This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json) Hash identifier: jqj0hTYD5ND8iPpcGct078t2qroKXsi3zciJeYKX+Vc= Subject key identifier: D5:0F:27:E9:EE:21:C6:BA:98:BC:95:49:59:10:26:7A:BB:F7:3A:2A Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21 Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121 Certificate serial: 019B522AEA04D6D8DF877B8FEAC821AD21F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 21:01:42 +0000 Manifest this update: Wed 24 Dec 2025 21:01:42 +0000 Manifest next update: Thu 25 Dec 2025 21:01:42 +0000 Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: URN26KWkxV1b/BmNCjXXVtRQKAy/EpbwsUW3pDe3YkI=) 2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:ea:04:d6:d8:df:87:7b:8f:ea:c8:21:ad:21:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121 Validity Not Before: Dec 24 21:01:42 2025 GMT Not After : Dec 25 21:01:42 2025 GMT Subject: CN=d50f27e9ee21c6ba98bc95495910267abbf73a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:71:79:6c:8f:d0:30:70:72:b7:4e:75:05: 9c:0d:70:17:34:44:ee:d3:eb:b4:68:77:c7:1c:c4: 35:60:59:b9:0f:d0:e2:f4:e3:9f:5f:26:ca:29:02: e0:bb:8f:e0:b9:de:57:1e:06:53:9c:c7:93:cc:42: f0:55:0e:23:0d:41:8e:b8:d9:0f:b4:e0:5a:45:b8: 19:18:c4:c4:d9:c6:b8:d7:06:25:06:f6:1a:cb:46: 5d:3e:64:3b:ea:bd:48:c5:a8:84:84:a4:d4:85:35: 6e:28:73:c3:bc:4d:ef:29:06:e3:a0:1c:a0:56:aa: 68:e6:58:5e:f0:6e:5b:58:d5:96:ae:d8:dc:c7:f5: e2:82:91:4b:0d:8a:5e:7f:49:2c:62:e4:74:cf:fb: 19:9a:0c:8f:e6:15:7e:51:ee:31:c4:9c:32:82:ae: c2:c4:32:4c:a7:1c:4e:a3:9f:50:9b:ee:87:aa:15: 43:d5:11:d5:45:76:b4:0b:8c:f0:5d:60:61:d4:d5: 76:4e:e0:bb:ae:37:a8:81:0b:74:80:94:47:bd:4d: f6:28:a9:fb:4a:c1:60:10:13:c1:65:7f:8c:56:ff: be:4e:44:1f:03:29:37:bc:76:eb:1b:7b:2c:04:88: ef:cc:9e:fe:df:58:c4:25:bc:dc:de:1d:60:39:46: ad:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0F:27:E9:EE:21:C6:BA:98:BC:95:49:59:10:26:7A:BB:F7:3A:2A X509v3 Authority Key Identifier: keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:cd:9d:18:7b:7e:8e:c1:5a:e9:51:a5:5d:65:4d:e9:2b:c1: 9d:f5:8f:68:b9:e9:35:09:9b:91:5f:32:e6:b2:53:76:91:ce: 48:7c:b1:0f:43:3d:c8:c0:d6:6b:89:5c:23:73:ff:c4:d8:db: ff:95:33:6b:f4:7c:18:a6:6c:2b:85:2d:d6:69:ca:cb:4e:e0: 1a:6c:3b:2d:91:e0:3d:1c:9e:59:3a:26:bb:c6:52:7b:39:d7: 47:a0:06:06:74:5f:86:24:96:5c:fe:e3:47:1f:82:73:ce:b9: 30:50:55:58:ff:5e:ec:94:b7:97:e6:45:8f:5e:ce:e9:b0:73: 31:47:2c:bb:86:f4:9b:74:d3:1e:ad:91:1f:f3:df:06:ab:be: ec:87:3a:10:33:0e:e6:24:47:12:bb:0e:23:4c:7e:38:c7:b6: 7e:94:4d:e3:7b:4f:57:d3:fd:8f:a6:27:fa:3d:be:c9:1e:08: c8:e4:ae:6c:61:95:60:ff:20:65:a4:4a:c4:c1:db:1a:98:75: 73:c1:bd:9f:55:28:bd:00:40:48:bc:a5:69:d5:cb:9b:56:23: 6e:af:fe:a6:44:d9:65:52:39:1a:0e:1e:1b:8c:d8:e2:10:bf: d4:d6:3a:ce:5e:40:0d:f6:0d:81:7a:4b:60:f1:f1:58:65:d6: 27:34:8b:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKuoE1tjfh3uP6sghrSH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNWYyY2QxYTlmMGRhNDM1ZjJlM2IzZWU3MGU2NGZkYWY0 YjYxMjEwHhcNMjUxMjI0MjEwMTQyWhcNMjUxMjI1MjEwMTQyWjAzMTEwLwYDVQQD EyhkNTBmMjdlOWVlMjFjNmJhOThiYzk1NDk1OTEwMjY3YWJiZjczYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcdxeWyP0DBwcrdOdQWcDXAXNETu 0+u0aHfHHMQ1YFm5D9Di9OOfXybKKQLgu4/gud5XHgZTnMeTzELwVQ4jDUGOuNkP tOBaRbgZGMTE2ca41wYlBvYay0ZdPmQ76r1IxaiEhKTUhTVuKHPDvE3vKQbjoByg Vqpo5lhe8G5bWNWWrtjcx/XigpFLDYpef0ksYuR0z/sZmgyP5hV+Ue4xxJwygq7C xDJMpxxOo59Qm+6HqhVD1RHVRXa0C4zwXWBh1NV2TuC7rjeogQt0gJRHvU32KKn7 SsFgEBPBZX+MVv++TkQfAyk3vHbrG3ssBIjvzJ7+31jEJbzc3h1gOUat2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUPJ+nuIca6mLyVSVkQJnq79zoqMB8GA1UdIwQY MBaAFNJfLNGp8NpDXy47PucOZP2vS2EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yZDEyNWYtMWE2MC00NjhkLWE5M2Et YzViNmFlY2I2YzljLzEvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yZDEyNWYtMWE2MC00NjhkLWE5M2EtYzViNmFlY2I2Yzlj LzEvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqc2dGHt+ jsFa6VGlXWVN6SvBnfWPaLnpNQmbkV8y5rJTdpHOSHyxD0M9yMDWa4lcI3P/xNjb /5Uza/R8GKZsK4Ut1mnKy07gGmw7LZHgPRyeWTomu8ZSeznXR6AGBnRfhiSWXP7j Rx+Cc865MFBVWP9e7JS3l+ZFj17O6bBzMUcsu4b0m3TTHq2RH/PfBqu+7Ic6EDMO 5iRHErsOI0x+OMe2fpRN43tPV9P9j6Yn+j2+yR4IyOSubGGVYP8gZaRKxMHbGph1 c8G9n1UovQBASLyladXLm1Yjbq/+pkTZZVI5Gg4eG4zY4hC/1NY6zl5ADfYNgXpL YPHxWGXWJzSLbg== -----END CERTIFICATE-----Generated at Thu Dec 25 05:12:55 2025 by rpki-client