This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json) Hash identifier: L/BVQIH9qTTTWkuTBInXLdvBicqD8eaIayWQrALmPEI= Subject key identifier: E0:D9:51:B8:25:B0:F1:41:25:AA:06:09:C8:5F:EA:A4:A8:4E:33:E9 Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a Certificate serial: 019AF509928CD4CC4EF5DD34CA826FB2F3C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft Manifest number: 0C8E Signing time: Sat 06 Dec 2025 19:00:36 +0000 Manifest this update: Sat 06 Dec 2025 19:00:36 +0000 Manifest next update: Sun 07 Dec 2025 19:00:36 +0000 Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=) 2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: 9QMyss2lmm0LKfNktorEEOGtZCE/lT52vYXiUuAQtKY=) 3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:92:8c:d4:cc:4e:f5:dd:34:ca:82:6f:b2:f3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a Validity Not Before: Dec 6 19:00:36 2025 GMT Not After : Dec 7 19:00:36 2025 GMT Subject: CN=e0d951b825b0f14125aa0609c85feaa4a84e33e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c2:4d:c4:9d:8d:87:54:d6:9d:0e:9a:e4:eb: 48:e6:92:56:6e:47:2d:47:26:87:ac:fc:3a:c1:c4: 25:fd:78:b6:1b:67:a1:29:46:20:4b:82:7b:bb:2c: dc:dc:c7:27:55:18:0e:4b:55:d6:7c:69:a5:8d:98: c8:55:1a:49:72:18:3e:d4:24:f8:5d:cf:70:9c:58: 48:f4:93:91:9d:91:21:0b:88:b9:74:9c:84:8e:bb: 1a:d4:93:a5:e3:c7:21:6d:5c:07:3c:b5:08:f1:cc: 3a:88:7b:1b:3f:81:e2:4b:eb:f7:5b:53:c1:90:c2: b9:21:f1:c0:bd:e7:8e:91:a6:8a:5b:5e:88:2d:73: f0:2e:bf:6a:92:80:c1:75:0f:33:47:5e:c6:82:74: d9:e8:09:30:48:de:51:ed:b6:b0:54:13:85:56:c4: 7b:c0:05:a6:e0:52:01:d2:bd:02:9f:d3:8c:14:da: 4c:8a:51:55:05:e9:5c:0c:12:65:dc:c4:5e:a9:46: f1:4f:50:94:96:4a:20:9c:b9:13:6a:01:14:f8:bb: e0:44:f4:ae:d7:57:84:bb:64:80:6c:e2:36:2f:49: 59:d3:66:43:ba:64:b3:40:6d:1c:8d:35:aa:e5:8b: 44:d1:be:31:c2:7a:07:48:e5:c0:d8:c7:61:b4:ff: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D9:51:B8:25:B0:F1:41:25:AA:06:09:C8:5F:EA:A4:A8:4E:33:E9 X509v3 Authority Key Identifier: keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2a:b2:20:fc:47:46:7f:59:20:67:e2:dc:5a:e6:6a:c0:14: 91:42:f3:3f:6b:4e:74:1d:4a:42:43:79:0b:6a:2f:82:2e:f2: cf:8f:23:64:3e:d8:d0:c4:0c:4b:ef:83:81:10:8c:09:93:1a: 2a:05:65:d3:9b:ca:85:75:b1:5e:ad:71:79:f6:55:84:51:05: 9c:cb:1a:32:9c:f7:61:dd:b8:48:ea:25:88:df:89:14:55:21: f7:bc:6c:ec:ad:a8:fe:43:9a:a3:d9:e6:4f:0c:bb:b6:10:bc: 5e:de:19:9a:b8:be:08:b5:cf:43:42:f6:9c:51:79:30:0c:f4: ec:32:8b:ea:f9:ea:2f:7b:fd:f2:34:05:ae:b3:e7:a8:6f:cb: 96:8f:33:64:38:8c:a5:8d:bf:6e:3e:24:eb:44:12:50:73:74: 02:ba:c1:f8:57:b6:c7:f0:2c:06:a7:31:25:ac:47:4d:11:d1: a4:93:6d:b3:a4:6b:7d:e4:2a:0f:cd:00:52:22:2c:51:ac:b1: fc:45:b4:7c:8e:7e:db:32:98:bd:b9:bc:61:08:14:7e:e1:d3: b9:14:84:52:f7:f6:09:e3:b4:42:02:72:79:81:6f:31:92:4e: d8:c3:db:04:c2:74:a6:30:5a:a3:0c:81:f7:9d:13:7e:74:a4: db:ec:dd:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZKM1MxO9d00yoJvsvPHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YmQxMGYxYjE0YmJiMjc2N2ZmZGNhZWM0YjQxNzI4ODBi YTQ2MWEwHhcNMjUxMjA2MTkwMDM2WhcNMjUxMjA3MTkwMDM2WjAzMTEwLwYDVQQD EyhlMGQ5NTFiODI1YjBmMTQxMjVhYTA2MDljODVmZWFhNGE4NGUzM2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sJNxJ2Nh1TWnQ6a5OtI5pJWbkct RyaHrPw6wcQl/Xi2G2ehKUYgS4J7uyzc3McnVRgOS1XWfGmljZjIVRpJchg+1CT4 Xc9wnFhI9JORnZEhC4i5dJyEjrsa1JOl48chbVwHPLUI8cw6iHsbP4HiS+v3W1PB kMK5IfHAveeOkaaKW16ILXPwLr9qkoDBdQ8zR17GgnTZ6AkwSN5R7bawVBOFVsR7 wAWm4FIB0r0Cn9OMFNpMilFVBelcDBJl3MReqUbxT1CUlkognLkTagEU+LvgRPSu 11eEu2SAbOI2L0lZ02ZDumSzQG0cjTWq5YtE0b4xwnoHSOXA2MdhtP+adwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODZUbglsPFBJaoGCchf6qSoTjPpMB8GA1UdIwQY MBaAFGi9EPGxS7snZ//crsS0FyiAukYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYt OWZlN2Q5MjhkOWJlLzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYtOWZlN2Q5MjhkOWJl LzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyqyIPxH Rn9ZIGfi3FrmasAUkULzP2tOdB1KQkN5C2ovgi7yz48jZD7Y0MQMS++DgRCMCZMa KgVl05vKhXWxXq1xefZVhFEFnMsaMpz3Yd24SOoliN+JFFUh97xs7K2o/kOao9nm Twy7thC8Xt4Zmri+CLXPQ0L2nFF5MAz07DKL6vnqL3v98jQFrrPnqG/Llo8zZDiM pY2/bj4k60QSUHN0ArrB+Fe2x/AsBqcxJaxHTRHRpJNts6RrfeQqD80AUiIsUayx /EW0fI5+2zKYvbm8YQgUfuHTuRSEUvf2CeO0QgJyeYFvMZJO2MPbBMJ0pjBaowyB 950TfnSk2+zdNA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:45 2025 by rpki-client