This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: v5sWH0mHlTpQmWKW7Ra7GeKEna755AAjPYW0wHIZRm4= Subject key identifier: FA:42:29:31:3C:9C:72:8C:B8:0C:60:69:6A:D0:04:86:68:67:39:21 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 019AF1D1CEF9F855A5838967919F33E1D8FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 1284 Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: rWwE7ox7mUu3PXsMMb/4xgnl8Xt0sPM2j0fm+zxRWZI=) 2: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 3: GE6nRoMuniMWGyv11YMLRPKemVU.roa (hash: RaYbPvfO1sHreb2/JnG9Opl+09YsllUwocY3Ihxf+gE=) 4: LFAtM68_QsypB1yZseRwlLJq2u4.roa (hash: /957wLIuErUNU/cVyq1KNPpSgWYbgRzlgVLc/r/yFdE=) 5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 8: ghLUfufgx1VoBmbU1sZuk7NLdck.roa (hash: KlUf0BqZgjwHYa7TQ0G1F7PJPcSLF10z1HCqYwcsEU0=) 9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 10: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 11: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ce:f9:f8:55:a5:83:89:67:91:9f:33:e1:d8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=fa4229313c9c728cb80c60696ad0048668673921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7d:6e:ba:66:b0:a7:b1:da:6b:d3:8f:17:25: 5c:81:b6:bc:99:71:39:5c:d6:75:a5:73:10:0e:89: a1:aa:fc:3c:0d:05:57:bd:5b:df:e5:d1:1d:92:9e: b1:d6:8c:4f:10:91:5d:64:6b:4d:49:d7:f1:5a:15: 12:a0:b0:dd:34:a2:9d:d7:4f:2d:39:db:7b:6f:35: 6c:a4:dc:c9:56:fa:97:90:03:cf:16:57:8c:1f:e5: 81:a5:eb:7a:17:97:35:89:51:92:77:fa:d9:93:4c: b0:53:06:49:0c:f4:a6:28:12:e0:c0:30:e9:82:13: 37:5e:95:2c:4d:46:1c:72:69:0e:62:2c:77:16:be: b4:3e:57:21:58:f7:21:83:c8:cf:6d:bc:2f:3a:b4: 38:aa:04:46:f8:75:4f:89:6a:eb:93:c1:50:37:75: 86:7a:00:d2:75:e5:05:ed:b0:75:be:7c:79:b0:61: 99:b0:a6:0b:42:9c:50:d7:ac:04:19:7b:7f:b2:72: de:f6:21:66:e4:5b:ee:af:07:99:b8:c0:49:e7:ed: fa:f4:4b:75:b9:f2:74:20:92:5f:dd:7c:8f:d5:28: bd:3c:95:fe:ea:ad:81:e4:19:b4:5d:27:6b:e9:b3: b6:b1:53:b4:6e:90:41:50:7a:01:2d:e2:d8:54:37: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:42:29:31:3C:9C:72:8C:B8:0C:60:69:6A:D0:04:86:68:67:39:21 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5e:68:0c:6f:4e:82:4a:22:7b:1b:73:23:ec:81:db:a6:b3: 9b:01:6d:48:05:da:9f:54:e2:17:15:49:ee:ba:fb:2a:96:60: 5c:11:f4:38:df:84:58:fa:bc:9e:eb:45:c8:5f:c5:80:48:1d: a2:4a:90:f4:9f:39:c8:d9:94:88:ec:8c:f6:08:f0:a8:93:fd: c3:4d:36:a2:fc:b3:df:da:c9:0a:28:ad:7b:7a:31:66:2d:a8: 68:4e:a5:3b:ea:47:7b:55:38:7f:31:b4:a8:68:51:1a:6f:e6: 96:22:17:67:72:9c:f1:32:b7:e3:da:7b:0d:50:7f:79:a3:65: b1:67:c1:b7:4c:08:28:43:30:f6:89:6d:5b:c0:7b:85:e9:6d: bb:83:f7:9c:c9:75:be:44:8d:fa:70:f6:7a:67:73:21:a7:d8: 06:a6:36:c3:dc:5d:a9:7d:e2:98:33:6c:ac:3a:1d:e0:1f:7a: 88:d2:9b:4e:ea:f5:56:3a:05:62:ec:22:bf:1d:ed:0a:b9:06: 8a:a4:91:26:70:14:37:5b:b8:93:5a:4f:79:98:5c:96:dc:e7: 11:97:6f:b9:6b:e1:54:b5:42:64:66:01:39:f0:6d:0a:56:c6: 12:c2:83:af:5a:7f:90:71:7d:1f:fe:0b:01:40:d9:38:f7:42: 37:02:37:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c75+FWlg4lnkZ8z4dj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD EyhmYTQyMjkzMTNjOWM3MjhjYjgwYzYwNjk2YWQwMDQ4NjY4NjczOTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX1uumawp7Haa9OPFyVcgba8mXE5 XNZ1pXMQDomhqvw8DQVXvVvf5dEdkp6x1oxPEJFdZGtNSdfxWhUSoLDdNKKd108t Odt7bzVspNzJVvqXkAPPFleMH+WBpet6F5c1iVGSd/rZk0ywUwZJDPSmKBLgwDDp ghM3XpUsTUYccmkOYix3Fr60PlchWPchg8jPbbwvOrQ4qgRG+HVPiWrrk8FQN3WG egDSdeUF7bB1vnx5sGGZsKYLQpxQ16wEGXt/snLe9iFm5FvurweZuMBJ5+369Et1 ufJ0IJJf3XyP1Si9PJX+6q2B5Bm0XSdr6bO2sVO0bpBBUHoBLeLYVDd1CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpCKTE8nHKMuAxgaWrQBIZoZzkhMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABV5oDG9O gkoiextzI+yB26azmwFtSAXan1TiFxVJ7rr7KpZgXBH0ON+EWPq8nutFyF/FgEgd okqQ9J85yNmUiOyM9gjwqJP9w002ovyz39rJCiite3oxZi2oaE6lO+pHe1U4fzG0 qGhRGm/mliIXZ3Kc8TK349p7DVB/eaNlsWfBt0wIKEMw9oltW8B7heltu4P3nMl1 vkSN+nD2emdzIafYBqY2w9xdqX3imDNsrDod4B96iNKbTur1VjoFYuwivx3tCrkG iqSRJnAUN1u4k1pPeZhcltznEZdvuWvhVLVCZGYBOfBtClbGEsKDr1p/kHF9H/4L AUDZOPdCNwI3EQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:17 2025 by rpki-client