This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json) Hash identifier: iowZY1mJD4k9p/gNuywSQIRRYfkxkm/9a1aDLjovbic= Subject key identifier: 7B:85:25:37:19:AB:E3:6A:D1:1B:32:05:C5:FB:53:F2:A5:71:39:70 Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55 Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055 Certificate serial: 019AF46555581D41C24F49F23506C5BEAF47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:01:12 +0000 Manifest this update: Sat 06 Dec 2025 16:01:12 +0000 Manifest next update: Sun 07 Dec 2025 16:01:12 +0000 Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: H/nNEWuuXMYPVsAEEeWSkazidIBAXSsVAKUxipsTiY8=) 2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:55:58:1d:41:c2:4f:49:f2:35:06:c5:be:af:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055 Validity Not Before: Dec 6 16:01:12 2025 GMT Not After : Dec 7 16:01:12 2025 GMT Subject: CN=7b85253719abe36ad11b3205c5fb53f2a5713970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:66:74:eb:63:e6:9c:4d:39:cc:93:b5:fc: 1e:cb:e8:04:26:b1:e7:0b:9b:16:ce:c4:02:7c:0c: 42:40:d2:e9:ee:9c:b8:c9:c6:b4:43:37:f1:70:c6: 71:4c:9b:43:dc:fe:d7:5d:b5:c1:7c:77:c9:cd:32: 78:fa:34:d6:44:5e:71:87:42:29:3a:b6:7f:bc:f7: 79:fa:fe:db:81:36:7d:9c:b2:e9:05:a0:78:f9:8e: 07:29:cd:d4:d9:b3:f6:b9:b9:e0:65:08:f1:35:16: 67:6d:b3:79:f9:ef:df:07:80:cc:6c:07:8a:0f:f7: 03:9b:d8:d1:43:29:36:b9:f0:3d:07:fd:ec:b8:51: a4:69:ab:3e:ee:5e:06:f5:1f:66:a0:4f:86:63:79: 78:31:9a:b0:10:c2:a2:31:6b:63:92:1c:f3:35:c9: 3b:f0:e7:46:f0:67:1b:15:0f:e3:27:bb:63:08:a5: da:4b:dd:03:7b:34:2d:8d:e0:10:33:c8:e1:74:c6: 0e:de:39:e0:98:eb:1f:52:c9:9a:8d:da:58:da:3f: aa:92:aa:77:7d:cc:d0:ad:7c:6f:4a:ff:df:b3:47: 8e:2e:c3:d2:d5:10:04:16:a1:9b:d6:20:0a:93:01: 97:64:88:8d:d2:06:20:4e:a6:74:82:c0:aa:d5:d6: cf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:85:25:37:19:AB:E3:6A:D1:1B:32:05:C5:FB:53:F2:A5:71:39:70 X509v3 Authority Key Identifier: keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c9:99:db:2a:34:58:32:1e:11:35:89:94:e8:63:ed:60:03: 5b:08:33:c4:e9:73:72:b1:cf:ab:91:bd:d2:80:da:fa:aa:45: 05:c8:14:76:13:1f:f6:cf:86:f4:95:33:bd:b0:68:00:d8:e0: fe:4b:68:04:a0:53:15:12:1e:4a:fa:38:8f:ac:df:92:e0:6b: 89:9d:28:f1:27:59:ec:84:66:b5:26:97:14:0a:0b:65:86:1a: 99:16:82:d4:d2:ac:cd:f2:05:e2:60:5b:71:c9:a7:60:e2:ba: de:d5:27:66:90:1c:4e:7d:c2:1b:91:2b:5b:f2:3b:42:15:04: a2:16:88:2e:f2:0a:22:ce:55:62:88:87:ef:cd:ba:32:f7:25: 90:08:a3:c6:d7:c0:ce:76:5d:31:58:5b:41:bf:26:53:4a:ff: c1:18:b9:4a:46:7d:a0:8e:c7:76:03:28:d3:cb:1e:65:bc:52: 1f:e7:44:36:55:a9:0f:9a:27:84:83:53:94:66:50:e2:22:f2: 4b:d8:f4:24:01:24:97:fc:3f:cd:32:0f:32:c4:7b:e7:ef:3d: c3:9a:9b:ea:3c:c2:13:f3:4f:8a:5b:ff:88:13:c0:3b:b8:73: 67:a4:27:58:12:36:b9:d2:ad:28:4b:48:d7:2f:2e:67:bd:88: d1:44:bd:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVVYHUHCT0nyNQbFvq9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNTJiNGMxZjVkNDg0ZWVmYzJiMTU5N2Y0NTUwMDNhYjY1 NGIwNTUwHhcNMjUxMjA2MTYwMTEyWhcNMjUxMjA3MTYwMTEyWjAzMTEwLwYDVQQD Eyg3Yjg1MjUzNzE5YWJlMzZhZDExYjMyMDVjNWZiNTNmMmE1NzEzOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3RmdOtj5pxNOcyTtfwey+gEJrHn C5sWzsQCfAxCQNLp7py4yca0QzfxcMZxTJtD3P7XXbXBfHfJzTJ4+jTWRF5xh0Ip OrZ/vPd5+v7bgTZ9nLLpBaB4+Y4HKc3U2bP2ubngZQjxNRZnbbN5+e/fB4DMbAeK D/cDm9jRQyk2ufA9B/3suFGkaas+7l4G9R9moE+GY3l4MZqwEMKiMWtjkhzzNck7 8OdG8GcbFQ/jJ7tjCKXaS90DezQtjeAQM8jhdMYO3jngmOsfUsmajdpY2j+qkqp3 fczQrXxvSv/fs0eOLsPS1RAEFqGb1iAKkwGXZIiN0gYgTqZ0gsCq1dbPuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuFJTcZq+Nq0RsyBcX7U/KlcTlwMB8GA1UdIwQY MBaAFNFStMH11ITu/CsVl/RVADq2VLBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmIt MmY3NTE5NTIxNmI5LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmItMmY3NTE5NTIxNmI5 LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScmZ2yo0 WDIeETWJlOhj7WADWwgzxOlzcrHPq5G90oDa+qpFBcgUdhMf9s+G9JUzvbBoANjg /ktoBKBTFRIeSvo4j6zfkuBriZ0o8SdZ7IRmtSaXFAoLZYYamRaC1NKszfIF4mBb ccmnYOK63tUnZpAcTn3CG5ErW/I7QhUEohaILvIKIs5VYoiH7826MvclkAijxtfA znZdMVhbQb8mU0r/wRi5SkZ9oI7HdgMo08seZbxSH+dENlWpD5onhINTlGZQ4iLy S9j0JAEkl/w/zTIPMsR75+89w5qb6jzCE/NPilv/iBPAO7hzZ6QnWBI2udKtKEtI 1y8uZ72I0US9RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:25:11 2025 by rpki-client