This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft File: 0dI-JBGcupM36DRmSFv7EGsuJLY.mft (raw, json) Hash identifier: IMeUM2RmIQDWKCnec/+sJ/y2sAtabVRGTwRRU2wXQQw= Subject key identifier: F6:3B:12:F4:CA:85:8D:FE:BD:CC:30:18:91:B2:CC:C8:F9:97:92:9F Authority key identifier: D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6 Certificate issuer: /CN=d1d23e24119cba9337e83466485bfb106b2e24b6 Certificate serial: 019AF3C0642EC9C1966306B39D9960465DC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft Manifest number: 01AA Signing time: Sat 06 Dec 2025 13:01:03 +0000 Manifest this update: Sat 06 Dec 2025 13:01:03 +0000 Manifest next update: Sun 07 Dec 2025 13:01:03 +0000 Files and hashes: 1: 0dI-JBGcupM36DRmSFv7EGsuJLY.crl (hash: w3eb9EDNmfiiBrlW+LoqKB3OAOXNxyZ9UTFv+bDxwGQ=) 2: M-IfQdJ5pbgcbSVbmMmO8aaPrAY.roa (hash: XwGRnAxf2Tdx5V01T06WDZvLLVmv2uRnErY5moi+5Gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:64:2e:c9:c1:96:63:06:b3:9d:99:60:46:5d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d23e24119cba9337e83466485bfb106b2e24b6 Validity Not Before: Dec 6 13:01:03 2025 GMT Not After : Dec 7 13:01:03 2025 GMT Subject: CN=f63b12f4ca858dfebdcc301891b2ccc8f997929f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:51:6a:38:eb:9a:3b:60:aa:03:49:1f:ad: b3:73:04:e9:36:32:b7:3b:78:34:33:5e:bc:3d:6c: 25:09:06:a5:49:35:a2:33:9b:bc:7e:6d:15:c0:24: 79:32:3d:fa:ac:46:8b:8a:1c:a9:51:92:e9:5a:c0: 17:2d:76:df:e7:0a:ac:83:bf:16:5e:d5:8f:84:24: 10:f7:33:84:cf:29:81:ed:eb:92:0c:49:d6:dc:82: 8a:28:1c:dd:82:b8:51:15:49:f5:84:7c:5b:4c:98: 29:a2:62:7d:04:46:f3:65:ae:9b:ca:92:4e:4b:65: d5:03:33:81:b3:f5:a0:4f:d6:ef:f6:ef:47:a1:19: 04:52:3c:b8:c6:c1:75:45:e8:fa:15:24:32:60:85: 79:94:be:04:a6:08:69:ec:e9:02:62:d0:a1:ea:b5: 44:9a:91:6a:6d:f3:a7:50:8a:7f:2b:1c:43:2b:9d: 7e:78:a0:43:80:55:46:a4:e7:3c:68:44:81:a2:ca: a4:d4:b3:92:fe:5f:fa:7c:d5:83:aa:36:2c:17:31: 68:2b:9d:2a:ec:02:bb:0c:3e:07:d1:ee:de:c1:3a: 31:3a:6c:fe:8b:57:28:08:7f:ec:57:86:bb:48:5e: 5d:35:75:8f:2d:80:be:7c:3f:a6:a6:52:ae:1e:7e: 72:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3B:12:F4:CA:85:8D:FE:BD:CC:30:18:91:B2:CC:C8:F9:97:92:9F X509v3 Authority Key Identifier: keyid:D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b0:68:07:b6:7b:6f:e2:8b:71:1e:e8:5d:7d:9f:c2:2c:44: 61:76:9c:a2:75:1b:9f:fc:e3:73:16:bf:1a:83:32:8f:ca:fe: 60:30:ae:36:e4:6c:e1:42:06:2a:90:40:13:67:d5:80:a0:d4: 4b:b8:06:ba:d3:ce:1c:3b:51:a1:4e:a9:f5:b2:ee:5e:2e:2a: d9:0d:40:57:e4:ef:3b:84:74:7a:29:25:f8:81:65:39:b6:e0: 5e:7c:c5:b6:68:1b:30:cd:a0:47:44:22:d4:49:4c:8a:37:d0: a7:bb:dc:fa:ee:d1:48:b3:4c:9a:af:bc:4a:67:36:09:3c:97: 4a:02:2e:1d:98:54:c4:bd:4a:fb:b3:4d:42:0b:71:74:e1:69: 03:f8:2d:30:fc:ae:08:17:44:46:40:8b:12:53:24:5e:5e:2e: 49:66:a4:2d:da:8d:ca:04:ff:bf:66:ee:43:79:99:f2:4e:0a: f6:40:20:cf:21:ed:b5:a7:04:33:89:bc:53:01:e0:9d:f6:47: ac:dd:fa:38:53:7e:5c:d1:31:36:9d:ee:c4:e4:98:29:63:4a: 68:ce:98:78:0e:4c:27:59:01:4e:2b:fa:80:19:c6:14:79:0e: f1:7b:e0:f3:fb:5c:15:c3:9e:aa:42:11:07:98:eb:77:42:d3: 42:7b:c0:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwGQuycGWYwaznZlgRl3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZDIzZTI0MTE5Y2JhOTMzN2U4MzQ2NjQ4NWJmYjEwNmIy ZTI0YjYwHhcNMjUxMjA2MTMwMTAzWhcNMjUxMjA3MTMwMTAzWjAzMTEwLwYDVQQD EyhmNjNiMTJmNGNhODU4ZGZlYmRjYzMwMTg5MWIyY2NjOGY5OTc5MjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEZRajjrmjtgqgNJH62zcwTpNjK3 O3g0M168PWwlCQalSTWiM5u8fm0VwCR5Mj36rEaLihypUZLpWsAXLXbf5wqsg78W XtWPhCQQ9zOEzymB7euSDEnW3IKKKBzdgrhRFUn1hHxbTJgpomJ9BEbzZa6bypJO S2XVAzOBs/WgT9bv9u9HoRkEUjy4xsF1Rej6FSQyYIV5lL4Epghp7OkCYtCh6rVE mpFqbfOnUIp/KxxDK51+eKBDgFVGpOc8aESBosqk1LOS/l/6fNWDqjYsFzFoK50q 7AK7DD4H0e7ewToxOmz+i1coCH/sV4a7SF5dNXWPLYC+fD+mplKuHn5yawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPY7EvTKhY3+vcwwGJGyzMj5l5KfMB8GA1UdIwQY MBaAFNHSPiQRnLqTN+g0Zkhb+xBrLiS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGRJLUpCR2N1cE0zNkRSbVNGdjdFR3N1SkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YzQwNjQtODUwMy00ZDE2LTkzNTQt NzRkNGU1YjAxYzM1LzEvMGRJLUpCR2N1cE0zNkRSbVNGdjdFR3N1SkxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82YzQwNjQtODUwMy00ZDE2LTkzNTQtNzRkNGU1YjAxYzM1 LzEvMGRJLUpCR2N1cE0zNkRSbVNGdjdFR3N1SkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbBoB7Z7 b+KLcR7oXX2fwixEYXaconUbn/zjcxa/GoMyj8r+YDCuNuRs4UIGKpBAE2fVgKDU S7gGutPOHDtRoU6p9bLuXi4q2Q1AV+TvO4R0eikl+IFlObbgXnzFtmgbMM2gR0Qi 1ElMijfQp7vc+u7RSLNMmq+8Smc2CTyXSgIuHZhUxL1K+7NNQgtxdOFpA/gtMPyu CBdERkCLElMkXl4uSWakLdqNygT/v2buQ3mZ8k4K9kAgzyHttacEM4m8UwHgnfZH rN36OFN+XNExNp3uxOSYKWNKaM6YeA5MJ1kBTiv6gBnGFHkO8Xvg8/tcFcOeqkIR B5jrd0LTQnvA6w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:40 2025 by rpki-client