This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json) Hash identifier: /lhzG980uco8dhK1/1z70Vr6VYqfZUou9v5Iw8TJZcY= Subject key identifier: 8A:E5:50:E1:33:56:83:98:5F:3C:3D:8A:27:41:40:B4:A5:4A:52:54 Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c Certificate serial: 019B18DF41497F77AC1FD980F28C669EBE60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft Manifest number: 0EF1 Signing time: Sat 13 Dec 2025 18:00:42 +0000 Manifest this update: Sat 13 Dec 2025 18:00:42 +0000 Manifest next update: Sun 14 Dec 2025 18:00:42 +0000 Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: 44vesnJ/ESA7bt9xtyDseRBgR7v+bQ7jooC1zxWy8tI=) 2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:41:49:7f:77:ac:1f:d9:80:f2:8c:66:9e:be:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c Validity Not Before: Dec 13 18:00:42 2025 GMT Not After : Dec 14 18:00:42 2025 GMT Subject: CN=8ae550e1335683985f3c3d8a274140b4a54a5254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:0d:9c:47:0d:66:bf:d7:76:8d:de:0c:14: 2f:cb:cb:a9:59:f5:ea:c5:f6:74:9f:7d:9e:42:a3: c1:19:8a:1b:d6:0b:28:b5:b6:de:2f:9f:7f:72:0f: d2:82:1d:f3:5b:02:4d:07:9a:f8:df:2f:28:a5:2d: 33:54:80:17:12:eb:de:74:71:21:b2:9d:88:2e:5b: 40:0d:cc:36:ba:49:e6:26:b4:0f:45:b0:66:86:2a: 9c:fe:a2:95:69:a2:a4:49:d5:b0:27:5d:08:1c:a0: 27:12:ae:15:1c:e0:a3:e5:8c:1b:aa:82:81:85:70: b3:5a:fb:db:86:0c:5e:26:be:7e:d5:27:1e:ee:c3: 67:df:99:d4:92:2a:f5:48:e7:84:58:92:02:32:92: fd:70:26:ac:7e:94:3f:23:89:2f:57:a5:77:5f:0a: 4a:49:84:96:4b:a5:d1:f9:ee:a3:d4:1e:5c:38:63: b0:e9:3a:ed:b2:ed:87:db:32:e9:ac:20:82:39:ec: af:5b:a6:8d:1d:bd:09:fc:fb:21:53:74:19:ff:b1: b2:5c:cf:21:74:b2:6c:b1:34:19:7d:18:cc:4d:34: 8b:f3:50:6c:75:e1:64:4b:21:76:87:ed:b8:62:13: 53:98:2c:9f:24:99:8a:0d:95:14:fa:4b:a3:bd:18: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E5:50:E1:33:56:83:98:5F:3C:3D:8A:27:41:40:B4:A5:4A:52:54 X509v3 Authority Key Identifier: keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8e:d6:0d:95:b8:a0:03:65:61:40:03:65:91:fd:40:ac:db: a5:87:7d:32:fc:ea:25:cc:69:fb:fa:b6:7e:92:da:74:f0:c2: 13:e7:72:6b:d7:4b:c4:c5:47:1c:a0:d4:c6:20:4d:09:d3:7e: 8f:65:09:0e:05:8d:90:e3:26:b5:7d:38:8b:99:e6:ce:5d:a0: 5c:42:9a:e3:e4:b7:df:e8:32:ca:6e:0d:ad:30:7f:47:6b:ba: 37:d7:4c:90:31:ec:57:e1:a8:cc:d4:c7:4a:58:ab:de:d9:84: 26:3f:8d:c7:44:32:f5:4c:cc:6a:12:20:36:57:d8:5d:91:10: 59:70:7e:1b:5a:77:a1:40:84:cb:87:27:d0:a5:0f:9c:17:40: e9:c1:bb:f7:c1:82:79:73:27:0d:78:a4:02:c2:ec:85:d5:4c: a1:99:be:e0:1b:ab:a6:77:5f:0d:0b:4d:68:2b:7d:ec:29:7c: 33:45:72:25:f0:aa:6e:33:2f:e2:bf:2a:43:5f:2a:92:85:17: 02:63:a4:16:67:77:06:34:66:d1:4d:8e:8e:1a:e1:53:3a:f2: f1:54:cc:e8:9e:1e:ba:95:00:da:79:ca:f4:ad:f0:65:9b:81: 0b:23:da:cf:cb:dc:e2:af:5c:de:0d:96:ce:83:cb:c9:f0:a0: ee:f5:c1:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY30FJf3esH9mA8oxmnr5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMjE1YmZjNDg4NzZjMzY1MTgzNTZlZmQ2ZTI4MDI1NWEx ZGVlM2MwHhcNMjUxMjEzMTgwMDQyWhcNMjUxMjE0MTgwMDQyWjAzMTEwLwYDVQQD Eyg4YWU1NTBlMTMzNTY4Mzk4NWYzYzNkOGEyNzQxNDBiNGE1NGE1MjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5QNnEcNZr/Xdo3eDBQvy8upWfXq xfZ0n32eQqPBGYob1gsotbbeL59/cg/Sgh3zWwJNB5r43y8opS0zVIAXEuvedHEh sp2ILltADcw2uknmJrQPRbBmhiqc/qKVaaKkSdWwJ10IHKAnEq4VHOCj5YwbqoKB hXCzWvvbhgxeJr5+1Sce7sNn35nUkir1SOeEWJICMpL9cCasfpQ/I4kvV6V3XwpK SYSWS6XR+e6j1B5cOGOw6Trtsu2H2zLprCCCOeyvW6aNHb0J/PshU3QZ/7GyXM8h dLJssTQZfRjMTTSL81BsdeFkSyF2h+24YhNTmCyfJJmKDZUU+kujvRgvvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrlUOEzVoOYXzw9iidBQLSlSlJUMB8GA1UdIwQY MBaAFNEhW/xIh2w2UYNW79bigCVaHe48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQt MDliZjQwNzFhZWEyLzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQtMDliZjQwNzFhZWEy LzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT47WDZW4 oANlYUADZZH9QKzbpYd9MvzqJcxp+/q2fpLadPDCE+dya9dLxMVHHKDUxiBNCdN+ j2UJDgWNkOMmtX04i5nmzl2gXEKa4+S33+gyym4NrTB/R2u6N9dMkDHsV+GozNTH Slir3tmEJj+Nx0Qy9UzMahIgNlfYXZEQWXB+G1p3oUCEy4cn0KUPnBdA6cG798GC eXMnDXikAsLshdVMoZm+4BurpndfDQtNaCt97Cl8M0VyJfCqbjMv4r8qQ18qkoUX AmOkFmd3BjRm0U2OjhrhUzry8VTM6J4eupUA2nnK9K3wZZuBCyPaz8vc4q9c3g2W zoPLyfCg7vXBdw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:03:12 2025 by rpki-client