This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft File: 0eAT7IpcVt8kGpslY9ER-OVDv5E.mft (raw, json) Hash identifier: lyjjTDrnYerFaRomYiVfeMy34M1LDCTZD4rRghuOZ24= Subject key identifier: 1A:A3:D5:DD:B6:5F:8D:90:21:61:28:90:AD:90:A8:2A:97:66:62:DD Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91 Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91 Certificate serial: 019B378EE5D8C310BA2815A4D540DFF48776 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft Manifest number: 17A0 Signing time: Fri 19 Dec 2025 17:01:10 +0000 Manifest this update: Fri 19 Dec 2025 17:01:10 +0000 Manifest next update: Sat 20 Dec 2025 17:01:10 +0000 Files and hashes: 1: 0eAT7IpcVt8kGpslY9ER-OVDv5E.crl (hash: wzziP4YBWvI5UUhRZO52H/s243RT3dx1BZh6BXUM0JE=) 2: 9a7l7zzqZbbCcq5xjOHOgSKl8o8.roa (hash: +xAWYrQw6rSpzQWcfX/G464LqZ0gyWw3AgC475ltgTU=) 3: OxjIWHBmVxRhcCGFgYQ3NOGLzic.roa (hash: tdZzj+SI+CsrR/Kd+vNJoKmJO/5s4n7ueG0mTybXs60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:e5:d8:c3:10:ba:28:15:a4:d5:40:df:f4:87:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91 Validity Not Before: Dec 19 17:01:10 2025 GMT Not After : Dec 20 17:01:10 2025 GMT Subject: CN=1aa3d5ddb65f8d9021612890ad90a82a976662dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f2:4e:51:42:66:f9:44:80:ab:c0:9b:02:02: 46:29:b2:e3:c5:38:f9:a5:18:1e:52:82:98:7f:d6: 73:90:73:a6:2d:78:d8:a9:51:2c:2f:1a:41:23:25: f2:29:0c:b4:f5:b3:30:c3:6c:d5:e9:47:8f:ae:da: d4:87:64:fb:c0:cf:72:82:94:49:e1:87:c6:91:32: 62:f7:0e:f7:a0:8a:2b:44:4e:9f:1e:90:8e:e6:c4: ab:4d:02:ca:43:fb:ce:0c:2e:28:dd:68:92:b2:35: ea:a6:f5:0b:bc:d6:2d:b0:b2:7b:eb:8c:95:d1:de: 34:9e:41:20:18:fa:61:f0:3d:07:e7:d4:56:06:a0: 4f:c4:63:51:a9:1b:15:0a:35:f4:61:b7:74:51:e4: 47:6f:0f:1e:c9:9d:5f:8d:25:19:82:bf:b8:3b:12: d1:25:a2:f3:7f:f4:d4:ed:32:b5:82:06:bb:6a:ee: 4c:17:fd:cb:6f:8f:08:30:c5:70:79:20:78:3f:3c: 22:e7:bf:5d:d0:1b:7b:df:e0:bf:1e:70:b2:da:16: 62:73:01:00:08:eb:3a:2d:48:dc:b5:8f:78:e0:15: 2c:e6:00:05:50:d4:64:fe:d3:bf:16:43:e7:73:f2: 27:fa:95:b9:54:dd:21:a4:9e:9a:72:d4:31:85:5c: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A3:D5:DD:B6:5F:8D:90:21:61:28:90:AD:90:A8:2A:97:66:62:DD X509v3 Authority Key Identifier: keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e7:fa:b2:aa:78:20:24:03:62:aa:1c:dc:78:58:16:d7:3e: a7:4d:4e:ac:37:f4:31:d6:18:2c:70:65:d9:ed:b6:e8:d2:13: 98:43:70:4c:30:26:67:c7:44:f5:f4:fd:b3:00:2b:a1:fb:b8: 12:3c:46:dc:ef:23:a0:40:99:a6:5c:02:6d:00:44:0d:2c:52: 09:9f:fa:a8:e6:50:ea:c9:13:c1:ce:a5:0d:7f:f0:c3:ae:c7: d1:7d:c2:31:7b:3e:48:60:5c:cf:7b:57:46:c6:95:b4:17:d1: 05:74:1e:3c:b4:79:99:92:11:5c:a1:40:89:81:fc:f0:dc:49: de:78:a0:5b:d0:31:fe:71:59:df:99:71:30:6b:ba:9f:c1:85: df:4e:23:bc:0a:6d:96:1d:2e:09:b1:c2:a6:03:54:1c:2b:a3: eb:4e:2c:13:c6:bd:86:a2:0f:7a:29:b0:fb:87:3c:e5:68:ef: 9c:68:f9:e3:21:71:3d:97:09:16:6b:81:70:05:7f:a6:95:a7: 86:c2:f4:9f:0d:ae:76:dd:9d:c0:fc:cc:4f:0d:4f:c6:ae:2f: 5e:4d:5a:03:3e:0b:e0:c0:b2:bf:32:07:fd:31:6e:41:0c:6e: ae:a2:9a:da:af:fd:e7:63:2c:ed:65:ad:e8:be:7a:36:f6:bd: f9:0a:de:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3juXYwxC6KBWk1UDf9Id2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0 M2JmOTEwHhcNMjUxMjE5MTcwMTEwWhcNMjUxMjIwMTcwMTEwWjAzMTEwLwYDVQQD EygxYWEzZDVkZGI2NWY4ZDkwMjE2MTI4OTBhZDkwYTgyYTk3NjY2MmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PJOUUJm+USAq8CbAgJGKbLjxTj5 pRgeUoKYf9ZzkHOmLXjYqVEsLxpBIyXyKQy09bMww2zV6UePrtrUh2T7wM9ygpRJ 4YfGkTJi9w73oIorRE6fHpCO5sSrTQLKQ/vODC4o3WiSsjXqpvULvNYtsLJ764yV 0d40nkEgGPph8D0H59RWBqBPxGNRqRsVCjX0Ybd0UeRHbw8eyZ1fjSUZgr+4OxLR JaLzf/TU7TK1gga7au5MF/3Lb48IMMVweSB4Pzwi579d0Bt73+C/HnCy2hZicwEA COs6LUjctY944BUs5gAFUNRk/tO/FkPnc/In+pW5VN0hpJ6actQxhVwBfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqj1d22X42QIWEokK2QqCqXZmLdMB8GA1UdIwQY MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt NDQwNTI4YzFlNDllLzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuf6sqp4 ICQDYqoc3HhYFtc+p01OrDf0MdYYLHBl2e226NITmENwTDAmZ8dE9fT9swArofu4 EjxG3O8joECZplwCbQBEDSxSCZ/6qOZQ6skTwc6lDX/ww67H0X3CMXs+SGBcz3tX RsaVtBfRBXQePLR5mZIRXKFAiYH88NxJ3nigW9Ax/nFZ35lxMGu6n8GF304jvApt lh0uCbHCpgNUHCuj604sE8a9hqIPeimw+4c85WjvnGj54yFxPZcJFmuBcAV/ppWn hsL0nw2udt2dwPzMTw1Pxq4vXk1aAz4L4MCyvzIH/TFuQQxurqKa2q/952Ms7WWt 6L56Nva9+Qre3A== -----END CERTIFICATE-----Generated at Fri Dec 19 21:50:27 2025 by rpki-client