This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft File: 0F9s96mFiwKHHBx_E9GzOIDpii0.mft (raw, json) Hash identifier: 5rLSx54nAPQUrbtLhUjeWBkxZviPMmKjkiNNH4ZID/c= Subject key identifier: 9C:1A:08:BC:F1:5D:01:9F:4D:10:9B:FC:80:6E:C6:7D:D4:E9:3B:DB Authority key identifier: D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D Certificate issuer: /CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d Certificate serial: 019B3FB5EB44757082D8A29E4C32917E841E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft Manifest number: 0E Signing time: Sun 21 Dec 2025 07:00:45 +0000 Manifest this update: Sun 21 Dec 2025 07:00:45 +0000 Manifest next update: Mon 22 Dec 2025 07:00:45 +0000 Files and hashes: 1: 0F9s96mFiwKHHBx_E9GzOIDpii0.crl (hash: ZvuZCSDlX1609DOKY4ZDyBYlQEhGPNzR1jAMLwte4eE=) 2: 3lFf3-sn7CbCrHiUq-18oHz7T1c.roa (hash: 9Ta5O8FpZyag1SlXhYN4q/r9UzqLiY5msiZgY4NqYTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:eb:44:75:70:82:d8:a2:9e:4c:32:91:7e:84:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d Validity Not Before: Dec 21 07:00:45 2025 GMT Not After : Dec 22 07:00:45 2025 GMT Subject: CN=9c1a08bcf15d019f4d109bfc806ec67dd4e93bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:84:eb:49:eb:26:25:2d:57:2d:d0:b2:da: 9f:0f:f6:c1:78:7d:e6:2c:e8:f7:ec:37:19:2b:b2: 6d:0d:68:11:5c:c0:bd:be:72:1b:72:8c:40:95:72: 15:28:fd:a5:10:d8:95:de:d6:b4:ed:98:88:cb:59: 90:44:d4:ee:87:6e:38:19:db:c3:47:a7:cd:5d:86: 39:10:9b:d4:d0:3e:e4:60:27:e1:21:16:aa:0a:b4: 4a:7e:ef:91:ad:d2:f8:61:72:25:3c:62:2f:5f:4d: 40:30:34:6c:b9:a7:82:5e:5f:42:a0:9a:ed:d4:87: 52:4c:c2:e3:d8:e4:30:e7:9f:df:ff:d2:70:99:77: b4:37:41:95:2e:1b:9f:cd:a8:67:9b:d4:16:61:61: 67:89:ca:80:54:55:c3:60:ed:c8:21:86:18:63:ce: ea:22:40:8b:bf:0a:dc:f9:0c:d9:e8:d6:18:7f:f5: 84:75:13:e2:59:49:2b:2b:66:a8:4b:d9:2e:a0:5b: d1:0e:fb:96:b7:44:7c:2c:2e:0c:d5:b9:6c:20:94: 78:fb:47:14:8d:ff:90:78:5d:29:5a:51:b4:06:37: e0:db:2b:99:08:68:65:af:58:18:01:8e:4b:71:0c: ac:23:5d:17:22:fc:b4:f0:54:fa:66:98:32:01:44: 13:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1A:08:BC:F1:5D:01:9F:4D:10:9B:FC:80:6E:C6:7D:D4:E9:3B:DB X509v3 Authority Key Identifier: keyid:D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8c:56:b2:04:19:6b:62:3e:c1:a3:3c:1a:a2:9d:41:2c:08: b0:d6:0b:b5:1e:f4:98:c4:6a:61:03:a3:ba:92:0d:3c:99:05: 0b:dc:a9:c8:a0:09:7b:90:6c:7d:fc:80:84:98:f0:30:65:e7: c0:c6:fb:1b:cf:12:65:aa:83:d8:95:57:f3:9e:92:52:15:17: f1:22:5e:e9:ad:48:6b:ea:5f:09:1a:ad:44:27:81:17:f8:6e: da:9b:4c:18:05:48:1c:33:43:27:fb:03:31:cc:51:a2:fc:1c: ef:32:ff:46:52:fa:b8:3e:8d:c2:29:13:35:66:bb:b9:15:44: d8:6a:b2:0f:de:7b:44:2e:3b:39:1b:26:52:2f:71:7c:bf:81: 99:a3:20:f5:16:7e:51:9a:cb:f3:f9:76:8a:9e:1a:00:46:74: bf:3e:a8:93:61:7d:db:b6:31:00:74:64:8c:1e:83:f1:8b:20: 00:2f:c8:eb:b8:41:54:c8:5f:ed:2c:e8:38:a6:ee:3c:7a:98: 6c:02:19:83:b0:8b:55:d8:aa:ce:b5:cb:88:12:81:6e:d6:85: cb:e7:44:e1:cb:a0:4d:51:5e:c9:2b:7c:1f:91:f7:1e:f8:f1: 45:12:b3:d5:4d:14:f8:de:9b:92:55:7b:95:4a:69:7e:59:11: d2:71:e0:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tetEdXCC2KKeTDKRfoQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNWY2Y2Y3YTk4NThiMDI4NzFjMWM3ZjEzZDFiMzM4ODBl OThhMmQwHhcNMjUxMjIxMDcwMDQ1WhcNMjUxMjIyMDcwMDQ1WjAzMTEwLwYDVQQD Eyg5YzFhMDhiY2YxNWQwMTlmNGQxMDliZmM4MDZlYzY3ZGQ0ZTkzYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzweE60nrJiUtVy3QstqfD/bBeH3m LOj37DcZK7JtDWgRXMC9vnIbcoxAlXIVKP2lENiV3ta07ZiIy1mQRNTuh244GdvD R6fNXYY5EJvU0D7kYCfhIRaqCrRKfu+RrdL4YXIlPGIvX01AMDRsuaeCXl9CoJrt 1IdSTMLj2OQw55/f/9JwmXe0N0GVLhufzahnm9QWYWFnicqAVFXDYO3IIYYYY87q IkCLvwrc+QzZ6NYYf/WEdRPiWUkrK2aoS9kuoFvRDvuWt0R8LC4M1blsIJR4+0cU jf+QeF0pWlG0Bjfg2yuZCGhlr1gYAY5LcQysI10XIvy08FT6ZpgyAUQTEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwaCLzxXQGfTRCb/IBuxn3U6TvbMB8GA1UdIwQY MBaAFNBfbPephYsChxwcfxPRsziA6YotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zNjRjNzgtYTlmNS00ZTg1LWJkY2Yt MWNhNGNlMDI0Y2UwLzEvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zNjRjNzgtYTlmNS00ZTg1LWJkY2YtMWNhNGNlMDI0Y2Uw LzEvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4xWsgQZ a2I+waM8GqKdQSwIsNYLtR70mMRqYQOjupINPJkFC9ypyKAJe5BsffyAhJjwMGXn wMb7G88SZaqD2JVX856SUhUX8SJe6a1Ia+pfCRqtRCeBF/hu2ptMGAVIHDNDJ/sD McxRovwc7zL/RlL6uD6NwikTNWa7uRVE2GqyD957RC47ORsmUi9xfL+BmaMg9RZ+ UZrL8/l2ip4aAEZ0vz6ok2F927YxAHRkjB6D8YsgAC/I67hBVMhf7SzoOKbuPHqY bAIZg7CLVdiqzrXLiBKBbtaFy+dE4cugTVFeySt8H5H3HvjxRRKz1U0U+N6bklV7 lUppflkR0nHg9g== -----END CERTIFICATE-----Generated at Sun Dec 21 11:03:34 2025 by rpki-client