This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft File: 0ow4hsbvUifCRiJMyJSoSlO89Ro.mft (raw, json) Hash identifier: e2h8h9qqjS8PzzpvcZl60qZKQNUszSFgkGT8QOSFuMY= Subject key identifier: 8B:98:01:55:E0:44:44:6A:94:E0:29:51:1F:A0:6D:F5:5D:AD:3C:5B Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A Certificate issuer: /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a Certificate serial: 019B1C4EC8C9B1728BB13E4C3FBF0A4223AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft Manifest number: 06AD Signing time: Sun 14 Dec 2025 10:01:23 +0000 Manifest this update: Sun 14 Dec 2025 10:01:23 +0000 Manifest next update: Mon 15 Dec 2025 10:01:23 +0000 Files and hashes: 1: 0ow4hsbvUifCRiJMyJSoSlO89Ro.crl (hash: 01IlVLddcLAy7906+ZOnr6ewgQLky5pt1lqBM4EzTdg=) 2: 3Wo1i0AtNLKktf0Fsv7r4f0TK5c.roa (hash: TuUCEIehwsxsHM+kSQ6AOE1w0z+0lDBW+yhlCQiJ8u0=) 3: 5MPTrLSfLX6fRObwynHPfSAAM0o.roa (hash: adOAZtbI6TpJQzuqE4yqnUFKX9EAaJkaZ7TpRSqv1kc=) 4: jZVM5c5Inmzx4Oemkx6R9iw1k_8.roa (hash: rjEJpSgCWwFovtBLax9fmGlzA4/RiwDw0hJijdvo6KI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:c8:c9:b1:72:8b:b1:3e:4c:3f:bf:0a:42:23:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a Validity Not Before: Dec 14 10:01:23 2025 GMT Not After : Dec 15 10:01:23 2025 GMT Subject: CN=8b980155e044446a94e029511fa06df55dad3c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:fe:ae:2a:7c:c4:8a:23:8e:ad:f2:ce:18: 51:5c:b1:1c:c2:a1:c6:58:c6:65:cd:95:ca:e2:c1: ae:d4:92:1a:72:37:f3:8f:e3:5a:e3:e7:e7:d4:c2: 5b:7f:bc:5c:88:9a:dd:ba:d2:56:de:a6:a3:69:c9: 18:0c:12:ee:d8:46:63:93:6c:45:f0:b0:aa:b9:04: e5:e3:08:e4:ad:04:c5:23:ca:93:e7:33:4c:d6:61: 88:74:57:15:09:aa:a6:c9:01:29:5b:3b:74:9d:04: 97:1f:f4:60:0c:b0:df:2e:d4:3e:03:04:c2:a0:2c: a9:e0:29:13:f3:32:86:77:eb:87:7e:93:23:5e:d1: 3a:9a:28:43:3f:b8:17:47:20:29:ee:42:e9:e6:71: 4e:43:8b:5c:7d:aa:79:d8:0e:03:e8:56:52:aa:ff: 7f:74:70:ec:33:d1:66:74:0c:e4:ce:3b:40:0f:f1: 72:f1:fd:71:62:6e:bc:83:02:cc:7c:9c:b4:90:62: 74:23:cd:51:f0:4a:24:61:e5:80:32:b9:c8:1a:0f: 54:b0:f9:ef:c1:36:bc:96:dd:3e:71:bb:25:2f:fe: 03:66:93:ca:ee:72:ba:2f:28:ae:de:ca:b6:ef:68: f4:42:67:fa:a2:c1:53:92:93:03:61:0e:31:35:fb: 4d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:98:01:55:E0:44:44:6A:94:E0:29:51:1F:A0:6D:F5:5D:AD:3C:5B X509v3 Authority Key Identifier: keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:65:53:77:80:7a:fd:09:2a:e0:29:3a:f2:15:bd:13:18:73: bd:81:28:54:11:28:b3:62:0a:87:3c:9a:60:97:bb:3a:69:a9: b6:c0:be:36:9b:80:e5:39:bd:fa:0e:fe:12:61:37:d4:63:11: 1e:65:0e:5e:f0:c8:a5:ee:1c:5a:9f:a0:8a:cf:c5:47:02:8a: c4:8c:00:e4:14:b2:09:2b:4d:15:c6:a8:ae:e1:80:22:d4:45: d4:3a:5b:9f:ee:28:e2:a6:f2:76:55:56:45:3a:2b:c2:37:10: c3:85:99:66:67:30:c1:84:96:a4:ca:f3:55:33:0b:0e:84:f6: 04:17:b0:5a:af:5f:bb:c9:7f:f2:4a:2f:36:21:ad:a8:af:2c: 2c:11:8b:18:2e:31:c6:1f:b8:9d:52:b3:81:7d:2a:d7:3a:b7: cf:b6:1e:12:07:fc:57:c6:82:39:31:27:a9:0a:a4:07:38:2d: 23:d4:a2:f4:46:78:21:a3:28:75:f2:a0:b1:5c:82:6f:fd:96: e6:7d:bb:c7:b3:49:a6:54:a3:f5:52:f7:4a:9f:e2:af:0f:96: 46:60:d4:3c:75:ff:7a:38:e2:72:ad:76:0a:34:0f:a4:26:54: 16:57:f0:a2:9e:bc:fa:a6:64:4b:4f:17:29:db:e8:01:5d:01: 8a:67:fe:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTsjJsXKLsT5MP78KQiOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOGMzODg2YzZlZjUyMjdjMjQ2MjI0Y2M4OTRhODRhNTNi Y2Y1MWEwHhcNMjUxMjE0MTAwMTIzWhcNMjUxMjE1MTAwMTIzWjAzMTEwLwYDVQQD Eyg4Yjk4MDE1NWUwNDQ0NDZhOTRlMDI5NTExZmEwNmRmNTVkYWQzYzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo/+rip8xIojjq3yzhhRXLEcwqHG WMZlzZXK4sGu1JIacjfzj+Na4+fn1MJbf7xciJrdutJW3qajackYDBLu2EZjk2xF 8LCquQTl4wjkrQTFI8qT5zNM1mGIdFcVCaqmyQEpWzt0nQSXH/RgDLDfLtQ+AwTC oCyp4CkT8zKGd+uHfpMjXtE6mihDP7gXRyAp7kLp5nFOQ4tcfap52A4D6FZSqv9/ dHDsM9FmdAzkzjtAD/Fy8f1xYm68gwLMfJy0kGJ0I81R8EokYeWAMrnIGg9UsPnv wTa8lt0+cbslL/4DZpPK7nK6Lyiu3sq272j0Qmf6osFTkpMDYQ4xNftNvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuYAVXgRERqlOApUR+gbfVdrTxbMB8GA1UdIwQY MBaAFNKMOIbG71InwkYiTMiUqEpTvPUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG93NGhzYnZVaWZDUmlKTXlKU29TbE84OVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iZWMxOWMtNWI5NC00MDFmLWIxMzgt ZmM0MjE2MjFmZTA4LzEvMG93NGhzYnZVaWZDUmlKTXlKU29TbE84OVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9iZWMxOWMtNWI5NC00MDFmLWIxMzgtZmM0MjE2MjFmZTA4 LzEvMG93NGhzYnZVaWZDUmlKTXlKU29TbE84OVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWVTd4B6 /Qkq4Ck68hW9ExhzvYEoVBEos2IKhzyaYJe7OmmptsC+NpuA5Tm9+g7+EmE31GMR HmUOXvDIpe4cWp+gis/FRwKKxIwA5BSyCStNFcaoruGAItRF1Dpbn+4o4qbydlVW RTorwjcQw4WZZmcwwYSWpMrzVTMLDoT2BBewWq9fu8l/8kovNiGtqK8sLBGLGC4x xh+4nVKzgX0q1zq3z7YeEgf8V8aCOTEnqQqkBzgtI9Si9EZ4IaModfKgsVyCb/2W 5n27x7NJplSj9VL3Sp/irw+WRmDUPHX/ejjicq12CjQPpCZUFlfwop68+qZkS08X KdvoAV0Bimf+kg== -----END CERTIFICATE-----Generated at Sun Dec 14 14:23:48 2025 by rpki-client