This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft File: 0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json) Hash identifier: Gkp0TU/atx338CAHszJ8swjCoCfaw5kRpk7tgiGmT7Q= Subject key identifier: 11:31:3A:22:13:24:5C:C5:30:BF:17:62:D3:73:FF:61:CA:11:62:A4 Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f Certificate serial: 019AF208B21905470461B5F09F9B6DCE6E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft Manifest number: 1278 Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: 7UpO23Ka3ZVxYYXyNPXfmO/2XOQfPOtzg+JXRzUG6SY=) 2: Zbhs7ceORmznv_4uvlnuPbBDx_c.roa (hash: MJdiewY9l3NAhxc3ZEXNNrBUcBcVMuNcqhqsZh7jqig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b2:19:05:47:04:61:b5:f0:9f:9b:6d:ce:6e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=11313a2213245cc530bf1762d373ff61ca1162a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d1:54:c5:42:17:fb:1b:7d:99:0f:8f:63:80: e8:c9:7a:9a:c2:47:83:c2:aa:52:c9:f0:4a:55:a3: 74:d0:9d:53:cd:08:00:b4:82:df:d3:05:0f:8b:b0: 0b:ca:8e:ff:88:47:3f:22:a8:f9:3f:02:b5:b2:80: 18:4d:66:69:57:f5:55:da:2f:6e:30:d4:24:d7:ba: a6:fd:b2:0b:1a:7d:3c:75:79:4c:ab:c0:6f:7e:fc: df:a3:3e:9e:7b:f6:5e:e3:b8:59:c2:00:38:5b:80: 36:7b:fc:2f:a3:b1:53:65:c2:00:ed:aa:16:88:f6: bc:80:79:e3:5c:a6:f6:b7:40:00:9d:22:71:11:ab: b3:20:b8:86:12:0c:a9:99:8c:06:52:81:9e:22:55: d2:5a:c3:88:4a:d5:dd:de:1b:a2:e9:a4:3a:90:d9: 2c:03:2c:35:f7:86:ea:d5:7a:55:fa:42:d5:28:19: 31:f1:96:e8:ad:74:56:0c:24:0c:05:c8:34:d5:12: 43:97:d3:41:63:68:64:6d:c8:64:02:f1:60:b1:14: 09:67:03:01:9b:18:89:e7:c1:6c:2f:80:b4:78:f1: 26:cc:bc:f1:97:92:13:b9:db:26:f5:f3:a5:c9:06: da:d3:6e:4e:f6:71:0d:2f:f8:6e:04:b9:e6:33:8d: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:31:3A:22:13:24:5C:C5:30:BF:17:62:D3:73:FF:61:CA:11:62:A4 X509v3 Authority Key Identifier: keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0f:84:c3:f8:7b:14:0e:23:73:e8:b3:26:d6:16:bf:8a:10: 44:fa:4a:b3:35:4b:67:b5:75:22:52:a0:1b:9d:08:2b:a7:21: c3:ad:40:ab:c2:d7:7a:d8:70:84:f4:40:0a:e3:61:f9:84:48: 3d:f9:ab:91:08:84:0f:3e:58:39:23:27:fb:b3:79:ce:32:c0: 47:da:8f:52:77:81:32:aa:43:83:4d:ba:13:3f:87:3d:d9:e2: ec:c3:b6:c2:0a:47:4b:da:93:08:d9:48:68:a5:ba:d9:b6:7e: dd:85:c2:ad:96:3c:ac:5f:a9:5b:f7:7c:43:fc:7e:e8:fe:2c: 3b:a8:33:25:12:ff:c1:ce:a9:3a:d5:8c:c1:3f:3b:5e:33:86: 18:f1:7e:7b:f5:3e:67:c7:30:b1:3a:20:5a:b1:d0:52:95:e5: 4f:67:ef:1e:72:ce:bf:5b:a6:a4:e9:c1:0c:fe:c3:48:a4:1a: 8b:e3:a8:7e:ef:0c:34:a0:8f:b5:be:8c:fc:7a:3c:4b:d0:4c: d2:87:5b:ac:9b:bc:3c:cb:b9:58:55:5c:34:af:17:cb:6d:f0: 42:36:3f:5b:2a:94:f7:e5:6f:ca:6a:92:fa:9a:b8:ef:da:31: 8b:16:37:51:88:0d:e6:08:2d:5d:ab:9c:f2:fa:06:40:ac:ba: ed:0d:3f:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLIZBUcEYbXwn5ttzm6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGJmMzFmZDkzNzljYWI1YzUwYWZkMzkyYTJlZTkwNTcx ODgzNWYwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD EygxMTMxM2EyMjEzMjQ1Y2M1MzBiZjE3NjJkMzczZmY2MWNhMTE2MmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tFUxUIX+xt9mQ+PY4DoyXqawkeD wqpSyfBKVaN00J1TzQgAtILf0wUPi7ALyo7/iEc/Iqj5PwK1soAYTWZpV/VV2i9u MNQk17qm/bILGn08dXlMq8Bvfvzfoz6ee/Ze47hZwgA4W4A2e/wvo7FTZcIA7aoW iPa8gHnjXKb2t0AAnSJxEauzILiGEgypmYwGUoGeIlXSWsOIStXd3hui6aQ6kNks Ayw194bq1XpV+kLVKBkx8ZborXRWDCQMBcg01RJDl9NBY2hkbchkAvFgsRQJZwMB mxiJ58FsL4C0ePEmzLzxl5ITudsm9fOlyQba025O9nENL/huBLnmM425mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBExOiITJFzFML8XYtNz/2HKEWKkMB8GA1UdIwQY MBaAFNHb8x/ZN5yrXFCv05Ki7pBXGINfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZDgzMjctZjAxZC00ZjdhLWI5NTUt OGUwYjNmNTg5N2I5LzEvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81ZDgzMjctZjAxZC00ZjdhLWI5NTUtOGUwYjNmNTg5N2I5 LzEvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQ+Ew/h7 FA4jc+izJtYWv4oQRPpKszVLZ7V1IlKgG50IK6chw61Aq8LXethwhPRACuNh+YRI PfmrkQiEDz5YOSMn+7N5zjLAR9qPUneBMqpDg026Ez+HPdni7MO2wgpHS9qTCNlI aKW62bZ+3YXCrZY8rF+pW/d8Q/x+6P4sO6gzJRL/wc6pOtWMwT87XjOGGPF+e/U+ Z8cwsTogWrHQUpXlT2fvHnLOv1umpOnBDP7DSKQai+Oofu8MNKCPtb6M/Ho8S9BM 0odbrJu8PMu5WFVcNK8Xy23wQjY/WyqU9+VvymqS+pq479oxixY3UYgN5ggtXauc 8voGQKy67Q0/IA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:09 2025 by rpki-client