This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json) Hash identifier: 3DmgwFSPFumVz1LLs+VUgMACCAQTWkUf5s/e4/jZA0M= Subject key identifier: 4D:E5:54:33:CF:D2:93:31:7E:30:61:99:D7:D8:B3:2C:CF:19:0E:12 Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c Certificate serial: 019B2F3050576965B428229F7AA9AFCE7D1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft Manifest number: 14A7 Signing time: Thu 18 Dec 2025 02:00:53 +0000 Manifest this update: Thu 18 Dec 2025 02:00:53 +0000 Manifest next update: Fri 19 Dec 2025 02:00:53 +0000 Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: NdHiCneNYKjq81LUf4qY8nj2KtQtZMNT8EkOdEaPoro=) 2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=) 3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:50:57:69:65:b4:28:22:9f:7a:a9:af:ce:7d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c Validity Not Before: Dec 18 02:00:53 2025 GMT Not After : Dec 19 02:00:53 2025 GMT Subject: CN=4de55433cfd293317e306199d7d8b32ccf190e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d3:72:fe:37:27:35:60:f6:2b:c5:cf:ce:6d: 6c:a6:e7:6a:7f:6d:c8:7e:b3:c4:4b:5e:7e:ca:ac: 0a:ec:23:26:de:6c:3e:4b:5c:9c:8d:75:5e:1f:bd: 07:f0:cc:cc:e0:b1:a0:87:54:ae:17:41:0a:d0:84: 34:73:40:f9:ec:4b:52:f0:4d:b5:6f:ca:a4:1e:5d: 95:a3:c7:ef:36:e7:d0:b6:cc:31:13:62:7c:a6:d9: c5:19:23:c1:ad:54:00:21:e7:99:b8:66:02:d9:ed: 5e:11:60:b1:2b:0a:80:2c:8e:58:4e:2b:d9:df:23: 82:df:ef:e7:73:13:df:21:54:6b:c6:9f:cb:7e:d2: a2:58:9e:a1:d6:66:6f:d5:32:9e:dc:29:95:9f:93: 2c:a8:61:e9:7b:a1:e0:62:db:60:0f:42:97:e1:79: 74:3b:97:78:29:9c:2c:3b:43:9f:1e:be:48:a8:47: 75:b8:6a:d3:eb:1c:04:25:f9:4f:1c:ab:26:e0:96: 8a:ff:7d:62:1f:df:68:ed:45:a7:35:66:ae:5f:ce: 24:0d:cc:0f:cf:d3:f0:45:ad:dd:97:de:8f:f1:26: ec:ec:b6:d2:de:bb:62:3c:fd:b7:ee:c5:9b:3c:37: cb:f9:19:32:46:fd:95:05:72:9f:9b:19:04:9d:56: 1d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E5:54:33:CF:D2:93:31:7E:30:61:99:D7:D8:B3:2C:CF:19:0E:12 X509v3 Authority Key Identifier: keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:bb:aa:17:06:29:24:ff:1d:97:b6:69:e3:1a:48:f2:39:d5: 72:29:62:32:2b:2d:81:59:00:b9:70:89:30:e2:3f:ff:1e:ef: 0b:2d:a9:f5:9e:41:e1:dd:0a:5a:23:2a:69:11:d8:a9:f6:ae: a8:0b:75:3f:4d:5b:9a:76:8c:a2:dd:0c:c6:fc:ad:06:02:db: ed:4b:62:b3:e4:92:1f:2d:1c:34:8e:30:69:96:e2:ec:b7:8a: 9a:0d:73:ea:eb:b0:79:1c:7d:d6:8c:72:10:9d:2d:37:01:b0: 6a:75:84:6f:9c:6a:ce:cf:d8:eb:3f:5a:5e:05:6e:24:08:13: 79:8d:69:ae:93:ff:82:b3:54:00:7c:06:b3:c1:3f:58:af:35: 4f:73:80:c4:bd:20:2d:6c:6e:4c:a8:93:e7:c5:25:8f:13:b7: 6b:74:4a:41:8f:63:eb:36:01:e7:ff:20:cd:72:c3:07:5a:d7: 18:fe:14:ff:01:2f:7a:9b:39:f2:c5:b9:a5:cd:72:c8:a8:99: d3:87:28:be:a1:9d:af:6b:2b:bc:ec:fa:37:bb:1d:55:b5:5e: 34:38:34:9f:43:c7:85:aa:87:f7:0f:64:1f:1f:3d:8a:05:bc: 8d:70:ec:a7:10:80:2c:b4:6e:57:0f:8f:f2:69:96:3f:e7:3a: 59:a8:8c:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMFBXaWW0KCKfeqmvzn0cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMmQ0ZDJmYjc1YTc1NTlhMjBmNzk1NDhjNDU4NTQyZmQw YTlhNGMwHhcNMjUxMjE4MDIwMDUzWhcNMjUxMjE5MDIwMDUzWjAzMTEwLwYDVQQD Eyg0ZGU1NTQzM2NmZDI5MzMxN2UzMDYxOTlkN2Q4YjMyY2NmMTkwZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldNy/jcnNWD2K8XPzm1spudqf23I frPES15+yqwK7CMm3mw+S1ycjXVeH70H8MzM4LGgh1SuF0EK0IQ0c0D57EtS8E21 b8qkHl2Vo8fvNufQtswxE2J8ptnFGSPBrVQAIeeZuGYC2e1eEWCxKwqALI5YTivZ 3yOC3+/ncxPfIVRrxp/LftKiWJ6h1mZv1TKe3CmVn5MsqGHpe6HgYttgD0KX4Xl0 O5d4KZwsO0OfHr5IqEd1uGrT6xwEJflPHKsm4JaK/31iH99o7UWnNWauX84kDcwP z9PwRa3dl96P8Sbs7LbS3rtiPP237sWbPDfL+RkyRv2VBXKfmxkEnVYd4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3lVDPP0pMxfjBhmdfYsyzPGQ4SMB8GA1UdIwQY MBaAFNEtTS+3WnVZog95VIxFhUL9CppMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUt MWVlY2Q1ODVkYjhjLzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUtMWVlY2Q1ODVkYjhj LzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAruqFwYp JP8dl7Zp4xpI8jnVciliMistgVkAuXCJMOI//x7vCy2p9Z5B4d0KWiMqaRHYqfau qAt1P01bmnaMot0MxvytBgLb7Utis+SSHy0cNI4waZbi7LeKmg1z6uuweRx91oxy EJ0tNwGwanWEb5xqzs/Y6z9aXgVuJAgTeY1prpP/grNUAHwGs8E/WK81T3OAxL0g LWxuTKiT58UljxO3a3RKQY9j6zYB5/8gzXLDB1rXGP4U/wEveps58sW5pc1yyKiZ 04covqGdr2srvOz6N7sdVbVeNDg0n0PHhaqH9w9kHx89igW8jXDspxCALLRuVw+P 8mmWP+c6WaiMiw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:51:20 2025 by rpki-client