This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft File: 0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json) Hash identifier: 4mmGUYJj3m/jGhUWnjzXMrAjTE+i6NvtYkdigP7R+hw= Subject key identifier: 88:36:55:58:2B:1A:BE:F6:AF:86:CB:4F:B1:C9:8E:EA:6C:CE:81:51 Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC Certificate issuer: /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc Certificate serial: 019AF087EA896167D1FC258C5A3A6576A49A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft Manifest number: 0F12 Signing time: Fri 05 Dec 2025 22:00:30 +0000 Manifest this update: Fri 05 Dec 2025 22:00:30 +0000 Manifest next update: Sat 06 Dec 2025 22:00:30 +0000 Files and hashes: 1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: K24xzbFXR9t91PMvcK15lJqp+W+iqZ7o/mKOOUYO4QI=) 2: ED7irA7lmwh5tHPGbkFIIeJv-bg.roa (hash: Ig5tcq1zw9JQCpzSA6FZ4ETNZF6mc/oaQxjv4KTG32g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:ea:89:61:67:d1:fc:25:8c:5a:3a:65:76:a4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc Validity Not Before: Dec 5 22:00:30 2025 GMT Not After : Dec 6 22:00:30 2025 GMT Subject: CN=883655582b1abef6af86cb4fb1c98eea6cce8151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:a0:40:e7:1f:4d:71:14:1e:b4:8c:91:16: f1:c6:07:9f:e2:c5:4e:2e:80:13:2c:8a:6f:36:14: 3b:19:ea:99:e3:74:56:26:b3:3e:7b:a9:27:b4:0c: bf:b7:95:da:24:42:de:49:b2:f5:94:59:c2:59:75: 57:61:a3:bd:39:c7:43:6f:0e:0c:83:a0:7b:62:aa: 18:ef:f3:78:cd:47:65:83:44:91:f7:ed:69:22:bb: d8:58:7f:30:5d:a9:a6:fc:31:87:70:d3:67:52:b3: 98:a7:64:e0:e9:78:38:30:50:79:60:4a:d9:28:53: 8e:81:3a:8a:22:46:24:10:f0:75:69:9a:43:c8:76: 85:ce:5b:d3:f1:65:87:0c:1e:e3:bc:af:ca:4e:d6: 48:fd:78:b7:8d:b0:5e:13:62:7f:7d:ad:00:6d:1e: 19:0d:6f:c1:1d:72:ce:34:83:fd:a5:24:cc:2e:c8: 69:74:57:b6:c2:c9:88:f3:c4:c0:ea:13:0f:0c:c0: ce:eb:66:78:9e:9a:f1:12:f4:59:f8:19:f2:69:e1: 13:b2:49:45:28:df:0a:4a:64:60:72:a2:5c:be:ee: 32:6c:18:2a:4d:7d:0a:52:da:30:3f:df:b6:b2:54: 0b:2c:cd:1d:01:4a:03:f1:c7:5f:6e:43:0a:e7:c3: 1b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:36:55:58:2B:1A:BE:F6:AF:86:CB:4F:B1:C9:8E:EA:6C:CE:81:51 X509v3 Authority Key Identifier: keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:99:91:a9:a7:bd:2e:ce:e9:b5:8e:22:76:67:8d:0f:ec:84: 1d:d5:ed:01:c3:36:a9:3e:00:02:e2:a0:c1:52:73:00:f2:3b: 7e:7a:98:52:d2:62:76:22:3f:09:f6:e2:65:ef:8d:1f:ca:26: 81:a2:4b:69:77:89:04:b3:6e:21:02:e1:a4:f7:f6:74:65:2c: cb:b2:f0:9c:34:ee:2c:35:78:84:4a:da:5a:40:ae:3d:ad:ee: 65:41:88:a4:5d:b2:44:e1:34:3b:d6:e0:7c:9b:94:a0:f7:ce: 69:cc:5f:3a:5e:37:66:fc:79:67:44:2c:89:d3:59:ed:21:0d: 55:c3:ef:b4:e8:05:58:7e:4c:c6:be:e1:ce:c6:51:b7:0d:21: 33:07:32:bb:e9:0f:84:d1:29:1f:36:29:d8:04:a0:ad:2b:98: 39:a8:54:5c:74:35:db:35:20:60:f2:a1:54:6d:b0:42:f1:c9: 37:a7:c7:85:f2:89:37:1d:9f:73:6b:5c:75:b2:eb:87:3c:52: ff:46:ce:07:83:75:05:be:10:d0:97:18:46:cf:2f:c0:32:c0: 68:34:92:71:64:6e:02:2f:dd:e5:07:45:12:7d:1f:3a:30:2c: fc:6d:3e:fa:19:9e:8e:8e:07:67:91:73:d1:90:61:db:d3:d2: cb:32:99:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh+qJYWfR/CWMWjpldqSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYmZhZGYyOTIzOWVkOGNmM2Y2YzY5M2Q4YmRiNzlmNDIw MDBhYmMwHhcNMjUxMjA1MjIwMDMwWhcNMjUxMjA2MjIwMDMwWjAzMTEwLwYDVQQD Eyg4ODM2NTU1ODJiMWFiZWY2YWY4NmNiNGZiMWM5OGVlYTZjY2U4MTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVegQOcfTXEUHrSMkRbxxgef4sVO LoATLIpvNhQ7GeqZ43RWJrM+e6kntAy/t5XaJELeSbL1lFnCWXVXYaO9OcdDbw4M g6B7YqoY7/N4zUdlg0SR9+1pIrvYWH8wXamm/DGHcNNnUrOYp2Tg6Xg4MFB5YErZ KFOOgTqKIkYkEPB1aZpDyHaFzlvT8WWHDB7jvK/KTtZI/Xi3jbBeE2J/fa0AbR4Z DW/BHXLONIP9pSTMLshpdFe2wsmI88TA6hMPDMDO62Z4nprxEvRZ+BnyaeETsklF KN8KSmRgcqJcvu4ybBgqTX0KUtowP9+2slQLLM0dAUoD8cdfbkMK58MbDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIg2VVgrGr72r4bLT7HJjupszoFRMB8GA1UdIwQY MBaAFNC/rfKSOe2M8/bGk9i9t59CAAq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAt N2JiMzY1ZjM0YzZjLzEvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAtN2JiMzY1ZjM0YzZj LzEvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpmRqae9 Ls7ptY4idmeND+yEHdXtAcM2qT4AAuKgwVJzAPI7fnqYUtJidiI/CfbiZe+NH8om gaJLaXeJBLNuIQLhpPf2dGUsy7LwnDTuLDV4hEraWkCuPa3uZUGIpF2yROE0O9bg fJuUoPfOacxfOl43Zvx5Z0QsidNZ7SENVcPvtOgFWH5Mxr7hzsZRtw0hMwcyu+kP hNEpHzYp2ASgrSuYOahUXHQ12zUgYPKhVG2wQvHJN6fHhfKJNx2fc2tcdbLrhzxS /0bOB4N1Bb4Q0JcYRs8vwDLAaDSScWRuAi/d5QdFEn0fOjAs/G0++hmejo4HZ5Fz 0ZBh29PSyzKZBg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:28 2025 by rpki-client