This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft File: 0seIZkHuEBvHspX9hvGSP8KD89A.mft (raw, json) Hash identifier: AzdtMqItQR7VPXzUiFV9NoCcrM1M2+D/olc+l+WFD2E= Subject key identifier: B3:4B:1D:EC:CB:04:0A:A3:9E:9F:84:C3:EA:FB:E6:9B:69:7E:C9:9A Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0 Certificate issuer: /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0 Certificate serial: 019B213DBADA676321CDBD67ABC7F77305D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft Manifest number: 0ABE Signing time: Mon 15 Dec 2025 09:00:52 +0000 Manifest this update: Mon 15 Dec 2025 09:00:52 +0000 Manifest next update: Tue 16 Dec 2025 09:00:52 +0000 Files and hashes: 1: 0seIZkHuEBvHspX9hvGSP8KD89A.crl (hash: 6k86G2dOkKNDxfkDzqSxwZqfCAbyZ3ApSw9RWRyTQck=) 2: wBQJvFifdoJgqtUNKdp3wlo8l_8.roa (hash: 5Lsfd9g+UNfdFLBlgH3vEAe0fksX3TCnFsgxtR55Zwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:3d:ba:da:67:63:21:cd:bd:67:ab:c7:f7:73:05:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0 Validity Not Before: Dec 15 09:00:52 2025 GMT Not After : Dec 16 09:00:52 2025 GMT Subject: CN=b34b1deccb040aa39e9f84c3eafbe69b697ec99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:ea:bc:e7:5e:c4:da:21:df:8d:e6:53:fd: cc:43:8c:e1:a2:41:3b:7f:6b:07:b4:cf:32:41:c5: b5:8e:0d:e8:90:db:af:63:c3:f7:81:39:86:b6:99: 57:90:d2:e2:45:06:e6:02:dc:52:40:05:21:ca:75: 96:44:2a:5e:90:6d:f7:a6:79:e6:e6:5a:3a:5e:a1: a1:37:ff:9b:a7:7d:53:85:84:a3:b8:17:32:1c:89: 1c:15:17:df:fc:ee:d3:78:71:4b:47:20:c7:0d:00: f4:3f:82:9d:04:b0:5c:51:fe:21:3d:d9:13:f2:3f: 7c:ad:5f:8d:12:a5:36:28:ae:86:76:13:b5:39:c3: 2c:20:79:75:cf:5b:4b:7e:a4:01:00:f2:59:a8:3d: 24:00:de:04:fb:f8:48:fc:d0:2d:b0:58:b5:e4:e2: b3:f4:b1:6a:d3:f7:73:ee:99:86:d0:df:eb:b1:5e: d0:b7:97:f0:bb:46:3e:c5:97:b8:13:2d:76:29:64: 5c:1e:54:86:8b:b2:5d:02:e4:4b:31:d6:41:68:d8: ab:7c:e7:ae:40:77:64:30:2f:c6:60:dc:a5:0f:25: 32:9c:e7:49:48:88:b1:01:47:56:c7:b9:bf:57:e0: e6:60:bc:c1:35:14:4b:29:c2:c1:ef:a9:11:1e:c8: 94:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4B:1D:EC:CB:04:0A:A3:9E:9F:84:C3:EA:FB:E6:9B:69:7E:C9:9A X509v3 Authority Key Identifier: keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6a:7b:99:c2:fe:ce:b1:91:e3:9e:80:bf:f6:cd:84:81:08: 91:b9:8c:51:15:18:d5:4c:d7:79:72:5a:c6:3e:fb:12:b4:3a: a5:fb:58:f1:8e:1b:d7:83:f6:4c:7e:0d:eb:61:b5:6f:a4:3b: 70:26:07:1b:e7:6b:a9:72:33:43:66:33:c6:fd:45:ae:d9:a5: fe:1e:9a:c3:3b:61:6d:6a:4d:35:40:5f:0a:35:c0:63:af:f2: 05:26:c1:ad:4f:16:a8:bd:40:f9:f1:3f:de:8c:f0:a6:0b:01: 06:a5:50:43:a8:15:ae:4d:5c:e5:2c:20:62:63:f1:c8:5d:9b: a8:08:78:2b:a7:6c:2d:f2:f5:85:7a:76:9a:99:a7:4f:f2:15: 6c:f8:d7:3e:e5:11:ad:c5:b6:c6:fd:ae:99:b0:e9:ee:96:a5: 2a:66:c2:e7:8f:d4:8b:72:fe:5f:13:8f:3a:7a:c9:91:6c:2c: 86:9f:b4:ad:f8:02:3e:f3:1a:80:85:d2:c1:14:bb:c2:4a:bb: 4b:79:c3:fd:98:c6:a6:97:06:07:22:86:ee:97:d5:22:85:f1: d3:5a:d0:12:08:95:0f:90:33:d2:12:33:f6:87:61:cf:57:43: 98:de:86:6b:21:4b:1a:11:54:0d:03:7c:a9:4a:7e:54:b8:b0: d0:e3:34:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshPbraZ2Mhzb1nq8f3cwXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzc4ODY2NDFlZTEwMWJjN2IyOTVmZDg2ZjE5MjNmYzI4 M2YzZDAwHhcNMjUxMjE1MDkwMDUyWhcNMjUxMjE2MDkwMDUyWjAzMTEwLwYDVQQD EyhiMzRiMWRlY2NiMDQwYWEzOWU5Zjg0YzNlYWZiZTY5YjY5N2VjOTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybPqvOdexNoh343mU/3MQ4zhokE7 f2sHtM8yQcW1jg3okNuvY8P3gTmGtplXkNLiRQbmAtxSQAUhynWWRCpekG33pnnm 5lo6XqGhN/+bp31ThYSjuBcyHIkcFRff/O7TeHFLRyDHDQD0P4KdBLBcUf4hPdkT 8j98rV+NEqU2KK6GdhO1OcMsIHl1z1tLfqQBAPJZqD0kAN4E+/hI/NAtsFi15OKz 9LFq0/dz7pmG0N/rsV7Qt5fwu0Y+xZe4Ey12KWRcHlSGi7JdAuRLMdZBaNirfOeu QHdkMC/GYNylDyUynOdJSIixAUdWx7m/V+DmYLzBNRRLKcLB76kRHsiUIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNLHezLBAqjnp+Ew+r75ptpfsmaMB8GA1UdIwQY MBaAFNLHiGZB7hAbx7KV/Ybxkj/Cg/PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNlSVprSHVFQnZIc3BYOWh2R1NQOEtEODlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NzAyZDgtM2VhZi00ZDdiLWEzZmUt ZDg5NzU4Y2FkMjJhLzEvMHNlSVprSHVFQnZIc3BYOWh2R1NQOEtEODlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80NzAyZDgtM2VhZi00ZDdiLWEzZmUtZDg5NzU4Y2FkMjJh LzEvMHNlSVprSHVFQnZIc3BYOWh2R1NQOEtEODlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWp7mcL+ zrGR456Av/bNhIEIkbmMURUY1UzXeXJaxj77ErQ6pftY8Y4b14P2TH4N62G1b6Q7 cCYHG+drqXIzQ2Yzxv1Frtml/h6awzthbWpNNUBfCjXAY6/yBSbBrU8WqL1A+fE/ 3ozwpgsBBqVQQ6gVrk1c5SwgYmPxyF2bqAh4K6dsLfL1hXp2mpmnT/IVbPjXPuUR rcW2xv2umbDp7palKmbC54/Ui3L+XxOPOnrJkWwshp+0rfgCPvMagIXSwRS7wkq7 S3nD/ZjGppcGByKG7pfVIoXx01rQEgiVD5Az0hIz9odhz1dDmN6GayFLGhFUDQN8 qUp+VLiw0OM0pQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:41:27 2025 by rpki-client