This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft File: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft (raw, json) Hash identifier: ags6B3E4WF7xaUXUyM7QVG9UH6XPDdN+RYEwf1XMQs8= Subject key identifier: C7:CE:FD:A6:E4:9A:11:E9:DE:E8:49:C5:BB:79:40:01:26:48:25:33 Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13 Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13 Certificate serial: 019B115D107FC6DD3314EB142016126B767E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft Manifest number: 135B Signing time: Fri 12 Dec 2025 07:01:10 +0000 Manifest this update: Fri 12 Dec 2025 07:01:10 +0000 Manifest next update: Sat 13 Dec 2025 07:01:10 +0000 Files and hashes: 1: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl (hash: bgKjz4HzcUFctnMGFu7dYfTNwfzRkUtj3rnLfXjW/QI=) 2: f3ZAgsX9I3hAxsDfGccuc4frEIc.roa (hash: 4M3tVBuY11wpuTelZy7jmaALqx1HzWsWmiuVNlUHSTM=) 3: m2ywJd2kQJYTADIv61wmJdARYH0.roa (hash: ZTRMQxv3ksCR8s54WLYLbJtFtPpGkhVtVd7EKUXjlqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:10:7f:c6:dd:33:14:eb:14:20:16:12:6b:76:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13 Validity Not Before: Dec 12 07:01:10 2025 GMT Not After : Dec 13 07:01:10 2025 GMT Subject: CN=c7cefda6e49a11e9dee849c5bb79400126482533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:b2:2d:cd:5c:94:74:5a:2a:6d:7e:a5:8e: 61:e3:eb:b8:a5:33:ca:9b:f1:68:cd:8f:7b:76:b3: db:df:b7:ea:5c:da:15:db:6c:2b:7d:ce:3a:49:4c: f2:be:4d:38:90:c8:0a:05:84:a5:68:df:15:00:e6: 9f:93:32:bc:a0:5f:23:4f:19:1c:d7:ba:38:38:ce: 9c:cc:ad:99:8e:c8:8b:0f:0e:3f:cd:c9:93:5f:c8: 07:27:33:ba:79:4f:09:f8:20:be:7c:c3:05:96:fe: 47:67:30:8e:6a:07:44:c0:59:6e:ef:bf:f7:ee:b4: bb:1c:7e:8b:14:67:7a:9f:25:6b:86:ed:ef:6d:8c: 4f:99:30:54:1d:fd:24:82:d0:2d:26:4c:a9:da:55: 97:36:fe:97:9a:98:d7:bc:7c:fa:d7:4e:b7:3c:a8: 5a:72:28:81:ea:cc:90:47:a0:30:12:42:ff:7e:ad: a8:37:6f:4e:4d:45:6b:f7:6e:39:5b:49:bc:24:86: eb:4c:50:bd:e8:32:a9:66:2c:3f:0d:19:01:67:92: 62:56:2c:37:c8:f4:4f:6d:5e:84:19:1b:53:5b:ba: 53:16:89:6f:ce:23:5d:3d:44:55:ab:13:06:f4:fe: bc:5a:ff:12:31:b2:83:a0:35:3e:3a:37:f7:17:55: 49:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CE:FD:A6:E4:9A:11:E9:DE:E8:49:C5:BB:79:40:01:26:48:25:33 X509v3 Authority Key Identifier: keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:70:f7:3a:c0:d1:8f:f3:f3:2b:08:28:33:34:15:da:b3:1b: 30:5a:e6:ae:05:d3:43:2b:ef:bb:48:18:e7:b9:88:b6:17:17: ea:42:98:2e:21:0c:89:61:47:45:ac:5a:7e:7f:b0:dc:99:78: 4f:0a:2d:c5:8a:08:45:72:7e:c5:9b:8f:88:9b:cb:e1:f7:25: 66:fe:a0:61:f9:89:43:ba:bc:7c:1d:6e:b0:65:db:be:04:db: 92:5f:52:80:ed:f3:72:76:17:b5:b6:55:c0:29:ec:33:b5:19: 98:13:c8:a9:30:5e:b2:1f:d3:4e:85:b5:c7:ed:45:2c:6d:28: 33:5f:b6:88:6e:ce:50:8c:f4:0b:a7:7d:3e:dc:e8:c6:8a:77: 46:4a:48:df:e4:26:a7:cb:68:a8:f3:4d:91:56:52:b1:aa:49: dd:64:d7:73:0c:84:84:8a:18:be:aa:b1:53:94:e8:59:79:79: d5:a2:e4:27:f9:f3:9b:92:b8:45:69:b8:22:0b:f3:57:11:56: 3d:39:ca:94:0c:68:3d:c5:04:6a:65:70:ee:6e:03:3d:4e:30: 6d:ec:50:3b:c6:13:01:2b:f9:37:bd:a3:f6:d6:4a:b7:d6:74: 7e:dd:e1:ad:8b:ca:bc:a4:93:fe:64:8c:4f:88:f5:d0:82:a3: 7d:31:c1:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXRB/xt0zFOsUIBYSa3Z+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMjVmYzUwOGE3MzczMjU2NzIwYTU0ZDczZmE5MDU3ZDhh MjFjMTMwHhcNMjUxMjEyMDcwMTEwWhcNMjUxMjEzMDcwMTEwWjAzMTEwLwYDVQQD EyhjN2NlZmRhNmU0OWExMWU5ZGVlODQ5YzViYjc5NDAwMTI2NDgyNTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aayLc1clHRaKm1+pY5h4+u4pTPK m/FozY97drPb37fqXNoV22wrfc46SUzyvk04kMgKBYSlaN8VAOafkzK8oF8jTxkc 17o4OM6czK2ZjsiLDw4/zcmTX8gHJzO6eU8J+CC+fMMFlv5HZzCOagdEwFlu77/3 7rS7HH6LFGd6nyVrhu3vbYxPmTBUHf0kgtAtJkyp2lWXNv6XmpjXvHz61063PKha ciiB6syQR6AwEkL/fq2oN29OTUVr9245W0m8JIbrTFC96DKpZiw/DRkBZ5JiViw3 yPRPbV6EGRtTW7pTFolvziNdPURVqxMG9P68Wv8SMbKDoDU+Ojf3F1VJ5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfO/abkmhHp3uhJxbt5QAEmSCUzMB8GA1UdIwQY MBaAFNMl/FCKc3MlZyClTXP6kFfYohwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHlYOFVJcHpjeVZuSUtWTmNfcVFWOWlpSEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kYzE3MjQtMzE2NS00N2VmLWE2ZmUt MWM2YWExZjZiNzBiLzEvMHlYOFVJcHpjeVZuSUtWTmNfcVFWOWlpSEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9kYzE3MjQtMzE2NS00N2VmLWE2ZmUtMWM2YWExZjZiNzBi LzEvMHlYOFVJcHpjeVZuSUtWTmNfcVFWOWlpSEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXD3OsDR j/PzKwgoMzQV2rMbMFrmrgXTQyvvu0gY57mIthcX6kKYLiEMiWFHRaxafn+w3Jl4 TwotxYoIRXJ+xZuPiJvL4fclZv6gYfmJQ7q8fB1usGXbvgTbkl9SgO3zcnYXtbZV wCnsM7UZmBPIqTBesh/TToW1x+1FLG0oM1+2iG7OUIz0C6d9Ptzoxop3RkpI3+Qm p8toqPNNkVZSsapJ3WTXcwyEhIoYvqqxU5ToWXl51aLkJ/nzm5K4RWm4IgvzVxFW PTnKlAxoPcUEamVw7m4DPU4wbexQO8YTASv5N72j9tZKt9Z0ft3hrYvKvKST/mSM T4j10IKjfTHBFw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:36:15 2025 by rpki-client