This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json) Hash identifier: 8OsxgY+IkoRCnWYnh9Ih1nIxKmsGNT1nGHAMp5VGwDk= Subject key identifier: 22:2F:39:72:2E:FC:E7:0C:60:07:11:CE:51:EE:78:59:41:EB:C4:B3 Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83 Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183 Certificate serial: 019B21E2A49D80788664F83DFFBD57D3DC7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft Manifest number: 05AB Signing time: Mon 15 Dec 2025 12:00:59 +0000 Manifest this update: Mon 15 Dec 2025 12:00:59 +0000 Manifest next update: Tue 16 Dec 2025 12:00:59 +0000 Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: 243GYYGlylmMxz6LEPe+14gHEF80pqEXwRAqwPYG+VY=) 2: IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa (hash: /4IVw0ESBk+fPfscovcApWNjH6K3fkBcjRs0stf1FDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:a4:9d:80:78:86:64:f8:3d:ff:bd:57:d3:dc:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183 Validity Not Before: Dec 15 12:00:59 2025 GMT Not After : Dec 16 12:00:59 2025 GMT Subject: CN=222f39722efce70c600711ce51ee785941ebc4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:bc:21:3b:cd:ef:b3:e3:14:29:b7:99:a4: 67:48:83:16:a7:21:36:e8:04:44:b6:ab:b3:22:37: 8b:23:59:a8:d4:d4:60:8d:56:c7:6a:e5:08:e8:8a: ca:bc:30:13:6f:e1:5c:27:93:7f:98:a8:c0:b8:d5: db:77:62:c7:61:4c:11:85:25:98:f0:6e:b8:2b:f9: a0:37:ec:4a:c2:77:ac:42:da:11:db:f6:93:aa:4a: ba:9e:9c:bc:3e:5a:b2:e6:e1:0f:3d:2a:f9:97:14: b4:56:1b:2a:72:f7:ab:01:2b:44:93:67:f8:11:94: f4:61:c7:63:66:09:55:cc:4f:23:c3:bc:c2:37:89: a7:94:47:cc:6c:1b:78:ca:bd:4c:23:59:af:70:d2: 6d:78:25:dc:e3:7b:33:26:9a:e3:f7:92:f4:bf:5b: 06:02:71:0d:6d:8e:2c:c4:65:81:0b:53:7c:31:d7: bf:d2:3a:38:c7:4c:21:b4:f7:f9:03:bf:9f:7c:55: 76:a0:a9:ed:3d:b5:c3:e8:d8:98:ab:6b:45:1a:70: 26:e8:41:90:11:76:6b:f9:23:7c:db:d5:d5:d8:c8: f5:86:14:ef:f8:1a:13:e4:1a:41:0b:8f:06:c4:3d: 99:47:8c:a8:08:37:af:50:1d:e6:65:dc:9f:21:ab: 92:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2F:39:72:2E:FC:E7:0C:60:07:11:CE:51:EE:78:59:41:EB:C4:B3 X509v3 Authority Key Identifier: keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:99:69:de:d9:60:26:87:e6:9f:a4:09:b2:22:9e:6f:0c:e4: 36:07:f9:a1:46:9f:65:1c:33:bb:85:6b:09:39:6c:43:dd:ff: de:9f:16:3c:18:dd:20:ba:90:3d:42:44:c0:9f:7d:e7:d5:6f: b0:93:d4:bc:8d:81:2f:12:07:43:cf:49:14:93:a4:29:5e:a0: 16:f5:bc:9e:ed:cd:df:ba:44:70:24:8a:80:96:3f:a3:13:5c: 99:6b:7c:4c:7e:13:51:8d:c2:39:b8:d3:07:f9:1e:32:bd:c8: 93:f1:72:77:3d:d2:15:c5:05:17:a7:27:cb:f6:eb:14:ec:ab: 46:48:a4:5f:52:66:e7:9c:50:4d:aa:99:76:b7:5c:3e:fa:4f: 24:35:3e:0d:fa:97:8d:f5:b3:35:1c:b1:a4:8f:07:9b:59:b6: 55:1d:83:47:eb:24:a9:19:d7:e3:a3:10:0d:3d:de:01:08:a3: 67:f7:8b:1a:ed:9b:0f:1a:7f:99:05:8c:b2:8e:5f:40:28:1b: 29:05:5d:c2:72:0d:d1:01:b2:b4:61:d8:14:25:af:e6:78:cf: 68:52:bd:f9:fa:07:61:fc:5b:af:8b:b2:75:c7:38:08:0c:44: 33:45:ce:07:78:bb:39:3b:26:b0:89:45:12:4b:22:f0:44:86: a6:92:a1:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4qSdgHiGZPg9/71X09x/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTM0YzcyODhhMGMxN2EzM2I4YjVmZThjNTgwNjZiNDQ0 MmYxODMwHhcNMjUxMjE1MTIwMDU5WhcNMjUxMjE2MTIwMDU5WjAzMTEwLwYDVQQD EygyMjJmMzk3MjJlZmNlNzBjNjAwNzExY2U1MWVlNzg1OTQxZWJjNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuO8ITvN77PjFCm3maRnSIMWpyE2 6AREtquzIjeLI1mo1NRgjVbHauUI6IrKvDATb+FcJ5N/mKjAuNXbd2LHYUwRhSWY 8G64K/mgN+xKwnesQtoR2/aTqkq6npy8Plqy5uEPPSr5lxS0VhsqcverAStEk2f4 EZT0YcdjZglVzE8jw7zCN4mnlEfMbBt4yr1MI1mvcNJteCXc43szJprj95L0v1sG AnENbY4sxGWBC1N8Mde/0jo4x0whtPf5A7+ffFV2oKntPbXD6NiYq2tFGnAm6EGQ EXZr+SN829XV2Mj1hhTv+BoT5BpBC48GxD2ZR4yoCDevUB3mZdyfIauSBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIvOXIu/OcMYAcRzlHueFlB68SzMB8GA1UdIwQY MBaAFNITTHKIoMF6M7i1/oxYBmtEQvGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kZGFmNDctNGU2ZC00OTk0LTg3N2It MmE4OWRmMWFmMTZhLzEvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kZGFmNDctNGU2ZC00OTk0LTg3N2ItMmE4OWRmMWFmMTZh LzEvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZlp3tlg Jofmn6QJsiKebwzkNgf5oUafZRwzu4VrCTlsQ93/3p8WPBjdILqQPUJEwJ9959Vv sJPUvI2BLxIHQ89JFJOkKV6gFvW8nu3N37pEcCSKgJY/oxNcmWt8TH4TUY3CObjT B/keMr3Ik/Fydz3SFcUFF6cny/brFOyrRkikX1Jm55xQTaqZdrdcPvpPJDU+DfqX jfWzNRyxpI8Hm1m2VR2DR+skqRnX46MQDT3eAQijZ/eLGu2bDxp/mQWMso5fQCgb KQVdwnIN0QGytGHYFCWv5njPaFK9+foHYfxbr4uydcc4CAxEM0XOB3i7OTsmsIlF Eksi8ESGppKhoQ== -----END CERTIFICATE-----Generated at Mon Dec 15 14:45:15 2025 by rpki-client