This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json) Hash identifier: fuExGf/QyIuLIPsbbhOZfOlxY0upDhwcyTWAW5AAZIE= Subject key identifier: 1F:2F:09:47:7C:F1:F3:CC:DF:99:DF:65:2D:9B:69:C9:C2:C7:CF:B9 Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd Certificate serial: 019B1A28B314934C806FA910BE3359C21DFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft Manifest number: 0BD7 Signing time: Sun 14 Dec 2025 00:00:33 +0000 Manifest this update: Sun 14 Dec 2025 00:00:33 +0000 Manifest next update: Mon 15 Dec 2025 00:00:33 +0000 Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: wQ1U9usjkiDyds7QIJAH3eLbiOrywjDxDzm/yt1sEL4=) 2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:b3:14:93:4c:80:6f:a9:10:be:33:59:c2:1d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd Validity Not Before: Dec 14 00:00:33 2025 GMT Not After : Dec 15 00:00:33 2025 GMT Subject: CN=1f2f09477cf1f3ccdf99df652d9b69c9c2c7cfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:7b:e2:89:31:90:dc:67:c6:8b:16:4e:ae: d7:e8:30:fa:c5:3f:52:04:de:c0:cc:2f:cb:25:8b: ab:0c:7e:fb:d3:81:9b:9e:bb:39:71:7e:27:da:32: 84:15:88:ef:fb:18:c0:b7:89:de:74:8a:d9:32:00: 13:32:24:9e:96:10:8a:f0:98:fe:1f:60:87:fc:20: bd:e8:41:61:4b:17:a3:40:9a:a2:84:d7:76:2e:bc: a0:d8:95:f1:1a:9b:1d:31:1f:da:76:58:46:fe:d7: 5e:db:f3:fa:51:d4:de:7a:1f:d2:45:bc:d6:aa:ca: fb:aa:57:33:6d:6c:f3:f9:e3:85:50:21:8a:c9:ba: 96:75:e8:51:9d:6b:3d:af:8a:99:22:e3:7a:93:72: 05:d9:a4:38:63:5b:92:29:61:29:f5:b1:fc:4c:2b: 97:4c:91:f5:a8:15:ad:e6:3c:05:57:b0:d3:21:fd: 36:e0:ab:cb:df:1b:a5:4a:59:04:09:cf:32:2f:a4: ba:be:14:5d:28:b3:23:e1:d9:7c:ac:43:2f:75:6c: 39:d7:76:d2:7d:82:d4:0f:ce:97:5b:8b:21:3c:01: 74:3a:31:5a:b8:f4:41:35:1b:bb:ed:7d:1a:dd:b1: e5:3d:bc:e9:50:24:f5:ac:b5:c6:d6:15:b4:f7:c0: db:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2F:09:47:7C:F1:F3:CC:DF:99:DF:65:2D:9B:69:C9:C2:C7:CF:B9 X509v3 Authority Key Identifier: keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ad:82:63:1b:77:fe:38:49:88:d8:31:e7:77:04:69:3f:90: 23:93:d9:46:93:5b:72:98:13:ba:47:01:6f:0f:72:e7:2a:1a: bc:c8:ae:ad:8a:d2:7d:7a:5c:48:ad:9c:a2:fc:9d:d1:df:33: 21:2e:dc:42:04:23:00:f6:db:d7:45:fb:42:c3:62:0d:3e:9b: 8b:44:bd:83:b0:b2:6b:29:3d:80:8b:71:d6:79:b3:a7:1d:a1: d3:a4:4b:2e:08:82:2d:5b:28:c2:cf:0a:ef:e0:19:d2:e4:04: e5:c5:38:25:5c:8b:b3:b1:1a:65:e9:0b:57:60:d2:45:bb:8b: dc:c2:15:38:2c:e2:63:ca:ae:73:ac:00:24:9c:a0:32:d0:ff: e6:4c:1b:dd:1b:06:95:ad:85:1f:9c:82:30:8c:e8:4c:4e:ac: 57:71:a4:7c:e4:4b:b8:9c:91:58:76:ed:d1:c2:c6:2b:67:f4: 8b:bc:01:bc:6a:42:b5:bc:e9:51:47:fd:36:9f:70:47:01:d7: aa:cb:7e:c2:9f:cb:88:43:22:9c:c5:07:56:51:4b:b6:b5:e1: 00:0d:ad:28:0e:4f:93:b2:71:fc:9d:41:da:05:5e:96:22:41: 12:7b:0e:3d:32:ba:a7:83:cf:85:4a:27:cf:ea:17:e2:03:36: 69:2c:68:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKLMUk0yAb6kQvjNZwh37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1 YmJjZGQwHhcNMjUxMjE0MDAwMDMzWhcNMjUxMjE1MDAwMDMzWjAzMTEwLwYDVQQD EygxZjJmMDk0NzdjZjFmM2NjZGY5OWRmNjUyZDliNjljOWMyYzdjZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiN74okxkNxnxosWTq7X6DD6xT9S BN7AzC/LJYurDH7704Gbnrs5cX4n2jKEFYjv+xjAt4nedIrZMgATMiSelhCK8Jj+ H2CH/CC96EFhSxejQJqihNd2Lryg2JXxGpsdMR/adlhG/tde2/P6UdTeeh/SRbzW qsr7qlczbWzz+eOFUCGKybqWdehRnWs9r4qZIuN6k3IF2aQ4Y1uSKWEp9bH8TCuX TJH1qBWt5jwFV7DTIf024KvL3xulSlkECc8yL6S6vhRdKLMj4dl8rEMvdWw513bS fYLUD86XW4shPAF0OjFauPRBNRu77X0a3bHlPbzpUCT1rLXG1hW098DbAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8vCUd88fPM35nfZS2bacnCx8+5MB8GA1UdIwQY MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt YmM1YWI4MTk4N2YwLzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAja2CYxt3 /jhJiNgx53cEaT+QI5PZRpNbcpgTukcBbw9y5yoavMiurYrSfXpcSK2covyd0d8z IS7cQgQjAPbb10X7QsNiDT6bi0S9g7Cyayk9gItx1nmzpx2h06RLLgiCLVsows8K 7+AZ0uQE5cU4JVyLs7EaZekLV2DSRbuL3MIVOCziY8quc6wAJJygMtD/5kwb3RsG la2FH5yCMIzoTE6sV3GkfORLuJyRWHbt0cLGK2f0i7wBvGpCtbzpUUf9Np9wRwHX qst+wp/LiEMinMUHVlFLtrXhAA2tKA5Pk7Jx/J1B2gVeliJBEnsOPTK6p4PPhUon z+oX4gM2aSxolA== -----END CERTIFICATE-----Generated at Sun Dec 14 08:37:11 2025 by rpki-client