This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft File: _0t7padsE3FS0NDzUk_WIBuBW-8.mft (raw, json) Hash identifier: 65wbZt+33ZYJMEPhlwOmBl/uG1wvSwaPEn5/q4W2TYQ= Subject key identifier: A7:23:93:40:5A:B4:75:B7:C3:A6:E3:A3:D0:B0:4D:EA:D9:B1:87:7B Authority key identifier: FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF Certificate issuer: /CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef Certificate serial: 019B14CBB93667F946AD3C123F8C37C7F8DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft Manifest number: 02A4 Signing time: Fri 12 Dec 2025 23:00:54 +0000 Manifest this update: Fri 12 Dec 2025 23:00:54 +0000 Manifest next update: Sat 13 Dec 2025 23:00:54 +0000 Files and hashes: 1: _0t7padsE3FS0NDzUk_WIBuBW-8.crl (hash: LYiMMZcqqQZDlayOvRKy0RAg6lwLrYUl/sYDhaM7F1g=) 2: dzWaTBaulL5kl6N51Aq9Q2INFwQ.roa (hash: qCU96anqXB1vi9FIqkKYJeT2OcA8oxOe7J0O6GEIhmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:cb:b9:36:67:f9:46:ad:3c:12:3f:8c:37:c7:f8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef Validity Not Before: Dec 12 23:00:54 2025 GMT Not After : Dec 13 23:00:54 2025 GMT Subject: CN=a72393405ab475b7c3a6e3a3d0b04dead9b1877b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:30:9a:11:b9:84:46:bd:87:f4:5e:33:04:cd: 70:d0:96:ae:f6:3d:06:3d:d5:a7:f4:e6:5d:15:8f: 47:4b:52:1e:22:ee:3d:c7:b7:56:03:1d:8e:12:92: 87:13:bd:02:9a:8e:23:ec:70:59:01:ca:ca:69:92: 6e:34:b6:e4:e1:ba:01:15:df:e9:54:b9:9e:1f:df: 9d:02:55:6e:aa:9e:f9:a3:be:1f:87:08:5e:47:7d: 0c:60:86:dd:a3:68:9a:d7:e0:64:8f:57:bb:49:08: c1:9c:13:8a:c7:fa:6a:8e:5f:f6:ea:15:35:f6:76: 4b:0d:5c:8e:b8:45:94:22:5e:99:6b:af:7c:05:a3: ba:0c:a1:82:10:80:c2:cf:ea:d2:4a:4a:fd:42:5c: 40:40:b3:e2:d6:82:57:07:cb:f6:63:76:04:93:d0: 55:97:bd:be:1d:e9:14:a8:44:33:87:ee:99:61:a9: cb:14:05:f4:8c:13:8a:77:db:8f:8c:05:b4:2e:11: ad:9e:b8:b6:b7:7e:17:d7:92:bd:cf:6c:8c:57:8e: 24:09:20:1c:a6:bb:7a:05:16:54:d1:2b:ac:10:df: 42:0d:1b:e6:a5:7c:5e:00:f4:77:fc:e7:81:56:0b: bf:96:30:0d:e3:44:8a:b8:42:1f:3c:f6:57:f2:06: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:23:93:40:5A:B4:75:B7:C3:A6:E3:A3:D0:B0:4D:EA:D9:B1:87:7B X509v3 Authority Key Identifier: keyid:FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:1d:cc:fa:f7:92:18:97:76:43:ef:8d:ba:74:20:29:aa:67: 01:0c:74:d6:ea:7e:51:8c:3f:1c:2c:24:96:95:9d:09:2c:94: d6:04:38:d4:5d:68:68:fe:7d:ad:55:0d:1e:01:7b:73:f0:54: d8:52:62:64:03:14:f5:a7:42:90:e6:7f:d5:fb:1a:90:be:73: 0d:98:5d:55:42:d2:b8:18:cc:7a:ec:42:a6:30:78:b0:5c:b0: 1f:ac:73:fd:bd:db:99:76:06:db:0d:4f:db:d7:35:56:ce:dd: c3:72:d9:b9:61:a6:a2:24:0e:b8:34:49:62:dc:11:15:59:72: d1:4a:e5:3d:6b:1e:ac:95:dc:ed:85:bd:22:a1:1f:f7:af:fa: 6d:a3:b5:d6:5c:30:73:50:b1:94:ba:60:f8:d9:62:85:8d:d7: 88:29:b3:9a:3a:82:ce:e8:62:0d:36:30:6a:2a:35:5a:52:34: 09:b8:27:79:5c:f1:a5:68:c8:01:99:7c:40:37:41:f0:d1:13: 19:45:d1:bf:95:90:c6:f9:6d:91:83:13:41:30:f0:6a:91:a6: 4f:45:c8:24:5a:d5:11:e8:05:81:ed:43:0e:58:19:a9:10:63: 51:af:e0:6d:e6:e4:53:cf:a1:d7:d3:9f:a7:bc:d4:2e:ab:cc: 20:5d:f5:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUy7k2Z/lGrTwSP4w3x/jaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGI3YmE1YTc2YzEzNzE1MmQwZDBmMzUyNGZkNjIwMWI4 MTViZWYwHhcNMjUxMjEyMjMwMDU0WhcNMjUxMjEzMjMwMDU0WjAzMTEwLwYDVQQD EyhhNzIzOTM0MDVhYjQ3NWI3YzNhNmUzYTNkMGIwNGRlYWQ5YjE4NzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTCaEbmERr2H9F4zBM1w0Jau9j0G PdWn9OZdFY9HS1IeIu49x7dWAx2OEpKHE70Cmo4j7HBZAcrKaZJuNLbk4boBFd/p VLmeH9+dAlVuqp75o74fhwheR30MYIbdo2ia1+Bkj1e7SQjBnBOKx/pqjl/26hU1 9nZLDVyOuEWUIl6Za698BaO6DKGCEIDCz+rSSkr9QlxAQLPi1oJXB8v2Y3YEk9BV l72+HekUqEQzh+6ZYanLFAX0jBOKd9uPjAW0LhGtnri2t34X15K9z2yMV44kCSAc prt6BRZU0SusEN9CDRvmpXxeAPR3/OeBVgu/ljAN40SKuEIfPPZX8gauMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcjk0BatHW3w6bjo9CwTerZsYd7MB8GA1UdIwQY MBaAFP9Le6WnbBNxUtDQ81JP1iAbgVvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAt OGY5NWI4NTI0YzM1LzEvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAtOGY5NWI4NTI0YzM1 LzEvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQR3M+veS GJd2Q++NunQgKapnAQx01up+UYw/HCwklpWdCSyU1gQ41F1oaP59rVUNHgF7c/BU 2FJiZAMU9adCkOZ/1fsakL5zDZhdVULSuBjMeuxCpjB4sFywH6xz/b3bmXYG2w1P 29c1Vs7dw3LZuWGmoiQOuDRJYtwRFVly0UrlPWserJXc7YW9IqEf96/6baO11lww c1CxlLpg+NlihY3XiCmzmjqCzuhiDTYwaio1WlI0CbgneVzxpWjIAZl8QDdB8NET GUXRv5WQxvltkYMTQTDwapGmT0XIJFrVEegFge1DDlgZqRBjUa/gbebkU8+h19Of p7zULqvMIF31MA== -----END CERTIFICATE-----Generated at Sat Dec 13 02:20:57 2025 by rpki-client