This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json) Hash identifier: 6DUMiwuf96QrasYBWtIjinA5iohKbwKHuy+NEzKglis= Subject key identifier: 3D:14:DE:72:26:61:A0:C5:EB:7C:76:07:0E:E4:89:E2:33:A3:99:5A Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e Certificate serial: 019B43931695C695F29007D0328BE19D6C6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft Manifest number: 157A Signing time: Mon 22 Dec 2025 01:01:11 +0000 Manifest this update: Mon 22 Dec 2025 01:01:11 +0000 Manifest next update: Tue 23 Dec 2025 01:01:11 +0000 Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: oOipE/jimGOsNMIK8WneYtCmZkv3BFdAvQb8NLYdYWI=) 2: wC7Ohmh2aveKOZ7_Cl4a1vLomLo.roa (hash: hPiN8yhRbkkwhBqX7IPJBoamojlDhfcUtcDIIbpri30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:16:95:c6:95:f2:90:07:d0:32:8b:e1:9d:6c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e Validity Not Before: Dec 22 01:01:11 2025 GMT Not After : Dec 23 01:01:11 2025 GMT Subject: CN=3d14de722661a0c5eb7c76070ee489e233a3995a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:2b:5d:d4:8d:dd:43:64:d4:07:45:da:db: a2:8c:b5:ac:11:5f:89:52:04:aa:4d:b9:34:14:a2: 69:fc:86:04:ed:28:d9:2d:88:28:07:55:5c:de:2a: 82:3d:1b:48:30:30:5e:da:2c:bf:f0:f7:f2:a2:67: e5:05:10:ae:e6:61:7f:ae:86:66:b1:f2:b8:e3:ca: 12:89:f3:a6:5a:a0:26:01:80:25:00:e2:ac:92:98: e6:5e:6f:c7:5b:27:05:7d:f4:54:23:9c:ed:8a:3f: b2:23:40:c4:dc:7b:82:fe:ad:a3:5d:3c:19:03:52: 2b:01:c8:42:2c:c6:90:f7:19:80:08:15:2f:97:40: 6b:6c:dc:5f:76:1c:ff:94:48:3d:c7:61:d3:5d:48: 1b:05:04:0b:cc:45:46:43:a1:a1:7d:ba:2e:d8:c9: 46:a9:63:ca:97:03:f9:1e:3d:88:3f:99:b3:2c:55: 4c:6c:25:ea:32:ea:33:ba:3d:e1:da:08:73:31:47: 68:8e:04:95:0c:36:e0:77:05:fc:75:04:cc:bb:8e: 25:9f:27:30:80:81:41:13:f4:bd:9a:c8:ff:bd:64: 40:28:78:f2:8a:5c:06:f2:cd:39:60:07:59:0d:af: 29:3d:78:6f:0a:44:8e:ac:89:1c:e6:41:5e:64:ac: 3f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:14:DE:72:26:61:A0:C5:EB:7C:76:07:0E:E4:89:E2:33:A3:99:5A X509v3 Authority Key Identifier: keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:de:48:4c:b6:1e:ad:97:9d:ed:03:81:ac:df:0f:26:2a:f0: 2b:55:f7:04:77:bb:d4:a2:8c:5b:2d:9d:4a:f3:77:7d:49:67: 4c:be:e2:86:cd:e2:49:c6:2c:f9:d5:cd:2c:9a:e2:a7:0b:35: 95:4d:86:9e:6e:bf:14:a2:35:9d:4d:22:fc:98:ed:3e:97:dd: e9:83:f0:b5:ac:17:a2:e1:e8:71:f1:f2:6c:1e:f6:7e:a6:89: a8:ad:0f:8f:fd:de:32:1a:0c:48:e1:86:f3:99:19:4f:3c:04: eb:b1:b1:09:17:7c:80:35:ba:ac:c1:f5:d0:16:29:d6:e5:5f: 05:b2:6d:02:9b:6c:c0:82:a5:1b:7a:a4:09:c1:60:c1:e2:e9: 51:79:82:d4:76:6a:73:84:55:33:3c:be:32:6a:79:69:15:41: d6:7e:2d:cc:ce:94:60:fc:9d:4d:c1:00:4b:bf:b0:6e:de:38: 03:55:73:88:d4:04:5c:fe:31:b2:f4:f1:7b:b3:7e:92:6a:e9: c7:bc:53:2f:45:97:71:18:06:58:ed:7f:cb:c9:fd:95:f0:18: 58:f8:e5:f8:b2:63:d3:d4:79:b4:3f:a5:ab:a4:18:00:f6:fc: 5e:3b:b2:5e:d2:c9:07:f5:8c:61:0f:0f:ec:af:4a:45:a2:65: 3a:fb:de:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkxaVxpXykAfQMovhnWxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTFkYjQ2NmNmODA4MjA2MjkzZDA3ZTY1ZjIxMjFmZWI0 OWEzM2UwHhcNMjUxMjIyMDEwMTExWhcNMjUxMjIzMDEwMTExWjAzMTEwLwYDVQQD EygzZDE0ZGU3MjI2NjFhMGM1ZWI3Yzc2MDcwZWU0ODllMjMzYTM5OTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xUrXdSN3UNk1AdF2tuijLWsEV+J UgSqTbk0FKJp/IYE7SjZLYgoB1Vc3iqCPRtIMDBe2iy/8PfyomflBRCu5mF/roZm sfK448oSifOmWqAmAYAlAOKskpjmXm/HWycFffRUI5ztij+yI0DE3HuC/q2jXTwZ A1IrAchCLMaQ9xmACBUvl0BrbNxfdhz/lEg9x2HTXUgbBQQLzEVGQ6Ghfbou2MlG qWPKlwP5Hj2IP5mzLFVMbCXqMuozuj3h2ghzMUdojgSVDDbgdwX8dQTMu44lnycw gIFBE/S9msj/vWRAKHjyilwG8s05YAdZDa8pPXhvCkSOrIkc5kFeZKw/iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0U3nImYaDF63x2Bw7kieIzo5laMB8GA1UdIwQY MBaAFNCh20Zs+AggYpPQfmXyEh/rSaM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMt NDc2MmIwMTBlZjFlLzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMtNDc2MmIwMTBlZjFl LzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlN5ITLYe rZed7QOBrN8PJirwK1X3BHe71KKMWy2dSvN3fUlnTL7ihs3iScYs+dXNLJripws1 lU2Gnm6/FKI1nU0i/JjtPpfd6YPwtawXouHocfHybB72fqaJqK0Pj/3eMhoMSOGG 85kZTzwE67GxCRd8gDW6rMH10BYp1uVfBbJtAptswIKlG3qkCcFgweLpUXmC1HZq c4RVMzy+Mmp5aRVB1n4tzM6UYPydTcEAS7+wbt44A1VziNQEXP4xsvTxe7N+kmrp x7xTL0WXcRgGWO1/y8n9lfAYWPjl+LJj09R5tD+lq6QYAPb8XjuyXtLJB/WMYQ8P 7K9KRaJlOvvecw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:48:52 2025 by rpki-client