This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json) Hash identifier: xZUFpWijQfaV8C041w9tcK/ynzpab98GlOZehJf9iPQ= Subject key identifier: 09:0C:CF:75:5A:4D:56:AF:56:32:6D:0F:16:C3:B2:3D:9A:47:79:14 Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Certificate serial: 019B409194346CE395BC0A416D521609173E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft Manifest number: 0897 Signing time: Sun 21 Dec 2025 11:00:40 +0000 Manifest this update: Sun 21 Dec 2025 11:00:40 +0000 Manifest next update: Mon 22 Dec 2025 11:00:40 +0000 Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: YpJ7qLIrLXFUlWC8kI2/vRyb/Z21dl52eV3IFaie9Qs=) 2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:94:34:6c:e3:95:bc:0a:41:6d:52:16:09:17:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Validity Not Before: Dec 21 11:00:40 2025 GMT Not After : Dec 22 11:00:40 2025 GMT Subject: CN=090ccf755a4d56af56326d0f16c3b23d9a477914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:26:67:cb:48:a2:b1:f5:c0:f6:93:b8:8e: 78:0a:81:7d:ca:00:f7:c9:1f:5d:9c:9b:2f:b1:44: 52:a7:73:7d:fa:75:6e:41:ca:c5:9d:ee:cb:1c:38: 64:d9:77:18:2b:5b:04:0d:78:6e:29:4b:0d:43:3c: 61:eb:49:b7:25:3d:a1:77:ec:26:11:5e:2c:c0:44: e4:d3:e5:33:64:46:b7:a0:cd:b5:c5:14:47:e9:d3: a3:bf:fa:60:6b:01:17:a8:a8:b8:ea:08:2e:6a:66: 53:4e:48:d1:3a:24:b7:18:b6:a4:55:d3:90:26:52: fe:ec:47:b5:77:30:a3:eb:c5:a6:75:b0:f5:45:72: 4d:e9:a2:56:67:ec:1d:dc:76:7c:97:21:f2:9d:98: ac:7e:ad:7f:21:10:b1:02:b3:16:59:a0:b4:9a:60: f3:d5:49:5d:72:10:9c:7e:d6:b8:52:57:ea:9e:2d: b0:6a:83:d8:41:3b:67:93:9f:e6:52:16:1b:0d:0a: be:6a:4d:1e:b0:2f:39:23:87:b3:b1:03:18:b8:48: 5b:63:3d:70:84:d9:97:57:4d:dc:48:e4:36:c6:71: a3:e1:1f:53:92:b8:5d:1d:73:75:59:ae:95:7f:02: 52:f1:24:b5:f7:43:91:6d:a6:27:6e:2c:2a:1b:3f: a0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0C:CF:75:5A:4D:56:AF:56:32:6D:0F:16:C3:B2:3D:9A:47:79:14 X509v3 Authority Key Identifier: keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e6:b6:5c:32:88:37:b6:ad:a3:cd:5c:6c:9f:9d:a1:64:49: b2:6c:a8:f9:ef:8a:da:e5:0b:c8:a0:85:01:10:d4:04:c5:af: 33:aa:53:28:b6:a3:af:07:90:a5:b4:41:80:11:39:0d:bb:e2: f4:32:08:70:92:0d:b0:c5:c5:6e:80:28:cc:d5:86:69:d1:cc: 6e:da:fd:20:54:05:86:7f:2f:ff:e5:a5:ae:3c:23:59:f3:5d: 5c:87:78:b8:d8:39:7a:60:14:5b:d1:f8:75:b4:5b:93:28:0e: f1:d4:67:6c:28:16:49:15:94:2c:9f:d0:fa:0d:f3:43:0f:74: ea:62:a7:36:b5:77:61:bc:e2:d5:16:51:6e:0b:54:5c:cd:b4: 56:dd:24:48:f2:24:60:26:86:b8:50:7a:db:a1:eb:73:c4:d1: 1c:2d:90:e8:ad:05:fb:b8:87:43:03:8a:8d:8a:da:de:ca:1b: 14:36:22:d9:f3:f5:f3:31:64:f5:dc:3f:98:a8:2b:04:37:a3: d3:24:e2:2e:7d:60:9e:45:cf:68:78:d2:83:7e:fe:a0:b2:fe: d0:89:b4:60:ea:f6:cd:2e:57:5a:ff:90:c5:28:d9:88:e7:f3: c8:f8:64:10:56:0d:7b:3f:63:e8:ef:05:e3:05:74:53:0a:bb: 5d:8c:cd:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkZQ0bOOVvApBbVIWCRc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNTgxNDc5ZGVlM2I1OTk0ZjExYzlkOTU2NDYzMWJmNWE0 MDRjMDcwHhcNMjUxMjIxMTEwMDQwWhcNMjUxMjIyMTEwMDQwWjAzMTEwLwYDVQQD EygwOTBjY2Y3NTVhNGQ1NmFmNTYzMjZkMGYxNmMzYjIzZDlhNDc3OTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL4mZ8tIorH1wPaTuI54CoF9ygD3 yR9dnJsvsURSp3N9+nVuQcrFne7LHDhk2XcYK1sEDXhuKUsNQzxh60m3JT2hd+wm EV4swETk0+UzZEa3oM21xRRH6dOjv/pgawEXqKi46gguamZTTkjROiS3GLakVdOQ JlL+7Ee1dzCj68WmdbD1RXJN6aJWZ+wd3HZ8lyHynZisfq1/IRCxArMWWaC0mmDz 1UldchCcfta4Ulfqni2waoPYQTtnk5/mUhYbDQq+ak0esC85I4ezsQMYuEhbYz1w hNmXV03cSOQ2xnGj4R9TkrhdHXN1Wa6VfwJS8SS190ORbaYnbiwqGz+gJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkMz3VaTVavVjJtDxbDsj2aR3kUMB8GA1UdIwQY MBaAFNJYFHne47WZTxHJ2VZGMb9aQEwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYt NmE2YzZlMDk2MDcxLzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYtNmE2YzZlMDk2MDcx LzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALea2XDKI N7ato81cbJ+doWRJsmyo+e+K2uULyKCFARDUBMWvM6pTKLajrweQpbRBgBE5Dbvi 9DIIcJINsMXFboAozNWGadHMbtr9IFQFhn8v/+WlrjwjWfNdXId4uNg5emAUW9H4 dbRbkygO8dRnbCgWSRWULJ/Q+g3zQw906mKnNrV3Ybzi1RZRbgtUXM20Vt0kSPIk YCaGuFB626Hrc8TRHC2Q6K0F+7iHQwOKjYra3sobFDYi2fP18zFk9dw/mKgrBDej 0yTiLn1gnkXPaHjSg37+oLL+0Im0YOr2zS5XWv+QxSjZiOfzyPhkEFYNez9j6O8F 4wV0Uwq7XYzNfw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:33:00 2025 by rpki-client