This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft File: 0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json) Hash identifier: H6ck6aryLdaE9CWbFcUOyjvgo80hEW3iKF7ceJfrVSU= Subject key identifier: 24:CC:62:FA:18:70:06:05:DA:61:D1:B0:39:63:71:D7:2C:0E:0C:C8 Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16 Certificate issuer: /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116 Certificate serial: 019AF12D1E7876B3CBF818106C340B81F09F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft Manifest number: 8E Signing time: Sat 06 Dec 2025 01:00:57 +0000 Manifest this update: Sat 06 Dec 2025 01:00:57 +0000 Manifest next update: Sun 07 Dec 2025 01:00:57 +0000 Files and hashes: 1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: wq9ciwKE1ZizWmASTjxuDSNYWQ0a6n81aECJafHuw8I=) 2: bzFosFN5ObqKTXX0o67vA-bvyEU.roa (hash: yXoWK432d1fj4jLB5fBcuqn/7QkMmdbiVvgP3kSmafw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1e:78:76:b3:cb:f8:18:10:6c:34:0b:81:f0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116 Validity Not Before: Dec 6 01:00:57 2025 GMT Not After : Dec 7 01:00:57 2025 GMT Subject: CN=24cc62fa18700605da61d1b0396371d72c0e0cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a3:d2:77:b3:e0:96:e4:e6:92:43:47:b8:57: e4:06:19:ef:e2:cf:53:c9:43:1f:33:bc:09:20:4d: 50:c1:ec:0e:f7:71:ea:55:11:3d:b5:56:b0:76:b3: 9d:2f:f6:70:38:3d:0b:db:ca:14:f7:16:e7:df:85: 54:63:f5:37:b1:0a:d3:d6:9a:66:27:47:c0:82:b4: 67:dd:01:9c:3e:af:e9:eb:dd:4d:68:50:03:72:83: 45:39:f3:37:12:9a:36:a7:6a:17:89:ec:7c:a5:9a: cf:86:32:50:ae:1c:9a:73:ce:f9:8b:e7:4b:36:b5: 2a:34:be:18:33:7d:00:e3:3b:5a:11:10:6d:8a:2b: da:63:1d:be:02:cd:5c:7a:21:e5:34:72:30:c2:6f: 6d:a9:d2:d7:a4:64:ee:75:9d:ec:aa:75:9f:7a:67: 62:49:ee:cb:df:96:42:ae:35:67:d4:58:ab:e0:e9: b0:74:ec:a5:fa:bf:c2:1e:9d:12:07:97:ee:10:b8: 97:e7:74:45:5a:9a:85:a5:b5:c1:78:aa:ca:18:19: da:3c:a2:74:d2:21:18:b7:a5:57:a1:c4:65:0b:1a: 04:44:b7:46:ce:09:d9:6c:d1:78:2c:d5:33:da:0e: e0:8a:53:cc:fa:1f:46:65:3e:06:d3:5d:1b:32:8c: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CC:62:FA:18:70:06:05:DA:61:D1:B0:39:63:71:D7:2C:0E:0C:C8 X509v3 Authority Key Identifier: keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:30:32:1f:ce:e6:6f:55:69:e3:01:40:19:06:b2:b2:e5:7a: 6a:29:53:45:db:48:80:64:51:a7:e5:82:e3:29:b1:48:24:ee: 2a:5b:a4:05:a5:8b:f9:63:d5:6c:d8:24:5b:03:6a:37:7a:6e: 97:b7:21:29:98:36:56:c2:74:a4:6b:e0:e0:83:f7:40:da:e3: 2d:46:d3:3e:83:30:b6:8a:96:3a:ba:74:ef:04:6c:0e:74:e1: 34:aa:16:3d:06:d7:22:cc:d1:2f:61:d9:76:68:67:a1:7a:e2: 54:6c:94:b2:0f:d6:0a:10:bd:90:0b:62:37:84:a7:72:1a:86: 74:91:9f:4c:3e:95:e1:f9:b3:95:be:e9:99:ce:3a:f9:a8:a8: a4:40:ee:19:a9:49:9b:09:ae:7c:20:ef:e2:cc:0d:84:49:29: 8a:31:e3:51:1f:c6:73:63:fe:bc:41:de:ff:a0:45:03:bd:b2: 81:db:67:62:ec:38:83:c4:30:17:cf:b4:36:60:37:55:10:2d: 8f:8b:02:d7:65:44:08:34:7d:06:7f:90:58:ee:5b:e0:b1:e6: 10:c5:03:22:3a:45:9b:b7:fa:27:03:5a:c5:a5:31:7f:6e:5a: 3c:e5:e0:ef:11:79:a1:a1:22:91:5a:65:72:d7:c1:56:7d:49: a2:38:47:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLR54drPL+BgQbDQLgfCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZWQ2NjRmNGFmMmY4ZTExOWI4N2EyNjhjNWQ0MzAzZmJi MzYxMTYwHhcNMjUxMjA2MDEwMDU3WhcNMjUxMjA3MDEwMDU3WjAzMTEwLwYDVQQD EygyNGNjNjJmYTE4NzAwNjA1ZGE2MWQxYjAzOTYzNzFkNzJjMGUwY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqPSd7PgluTmkkNHuFfkBhnv4s9T yUMfM7wJIE1QwewO93HqVRE9tVawdrOdL/ZwOD0L28oU9xbn34VUY/U3sQrT1ppm J0fAgrRn3QGcPq/p691NaFADcoNFOfM3Epo2p2oXiex8pZrPhjJQrhyac875i+dL NrUqNL4YM30A4ztaERBtiivaYx2+As1ceiHlNHIwwm9tqdLXpGTudZ3sqnWfemdi Se7L35ZCrjVn1Fir4OmwdOyl+r/CHp0SB5fuELiX53RFWpqFpbXBeKrKGBnaPKJ0 0iEYt6VXocRlCxoERLdGzgnZbNF4LNUz2g7gilPM+h9GZT4G010bMox4VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTMYvoYcAYF2mHRsDljcdcsDgzIMB8GA1UdIwQY MBaAFNHtZk9K8vjhGbh6JoxdQwP7s2EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2Mt NGI5NTI5YjQ4Y2VhLzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2MtNGI5NTI5YjQ4Y2Vh LzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjAyH87m b1Vp4wFAGQaysuV6ailTRdtIgGRRp+WC4ymxSCTuKlukBaWL+WPVbNgkWwNqN3pu l7chKZg2VsJ0pGvg4IP3QNrjLUbTPoMwtoqWOrp07wRsDnThNKoWPQbXIszRL2HZ dmhnoXriVGyUsg/WChC9kAtiN4SnchqGdJGfTD6V4fmzlb7pmc46+aiopEDuGalJ mwmufCDv4swNhEkpijHjUR/Gc2P+vEHe/6BFA72ygdtnYuw4g8QwF8+0NmA3VRAt j4sC12VECDR9Bn+QWO5b4LHmEMUDIjpFm7f6JwNaxaUxf25aPOXg7xF5oaEikVpl ctfBVn1JojhHqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:42 2025 by rpki-client