This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft File: 0HNWUFJtK79SUNl5fknbHZ8cwn8.mft (raw, json) Hash identifier: ue00wkT7zuugQNIxv6BufP0N4fv/FocvJe++H2ePX/k= Subject key identifier: 12:44:86:9B:11:98:74:9F:18:14:21:95:ED:87:BF:F3:06:44:51:0D Authority key identifier: D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F Certificate issuer: /CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f Certificate serial: 019B5A5246957BD4C2C778A01BA3A76E59D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft Manifest number: 9F Signing time: Fri 26 Dec 2025 11:01:40 +0000 Manifest this update: Fri 26 Dec 2025 11:01:40 +0000 Manifest next update: Sat 27 Dec 2025 11:01:40 +0000 Files and hashes: 1: 0HNWUFJtK79SUNl5fknbHZ8cwn8.crl (hash: NpgbrM/fv9Il+NEdf6O8ZutHl6kja+oyscD+qNJZ1TQ=) 2: GEViIrp__zd7MRZmIGyBHixASLs.roa (hash: wj88L0dW9LTOq3jf3P0nxH1ftHshlmZInv5nkhzsxdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:46:95:7b:d4:c2:c7:78:a0:1b:a3:a7:6e:59:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f Validity Not Before: Dec 26 11:01:40 2025 GMT Not After : Dec 27 11:01:40 2025 GMT Subject: CN=1244869b1198749f18142195ed87bff30644510d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:30:7b:ac:71:36:b8:72:5e:b1:f3:03:74: 90:72:c4:13:71:99:b0:36:8a:2c:73:b6:19:7e:1b: bf:32:4d:0b:07:b2:3e:9b:60:86:1a:a7:7b:ec:45: fd:81:62:3b:45:67:b0:a4:95:7d:80:f8:9a:d2:77: c0:32:87:44:06:9b:ca:dc:5d:9e:30:c8:5d:c8:42: 0b:5a:5a:e4:44:21:6e:d6:5c:55:3d:d2:d2:95:d7: 09:d5:5f:a5:f5:58:b8:8c:f4:4b:93:69:c6:c9:3e: f7:ef:9c:2f:e3:b0:4f:4f:66:07:51:97:0f:33:6f: a2:6f:c2:a4:a2:78:d1:70:95:b1:3e:e3:f7:f3:3d: 0a:78:8e:43:9b:08:ee:c9:ae:ff:24:b3:c1:23:27: 27:1b:42:7f:17:e7:21:fe:b9:37:1d:b9:43:38:71: fc:66:4b:9f:7c:ae:01:4d:65:ca:b7:9d:ef:77:c4: 63:97:70:1c:a7:82:88:74:99:70:31:b0:ca:86:d1: 17:61:9a:2f:3c:61:0d:62:6e:ec:18:a5:62:2a:58: 3e:58:33:9a:ed:98:79:fb:22:f6:5b:49:21:2b:eb: ad:f4:01:29:e0:df:85:dd:bc:74:e5:9e:fa:90:d4: c9:21:a3:70:00:bc:e1:d1:3f:a5:6c:9a:c5:bd:9a: 73:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:44:86:9B:11:98:74:9F:18:14:21:95:ED:87:BF:F3:06:44:51:0D X509v3 Authority Key Identifier: keyid:D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:bf:22:bd:2b:56:ef:f7:79:f9:16:a5:a1:ba:de:1f:0e:52: 25:12:23:90:fe:df:d9:e3:0f:93:3e:07:86:d1:35:0b:46:ba: 7d:87:08:90:a7:6d:a3:7c:be:a0:2a:ff:11:33:e7:de:79:d5: ca:33:e3:ee:a9:9b:3b:38:99:40:ad:32:51:f9:65:6c:fc:c9: 8e:a9:bc:b7:a7:ea:38:fc:0e:2d:19:ad:95:90:67:5d:eb:6f: 9f:06:f6:80:8d:c5:31:26:ae:db:fa:90:3c:5e:84:17:f6:53: 77:8d:76:20:39:77:66:7f:ba:83:cd:0f:08:e1:71:56:38:65: 83:2b:83:34:69:6c:2a:7b:b9:9b:db:c9:94:75:11:7b:cb:22: 84:58:63:21:24:74:4e:93:ae:fa:7c:f1:5a:d6:bc:7d:cf:cb: 91:92:45:02:a5:be:c8:73:c2:bb:5f:ae:48:b2:96:58:8e:f3: 73:34:b8:41:69:68:1c:3b:16:7a:82:50:88:69:46:45:51:02: 5f:f6:34:2b:33:db:e4:a5:6f:60:45:ae:67:67:73:89:1a:0d: 0d:53:8f:71:16:65:39:40:47:9e:a5:8c:38:b2:eb:5e:f5:97: 53:8a:f6:1b:8b:13:bb:72:cd:31:dd:1d:f6:0d:be:d2:ff:55: fd:33:c7:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUkaVe9TCx3igG6OnblnVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNzM1NjUwNTI2ZDJiYmY1MjUwZDk3OTdlNDlkYjFkOWYx Y2MyN2YwHhcNMjUxMjI2MTEwMTQwWhcNMjUxMjI3MTEwMTQwWjAzMTEwLwYDVQQD EygxMjQ0ODY5YjExOTg3NDlmMTgxNDIxOTVlZDg3YmZmMzA2NDQ1MTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKswe6xxNrhyXrHzA3SQcsQTcZmw Noosc7YZfhu/Mk0LB7I+m2CGGqd77EX9gWI7RWewpJV9gPia0nfAModEBpvK3F2e MMhdyEILWlrkRCFu1lxVPdLSldcJ1V+l9Vi4jPRLk2nGyT7375wv47BPT2YHUZcP M2+ib8KkonjRcJWxPuP38z0KeI5Dmwjuya7/JLPBIycnG0J/F+ch/rk3HblDOHH8 ZkuffK4BTWXKt53vd8Rjl3Acp4KIdJlwMbDKhtEXYZovPGENYm7sGKViKlg+WDOa 7Zh5+yL2W0khK+ut9AEp4N+F3bx05Z76kNTJIaNwALzh0T+lbJrFvZpzjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJEhpsRmHSfGBQhle2Hv/MGRFENMB8GA1UdIwQY MBaAFNBzVlBSbSu/UlDZeX5J2x2fHMJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iNDk1MDAtMGI3NC00YzQ1LWE4ODIt MGM4NGZkNzU3OTkwLzEvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iNDk1MDAtMGI3NC00YzQ1LWE4ODItMGM4NGZkNzU3OTkw LzEvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlr8ivStW 7/d5+RalobreHw5SJRIjkP7f2eMPkz4HhtE1C0a6fYcIkKdto3y+oCr/ETPn3nnV yjPj7qmbOziZQK0yUfllbPzJjqm8t6fqOPwOLRmtlZBnXetvnwb2gI3FMSau2/qQ PF6EF/ZTd412IDl3Zn+6g80PCOFxVjhlgyuDNGlsKnu5m9vJlHURe8sihFhjISR0 TpOu+nzxWta8fc/LkZJFAqW+yHPCu1+uSLKWWI7zczS4QWloHDsWeoJQiGlGRVEC X/Y0KzPb5KVvYEWuZ2dziRoNDVOPcRZlOUBHnqWMOLLrXvWXU4r2G4sTu3LNMd0d 9g2+0v9V/TPHvQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:56 2025 by rpki-client