This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json) Hash identifier: vL4KJ1tzulnFuOhmHRn3vbZSi51ApRQZt35oADe3/mM= Subject key identifier: CF:9A:D0:23:D7:C2:2E:93:69:3B:AF:76:A8:A4:2B:41:60:B7:3C:B7 Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37 Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537 Certificate serial: 019B0E92B526AD573FF37AB38254259E8FE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft Manifest number: 1701 Signing time: Thu 11 Dec 2025 18:00:54 +0000 Manifest this update: Thu 11 Dec 2025 18:00:54 +0000 Manifest next update: Fri 12 Dec 2025 18:00:54 +0000 Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: v+ZOO9iq097/aBk+1Z6JtPQrScRv29cul5UtOqxuowY=) 2: cednPNYKxfRsr4W4osQ0UxWr_xg.roa (hash: bAnClABodJAGvw6mOL61pHv3A1a0Gmryz3vjrqAKOxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:b5:26:ad:57:3f:f3:7a:b3:82:54:25:9e:8f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537 Validity Not Before: Dec 11 18:00:54 2025 GMT Not After : Dec 12 18:00:54 2025 GMT Subject: CN=cf9ad023d7c22e93693baf76a8a42b4160b73cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:41:49:56:e3:b3:7d:52:0b:19:99:ea:38: 2a:f6:f0:89:f8:77:db:f9:f9:12:4e:50:eb:99:d6: 5f:d0:94:80:ca:69:d9:da:a9:7e:ec:45:0f:e9:bb: 10:f4:5f:66:f4:59:72:05:71:2e:7c:93:c7:d8:8c: d3:d8:b7:79:83:9b:57:91:3f:d7:7b:49:93:2c:24: f2:7d:ba:3d:17:cf:40:c0:47:1c:62:8b:84:95:84: 6c:a1:31:8e:ba:d1:12:dc:68:16:3e:73:7b:36:e9: d2:73:ef:37:dd:32:79:8f:1b:f3:29:42:b0:25:4b: f6:17:56:55:ad:c6:63:89:20:78:6c:c5:36:6d:5a: d7:24:60:fa:79:b6:48:a4:bc:4a:e3:4c:1c:e0:16: 23:7f:a0:a8:99:e2:eb:99:eb:5f:3b:26:aa:27:cc: 38:f9:64:ef:de:98:aa:0f:31:db:93:42:a2:bd:ab: 4d:a2:91:b0:23:50:96:bc:b8:be:ca:1c:22:e1:43: 79:39:8c:77:d4:57:0e:78:e5:9a:1a:b1:53:fc:7f: 00:17:cb:0e:88:d5:c3:15:85:b7:88:e4:69:0c:26: a8:a2:3d:25:78:be:bf:c7:34:7a:f2:26:a4:78:51: 02:c6:92:5c:0c:89:29:b1:e1:47:d1:7e:e9:dc:10: 9b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9A:D0:23:D7:C2:2E:93:69:3B:AF:76:A8:A4:2B:41:60:B7:3C:B7 X509v3 Authority Key Identifier: keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:52:04:56:28:6a:5c:4f:69:79:3d:04:d8:59:44:40:75:fe: 30:5b:92:de:83:b2:91:e3:3b:5a:a2:73:f6:b8:ed:00:3a:98: 6c:f7:60:b9:7c:98:50:84:46:9d:0a:35:b5:e9:11:ed:a1:cb: 0e:9e:04:32:85:27:c3:4a:bb:ce:64:36:07:1b:d3:3a:cb:02: 22:56:51:82:dc:e2:93:11:1b:d9:c7:92:e3:b6:a7:40:ca:3b: bc:d5:59:e7:64:7f:fe:20:ee:c0:e2:0c:59:b8:92:c0:d4:58: 21:ec:91:43:74:5e:c9:99:28:15:7b:93:1d:f1:63:3e:b3:38: bf:ab:34:35:2b:06:19:af:d6:e3:b4:8c:3c:12:8b:dc:3f:34: f6:3d:d4:ab:f5:ac:6c:2e:e1:a2:10:8d:ce:4e:8e:c8:83:9b: ae:6a:0c:ab:a1:41:4f:b4:d0:b0:8c:fa:f8:2d:b2:a5:fc:b2: 8d:e7:e4:9b:fb:87:65:32:ac:4d:d7:21:2f:65:cb:fc:84:f5: 3d:eb:8e:cc:ab:98:ad:a1:83:ef:ed:03:b3:62:3e:ae:a3:b9: a8:ad:c3:fa:48:cf:44:75:16:90:4f:9f:a3:4f:08:89:c8:20: 1e:2a:65:3e:fb:6e:65:f5:a6:6d:b4:6f:57:39:48:44:97:73: 6e:93:2c:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkrUmrVc/83qzglQlno/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTM0M2EzN2VjYWQyYmZiMmMzNWJkOWIyNmQ3ZjQ4YmNi NTc1MzcwHhcNMjUxMjExMTgwMDU0WhcNMjUxMjEyMTgwMDU0WjAzMTEwLwYDVQQD EyhjZjlhZDAyM2Q3YzIyZTkzNjkzYmFmNzZhOGE0MmI0MTYwYjczY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYRBSVbjs31SCxmZ6jgq9vCJ+Hfb +fkSTlDrmdZf0JSAymnZ2ql+7EUP6bsQ9F9m9FlyBXEufJPH2IzT2Ld5g5tXkT/X e0mTLCTyfbo9F89AwEccYouElYRsoTGOutES3GgWPnN7NunSc+833TJ5jxvzKUKw JUv2F1ZVrcZjiSB4bMU2bVrXJGD6ebZIpLxK40wc4BYjf6ComeLrmetfOyaqJ8w4 +WTv3piqDzHbk0KivatNopGwI1CWvLi+yhwi4UN5OYx31FcOeOWaGrFT/H8AF8sO iNXDFYW3iORpDCaooj0leL6/xzR68iakeFECxpJcDIkpseFH0X7p3BCbywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+a0CPXwi6TaTuvdqikK0Fgtzy3MB8GA1UdIwQY MBaAFNCjQ6N+ytK/ssNb2bJtf0i8tXU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtORG8zN0swci15dzF2WnNtMV9TTHkxZFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yMDEyNzMtNzA4ZC00YTQ2LTlhYjYt YzdiMzZiOGEyNjg1LzEvMEtORG8zN0swci15dzF2WnNtMV9TTHkxZFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yMDEyNzMtNzA4ZC00YTQ2LTlhYjYtYzdiMzZiOGEyNjg1 LzEvMEtORG8zN0swci15dzF2WnNtMV9TTHkxZFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlIEVihq XE9peT0E2FlEQHX+MFuS3oOykeM7WqJz9rjtADqYbPdguXyYUIRGnQo1tekR7aHL Dp4EMoUnw0q7zmQ2BxvTOssCIlZRgtzikxEb2ceS47anQMo7vNVZ52R//iDuwOIM WbiSwNRYIeyRQ3ReyZkoFXuTHfFjPrM4v6s0NSsGGa/W47SMPBKL3D809j3Uq/Ws bC7hohCNzk6OyIObrmoMq6FBT7TQsIz6+C2ypfyyjefkm/uHZTKsTdchL2XL/IT1 PeuOzKuYraGD7+0Ds2I+rqO5qK3D+kjPRHUWkE+fo08IicggHiplPvtuZfWmbbRv VzlIRJdzbpMsLA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:14:16 2025 by rpki-client