This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json) Hash identifier: MRde0LHuV8svzCrGXnY1IaTSZN8IjAO6XYhCO9l+3fo= Subject key identifier: CB:6F:9C:C7:6C:74:25:C6:3D:47:E0:9B:97:F7:DC:13:3B:DB:69:6D Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e Certificate serial: 019B37FCC458CB47A4582B70834CC7451EA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft Manifest number: 1574 Signing time: Fri 19 Dec 2025 19:01:10 +0000 Manifest this update: Fri 19 Dec 2025 19:01:10 +0000 Manifest next update: Sat 20 Dec 2025 19:01:10 +0000 Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: 7ZGNk7bYSiHNRgoV/7PnqmUFOkznzr+eqqfLcGjk02E=) 2: wC7Ohmh2aveKOZ7_Cl4a1vLomLo.roa (hash: hPiN8yhRbkkwhBqX7IPJBoamojlDhfcUtcDIIbpri30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:c4:58:cb:47:a4:58:2b:70:83:4c:c7:45:1e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e Validity Not Before: Dec 19 19:01:10 2025 GMT Not After : Dec 20 19:01:10 2025 GMT Subject: CN=cb6f9cc76c7425c63d47e09b97f7dc133bdb696d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:31:49:28:c2:7b:59:c2:33:3a:fb:15:e0: 1b:ca:88:ad:bc:e3:e3:5d:19:20:51:8b:c8:86:43: 44:fc:08:d2:97:7c:7a:98:e3:1d:f0:24:ce:f3:45: 22:31:a0:c4:7a:4c:a6:35:aa:52:48:56:12:86:0d: 9a:a5:26:37:50:48:e1:d3:c2:5f:9c:bc:c8:d6:8b: 7e:df:48:ba:6b:c7:08:c2:af:26:05:b7:61:c2:8a: f1:c6:26:e2:6f:de:25:cf:36:5a:9e:ea:06:00:27: 7b:b9:da:5b:fe:50:a3:b3:5a:7c:50:59:7f:91:6c: 12:f1:c6:96:4a:3a:bd:8a:ab:92:52:f1:23:68:7d: 59:0d:fc:43:e5:24:5e:0f:af:5a:98:2c:c0:de:93: 25:3b:05:f8:f8:f4:31:9f:aa:2d:ce:b9:ce:cf:b6: b7:5f:b7:b5:51:13:fe:a8:34:fa:d6:90:6e:c9:d8: 77:69:48:f3:9c:f8:b7:ff:3d:8f:5c:f5:a1:13:69: a9:3a:86:d5:ec:5e:27:e5:48:43:9d:b5:ff:9b:59: 47:db:7b:4a:0f:2c:c4:e1:de:2d:80:43:59:e9:2f: c9:c1:3c:5f:fe:92:9d:d7:71:b0:24:73:8d:19:17: b6:61:5c:b3:5e:ca:7f:6f:ac:37:c5:44:5b:45:ca: ec:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6F:9C:C7:6C:74:25:C6:3D:47:E0:9B:97:F7:DC:13:3B:DB:69:6D X509v3 Authority Key Identifier: keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ab:82:3f:1b:c1:b9:e9:96:c8:5b:bc:0a:dc:cd:e7:bf:ce: 6d:b4:dd:0b:be:2e:88:87:2d:71:04:37:fc:64:83:ea:98:e5: 05:05:0c:d7:08:de:a5:6e:11:d5:91:c6:02:a0:c9:22:1d:bd: 8a:91:57:0a:2b:10:8a:9e:82:c2:8e:66:3e:a4:99:9f:93:59: 02:27:26:68:3c:7f:fc:1a:07:e8:0a:01:ae:0d:bd:52:89:57: 19:bf:3f:22:61:a8:8a:f6:2b:fc:5b:81:dc:87:31:f6:b5:19: 35:b7:14:8d:3d:88:8b:06:19:a7:f7:f4:9b:6b:28:d5:8a:d7: b8:35:21:b7:80:52:6b:68:42:c4:21:02:70:a2:44:c0:f5:01: 6e:61:04:87:85:4d:e4:57:64:f2:0e:f5:85:69:06:93:fc:5e: b3:f0:30:60:da:4f:4a:99:6e:f2:5e:ca:b2:d4:49:9f:08:56: 17:f8:3e:b2:f5:7b:b7:0e:c5:ac:35:13:17:4e:fd:c1:f3:5c: 55:6a:81:06:42:7c:7c:9b:b4:5f:96:ec:e8:06:04:42:7f:53: 09:4b:8a:be:e8:64:5a:93:c7:38:21:0e:37:52:58:b2:59:2f: 54:a7:12:57:73:8a:58:28:23:f3:15:ab:ce:7a:6d:66:a5:76: 84:14:0b:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/MRYy0ekWCtwg0zHRR6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTFkYjQ2NmNmODA4MjA2MjkzZDA3ZTY1ZjIxMjFmZWI0 OWEzM2UwHhcNMjUxMjE5MTkwMTEwWhcNMjUxMjIwMTkwMTEwWjAzMTEwLwYDVQQD EyhjYjZmOWNjNzZjNzQyNWM2M2Q0N2UwOWI5N2Y3ZGMxMzNiZGI2OTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZExSSjCe1nCMzr7FeAbyoitvOPj XRkgUYvIhkNE/AjSl3x6mOMd8CTO80UiMaDEekymNapSSFYShg2apSY3UEjh08Jf nLzI1ot+30i6a8cIwq8mBbdhworxxibib94lzzZanuoGACd7udpb/lCjs1p8UFl/ kWwS8caWSjq9iquSUvEjaH1ZDfxD5SReD69amCzA3pMlOwX4+PQxn6otzrnOz7a3 X7e1URP+qDT61pBuydh3aUjznPi3/z2PXPWhE2mpOobV7F4n5UhDnbX/m1lH23tK DyzE4d4tgENZ6S/JwTxf/pKd13GwJHONGRe2YVyzXsp/b6w3xURbRcrsZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtvnMdsdCXGPUfgm5f33BM722ltMB8GA1UdIwQY MBaAFNCh20Zs+AggYpPQfmXyEh/rSaM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMt NDc2MmIwMTBlZjFlLzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMtNDc2MmIwMTBlZjFl LzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKuCPxvB uemWyFu8CtzN57/ObbTdC74uiIctcQQ3/GSD6pjlBQUM1wjepW4R1ZHGAqDJIh29 ipFXCisQip6Cwo5mPqSZn5NZAicmaDx//BoH6AoBrg29UolXGb8/ImGoivYr/FuB 3Icx9rUZNbcUjT2IiwYZp/f0m2so1YrXuDUht4BSa2hCxCECcKJEwPUBbmEEh4VN 5Fdk8g71hWkGk/xes/AwYNpPSplu8l7KstRJnwhWF/g+svV7tw7FrDUTF079wfNc VWqBBkJ8fJu0X5bs6AYEQn9TCUuKvuhkWpPHOCEON1JYslkvVKcSV3OKWCgj8xWr znptZqV2hBQLbA== -----END CERTIFICATE-----Generated at Sat Dec 20 05:32:30 2025 by rpki-client