This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft File: 0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json) Hash identifier: yRG5b9zEq0L470Ajsxw+kHZPYYZHxJW1A7V40tYIDWI= Subject key identifier: 23:C3:06:02:49:9F:F6:C0:E8:F7:74:46:2E:BD:A4:3E:EF:24:F3:39 Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7 Certificate issuer: /CN=d0d852703295ecf8b97201f916310f88f4c08ab7 Certificate serial: 019B32D6AEF93C38003B2EBB3E448D9D5099 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:01:28 +0000 Manifest this update: Thu 18 Dec 2025 19:01:28 +0000 Manifest next update: Fri 19 Dec 2025 19:01:28 +0000 Files and hashes: 1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: X/wzjTgmDuVHkbBekVvn6r/RoG9321zw6wKCOdWWMQo=) 2: YlrLpRr6jHVjZjhSp57OuuJNoDA.roa (hash: 3sLpE4GcZV46VhUEypK4IVzC6Mp0SDmiK7VScSwFOfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:ae:f9:3c:38:00:3b:2e:bb:3e:44:8d:9d:50:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7 Validity Not Before: Dec 18 19:01:28 2025 GMT Not After : Dec 19 19:01:28 2025 GMT Subject: CN=23c30602499ff6c0e8f774462ebda43eef24f339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3f:59:55:e6:ca:18:38:29:a8:3b:6f:03:83: c6:b4:d8:82:67:ef:0f:19:65:6e:54:53:42:1a:c6: 3a:ee:d9:33:7c:bc:f1:94:21:d1:d9:1d:2a:53:27: 57:a7:01:76:59:ba:30:a2:2b:14:06:02:47:1c:59: 9a:9f:ef:47:d3:91:b5:f4:6f:1c:dc:a3:3c:dc:36: 85:4b:ea:0a:ae:d4:25:9c:36:87:01:49:3f:ba:11: fa:13:09:06:a2:13:f7:4f:9a:47:cd:3b:60:35:56: 08:8f:07:72:21:e0:b5:04:b6:9b:05:80:54:f3:40: 70:ca:e9:e6:c1:46:0f:d0:a0:33:9d:6d:d0:3f:64: 52:40:16:2a:cb:37:99:2e:0f:d3:e3:13:35:92:10: 67:f4:ba:12:03:dc:89:eb:65:2d:01:1d:70:0f:ed: ae:01:06:43:64:7a:0a:9e:01:0f:cd:f1:78:20:72: d6:89:cb:91:6d:27:38:66:f8:48:4c:60:4a:f6:80: 85:04:55:37:a2:ad:ba:b9:e6:43:b7:0b:64:32:ad: fa:22:75:35:09:f5:3e:a5:e9:00:e5:75:aa:46:db: 52:67:c7:75:d5:36:4a:ec:da:a6:00:ee:c9:d4:d3: 6b:39:01:f8:0d:33:ea:bb:e6:97:55:bb:47:e7:84: da:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C3:06:02:49:9F:F6:C0:E8:F7:74:46:2E:BD:A4:3E:EF:24:F3:39 X509v3 Authority Key Identifier: keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:71:dc:fd:fc:fd:ac:32:35:15:73:55:e1:c5:53:b1:12:10: 03:7e:8b:74:cc:60:22:cb:ce:b0:42:2a:52:7b:3b:02:e8:67: 1c:40:26:6d:34:99:29:a8:f2:ea:6d:af:03:41:ff:85:be:96: 6d:28:57:16:6b:6f:a5:60:e2:44:d3:4d:08:f0:e5:1a:8c:60: 2f:d9:72:4e:9f:96:21:b4:fa:b9:94:aa:b6:5d:e6:2d:f6:b2: 31:d5:6d:66:7a:a8:76:a7:13:2f:17:8d:c6:22:39:25:d9:5a: ec:ec:74:fd:a6:71:af:ca:03:f3:cd:fb:02:1d:fb:37:c1:8f: 6d:e8:27:74:99:43:61:e0:81:33:f3:bc:6d:3b:20:97:04:65: ce:a0:f9:89:14:ce:23:22:a7:6d:40:33:49:8b:df:00:7c:c0: ac:77:86:20:c9:af:1c:c0:6d:d0:96:93:75:9e:b3:27:d1:3b: b6:1b:73:3e:88:a3:9e:f3:ee:1e:8e:14:01:66:c1:ca:6e:32: ea:84:76:61:c1:7a:cb:48:80:e8:58:f5:89:e8:e6:d5:f9:cf: 41:29:d0:c7:9e:31:13:4c:4c:92:c9:65:7e:1a:98:2f:6e:96: f2:5c:c9:9b:73:5e:9a:1d:5d:c5:3a:4c:9c:3d:47:e1:f7:7a: 40:d8:4f:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1q75PDgAOy67PkSNnVCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZDg1MjcwMzI5NWVjZjhiOTcyMDFmOTE2MzEwZjg4ZjRj MDhhYjcwHhcNMjUxMjE4MTkwMTI4WhcNMjUxMjE5MTkwMTI4WjAzMTEwLwYDVQQD EygyM2MzMDYwMjQ5OWZmNmMwZThmNzc0NDYyZWJkYTQzZWVmMjRmMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z9ZVebKGDgpqDtvA4PGtNiCZ+8P GWVuVFNCGsY67tkzfLzxlCHR2R0qUydXpwF2WbowoisUBgJHHFman+9H05G19G8c 3KM83DaFS+oKrtQlnDaHAUk/uhH6EwkGohP3T5pHzTtgNVYIjwdyIeC1BLabBYBU 80BwyunmwUYP0KAznW3QP2RSQBYqyzeZLg/T4xM1khBn9LoSA9yJ62UtAR1wD+2u AQZDZHoKngEPzfF4IHLWicuRbSc4ZvhITGBK9oCFBFU3oq26ueZDtwtkMq36InU1 CfU+pekA5XWqRttSZ8d11TZK7NqmAO7J1NNrOQH4DTPqu+aXVbtH54TaIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPDBgJJn/bA6Pd0Ri69pD7vJPM5MB8GA1UdIwQY MBaAFNDYUnAylez4uXIB+RYxD4j0wIq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEt YThhYWY4ODZjODIwLzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEtYThhYWY4ODZjODIw LzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnHc/fz9 rDI1FXNV4cVTsRIQA36LdMxgIsvOsEIqUns7AuhnHEAmbTSZKajy6m2vA0H/hb6W bShXFmtvpWDiRNNNCPDlGoxgL9lyTp+WIbT6uZSqtl3mLfayMdVtZnqodqcTLxeN xiI5Jdla7Ox0/aZxr8oD8837Ah37N8GPbegndJlDYeCBM/O8bTsglwRlzqD5iRTO IyKnbUAzSYvfAHzArHeGIMmvHMBt0JaTdZ6zJ9E7thtzPoijnvPuHo4UAWbBym4y 6oR2YcF6y0iA6Fj1iejm1fnPQSnQx54xE0xMksllfhqYL26W8lzJm3Nemh1dxTpM nD1H4fd6QNhPkA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:54:18 2025 by rpki-client