This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json) Hash identifier: pTufxTSk96cvktI4rgzgsdVzTjaZzWiMJvmYXfeiJ4Y= Subject key identifier: EB:0A:A1:1F:CF:06:D4:BD:6C:FA:A0:DB:F0:4E:37:E4:13:FC:53:76 Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c Certificate serial: 019B59AC93F660806A1E526351ED8AAB5BE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft Manifest number: 14BD Signing time: Fri 26 Dec 2025 08:00:40 +0000 Manifest this update: Fri 26 Dec 2025 08:00:40 +0000 Manifest next update: Sat 27 Dec 2025 08:00:40 +0000 Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: WF8vjskpGpS0vfGEpC/Dynwe26tCh6YCCosH1OmN2zE=) 2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=) 3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:93:f6:60:80:6a:1e:52:63:51:ed:8a:ab:5b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c Validity Not Before: Dec 26 08:00:40 2025 GMT Not After : Dec 27 08:00:40 2025 GMT Subject: CN=eb0aa11fcf06d4bd6cfaa0dbf04e37e413fc5376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ba:a5:3e:c7:8e:23:81:17:3f:ae:8c:6d:55: 09:30:c3:31:89:b7:21:53:1c:8e:b1:b7:ad:9f:19: 7b:73:e8:87:fb:25:c5:9f:3e:b7:3c:95:fa:76:6f: 4a:44:4b:f1:a4:28:84:03:f6:ea:6f:30:75:34:c4: bd:e1:5f:a7:38:ec:6e:ae:07:84:a3:97:d4:43:8c: 39:6b:5a:2d:90:81:d3:8b:db:4c:c1:28:75:ad:ac: 18:3c:2f:a8:d8:67:be:4e:af:ef:c9:b8:91:1c:fc: 01:34:8b:dd:07:a7:be:8e:d1:85:55:4c:e9:72:3c: 1c:ca:7b:f5:ef:5d:d5:90:35:0a:11:25:0b:a9:9a: b5:06:e2:8c:0f:d9:79:4e:fa:73:1a:02:84:c0:1c: d4:50:2a:69:8c:ab:10:89:be:a6:d3:be:bc:7d:46: 33:5e:a4:c8:2a:6d:52:ca:df:9c:9d:0b:7a:29:cd: 9d:0d:84:7a:55:77:95:9d:25:c2:73:31:f3:de:62: 15:8e:44:23:aa:01:b2:cb:48:39:77:18:9e:56:ca: 30:9d:a4:45:5e:2d:a8:02:f9:9d:44:54:ae:b7:f8: aa:51:75:03:5a:75:6e:d1:b1:da:7d:6b:ee:4c:a0: 60:12:1a:fa:99:98:cb:6e:e5:89:b0:49:01:5a:b5: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0A:A1:1F:CF:06:D4:BD:6C:FA:A0:DB:F0:4E:37:E4:13:FC:53:76 X509v3 Authority Key Identifier: keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5a:09:d9:23:a4:88:10:d8:c3:8b:dd:d6:5f:25:3d:23:c9: fa:37:a5:97:59:92:b9:e5:05:02:ff:ee:aa:cd:2e:d9:63:f1: 27:c6:e3:1e:24:5a:20:9e:29:a0:34:df:68:3c:e5:6a:b9:ff: 99:d6:92:c1:0d:bc:5e:b8:da:c0:e6:2e:1f:1e:8e:4b:3e:0c: 6b:b0:ce:34:64:1a:87:44:1d:7a:23:e4:6c:4a:a7:c8:6c:ff: b2:a1:9a:e8:3b:2d:26:f8:29:92:cc:18:82:8d:be:64:86:be: 73:21:d6:dc:1c:21:89:91:13:58:5d:80:ca:a3:a2:69:78:23: 68:bb:1e:1a:95:04:e9:20:77:c7:80:be:27:82:32:03:6e:35: 68:02:fd:ee:9f:13:6f:9c:4a:4c:9a:e3:63:7f:b8:62:e7:76: a0:81:bb:08:09:05:e6:83:02:d5:fc:6e:ea:40:4b:93:50:dd: 8e:cb:c4:5c:4f:b7:ed:8d:54:ea:d1:0a:d9:bd:e4:a4:d2:83: 80:d7:ec:87:3d:6b:ed:82:9c:a1:2b:60:20:b5:f5:ed:0a:a1: aa:2d:c1:b0:67:9e:2a:cd:92:4d:b6:1e:e6:dc:b4:60:e7:00: e5:73:3b:6b:b8:26:d8:61:3e:3a:7b:f1:cd:3a:2a:e6:95:d4: c7:e4:cb:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJP2YIBqHlJjUe2Kq1vmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMmQ0ZDJmYjc1YTc1NTlhMjBmNzk1NDhjNDU4NTQyZmQw YTlhNGMwHhcNMjUxMjI2MDgwMDQwWhcNMjUxMjI3MDgwMDQwWjAzMTEwLwYDVQQD EyhlYjBhYTExZmNmMDZkNGJkNmNmYWEwZGJmMDRlMzdlNDEzZmM1Mzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLqlPseOI4EXP66MbVUJMMMxibch UxyOsbetnxl7c+iH+yXFnz63PJX6dm9KREvxpCiEA/bqbzB1NMS94V+nOOxurgeE o5fUQ4w5a1otkIHTi9tMwSh1rawYPC+o2Ge+Tq/vybiRHPwBNIvdB6e+jtGFVUzp cjwcynv1713VkDUKESULqZq1BuKMD9l5TvpzGgKEwBzUUCppjKsQib6m0768fUYz XqTIKm1Syt+cnQt6Kc2dDYR6VXeVnSXCczHz3mIVjkQjqgGyy0g5dxieVsownaRF Xi2oAvmdRFSut/iqUXUDWnVu0bHafWvuTKBgEhr6mZjLbuWJsEkBWrWQ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsKoR/PBtS9bPqg2/BON+QT/FN2MB8GA1UdIwQY MBaAFNEtTS+3WnVZog95VIxFhUL9CppMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUt MWVlY2Q1ODVkYjhjLzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUtMWVlY2Q1ODVkYjhj LzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1oJ2SOk iBDYw4vd1l8lPSPJ+jell1mSueUFAv/uqs0u2WPxJ8bjHiRaIJ4poDTfaDzlarn/ mdaSwQ28XrjawOYuHx6OSz4Ma7DONGQah0QdeiPkbEqnyGz/sqGa6DstJvgpkswY go2+ZIa+cyHW3BwhiZETWF2AyqOiaXgjaLseGpUE6SB3x4C+J4IyA241aAL97p8T b5xKTJrjY3+4Yud2oIG7CAkF5oMC1fxu6kBLk1DdjsvEXE+37Y1U6tEK2b3kpNKD gNfshz1r7YKcoStgILX17Qqhqi3BsGeeKs2STbYe5ty0YOcA5XM7a7gm2GE+Onvx zToq5pXUx+TL9w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:19 2025 by rpki-client