This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json) Hash identifier: FsOv7TR1jvxQVg9PJxQdHAaVf7sbpasBY1AaFKsEKok= Subject key identifier: 59:20:AF:67:56:3B:5C:FE:83:6D:B6:2B:A9:87:44:C6:62:20:E4:74 Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55 Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055 Certificate serial: 019B495DB37CB238F0EBC6292C152FECA6A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 04:00:36 +0000 Manifest this update: Tue 23 Dec 2025 04:00:36 +0000 Manifest next update: Wed 24 Dec 2025 04:00:36 +0000 Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: HPhFFKmnK51ZOYQ5DSAegg2V+Zebwj478YoZGW+7Rmc=) 2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:b3:7c:b2:38:f0:eb:c6:29:2c:15:2f:ec:a6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055 Validity Not Before: Dec 23 04:00:36 2025 GMT Not After : Dec 24 04:00:36 2025 GMT Subject: CN=5920af67563b5cfe836db62ba98744c66220e474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:df:9a:4a:2a:0c:de:2d:7a:d2:b3:25:aa: 6e:b5:4c:81:74:9d:61:9c:c2:5a:67:c3:f8:2f:cc: 19:82:f4:b6:39:4b:a0:98:28:09:a5:cc:27:3f:7b: d8:d5:03:54:e9:7e:31:dd:1e:de:a4:2e:b8:b4:ff: e6:93:57:aa:52:78:62:12:32:59:a5:a5:ea:52:b3: cf:3b:e0:df:bf:11:03:c4:89:4a:31:2c:c0:cc:5a: c0:d1:0d:cd:ed:ea:db:8c:e7:a5:e2:42:53:20:89: 35:e7:63:42:5e:40:fd:ff:6a:f0:64:e5:ef:41:85: 44:e3:68:2a:62:03:1b:2e:ee:7f:a1:56:98:49:04: fd:8e:2c:ee:fa:a9:69:6c:78:1b:a3:de:e2:ed:9d: e2:e8:3a:cb:bd:45:b5:f1:58:02:24:fd:f2:c8:aa: 6e:5f:b2:dc:7e:fb:23:b7:1c:79:dd:92:11:8b:dd: 05:b4:d6:2d:60:bc:98:c5:92:a6:9a:62:b4:8e:2a: 82:4b:78:6f:fc:82:81:de:b0:34:46:e1:52:0e:36: 19:cf:95:30:c4:e4:73:0e:9e:8d:b5:83:e6:63:9f: 7e:d3:c8:a4:6b:82:77:a5:b4:ea:31:28:d2:fc:f0: 2a:8e:ad:51:93:06:9c:08:f2:f5:53:0f:07:27:f3: c4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:20:AF:67:56:3B:5C:FE:83:6D:B6:2B:A9:87:44:C6:62:20:E4:74 X509v3 Authority Key Identifier: keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f4:7e:00:60:df:8f:a6:ad:8f:66:d4:cc:3a:c3:07:3d:82: 12:a3:bb:90:da:36:22:fd:97:9c:a5:89:00:88:d7:fd:20:7c: ec:5a:ca:3d:6b:c8:88:c1:19:57:85:56:fd:e9:54:03:a1:cb: da:23:fc:5c:1b:fb:6b:69:b9:49:07:c8:aa:d3:d5:0c:a3:4b: eb:9f:ed:3e:40:28:ba:44:90:c8:4e:da:7e:5b:63:7c:6d:40: 18:37:50:da:71:25:68:8b:f2:21:c8:dc:cb:6e:be:fe:e2:5a: fd:54:77:14:dd:c3:4f:09:37:16:be:0f:88:f8:24:b4:12:c6: c9:1c:42:30:61:68:6f:ac:d3:cc:01:f2:fd:50:8b:37:9d:d3: 29:8e:8b:51:f7:4a:6a:1d:bb:ff:0c:c0:63:cc:82:8f:df:27: c4:eb:2b:a0:0a:bb:3f:c7:62:27:78:d6:4d:c7:b2:2d:05:6a: be:66:db:23:28:9e:70:08:7f:61:e7:9c:3a:6c:63:8d:1f:6c: fc:fc:bc:9e:2f:a3:62:d5:5a:a4:57:53:3b:42:17:c8:f8:bc: 99:54:da:de:d1:ef:61:da:62:8a:44:46:7d:30:ee:87:69:26: d0:bc:92:78:cd:15:fb:9f:4d:b1:9b:49:2e:5d:bf:39:84:cf: c7:f3:62:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXbN8sjjw68YpLBUv7KagMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNTJiNGMxZjVkNDg0ZWVmYzJiMTU5N2Y0NTUwMDNhYjY1 NGIwNTUwHhcNMjUxMjIzMDQwMDM2WhcNMjUxMjI0MDQwMDM2WjAzMTEwLwYDVQQD Eyg1OTIwYWY2NzU2M2I1Y2ZlODM2ZGI2MmJhOTg3NDRjNjYyMjBlNDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6ffmkoqDN4tetKzJaputUyBdJ1h nMJaZ8P4L8wZgvS2OUugmCgJpcwnP3vY1QNU6X4x3R7epC64tP/mk1eqUnhiEjJZ paXqUrPPO+DfvxEDxIlKMSzAzFrA0Q3N7erbjOel4kJTIIk152NCXkD9/2rwZOXv QYVE42gqYgMbLu5/oVaYSQT9jizu+qlpbHgbo97i7Z3i6DrLvUW18VgCJP3yyKpu X7Lcfvsjtxx53ZIRi90FtNYtYLyYxZKmmmK0jiqCS3hv/IKB3rA0RuFSDjYZz5Uw xORzDp6NtYPmY59+08ika4J3pbTqMSjS/PAqjq1RkwacCPL1Uw8HJ/PEmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkgr2dWO1z+g222K6mHRMZiIOR0MB8GA1UdIwQY MBaAFNFStMH11ITu/CsVl/RVADq2VLBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmIt MmY3NTE5NTIxNmI5LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmItMmY3NTE5NTIxNmI5 LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfR+AGDf j6atj2bUzDrDBz2CEqO7kNo2Iv2XnKWJAIjX/SB87FrKPWvIiMEZV4VW/elUA6HL 2iP8XBv7a2m5SQfIqtPVDKNL65/tPkAoukSQyE7afltjfG1AGDdQ2nElaIvyIcjc y26+/uJa/VR3FN3DTwk3Fr4PiPgktBLGyRxCMGFob6zTzAHy/VCLN53TKY6LUfdK ah27/wzAY8yCj98nxOsroAq7P8diJ3jWTceyLQVqvmbbIyiecAh/YeecOmxjjR9s /Py8ni+jYtVapFdTO0IXyPi8mVTa3tHvYdpiikRGfTDuh2km0LySeM0V+59NsZtJ Ll2/OYTPx/Nizg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:38:05 2025 by rpki-client