This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json) Hash identifier: 0HbpmMd/diI6vL25w4ogz1XS5wx36IjK15izc0NVClQ= Subject key identifier: A6:DE:20:3D:74:78:31:6C:37:ED:3D:FA:74:03:0A:ED:31:2E:FB:8E Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c Certificate serial: 019B1EAA8811DB4B007709A27D4E8D61795B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft Manifest number: 0561 Signing time: Sun 14 Dec 2025 21:00:50 +0000 Manifest this update: Sun 14 Dec 2025 21:00:50 +0000 Manifest next update: Mon 15 Dec 2025 21:00:50 +0000 Files and hashes: 1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: ygd02E/tv/9YR/Sg3odU9wQ+ox2SweyZExEbzvXIfiY=) 2: NJkr6UX1dyZbz9hAAHSEva9N1dU.roa (hash: dH1+iQ8jrIWNeK4bcaaw6PWPrPpzci2xfb2T6H4KeWY=) 3: nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa (hash: b96JAOO8n31SIeeTv1ll8vmQplePANc0Xbj3yOfw8j0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:88:11:db:4b:00:77:09:a2:7d:4e:8d:61:79:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c Validity Not Before: Dec 14 21:00:50 2025 GMT Not After : Dec 15 21:00:50 2025 GMT Subject: CN=a6de203d7478316c37ed3dfa74030aed312efb8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2e:e9:13:89:7b:95:33:18:8b:34:8d:c8:e4: 79:fe:83:e3:b4:cc:f0:5e:91:56:af:93:b4:33:49: 57:70:60:e2:f4:d6:d2:29:2e:29:72:f3:1b:d9:63: 9d:9f:70:52:fd:3a:f3:65:89:57:d5:a2:fb:f7:27: 1a:06:a3:98:f0:ae:82:ca:51:61:84:59:72:43:96: c9:ca:27:2a:bd:03:5a:82:ce:99:76:f4:97:45:67: 69:be:75:f4:81:ef:b3:8e:4b:4b:e6:fa:65:90:6e: a2:37:25:49:dc:21:ed:73:98:ac:23:48:d6:e5:d4: b0:a8:25:34:4c:90:8c:ee:22:78:b9:51:c7:2b:12: cc:cb:88:27:43:16:df:f2:6e:38:9e:97:56:42:c2: 50:a8:09:cc:4b:32:18:da:24:55:ed:48:5a:90:e8: ee:eb:2b:73:35:ac:5a:61:98:b6:4d:cc:d6:17:3e: 2a:40:e8:e1:f5:a6:ec:10:8c:c3:39:91:f3:76:70: 50:11:97:ef:8c:ef:81:5d:5b:29:ca:6d:da:46:77: 8c:00:a5:34:ea:26:bf:9a:13:8b:f6:cd:0c:8d:95: 5e:a7:82:f9:0a:b8:8f:2e:d0:40:23:e0:da:bf:56: f4:df:be:cc:0f:86:27:b4:af:ed:54:67:85:88:36: 32:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DE:20:3D:74:78:31:6C:37:ED:3D:FA:74:03:0A:ED:31:2E:FB:8E X509v3 Authority Key Identifier: keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b9:d7:5b:0f:c2:c7:21:08:f0:cf:a2:c0:b2:ae:49:70:04: 19:82:22:e6:84:86:06:a8:4a:b4:2a:0c:b6:ec:ef:2c:40:0d: f3:49:cb:ab:e9:17:6a:89:d1:52:fd:76:91:a9:68:54:02:6f: 4e:48:6b:86:1d:d7:a0:0a:e8:f0:c2:66:a6:b7:60:82:17:6a: 23:77:6f:94:26:a0:e9:37:4f:d5:b5:50:51:6a:91:d9:7c:16: 53:aa:c4:84:1d:fb:66:3d:15:40:e6:87:81:97:7b:53:1f:51: 5d:97:67:cb:81:c8:6e:8a:4e:60:c5:bd:31:76:ef:28:99:9f: 9a:52:d6:5b:92:14:0a:d2:07:c2:bd:58:f7:02:46:59:9b:00: b8:8e:7b:94:91:76:e3:39:d0:f2:7d:82:98:81:ef:3b:18:86: 0c:21:c0:af:97:63:63:86:23:95:08:79:87:cc:b5:62:52:9a: 87:0d:ff:8e:90:ea:7e:69:84:50:2b:e8:77:92:3a:ef:eb:69: ea:61:96:3e:c1:65:00:07:5d:ed:b1:91:4a:79:dd:e3:24:a3: bb:04:f2:8a:cc:77:f6:4c:ed:34:8d:39:24:86:3e:7d:f3:11: b9:4b:99:ec:2a:91:0e:37:f2:f4:a8:8e:6f:37:d9:27:83:0c: 46:a1:38:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqogR20sAdwmifU6NYXlbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNmU0NTM4ZjFkZGVhNzdmNTczOTZiYjkzYjkwN2YxNTJk ZjY5N2MwHhcNMjUxMjE0MjEwMDUwWhcNMjUxMjE1MjEwMDUwWjAzMTEwLwYDVQQD EyhhNmRlMjAzZDc0NzgzMTZjMzdlZDNkZmE3NDAzMGFlZDMxMmVmYjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C7pE4l7lTMYizSNyOR5/oPjtMzw XpFWr5O0M0lXcGDi9NbSKS4pcvMb2WOdn3BS/TrzZYlX1aL79ycaBqOY8K6CylFh hFlyQ5bJyicqvQNags6ZdvSXRWdpvnX0ge+zjktL5vplkG6iNyVJ3CHtc5isI0jW 5dSwqCU0TJCM7iJ4uVHHKxLMy4gnQxbf8m44npdWQsJQqAnMSzIY2iRV7UhakOju 6ytzNaxaYZi2TczWFz4qQOjh9absEIzDOZHzdnBQEZfvjO+BXVspym3aRneMAKU0 6ia/mhOL9s0MjZVep4L5CriPLtBAI+Dav1b0377MD4YntK/tVGeFiDYyyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbeID10eDFsN+09+nQDCu0xLvuOMB8GA1UdIwQY MBaAFNJuRTjx3ep39XOWu5O5B/FS32l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2Qt NWRlOTlhNTJhYTM5LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2QtNWRlOTlhNTJhYTM5 LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7nXWw/C xyEI8M+iwLKuSXAEGYIi5oSGBqhKtCoMtuzvLEAN80nLq+kXaonRUv12kaloVAJv Tkhrhh3XoAro8MJmprdgghdqI3dvlCag6TdP1bVQUWqR2XwWU6rEhB37Zj0VQOaH gZd7Ux9RXZdny4HIbopOYMW9MXbvKJmfmlLWW5IUCtIHwr1Y9wJGWZsAuI57lJF2 4znQ8n2CmIHvOxiGDCHAr5djY4YjlQh5h8y1YlKahw3/jpDqfmmEUCvod5I67+tp 6mGWPsFlAAdd7bGRSnnd4ySjuwTyisx39kztNI05JIY+ffMRuUuZ7CqRDjfy9KiO bzfZJ4MMRqE4oA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:24:20 2025 by rpki-client