This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json) Hash identifier: 5OSD2XdgtTQtmlvkBizdmh62rA01uBuMPbBeHB6jtNw= Subject key identifier: 33:85:46:AE:7B:9C:66:E9:6A:8B:2B:5A:ED:C5:BB:3A:85:03:FE:BD Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Certificate serial: 019AACBA0E299A68182679E88FEDB4263BE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft Manifest number: 15FE Signing time: Sat 22 Nov 2025 18:01:05 +0000 Manifest this update: Sat 22 Nov 2025 18:01:05 +0000 Manifest next update: Sun 23 Nov 2025 18:01:05 +0000 Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: r4kaWrATKuXCiqrvBCIQUm1D0CU2bGcjfaIqnld8h5A=) 2: Eoa2DgYKZQhIPrEs2BVXe4pbre4.roa (hash: Lzu15VnANjg8WWEayf+Lga5VSNyXHu7NEi9f0IPI47U=) 3: N1PB4wkghMthA8l4GP9N1SzOEWE.roa (hash: 8LPlkWhxVtJM+jMtTkRPToXaYbmZ6b57zhGOgt0FEmU=) 4: V7B5ePYrHsO0XNRkMFSzpgb0L6o.roa (hash: mqOCLJjTNfcn+4Yc3m3WAArsC6xNXAO5dY/bAJctVR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:ba:0e:29:9a:68:18:26:79:e8:8f:ed:b4:26:3b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Validity Not Before: Nov 22 18:01:05 2025 GMT Not After : Nov 23 18:01:05 2025 GMT Subject: CN=338546ae7b9c66e96a8b2b5aedc5bb3a8503febd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:78:15:05:d3:4d:87:e5:8e:c2:a9:6e:d3: 0e:7b:4e:df:64:be:4b:a3:8e:e2:21:6b:aa:db:18: c7:c4:68:9b:2f:1b:b8:c8:73:3c:6f:19:de:f1:3b: 14:fc:29:4e:a0:65:03:7b:e4:6b:60:8d:5c:1d:65: 7e:20:4e:80:65:a9:38:24:d9:b1:3e:38:83:0e:f8: 53:54:b5:74:e0:5b:46:2e:84:38:33:85:cd:75:c6: e8:18:49:8d:b1:55:00:b7:cb:61:3d:8f:80:91:ee: 2a:12:8f:e9:be:b4:a9:f7:6f:f2:18:f1:60:90:79: 18:75:44:0b:06:e0:3b:61:dd:2d:9c:de:20:c8:bf: cd:09:97:e1:74:7d:70:4e:21:fe:c7:36:11:dc:ce: eb:93:93:1d:7d:a4:91:d9:aa:bf:bc:bb:b2:a5:99: 9e:b2:74:5a:a5:e7:12:35:35:ba:0d:17:40:54:c2: a8:1f:96:a0:16:bb:56:34:42:04:86:be:74:40:71: 41:be:69:ca:7e:d6:21:96:e3:97:79:56:55:20:d8: f8:2d:58:66:92:ce:8c:19:ea:05:64:ee:7e:71:2d: f1:97:0e:3e:91:6c:3f:e0:04:85:a6:00:e3:4b:13: 2c:ea:a9:12:d3:58:38:4d:d9:d9:a4:b1:7a:fa:ad: 97:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:46:AE:7B:9C:66:E9:6A:8B:2B:5A:ED:C5:BB:3A:85:03:FE:BD X509v3 Authority Key Identifier: keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:22:31:6a:27:dc:4a:29:6f:95:ae:ab:67:a7:43:7a:ce:20: 25:10:4e:ce:89:8e:8c:02:c2:e4:23:3e:bd:a7:36:d0:88:c1: f4:8e:2b:26:4d:01:3d:bf:c5:09:95:1c:a3:27:03:40:4c:57: c6:aa:01:32:8e:ff:3b:d1:c8:c5:ec:6d:ae:a0:27:cd:2f:bf: cd:23:48:4a:4e:0c:42:d3:92:23:c6:00:62:d6:eb:85:46:5b: a7:42:a3:3e:c2:b5:d0:50:96:32:16:3b:5f:e9:02:eb:3c:8a: 2b:b4:dd:65:ff:af:67:02:3a:0d:1c:b7:ab:a6:ed:3c:c5:34: b5:15:b5:73:94:6a:54:9b:eb:5f:8c:fb:66:62:d9:0f:e1:09: 17:d6:4b:97:d9:37:27:b9:32:6c:e1:38:60:4e:81:9d:72:f7: 0d:de:88:5e:56:57:8c:e6:74:df:48:30:95:da:ad:ab:a6:cf: 4e:05:e2:c6:d3:3a:8e:2e:c3:92:2f:5b:0d:a8:33:a5:1a:1c: 6f:bc:10:de:6b:20:93:de:94:fa:88:7c:b8:d2:02:39:fe:e9: 22:48:8a:54:68:e0:43:78:bd:8b:56:ee:44:dd:33:7b:3d:e0: bb:01:b7:ba:ec:97:20:f9:9a:fb:fc:61:1d:ef:df:87:07:29: 06:b7:b9:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsug4pmmgYJnnoj+20JjvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzFkNWZkNGUyMGFkZTVmMTFiNjZhZmIxMGE1NGM4ZmZl NGIwNDAwHhcNMjUxMTIyMTgwMTA1WhcNMjUxMTIzMTgwMTA1WjAzMTEwLwYDVQQD EygzMzg1NDZhZTdiOWM2NmU5NmE4YjJiNWFlZGM1YmIzYTg1MDNmZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNp4FQXTTYfljsKpbtMOe07fZL5L o47iIWuq2xjHxGibLxu4yHM8bxne8TsU/ClOoGUDe+RrYI1cHWV+IE6AZak4JNmx PjiDDvhTVLV04FtGLoQ4M4XNdcboGEmNsVUAt8thPY+Ake4qEo/pvrSp92/yGPFg kHkYdUQLBuA7Yd0tnN4gyL/NCZfhdH1wTiH+xzYR3M7rk5MdfaSR2aq/vLuypZme snRapecSNTW6DRdAVMKoH5agFrtWNEIEhr50QHFBvmnKftYhluOXeVZVINj4LVhm ks6MGeoFZO5+cS3xlw4+kWw/4ASFpgDjSxMs6qkS01g4TdnZpLF6+q2XFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOFRq57nGbpaosrWu3FuzqFA/69MB8GA1UdIwQY MBaAFNLB1f1OIK3l8Rtmr7EKVMj/5LBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTkt YTA5YTg3NWY1OTAzLzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTktYTA5YTg3NWY1OTAz LzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACIxaifc Silvla6rZ6dDes4gJRBOzomOjALC5CM+vac20IjB9I4rJk0BPb/FCZUcoycDQExX xqoBMo7/O9HIxextrqAnzS+/zSNISk4MQtOSI8YAYtbrhUZbp0KjPsK10FCWMhY7 X+kC6zyKK7TdZf+vZwI6DRy3q6btPMU0tRW1c5RqVJvrX4z7ZmLZD+EJF9ZLl9k3 J7kybOE4YE6BnXL3Dd6IXlZXjOZ030gwldqtq6bPTgXixtM6ji7Dki9bDagzpRoc b7wQ3msgk96U+oh8uNICOf7pIkiKVGjgQ3i9i1buRN0zez3guwG3uuyXIPma+/xh He/fhwcpBre5DQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:59 2025 by rpki-client