a3:94:58:af:6b:3d:69:fc:49:e3: 35:d8:74:98:5f:93:49:ba:69:b4:ad:8e:a8:7e:f0: d7:4a:0d:ca:d8:1b:51:ce:f2:0d:ed:d4:ed:57:f1: 33:a8:56:3a:f6:6f:d6:05:30:e3:c7:7b:39:c0:f4: c9:62:71:a0:b5:7c:55:6b:6d:1e:33:0d:58:09:45: d0:61:16:0b:1c:0b:d5:17:9c:f7:7d:9d:22:16:e0: 50:25:bb:c3:21:9a:87:db:f2:74:2e:73:1c:7e:95: 21:8a:c8:27:ff:1e:8a:1c:74:40:79:fc:b6:ef:3f: 79:55:84:9a:86:08:a0:45:23:31:a9:b6:42:9d:b3: fb:8d:4f:7a:c7:fa:3f:21:b3:23:0f:7c:eb:d6:97: ae:1d:a8:29:93:59:53:b5:81:57:92:45:82:ce:0b: 3f:79:35:db:bd:82:08:af:51:90:fe:0d:de:98:94: 72:31:20:c6:2b:1d:fb:9b:f6:ba:ab:06:a8:f4:62: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:29:8F:AB:B5:2F:48:5C:11:31:ED:16:82:13:1D:21:6A:73:81:BE X509v3 Authority Key Identifier: keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:76:df:f8:af:dd:97:95:4d:15:95:e1:2c:52:62:74:74:7e: d5:53:b4:76:3a:b3:4e:93:63:c4:db:36:05:c3:f8:fd:a3:15: b7:28:b7:f5:4c:37:a6:3f:28:91:33:85:8e:df:47:17:5e:2d: d4:e1:b5:7c:b0:cc:aa:2f:78:d1:6e:b0:22:c5:5f:95:2a:d3: 26:95:3a:d3:4e:eb:64:14:77:43:7c:28:c7:97:9e:5b:f4:9e: 10:1b:11:b2:41:cc:5b:d9:b1:ac:b0:0f:96:ab:49:35:8b:64: af:83:28:0a:4d:ce:79:94:c5:c2:54:ad:27:c5:37:f4:77:58: 79:f6:e9:56:ad:69:8f:ec:87:29:10:9f:3e:6d:f6:ae:96:28: 1b:62:97:40:78:88:96:c9:ac:24:21:cd:bf:d9:90:ae:fb:23: 0c:14:50:75:55:93:b1:3d:1b:47:c2:46:82:ac:1f:1b:09:86: 51:3b:e7:bc:35:98:11:21:ea:a4:eb:3a:2f:78:d0:08:51:87: 96:5e:24:95:38:e0:c9:5a:30:1c:e9:c6:77:25:84:90:56:5b: 81:b7:c7:43:e4:cb:b7:b1:f9:e0:eb:30:09:76:72:c4:8d:13: 7b:58:1e:74:24:f2:d9:d6:8e:d9:7f:d2:a1:5b:58:f1:49:6b: d3:6c:3b:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdldTfDwnJJddl4FtvMM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNzI2N2JmMjNiMjk3MWE0Nzk1YTgzZWY4NDc4YTgyMWJh ZmIxZGIwHhcNMjUxMjI2MDcwMTI2WhcNMjUxMjI3MDcwMTI2WjAzMTEwLwYDVQQD EyhiMjI5OGZhYmI1MmY0ODVjMTEzMWVkMTY4MjEzMWQyMTZhNzM4MWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttmTbW3dg9pOovs2I1EUSijPhRdj utyr5MA4mEq982GRihlSv/0KhO/gzKKrWs4HdPPIkxArykyUjoigXVe4vaOUWK9r PWn8SeM12HSYX5NJumm0rY6ofvDXSg3K2BtRzvIN7dTtV/EzqFY69m/WBTDjx3s5 wPTJYnGgtXxVa20eMw1YCUXQYRYLHAvVF5z3fZ0iFuBQJbvDIZqH2/J0LnMcfpUh isgn/x6KHHRAefy27z95VYSahgigRSMxqbZCnbP7jU96x/o/IbMjD3zr1peuHagp k1lTtYFXkkWCzgs/eTXbvYIIr1GQ/g3emJRyMSDGKx37m/a6qwao9GJbnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIpj6u1L0hcETHtFoITHSFqc4G+MB8GA1UdIwQY MBaAFNByZ78jspcaR5WoPvhHioIbr7HbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84ZGI1NzktYzFmYy00MjE1LTkwZjQt ZjQ2NzNiYTUyYzAwLzEvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS84ZGI1NzktYzFmYy00MjE1LTkwZjQtZjQ2NzNiYTUyYzAw LzEvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinbf+K/d l5VNFZXhLFJidHR+1VO0djqzTpNjxNs2BcP4/aMVtyi39Uw3pj8okTOFjt9HF14t 1OG1fLDMqi940W6wIsVflSrTJpU6007rZBR3Q3wox5eeW/SeEBsRskHMW9mxrLAP lqtJNYtkr4MoCk3OeZTFwlStJ8U39HdYefbpVq1pj+yHKRCfPm32rpYoG2KXQHiI lsmsJCHNv9mQrvsjDBRQdVWTsT0bR8JGgqwfGwmGUTvnvDWYESHqpOs6L3jQCFGH ll4klTjgyVowHOnGdyWEkFZbgbfHQ+TLt7H54OswCXZyxI0Te1gedCTy2daO2X/S oVtY8Ulr02w7IA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:29 2025 by rpki-client