This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft File: 0f00NtehmnND-oANh6Aa8YPaMYs.mft (raw, json) Hash identifier: GJMmT3wc8grc0L78GYbz+mUszuCTzDyKQFNDLo4oShw= Subject key identifier: B4:4D:C2:E8:78:5E:4F:5C:F9:DC:A2:27:93:ED:F7:CC:DF:90:15:2D Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B Certificate issuer: /CN=d1fd3436d7a19a7343fa800d87a01af183da318b Certificate serial: 019B0F6EA8F85553813D16323287FDFB30B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft Manifest number: 0D7D Signing time: Thu 11 Dec 2025 22:01:08 +0000 Manifest this update: Thu 11 Dec 2025 22:01:08 +0000 Manifest next update: Fri 12 Dec 2025 22:01:08 +0000 Files and hashes: 1: 0f00NtehmnND-oANh6Aa8YPaMYs.crl (hash: Z/wl2NBo+iNZIsNz7fnPQTOXCvpo6yAT9GI6Tmx1o5c=) 2: 289E-Jj1-_NHnfIspmJ6dDyJHMo.roa (hash: WdW5apU9mzQj50OlelJWc6bz8hGD+pm8qBunEBj3yw4=) 3: Cs1qBn4VjrBIRHmPJXLiE1xFxCY.roa (hash: MWgCuKpBS+l+AyVioTFlRoxqt43GEYXQ/PHcMYuFOog=) 4: h6nXa6s8OWHMrQG1DSMZKlfJDE8.roa (hash: oPs+na6jf/GLFYpEpQKvloInu3ZuLoam22sOPdiiyEs=) 5: iW93Iii_wpRaBJx4UitIZE8Hirs.roa (hash: nFhRjV7MRzVZ4mQI/ZjUoZj1OD4mh/1+uDWJfZv9Rc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:a8:f8:55:53:81:3d:16:32:32:87:fd:fb:30:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b Validity Not Before: Dec 11 22:01:08 2025 GMT Not After : Dec 12 22:01:08 2025 GMT Subject: CN=b44dc2e8785e4f5cf9dca22793edf7ccdf90152d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:24:dc:da:10:a0:d0:46:f2:4c:7f:a5:a9: 68:34:46:c6:a8:67:64:03:d1:d3:78:7f:29:63:d8: 1b:d9:55:42:1f:e6:14:de:00:32:c9:ae:35:d9:54: c9:94:40:59:9f:ff:b9:c9:fd:df:c2:4c:20:ef:ba: fe:cb:cb:ed:ed:93:7a:68:ae:d8:71:56:86:50:57: 5b:2b:a0:34:24:3b:06:23:e8:01:00:9a:90:9a:41: cf:93:8a:99:31:74:c6:ac:1b:d3:67:67:eb:c9:96: ad:86:1a:b3:8b:f1:c5:41:cf:c7:39:5f:e0:6f:3e: 72:e5:75:e1:82:a1:91:10:c6:71:f3:c4:aa:8a:e6: 26:28:c9:89:62:e8:74:b1:50:ff:19:ac:c7:f0:94: 2f:d3:28:4a:11:53:64:8d:a8:a1:3c:e7:15:8e:8f: 7e:49:74:07:23:cc:a6:59:08:ea:79:c7:f7:8f:cf: 8a:3b:4b:b9:2e:eb:72:c0:87:a3:32:de:2c:5d:bc: f6:2d:76:55:b8:85:ee:b8:aa:78:3a:26:d2:d2:6b: ea:bb:d8:5e:f2:fe:49:3b:2c:fa:ef:2b:9b:71:aa: 53:57:1e:2c:a5:cf:d1:97:34:9d:b5:17:13:dd:2b: 16:c4:53:09:05:b5:b4:78:25:51:a0:df:bb:f1:57: d2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4D:C2:E8:78:5E:4F:5C:F9:DC:A2:27:93:ED:F7:CC:DF:90:15:2D X509v3 Authority Key Identifier: keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:78:5e:e1:55:28:f3:86:4d:28:41:41:90:ba:89:8d:62:4c: 69:f0:a0:d0:0d:f0:c0:8e:06:79:e8:f0:79:e2:ed:43:29:89: 95:c1:63:a5:6b:01:40:54:80:16:73:61:4c:2c:f1:db:dc:5f: 50:74:15:e2:71:7f:ae:77:e1:3a:78:e8:87:d8:cb:88:33:96: f3:61:d3:cc:c6:10:5a:a1:0c:5e:c4:73:ce:69:7f:57:25:d4: 5f:f8:b6:a2:13:d3:d3:92:42:a8:f8:ff:09:5b:9e:01:06:45: 60:67:b7:af:a1:2b:dd:9b:e4:2d:02:3b:3e:90:97:2f:32:5c: 43:3c:05:c3:2c:c8:e6:b3:bd:ab:ab:b6:a4:63:fb:1c:6f:52: e4:6f:76:4a:c5:de:64:62:0f:55:ad:b8:38:4d:5b:1e:14:65: 17:66:4b:f4:bf:14:6f:40:87:e1:23:c8:99:1c:c0:83:84:f2: 43:85:ef:43:08:eb:fd:dc:f8:da:b4:6b:d9:92:7c:16:9d:88: f0:dd:64:a2:2c:36:aa:5a:ed:79:03:d5:30:2c:c0:45:89:46: f1:80:58:14:95:1c:60:2a:c8:91:fd:30:9f:7a:a9:55:57:d4: 3b:28:8c:f0:be:b1:45:25:28:ee:5a:1d:1f:ec:2f:5f:56:6e: 0e:53:1d:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbqj4VVOBPRYyMof9+zC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZmQzNDM2ZDdhMTlhNzM0M2ZhODAwZDg3YTAxYWYxODNk YTMxOGIwHhcNMjUxMjExMjIwMTA4WhcNMjUxMjEyMjIwMTA4WjAzMTEwLwYDVQQD EyhiNDRkYzJlODc4NWU0ZjVjZjlkY2EyMjc5M2VkZjdjY2RmOTAxNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3sk3NoQoNBG8kx/paloNEbGqGdk A9HTeH8pY9gb2VVCH+YU3gAyya412VTJlEBZn/+5yf3fwkwg77r+y8vt7ZN6aK7Y cVaGUFdbK6A0JDsGI+gBAJqQmkHPk4qZMXTGrBvTZ2fryZathhqzi/HFQc/HOV/g bz5y5XXhgqGREMZx88SqiuYmKMmJYuh0sVD/GazH8JQv0yhKEVNkjaihPOcVjo9+ SXQHI8ymWQjqecf3j8+KO0u5LutywIejMt4sXbz2LXZVuIXuuKp4OibS0mvqu9he 8v5JOyz67yubcapTVx4spc/RlzSdtRcT3SsWxFMJBbW0eCVRoN+78VfSowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRNwuh4Xk9c+dyiJ5Pt98zfkBUtMB8GA1UdIwQY MBaAFNH9NDbXoZpzQ/qADYegGvGD2jGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iY2Q1ZTgtNWQxZi00NmIxLTk2YmMt MzlhNjZjYmUxZTRkLzEvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iY2Q1ZTgtNWQxZi00NmIxLTk2YmMtMzlhNjZjYmUxZTRk LzEvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnhe4VUo 84ZNKEFBkLqJjWJMafCg0A3wwI4GeejweeLtQymJlcFjpWsBQFSAFnNhTCzx29xf UHQV4nF/rnfhOnjoh9jLiDOW82HTzMYQWqEMXsRzzml/VyXUX/i2ohPT05JCqPj/ CVueAQZFYGe3r6Er3ZvkLQI7PpCXLzJcQzwFwyzI5rO9q6u2pGP7HG9S5G92SsXe ZGIPVa24OE1bHhRlF2ZL9L8Ub0CH4SPImRzAg4TyQ4XvQwjr/dz42rRr2ZJ8Fp2I 8N1koiw2qlrteQPVMCzARYlG8YBYFJUcYCrIkf0wn3qpVVfUOyiM8L6xRSUo7lod H+wvX1ZuDlMd0Q== -----END CERTIFICATE-----Generated at Fri Dec 12 08:03:43 2025 by rpki-client