This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft File: 0MzQmlS_pjFBmXzWU7d7yZOS72I.mft (raw, json) Hash identifier: HEKtgNnZufBPGtAc34MIlLcjaEJ/gbRl13NW0IS0nWQ= Subject key identifier: D1:01:F4:BC:87:C0:88:A8:3D:7B:96:44:AC:C7:4B:34:89:37:DE:F5 Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62 Certificate issuer: /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62 Certificate serial: 019B360E57651C5466FC7247C8C21B3061FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft Manifest number: 0996 Signing time: Fri 19 Dec 2025 10:01:08 +0000 Manifest this update: Fri 19 Dec 2025 10:01:08 +0000 Manifest next update: Sat 20 Dec 2025 10:01:08 +0000 Files and hashes: 1: 0MzQmlS_pjFBmXzWU7d7yZOS72I.crl (hash: HNple5EnI0poecv7C62W0uXTGGF5XbiyV63dqkTjqnc=) 2: DqE8gRgoYoMtwrum6k0T5AcgbA0.roa (hash: 7aUKY9kAGmruCwUgSEXbHojzDkwM52NN/3MTuZeZTP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:57:65:1c:54:66:fc:72:47:c8:c2:1b:30:61:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62 Validity Not Before: Dec 19 10:01:08 2025 GMT Not After : Dec 20 10:01:08 2025 GMT Subject: CN=d101f4bc87c088a83d7b9644acc74b348937def5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0a:33:2e:09:d7:be:25:d7:c7:c0:67:4b:cd: 6e:65:f4:20:52:bb:76:2e:b5:22:47:fa:c5:0b:7a: dc:7e:c0:1d:13:ce:b4:bb:d0:84:d3:44:00:5b:7c: fb:c9:eb:2f:75:74:b0:21:26:98:66:7d:63:c9:e1: da:63:0d:9d:d8:75:44:3d:e6:04:22:68:b8:4c:b5: 22:07:bb:9b:16:bb:b1:3e:3c:e3:25:1c:0f:f2:78: 4e:41:6d:80:be:41:34:be:8f:13:9e:c6:60:cd:e6: 6e:bf:61:3c:87:7f:a5:b8:c3:86:22:31:13:92:2b: d4:b6:04:c1:bd:7f:0f:30:d1:8f:d3:47:d2:28:b6: 38:bc:1c:37:38:4b:e6:ba:b8:58:93:65:ab:e1:c5: 3f:d4:2c:20:0c:15:7c:e8:68:e9:5c:fb:29:a9:fc: 13:ca:ca:93:d6:a2:b9:91:50:05:12:9c:1d:b0:a1: ba:20:a5:c2:13:a3:68:b4:44:98:73:35:05:fa:48: 62:bd:95:8f:f3:76:65:16:91:37:0f:01:e0:45:37: 9d:8c:a3:64:e9:02:2f:42:2b:67:f6:8e:51:24:b1: 6c:a5:98:8d:df:80:2c:fe:7b:94:18:13:38:bd:fd: 01:f2:bf:2e:ef:a6:6e:02:4b:b6:26:30:ce:1c:0d: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:01:F4:BC:87:C0:88:A8:3D:7B:96:44:AC:C7:4B:34:89:37:DE:F5 X509v3 Authority Key Identifier: keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:79:de:03:55:af:78:4b:97:60:f3:05:f9:9c:11:2e:43:c2: 28:25:aa:f4:0c:96:db:99:75:65:9e:79:75:9c:40:f7:52:cf: f3:ef:63:2a:69:38:b8:e7:d4:14:e4:b6:29:cf:94:d5:e9:bc: 3c:fa:9c:8c:38:96:46:14:a9:f7:18:a2:39:50:2a:03:fd:58: 4e:7c:22:b1:56:95:24:71:ac:63:33:98:b0:32:01:2e:ae:65: a9:b4:56:f4:87:98:0c:38:db:a3:8b:1d:37:00:ec:01:4c:05: 32:ab:75:cf:71:8b:e2:3a:f8:16:e3:1c:02:a0:1f:06:71:c8: 64:b9:b7:7a:f8:ce:f7:cb:66:5f:86:ff:26:34:5f:65:ae:a0: aa:24:db:e6:d3:aa:ad:e3:95:ca:34:45:38:3b:ec:7a:6b:f2: 51:9b:36:e0:93:41:3c:09:61:7d:99:aa:5e:29:d9:6d:a6:8f: 61:38:4c:98:bf:4d:d4:11:ed:d8:bc:45:5b:ac:1a:25:fb:50: 08:7d:31:4f:7f:ce:93:b9:2d:5e:94:c4:76:6b:ab:37:82:6c: 3e:03:3c:0f:6c:69:42:3b:f7:c1:4e:7d:5b:f6:79:00:cc:25: 3d:4e:5a:e1:72:16:a5:94:c6:78:d0:89:95:ba:be:83:9e:d9: 5b:f4:d1:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DldlHFRm/HJHyMIbMGH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwY2NkMDlhNTRiZmE2MzE0MTk5N2NkNjUzYjc3YmM5OTM5 MmVmNjIwHhcNMjUxMjE5MTAwMTA4WhcNMjUxMjIwMTAwMTA4WjAzMTEwLwYDVQQD EyhkMTAxZjRiYzg3YzA4OGE4M2Q3Yjk2NDRhY2M3NGIzNDg5MzdkZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AozLgnXviXXx8BnS81uZfQgUrt2 LrUiR/rFC3rcfsAdE860u9CE00QAW3z7yesvdXSwISaYZn1jyeHaYw2d2HVEPeYE Imi4TLUiB7ubFruxPjzjJRwP8nhOQW2AvkE0vo8TnsZgzeZuv2E8h3+luMOGIjET kivUtgTBvX8PMNGP00fSKLY4vBw3OEvmurhYk2Wr4cU/1CwgDBV86GjpXPspqfwT ysqT1qK5kVAFEpwdsKG6IKXCE6NotESYczUF+khivZWP83ZlFpE3DwHgRTedjKNk 6QIvQitn9o5RJLFspZiN34As/nuUGBM4vf0B8r8u76ZuAku2JjDOHA0W8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEB9LyHwIioPXuWRKzHSzSJN971MB8GA1UdIwQY MBaAFNDM0JpUv6YxQZl81lO3e8mTku9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMzZiM2YtNDU5ZS00YTk2LWE0YWIt M2I5OTA4NzhhNTJiLzEvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xMzZiM2YtNDU5ZS00YTk2LWE0YWItM2I5OTA4NzhhNTJi LzEvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHneA1Wv eEuXYPMF+ZwRLkPCKCWq9AyW25l1ZZ55dZxA91LP8+9jKmk4uOfUFOS2Kc+U1em8 PPqcjDiWRhSp9xiiOVAqA/1YTnwisVaVJHGsYzOYsDIBLq5lqbRW9IeYDDjbo4sd NwDsAUwFMqt1z3GL4jr4FuMcAqAfBnHIZLm3evjO98tmX4b/JjRfZa6gqiTb5tOq reOVyjRFODvsemvyUZs24JNBPAlhfZmqXinZbaaPYThMmL9N1BHt2LxFW6waJftQ CH0xT3/Ok7ktXpTEdmurN4JsPgM8D2xpQjv3wU59W/Z5AMwlPU5a4XIWpZTGeNCJ lbq+g57ZW/TRPg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:19:29 2025 by rpki-client