This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json) Hash identifier: hxua/PW7t7yKAZMwBz1lwwMj8Soq60WJinC2p2nK7pc= Subject key identifier: 22:DF:24:10:ED:FC:69:74:35:AD:7D:A1:9C:D8:06:D1:6C:8C:AE:56 Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73 Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773 Certificate serial: 019B38D82CD337AA3E11E185F18B60BF4F93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft Manifest number: 16B6 Signing time: Fri 19 Dec 2025 23:00:49 +0000 Manifest this update: Fri 19 Dec 2025 23:00:49 +0000 Manifest next update: Sat 20 Dec 2025 23:00:49 +0000 Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: U5wFzWo/coc7ftc4CAY09LRqGjG0GaE061GIUX8hAYc=) 2: TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa (hash: II597D7xa6PgwHa7AFUqvd8eYmaRnt2cxxVqhwKEKzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:2c:d3:37:aa:3e:11:e1:85:f1:8b:60:bf:4f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773 Validity Not Before: Dec 19 23:00:49 2025 GMT Not After : Dec 20 23:00:49 2025 GMT Subject: CN=22df2410edfc697435ad7da19cd806d16c8cae56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0e:cf:56:65:d3:d7:31:53:1d:fc:a0:fe:60: d4:ba:78:8d:1a:dd:6d:9e:38:22:66:57:5d:ca:6d: c1:52:10:e9:1f:42:c6:03:9b:8f:0f:61:e2:07:b2: 74:04:8a:cf:07:81:f9:08:ba:92:e8:89:31:03:a6: 26:bd:ac:83:ff:5a:e5:0a:37:88:be:68:a0:af:68: 85:ea:ba:66:c8:0f:39:c0:87:60:0b:51:d1:5b:84: ec:a7:95:25:ff:5d:fc:fd:43:f4:6c:49:dd:6a:92: 4a:04:56:f5:17:dd:4b:fb:a5:78:31:c9:98:3e:2d: 80:a9:f1:66:a1:38:f5:a6:ef:d7:37:b9:c1:ff:ab: fc:25:31:11:7c:93:4a:7c:db:19:f3:24:11:8c:dd: f2:d8:81:4e:9a:85:83:76:65:ab:55:02:d7:47:69: 19:b3:75:63:fc:0b:26:98:74:70:2a:70:64:fe:bb: e6:24:e4:42:3d:a5:81:a8:bf:eb:5f:1d:72:cf:af: 7a:2b:e5:f6:53:00:7a:b0:31:fb:e7:5f:b4:53:33: 27:c7:a9:2f:c8:31:ae:72:5e:1e:90:6d:5e:32:5e: 08:b8:5c:69:47:80:27:35:90:6d:65:10:08:6c:a4: 8c:13:cb:85:27:65:9a:f7:e8:53:8c:8e:c8:6d:46: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DF:24:10:ED:FC:69:74:35:AD:7D:A1:9C:D8:06:D1:6C:8C:AE:56 X509v3 Authority Key Identifier: keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5d:be:90:8e:57:34:db:29:0f:5e:e6:93:9e:da:f8:32:af: 67:a1:8b:97:fd:0d:4b:6b:a4:68:e1:ba:74:fe:5b:b0:b6:74: c8:ea:0f:86:31:7d:11:f0:69:74:fe:30:4c:17:63:cb:d5:32: 86:32:63:53:86:9b:a7:e5:9b:fe:5d:67:0f:b8:bc:b2:19:3b: 6a:74:c2:1f:d9:1e:77:8c:43:a2:4c:03:f7:c6:e2:e8:74:ac: 15:78:bd:4c:b1:09:e9:3f:2a:66:ee:4b:61:33:7d:60:cc:a2: 5c:9a:76:06:a6:1e:f2:91:14:41:86:0f:9b:05:0f:45:41:84: b4:ff:60:9b:ba:80:89:43:da:40:f9:ea:77:60:25:f9:4f:6d: 22:38:87:4a:31:ca:9b:a5:d6:1d:06:32:8f:f6:97:4c:a2:77: 43:40:d7:f4:78:0c:f5:78:c6:74:f8:d2:13:c7:44:20:41:09: ff:92:bf:fe:ae:d6:86:ff:bd:7f:0b:21:bf:91:50:c0:70:47: c8:a3:09:b4:0e:d4:28:fb:2f:a3:9a:19:2d:e1:0b:8a:f8:1a: de:93:fa:54:f9:4d:c8:90:c1:a9:94:14:1d:7c:2a:c3:69:98: bf:bc:6d:b6:7c:56:8d:e9:60:24:68:27:78:47:ad:e8:b2:5a: 15:ca:bf:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42CzTN6o+EeGF8Ytgv0+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMjI3N2VhMzA0YjI4NDRhNzg2ODliM2FhMGQ5MjE5ZTMz NjY3NzMwHhcNMjUxMjE5MjMwMDQ5WhcNMjUxMjIwMjMwMDQ5WjAzMTEwLwYDVQQD EygyMmRmMjQxMGVkZmM2OTc0MzVhZDdkYTE5Y2Q4MDZkMTZjOGNhZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q7PVmXT1zFTHfyg/mDUuniNGt1t njgiZlddym3BUhDpH0LGA5uPD2HiB7J0BIrPB4H5CLqS6IkxA6YmvayD/1rlCjeI vmigr2iF6rpmyA85wIdgC1HRW4Tsp5Ul/138/UP0bEndapJKBFb1F91L+6V4McmY Pi2AqfFmoTj1pu/XN7nB/6v8JTERfJNKfNsZ8yQRjN3y2IFOmoWDdmWrVQLXR2kZ s3Vj/AsmmHRwKnBk/rvmJORCPaWBqL/rXx1yz696K+X2UwB6sDH751+0UzMnx6kv yDGucl4ekG1eMl4IuFxpR4AnNZBtZRAIbKSME8uFJ2Wa9+hTjI7IbUabSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLfJBDt/Gl0Na19oZzYBtFsjK5WMB8GA1UdIwQY MBaAFNMid+owSyhEp4aJs6oNkhnjNmdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQt MzZjODczOTY5MjNhLzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQtMzZjODczOTY5MjNh LzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAql2+kI5X NNspD17mk57a+DKvZ6GLl/0NS2ukaOG6dP5bsLZ0yOoPhjF9EfBpdP4wTBdjy9Uy hjJjU4abp+Wb/l1nD7i8shk7anTCH9ked4xDokwD98bi6HSsFXi9TLEJ6T8qZu5L YTN9YMyiXJp2BqYe8pEUQYYPmwUPRUGEtP9gm7qAiUPaQPnqd2Al+U9tIjiHSjHK m6XWHQYyj/aXTKJ3Q0DX9HgM9XjGdPjSE8dEIEEJ/5K//q7Whv+9fwshv5FQwHBH yKMJtA7UKPsvo5oZLeELivga3pP6VPlNyJDBqZQUHXwqw2mYv7xttnxWjelgJGgn eEet6LJaFcq/AA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:33:10 2025 by rpki-client