This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json) Hash identifier: qvgSwBB/Cl6DF/KwfLJS4K3vLYJwGOBk37BTvXfd/Rk= Subject key identifier: 91:F0:9D:73:69:65:F2:09:49:20:9E:28:88:D9:A6:86:29:32:E3:D2 Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f Certificate serial: 019B3644E914817AF4EC3B1F3443E1A52572 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft Manifest number: 0E04 Signing time: Fri 19 Dec 2025 11:00:44 +0000 Manifest this update: Fri 19 Dec 2025 11:00:44 +0000 Manifest next update: Sat 20 Dec 2025 11:00:44 +0000 Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: QuyKKWinEDFZhKwiY0Ss0rwA4SrzOKKMNNQS6Rp83z0=) 2: 1-Mnf3JnGm30D3TVdL8D8i-JJTg.roa (hash: FQArZOtG/iI5+2OZ+rGhEkabMbeYZiFVJ69aFAVvKUM=) 3: ViACi2znHcxjvEoTWJabRySlSug.roa (hash: /lKDXYbMBEGiN9zYRBMEKiyvRO0eOc45ePzpVSUQyuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:44:e9:14:81:7a:f4:ec:3b:1f:34:43:e1:a5:25:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f Validity Not Before: Dec 19 11:00:44 2025 GMT Not After : Dec 20 11:00:44 2025 GMT Subject: CN=91f09d736965f20949209e2888d9a6862932e3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:c4:c3:c6:0d:35:1f:9e:d8:1b:13:fd:f5: 31:24:30:1d:84:d6:10:f7:16:c6:43:95:13:dc:ad: 71:73:1d:6f:24:20:c6:e0:2f:26:f0:fc:db:07:15: 54:ae:ee:af:13:49:f7:bf:95:21:1d:6b:42:b4:dd: b2:a9:b8:cb:46:73:2f:ce:9e:bd:de:ab:8c:ac:98: f4:82:fc:61:80:05:0b:43:aa:22:52:b7:da:1f:95: c5:dd:ef:31:d7:ff:96:26:31:95:12:ec:37:82:4b: 86:9f:cd:c5:1f:a8:ad:0a:d8:ef:96:86:55:2b:fd: 6d:d5:1c:33:a1:d4:49:32:80:1f:54:85:3c:f3:c2: 9a:83:df:70:0b:b8:85:34:d3:03:21:ed:a0:ad:23: 3a:03:3a:3f:64:95:ca:a3:8a:b0:04:b0:bf:49:3d: 5b:24:d2:eb:57:26:6b:2d:85:a9:d8:84:59:7e:3a: e0:3b:2d:08:6d:50:74:c8:81:b6:85:a7:4f:26:68: 83:92:f0:60:ca:c3:6a:4d:0b:a1:6e:74:2e:a4:5f: b2:27:11:67:6d:61:d7:f0:55:41:61:f0:b1:d6:20: c0:9a:54:e1:d0:a3:f9:ca:4e:39:04:dc:02:85:d7: 14:e0:d3:e6:f4:6f:3b:b7:33:15:21:8b:25:0d:51: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F0:9D:73:69:65:F2:09:49:20:9E:28:88:D9:A6:86:29:32:E3:D2 X509v3 Authority Key Identifier: keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:50:d1:59:fe:a7:2d:39:db:2c:95:f8:2f:4c:16:b1:59:80: 8f:fa:19:00:18:ad:68:6e:8a:a8:fc:51:1e:d5:3b:79:61:3b: 92:a7:0f:8b:1f:3f:b0:b4:ed:a3:69:23:8e:7c:e0:c8:d2:e6: e1:d9:0f:9a:4d:ed:b1:81:52:4d:24:9a:18:90:9e:e7:ae:7a: 98:3d:5d:67:34:37:d9:69:60:76:ae:d8:b2:2e:f2:51:34:c2: 3e:5b:e6:12:b8:f6:20:dc:f3:67:90:67:bb:59:77:5e:cc:ae: 51:b6:bc:bc:87:9e:32:db:9f:1a:bc:7b:f9:cd:8d:74:91:dd: bb:62:31:41:a7:30:68:d2:78:e7:46:89:5e:ac:88:74:94:e4: 2a:14:83:83:a2:2b:26:d4:15:4c:6c:f4:f4:0d:49:c7:f5:76: 2d:b6:fc:38:85:8c:b6:af:a0:07:20:20:e6:63:c1:42:e2:f0: f5:d2:5e:29:b2:81:f2:8b:65:74:34:a3:0f:08:47:aa:28:06: d0:28:54:74:0d:bd:30:7e:6e:49:41:e7:5c:33:59:6d:a8:48: 81:10:83:bf:cb:a4:6d:b4:35:bd:61:7c:ff:74:e7:80:a8:51: 4e:b4:c3:36:ed:5c:4e:93:e9:c5:56:dc:c8:ea:40:a7:d7:3b: 07:61:6c:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2ROkUgXr07DsfNEPhpSVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMmYzYmQwYmFlNjAzYWI3OTA2MDJhOTZiYmJjNDJiNTMy MmU4OGYwHhcNMjUxMjE5MTEwMDQ0WhcNMjUxMjIwMTEwMDQ0WjAzMTEwLwYDVQQD Eyg5MWYwOWQ3MzY5NjVmMjA5NDkyMDllMjg4OGQ5YTY4NjI5MzJlM2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/zEw8YNNR+e2BsT/fUxJDAdhNYQ 9xbGQ5UT3K1xcx1vJCDG4C8m8PzbBxVUru6vE0n3v5UhHWtCtN2yqbjLRnMvzp69 3quMrJj0gvxhgAULQ6oiUrfaH5XF3e8x1/+WJjGVEuw3gkuGn83FH6itCtjvloZV K/1t1RwzodRJMoAfVIU888Kag99wC7iFNNMDIe2grSM6Azo/ZJXKo4qwBLC/ST1b JNLrVyZrLYWp2IRZfjrgOy0IbVB0yIG2hadPJmiDkvBgysNqTQuhbnQupF+yJxFn bWHX8FVBYfCx1iDAmlTh0KP5yk45BNwChdcU4NPm9G87tzMVIYslDVFG6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHwnXNpZfIJSSCeKIjZpoYpMuPSMB8GA1UdIwQY MBaAFNIvO9C65gOreQYCqWu7xCtTIuiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAt ZDcyMWJkMmU5ZDUzLzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAtZDcyMWJkMmU5ZDUz LzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFDRWf6n LTnbLJX4L0wWsVmAj/oZABitaG6KqPxRHtU7eWE7kqcPix8/sLTto2kjjnzgyNLm 4dkPmk3tsYFSTSSaGJCe5656mD1dZzQ32Wlgdq7Ysi7yUTTCPlvmErj2INzzZ5Bn u1l3XsyuUba8vIeeMtufGrx7+c2NdJHdu2IxQacwaNJ450aJXqyIdJTkKhSDg6Ir JtQVTGz09A1Jx/V2Lbb8OIWMtq+gByAg5mPBQuLw9dJeKbKB8otldDSjDwhHqigG 0ChUdA29MH5uSUHnXDNZbahIgRCDv8ukbbQ1vWF8/3TngKhRTrTDNu1cTpPpxVbc yOpAp9c7B2FsMg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:15:43 2025 by rpki-client