This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft File: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft (raw, json) Hash identifier: eDmetyOEyorsv1ksnmCAu9jNPM0ECEsSbdH0eu8Djrs= Subject key identifier: 99:9E:A4:F7:35:BC:9B:96:63:EE:2C:3F:5D:46:4B:FC:51:9A:6D:BD Authority key identifier: D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02 Certificate issuer: /CN=d045cd00736e5a0ec23b908265870d560d551b02 Certificate serial: 019B5A1AFE51789422F7DCF483AB0E3357A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft Manifest number: 72 Signing time: Fri 26 Dec 2025 10:01:17 +0000 Manifest this update: Fri 26 Dec 2025 10:01:17 +0000 Manifest next update: Sat 27 Dec 2025 10:01:17 +0000 Files and hashes: 1: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl (hash: H0wruGWNTr0KH1yrBrjPQpOb3G6IgsVc6FJw+uGkEdA=) 2: vRgl5aaB7WLnSBVnT9hT0A-Qc-M.roa (hash: /TpUEH64vG4Rf0+hWMzI+LqO4MX4umAzDK7Dis8muic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:fe:51:78:94:22:f7:dc:f4:83:ab:0e:33:57:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d045cd00736e5a0ec23b908265870d560d551b02 Validity Not Before: Dec 26 10:01:17 2025 GMT Not After : Dec 27 10:01:17 2025 GMT Subject: CN=999ea4f735bc9b9663ee2c3f5d464bfc519a6dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4d:68:35:ae:9e:97:89:e2:36:ca:af:a7:d1: c8:0a:03:84:a5:08:c3:e1:d8:1f:b2:7b:2c:c7:ce: 85:09:5f:24:cd:0b:47:4f:6e:cd:e2:31:5e:e1:5c: 55:fc:72:85:74:01:79:fc:ff:b0:16:cf:74:e4:95: be:43:33:2f:23:cc:26:6e:81:92:69:5b:f1:1b:5d: 33:3b:87:4a:bb:61:47:70:92:2f:c4:70:48:f4:73: b4:3b:d5:22:db:0b:be:89:1f:b5:c1:e7:ab:f4:73: 7a:33:cc:33:f7:ea:4d:4f:69:b1:6d:52:1f:45:b6: 34:d7:a2:e3:08:62:4b:37:ec:d6:5c:ec:48:fd:1e: 0a:39:9f:d2:cf:6a:17:8f:6c:87:61:5f:01:04:c0: ed:5c:e2:04:ec:7b:65:26:d2:e5:5e:72:92:29:2f: 04:b0:dc:fb:16:7c:58:0e:d1:58:43:e1:54:3b:d1: 0b:0c:b0:0c:36:ec:08:b5:1c:a5:59:c3:69:b9:35: 9b:33:90:97:7e:14:33:9b:f9:60:f0:f2:78:53:38: 71:dc:bb:af:bb:a3:f2:d2:52:d5:5a:d4:08:4b:3a: 4f:6a:9c:c2:bd:5a:f7:4a:33:e1:94:6d:64:00:88: 8f:ec:e9:be:93:4d:3c:fd:a5:0c:5a:95:62:e1:bf: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9E:A4:F7:35:BC:9B:96:63:EE:2C:3F:5D:46:4B:FC:51:9A:6D:BD X509v3 Authority Key Identifier: keyid:D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:28:cc:ed:19:a8:01:10:1d:3e:03:f4:1c:ca:ff:f5:c0:62: 05:36:d0:3a:f8:9b:80:d3:f3:e9:e7:99:be:96:2b:71:43:b6: ce:69:2b:d8:d8:e0:43:cc:46:ee:4e:02:db:e2:57:03:1f:de: 27:b5:6c:9f:dc:40:16:a3:8b:7b:1c:b9:e5:10:fe:ef:4f:b8: 4e:ff:90:ad:e9:73:29:3a:10:93:09:32:32:e6:f5:d8:2b:8f: 89:9f:27:e2:4c:b4:6f:a2:8a:ee:02:88:4c:50:43:4a:8d:d5: 6c:f5:4d:81:ab:0b:ea:31:7c:f4:86:60:ce:ee:8f:84:db:2b: ad:2c:c5:98:14:f5:f1:ff:35:31:86:b6:ad:47:f5:2a:e5:6d: ce:1d:96:b0:74:ed:d5:da:fe:87:e7:a0:ac:83:19:7f:ee:80: 4e:34:e5:a6:52:0b:04:41:0b:03:56:fe:c7:57:31:29:94:5f: a0:17:9f:99:1c:c9:d6:ed:3c:28:cd:70:fb:86:20:11:47:2e: 71:d9:0e:65:b8:61:f0:3e:45:8f:39:15:ab:2a:da:9d:0d:d8: 99:13:1d:3d:99:b2:9a:aa:3d:2d:3c:6a:a3:49:bc:9a:97:be: 99:0e:f7:a2:4b:c1:3c:d1:ee:a9:99:4b:ae:c0:48:3c:32:c1: 22:8d:1e:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGv5ReJQi99z0g6sOM1enMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNDVjZDAwNzM2ZTVhMGVjMjNiOTA4MjY1ODcwZDU2MGQ1 NTFiMDIwHhcNMjUxMjI2MTAwMTE3WhcNMjUxMjI3MTAwMTE3WjAzMTEwLwYDVQQD Eyg5OTllYTRmNzM1YmM5Yjk2NjNlZTJjM2Y1ZDQ2NGJmYzUxOWE2ZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8k1oNa6el4niNsqvp9HICgOEpQjD 4dgfsnssx86FCV8kzQtHT27N4jFe4VxV/HKFdAF5/P+wFs905JW+QzMvI8wmboGS aVvxG10zO4dKu2FHcJIvxHBI9HO0O9Ui2wu+iR+1weer9HN6M8wz9+pNT2mxbVIf RbY016LjCGJLN+zWXOxI/R4KOZ/Sz2oXj2yHYV8BBMDtXOIE7HtlJtLlXnKSKS8E sNz7FnxYDtFYQ+FUO9ELDLAMNuwItRylWcNpuTWbM5CXfhQzm/lg8PJ4Uzhx3Luv u6Py0lLVWtQISzpPapzCvVr3SjPhlG1kAIiP7Om+k008/aUMWpVi4b9MZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmepPc1vJuWY+4sP11GS/xRmm29MB8GA1UdIwQY MBaAFNBFzQBzbloOwjuQgmWHDVYNVRsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEVYTkFITnVXZzdDTzVDQ1pZY05WZzFWR3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80NjI1ZGEtYTk4Mi00NTQ4LWJlZTEt OGUzZWYzOWVjYzEyLzEvMEVYTkFITnVXZzdDTzVDQ1pZY05WZzFWR3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80NjI1ZGEtYTk4Mi00NTQ4LWJlZTEtOGUzZWYzOWVjYzEy LzEvMEVYTkFITnVXZzdDTzVDQ1pZY05WZzFWR3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCjM7Rmo ARAdPgP0HMr/9cBiBTbQOvibgNPz6eeZvpYrcUO2zmkr2NjgQ8xG7k4C2+JXAx/e J7Vsn9xAFqOLexy55RD+70+4Tv+QrelzKToQkwkyMub12CuPiZ8n4ky0b6KK7gKI TFBDSo3VbPVNgasL6jF89IZgzu6PhNsrrSzFmBT18f81MYa2rUf1KuVtzh2WsHTt 1dr+h+egrIMZf+6ATjTlplILBEELA1b+x1cxKZRfoBefmRzJ1u08KM1w+4YgEUcu cdkOZbhh8D5FjzkVqyranQ3YmRMdPZmymqo9LTxqo0m8mpe+mQ73okvBPNHuqZlL rsBIPDLBIo0eQQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:13 2025 by rpki-client