This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json) Hash identifier: t+5Q2coiXI0pjrbYi+ugBgVst0z1wYFO+YMgZ4Xz08w= Subject key identifier: 20:47:33:67:1A:25:1B:C9:CB:E8:28:C0:20:35:FC:DF:48:9B:EA:4E Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50 Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50 Certificate serial: 019B59E3A65BFB7C7AC5488955AF39FA979C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft Manifest number: 0C7F Signing time: Fri 26 Dec 2025 09:00:49 +0000 Manifest this update: Fri 26 Dec 2025 09:00:49 +0000 Manifest next update: Sat 27 Dec 2025 09:00:49 +0000 Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: wxdtMogm7CF+NKzmivmK/zIlNOR8/phRhgBjnvm0iq8=) 2: 5LrP6fsEeipB-xjaCGTQi9KsiHU.roa (hash: IUrzC+/E4lKM4F7rtTCN//MYlbyHBk9E/FLwLHHLeZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:a6:5b:fb:7c:7a:c5:48:89:55:af:39:fa:97:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50 Validity Not Before: Dec 26 09:00:49 2025 GMT Not After : Dec 27 09:00:49 2025 GMT Subject: CN=204733671a251bc9cbe828c02035fcdf489bea4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:cb:60:fb:9b:80:31:fc:d6:38:92:58:05: 43:de:b0:fb:e5:1e:43:53:d7:12:9c:e6:1c:9d:82: 8e:aa:5a:e9:29:1c:ea:7d:05:c6:01:5f:33:62:68: 10:01:97:75:30:c7:26:1a:05:55:7f:be:68:da:43: b0:33:28:1d:ee:d5:4d:9e:79:bb:e3:cd:3a:be:a6: 74:f2:aa:43:47:42:8e:d7:68:61:25:2d:ae:eb:ad: 20:ad:bb:3a:d6:8b:0c:ee:c1:3d:33:63:7a:8c:07: 3b:54:26:48:bc:b7:24:5d:bd:90:a3:35:e3:ce:83: c0:da:cd:f0:a0:dc:24:04:0e:97:0e:b9:9d:95:62: 4a:67:99:bb:40:61:95:fd:be:49:5b:d9:43:49:e0: 76:56:46:dd:1d:66:35:c3:25:98:4f:42:34:2c:fa: 68:39:2c:51:a0:92:16:14:89:d8:a9:c4:8f:1f:2b: f8:e9:b8:24:8c:cc:5d:42:f0:e1:67:3d:7b:ad:f2: fe:68:8c:71:76:23:f7:f6:d4:90:56:85:fa:b5:14: ce:77:9a:e7:23:ff:03:76:d8:fe:61:b9:11:86:af: 43:f4:ae:0d:85:c2:f1:55:fa:b5:ba:9e:49:08:23: 80:a4:0d:a8:53:21:57:b3:78:a9:48:f1:1f:34:dc: 38:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:47:33:67:1A:25:1B:C9:CB:E8:28:C0:20:35:FC:DF:48:9B:EA:4E X509v3 Authority Key Identifier: keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:69:54:92:76:e4:0f:5d:85:f1:18:5c:84:db:66:40:28:fb: ea:55:ef:68:45:b4:05:5c:05:4b:b8:0a:0a:59:36:82:c8:ec: 99:fd:c9:d1:a0:54:dc:c8:25:e8:43:16:79:bd:42:43:07:b5: c9:ee:96:03:29:5b:99:88:54:2b:20:be:dc:f2:6f:00:73:f1: 40:82:58:43:3d:c6:74:e7:3b:7e:11:2c:4b:99:3d:c3:59:a0: c6:b7:e8:0d:d7:ce:20:ec:22:b7:fc:84:09:83:32:ee:01:ed: 12:d5:2d:74:20:e8:27:b6:7f:e5:1f:f4:92:ea:bd:71:49:57: cb:a2:15:ae:f3:83:8e:3e:ec:4b:e2:7f:7f:77:01:c4:05:75: 8f:be:75:e3:ca:f6:ff:79:ac:ed:64:ed:8b:d7:53:42:4e:1e: 51:3c:c3:ee:bd:9d:14:96:80:38:11:1d:6e:15:4e:2f:20:dc: d7:b6:06:1b:18:05:91:bd:fd:c2:bc:6e:c5:84:cb:9d:c7:53: 90:85:b7:b9:ce:4a:f2:1b:aa:18:d1:2d:41:f5:e0:b9:a0:96: 6b:2c:d4:38:fe:e2:ee:6b:ac:80:58:47:55:2d:ad:2e:0f:64: eb:a6:7f:aa:18:3c:fc:44:fc:82:22:6d:03:e9:ae:31:e3:8b: 44:fe:c9:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46Zb+3x6xUiJVa85+pecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZjk4N2FmNWFkYjIzMDRkNDI2ZjU0MGRlNWQ2NTA1NDUy MzFlNTAwHhcNMjUxMjI2MDkwMDQ5WhcNMjUxMjI3MDkwMDQ5WjAzMTEwLwYDVQQD EygyMDQ3MzM2NzFhMjUxYmM5Y2JlODI4YzAyMDM1ZmNkZjQ4OWJlYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl7LYPubgDH81jiSWAVD3rD75R5D U9cSnOYcnYKOqlrpKRzqfQXGAV8zYmgQAZd1MMcmGgVVf75o2kOwMygd7tVNnnm7 4806vqZ08qpDR0KO12hhJS2u660grbs61osM7sE9M2N6jAc7VCZIvLckXb2QozXj zoPA2s3woNwkBA6XDrmdlWJKZ5m7QGGV/b5JW9lDSeB2VkbdHWY1wyWYT0I0LPpo OSxRoJIWFInYqcSPHyv46bgkjMxdQvDhZz17rfL+aIxxdiP39tSQVoX6tRTOd5rn I/8Ddtj+YbkRhq9D9K4NhcLxVfq1up5JCCOApA2oUyFXs3ipSPEfNNw4PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBHM2caJRvJy+gowCA1/N9Im+pOMB8GA1UdIwQY MBaAFNH5h69a2yME1Cb1QN5dZQVFIx5QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGZtSHIxcmJJd1RVSnZWQTNsMWxCVVVqSGxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81ZWE1NjktZjE3NC00NWM1LTlkYjct MmFmMDk1ZmZjOWJiLzEvMGZtSHIxcmJJd1RVSnZWQTNsMWxCVVVqSGxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS81ZWE1NjktZjE3NC00NWM1LTlkYjctMmFmMDk1ZmZjOWJi LzEvMGZtSHIxcmJJd1RVSnZWQTNsMWxCVVVqSGxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWlUknbk D12F8RhchNtmQCj76lXvaEW0BVwFS7gKClk2gsjsmf3J0aBU3Mgl6EMWeb1CQwe1 ye6WAylbmYhUKyC+3PJvAHPxQIJYQz3GdOc7fhEsS5k9w1mgxrfoDdfOIOwit/yE CYMy7gHtEtUtdCDoJ7Z/5R/0kuq9cUlXy6IVrvODjj7sS+J/f3cBxAV1j75148r2 /3ms7WTti9dTQk4eUTzD7r2dFJaAOBEdbhVOLyDc17YGGxgFkb39wrxuxYTLncdT kIW3uc5K8huqGNEtQfXguaCWayzUOP7i7musgFhHVS2tLg9k66Z/qhg8/ET8giJt A+muMeOLRP7Jww== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:53 2025 by rpki-client