This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft File: 0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json) Hash identifier: Q9VDjGipErg+DM7z4uZtZMX0cV5dkxyaahp9pygLk/w= Subject key identifier: 77:1A:F9:DA:BC:39:2B:A8:CC:46:35:3A:C5:46:67:96:81:C4:9B:8B Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16 Certificate issuer: /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116 Certificate serial: 019B066AFE3C7A351A7F920A2A7447130FDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft Manifest number: 99 Signing time: Wed 10 Dec 2025 04:00:33 +0000 Manifest this update: Wed 10 Dec 2025 04:00:33 +0000 Manifest next update: Thu 11 Dec 2025 04:00:33 +0000 Files and hashes: 1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: ilp+w7fKBu8r/e9N1c2af4+Mps7u7Ud3BUC1lhLkTV0=) 2: bzFosFN5ObqKTXX0o67vA-bvyEU.roa (hash: yXoWK432d1fj4jLB5fBcuqn/7QkMmdbiVvgP3kSmafw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6a:fe:3c:7a:35:1a:7f:92:0a:2a:74:47:13:0f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116 Validity Not Before: Dec 10 04:00:33 2025 GMT Not After : Dec 11 04:00:33 2025 GMT Subject: CN=771af9dabc392ba8cc46353ac546679681c49b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:6d:4b:1d:6e:f6:56:f4:c1:be:d7:64:20: 88:d7:60:d8:52:3c:e8:08:6d:af:90:a5:00:89:85: c6:4a:c4:33:87:aa:eb:4f:87:34:ab:37:b9:83:c6: 34:fb:f9:21:b0:26:be:f3:6f:0b:bf:43:61:82:6e: a9:aa:3c:d6:5c:9b:ff:10:d8:d9:ed:6b:b5:e9:ff: 9a:ff:13:23:2d:2c:83:03:ea:44:a0:e8:3d:d6:94: 24:7d:15:16:3c:d2:44:fc:b9:64:b4:07:bb:3f:6b: 0c:e0:44:3a:c7:c9:11:b7:d2:57:b2:61:a6:3e:37: 71:93:ff:32:8c:56:e4:9a:a0:65:d8:73:8b:34:3d: 83:69:00:77:60:f1:4d:cd:fc:d9:1c:20:1d:82:d6: d9:5c:92:ea:d6:c0:3b:24:4f:8a:f2:1f:7b:30:ad: f9:6a:3d:90:a8:80:ed:95:20:2c:a6:57:c5:27:46: 4e:81:03:8c:1a:e8:31:74:cb:60:0b:b2:6a:af:b4: 8b:83:44:1f:3d:cc:0e:1e:ab:ea:1f:d8:71:8c:ac: 65:b4:0f:74:00:42:42:bf:ec:9f:00:e8:c6:ca:f5: 19:97:a4:7a:84:93:cd:a4:9b:a9:cc:8f:d4:9b:d0: 15:fa:aa:bc:b0:ff:8d:e6:0d:e5:d6:d3:c0:92:9e: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1A:F9:DA:BC:39:2B:A8:CC:46:35:3A:C5:46:67:96:81:C4:9B:8B X509v3 Authority Key Identifier: keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4b:a3:89:52:8d:9c:be:ee:2c:65:99:38:47:39:93:02:7f: 2d:17:3e:65:1e:94:ab:f1:99:90:80:2f:b9:c5:c8:e1:f0:98: 69:e7:16:89:d5:95:97:5b:ca:4b:7d:cd:7c:4c:ec:c8:b2:9b: 42:04:f0:ec:f9:23:68:ca:c3:78:6f:70:34:cb:98:54:ff:96: c2:cd:86:29:46:95:bf:6a:71:d7:78:55:70:dd:1f:29:37:0b: 1c:82:79:a1:d2:9b:29:3f:f1:be:09:5c:57:92:95:f3:3f:c6: 62:a5:ae:a7:9a:e6:fd:2b:5d:f7:b1:54:d4:01:c4:af:4d:7a: c7:c1:a1:11:00:d7:3b:2e:d2:95:96:ac:81:75:5d:45:74:a4: de:8e:ef:5b:16:9c:52:22:49:7b:f4:cb:a4:c0:4f:80:9b:da: e6:8f:97:b9:2c:ed:8d:33:5b:1f:5b:f7:31:04:0a:76:04:94: 66:44:7d:07:73:91:12:92:53:ed:05:0e:2f:86:43:14:5e:f2: 2c:83:28:18:ed:8e:65:1d:c1:9f:c6:18:76:9c:74:bb:00:73: f4:11:8b:3b:a2:e8:37:b7:dd:e0:fe:1a:2b:d7:8d:1c:ae:da: 72:3e:e9:4c:f0:e1:17:73:59:78:a8:91:92:75:9e:9c:59:e2: 3d:34:08:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGav48ejUaf5IKKnRHEw/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZWQ2NjRmNGFmMmY4ZTExOWI4N2EyNjhjNWQ0MzAzZmJi MzYxMTYwHhcNMjUxMjEwMDQwMDMzWhcNMjUxMjExMDQwMDMzWjAzMTEwLwYDVQQD Eyg3NzFhZjlkYWJjMzkyYmE4Y2M0NjM1M2FjNTQ2Njc5NjgxYzQ5YjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb1tSx1u9lb0wb7XZCCI12DYUjzo CG2vkKUAiYXGSsQzh6rrT4c0qze5g8Y0+/khsCa+828Lv0Nhgm6pqjzWXJv/ENjZ 7Wu16f+a/xMjLSyDA+pEoOg91pQkfRUWPNJE/LlktAe7P2sM4EQ6x8kRt9JXsmGm Pjdxk/8yjFbkmqBl2HOLND2DaQB3YPFNzfzZHCAdgtbZXJLq1sA7JE+K8h97MK35 aj2QqIDtlSAsplfFJ0ZOgQOMGugxdMtgC7Jqr7SLg0QfPcwOHqvqH9hxjKxltA90 AEJCv+yfAOjGyvUZl6R6hJPNpJupzI/Um9AV+qq8sP+N5g3l1tPAkp4COQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHca+dq8OSuozEY1OsVGZ5aBxJuLMB8GA1UdIwQY MBaAFNHtZk9K8vjhGbh6JoxdQwP7s2EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2Mt NGI5NTI5YjQ4Y2VhLzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2MtNGI5NTI5YjQ4Y2Vh LzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkujiVKN nL7uLGWZOEc5kwJ/LRc+ZR6Uq/GZkIAvucXI4fCYaecWidWVl1vKS33NfEzsyLKb QgTw7PkjaMrDeG9wNMuYVP+Wws2GKUaVv2px13hVcN0fKTcLHIJ5odKbKT/xvglc V5KV8z/GYqWup5rm/Std97FU1AHEr016x8GhEQDXOy7SlZasgXVdRXSk3o7vWxac UiJJe/TLpMBPgJva5o+XuSztjTNbH1v3MQQKdgSUZkR9B3OREpJT7QUOL4ZDFF7y LIMoGO2OZR3Bn8YYdpx0uwBz9BGLO6LoN7fd4P4aK9eNHK7acj7pTPDhF3NZeKiR knWenFniPTQIwg== -----END CERTIFICATE-----Generated at Wed Dec 10 06:40:21 2025 by rpki-client