This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft File: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft (raw, json) Hash identifier: KSh1NBis6yTlTdUlCEbg2UeORGuOjpG849HMicBlMnM= Subject key identifier: F1:65:32:BE:4A:9A:58:BE:2B:F3:9C:4F:2C:8F:2C:FB:4A:EF:3D:B3 Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37 Certificate issuer: /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037 Certificate serial: 019B2DE6DBC24804C6E48141BBE0F0D2FD2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 20:01:02 +0000 Manifest this update: Wed 17 Dec 2025 20:01:02 +0000 Manifest next update: Thu 18 Dec 2025 20:01:02 +0000 Files and hashes: 1: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl (hash: XQy7T31Pr0eA6gyPu7jV4COo93zjKbyiD0enO6ESS3c=) 2: 0rKi7U6MqI1r_Vs3kaCLYTfsLSY.roa (hash: 8QsFJSNtdZfQAAQzebOppMUtF/t29sf8g4pkzx7Cv9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:db:c2:48:04:c6:e4:81:41:bb:e0:f0:d2:fd:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037 Validity Not Before: Dec 17 20:01:02 2025 GMT Not After : Dec 18 20:01:02 2025 GMT Subject: CN=f16532be4a9a58be2bf39c4f2c8f2cfb4aef3db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:02:12:e7:75:13:94:05:83:39:f6:4d:87:e7: 6b:39:29:41:64:9b:9f:0b:13:0d:cc:90:52:36:de: c0:55:aa:bb:da:31:f2:a0:bb:0a:ff:29:9d:c6:48: 3a:f1:92:2a:c5:c9:67:1f:20:c8:dd:0e:0b:21:82: 3e:f0:5d:72:91:86:3d:ff:d8:09:d5:30:4e:0c:35: 28:70:83:52:9e:79:b0:50:87:fd:c9:a9:18:03:82: 0d:8b:f4:98:4b:77:62:2e:bd:18:20:19:99:8f:4b: 09:84:69:b8:ba:40:51:0a:10:ad:37:91:21:68:48: c8:42:ee:46:93:9b:21:6a:44:ee:7a:0f:6d:86:9a: b4:2f:80:17:4e:cc:06:d2:5e:ce:95:9b:73:b5:1e: c1:84:26:11:f8:f9:be:8b:ff:9f:ce:5a:a7:0e:77: 0b:8e:c3:f9:02:bb:a5:b4:91:85:a0:65:e1:bc:59: 2b:5e:80:76:7e:07:43:b6:74:23:b2:94:6f:43:e7: e8:9b:16:4d:7d:bf:35:5f:97:5d:01:f2:19:3a:36: 9e:67:5e:8b:e0:6e:01:d4:9b:a3:ac:fa:2d:68:f0: 87:8a:31:a8:cb:14:7f:b0:01:5b:08:4e:0c:34:9c: 12:76:b3:11:86:7b:b3:4a:67:6c:26:14:f1:80:9c: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:65:32:BE:4A:9A:58:BE:2B:F3:9C:4F:2C:8F:2C:FB:4A:EF:3D:B3 X509v3 Authority Key Identifier: keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6b:53:84:9c:f0:9d:23:e1:4e:e8:63:04:d7:da:eb:34:eb: df:4d:89:ab:39:85:f5:80:4a:9e:55:6d:6d:11:45:7f:39:ff: c6:de:a1:13:e3:87:27:fc:9a:30:50:69:3e:e2:8f:af:a7:32: 42:b0:b4:09:f8:1b:9a:04:6f:b9:47:fd:fd:24:90:16:2d:fb: 99:fd:95:6e:4a:27:a6:3e:33:ed:82:43:5f:76:2f:79:af:db: ae:30:d8:77:96:a6:de:9b:a4:a8:29:4c:16:45:fd:52:6c:90: 60:b0:42:2c:69:ab:be:b7:45:b9:a8:51:4e:ae:49:09:b7:d5: cc:df:73:a1:30:ec:13:e6:be:ab:88:48:54:db:d1:40:8f:77: fb:0a:48:bb:a3:e5:ad:72:8a:3f:38:3e:8f:21:02:59:45:67: 11:5b:ed:15:a0:9d:05:7a:c3:f9:18:35:a7:ef:70:93:d5:ac: 13:ed:c2:0e:f1:c8:33:c1:d8:d5:cc:8b:d1:1b:f8:fb:91:35: a3:53:f0:6c:d5:3c:34:c0:01:6b:34:6e:88:43:0f:22:d5:48: 4e:48:82:71:2f:1d:b2:25:71:0f:ea:ef:a8:1b:cf:04:14:2f: e1:68:6e:5a:a2:38:9e:7d:15:bc:73:af:75:7c:56:db:ae:b3: 4c:e2:1a:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5tvCSATG5IFBu+Dw0v0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYmQ0MGVmMzQwNjY0NzE1YzhjMmNmYTUwZTNkNjFiYTI4 NmUwMzcwHhcNMjUxMjE3MjAwMTAyWhcNMjUxMjE4MjAwMTAyWjAzMTEwLwYDVQQD EyhmMTY1MzJiZTRhOWE1OGJlMmJmMzljNGYyYzhmMmNmYjRhZWYzZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogIS53UTlAWDOfZNh+drOSlBZJuf CxMNzJBSNt7AVaq72jHyoLsK/ymdxkg68ZIqxclnHyDI3Q4LIYI+8F1ykYY9/9gJ 1TBODDUocINSnnmwUIf9yakYA4INi/SYS3diLr0YIBmZj0sJhGm4ukBRChCtN5Eh aEjIQu5Gk5shakTueg9thpq0L4AXTswG0l7OlZtztR7BhCYR+Pm+i/+fzlqnDncL jsP5ArultJGFoGXhvFkrXoB2fgdDtnQjspRvQ+fomxZNfb81X5ddAfIZOjaeZ16L 4G4B1JujrPotaPCHijGoyxR/sAFbCE4MNJwSdrMRhnuzSmdsJhTxgJxbnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFlMr5Kmli+K/OcTyyPLPtK7z2zMB8GA1UdIwQY MBaAFNC9QO80BmRxXIws+lDj1huihuA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEwxQTd6UUdaSEZjakN6NlVPUFdHNktHNERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80ZDRkOWMtZmJhZi00MmZkLTk4YWEt MmNkMDliNTc3MDY2LzEvMEwxQTd6UUdaSEZjakN6NlVPUFdHNktHNERjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80ZDRkOWMtZmJhZi00MmZkLTk4YWEtMmNkMDliNTc3MDY2 LzEvMEwxQTd6UUdaSEZjakN6NlVPUFdHNktHNERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWtThJzw nSPhTuhjBNfa6zTr302JqzmF9YBKnlVtbRFFfzn/xt6hE+OHJ/yaMFBpPuKPr6cy QrC0CfgbmgRvuUf9/SSQFi37mf2Vbkonpj4z7YJDX3Yvea/brjDYd5am3pukqClM FkX9UmyQYLBCLGmrvrdFuahRTq5JCbfVzN9zoTDsE+a+q4hIVNvRQI93+wpIu6Pl rXKKPzg+jyECWUVnEVvtFaCdBXrD+Rg1p+9wk9WsE+3CDvHIM8HY1cyL0Rv4+5E1 o1PwbNU8NMABazRuiEMPItVITkiCcS8dsiVxD+rvqBvPBBQv4WhuWqI4nn0VvHOv dXxW266zTOIaXA== -----END CERTIFICATE-----Generated at Thu Dec 18 00:24:20 2025 by rpki-client