This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json) Hash identifier: Im9ciyv/nBnCdifsXuHeqw/LwT3jvbL19F2bFaZae6A= Subject key identifier: 84:2C:8E:D3:D2:DA:33:84:42:0E:8E:A3:CF:2F:E1:E0:DE:B0:44:4F Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78 Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578 Certificate serial: 019AF12D2D9380AF7CDCC3E48631EA844F66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: pcw4u5xOzVV68awXYOC3KmWKW4Al7CppKmJlGVg8Vvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2d:93:80:af:7c:dc:c3:e4:86:31:ea:84:4f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578 Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=842c8ed3d2da3384420e8ea3cf2fe1e0deb0444f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e4:bb:3d:65:c2:6c:c2:0d:43:f2:53:a6:2c: 07:61:d0:a4:7c:1f:f9:6e:19:84:66:64:a0:67:0e: 93:cb:bf:32:59:51:26:d4:36:58:41:8e:49:c0:23: 94:cf:09:f4:5c:0d:f5:4c:40:03:1d:9f:48:bf:3c: 04:ef:b0:fc:08:90:1a:df:bb:4a:39:97:01:d7:ee: 09:68:8c:ab:8c:68:1d:2b:d8:97:bf:1a:42:78:cc: 81:91:5f:da:3d:75:e7:35:6c:c9:62:95:6b:2c:12: 84:f6:4a:bc:76:b6:b6:5a:83:b3:cd:c0:bd:68:b0: 92:03:5a:db:24:b4:f3:00:44:8a:e1:24:72:29:ac: 58:43:d6:cd:2c:94:35:24:01:a6:c3:1b:02:c3:a9: 94:e5:fa:19:0b:f7:7d:d0:19:55:82:f8:3b:56:72: 0a:80:fb:c9:65:70:ef:bd:7c:af:a0:fd:af:56:3a: 7b:64:52:89:be:90:02:ef:60:a6:37:31:d0:13:10: 1a:60:a5:90:94:ed:44:ee:60:5f:eb:f2:9f:fd:df: e6:d0:bd:58:e5:82:fa:1c:e4:f8:77:81:90:e0:b7: 70:72:99:b3:2a:65:b5:2c:a5:e6:b5:e2:30:44:a1: 6b:ff:e6:83:65:9d:bb:d4:f6:9c:e0:ec:50:41:e5: 8c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2C:8E:D3:D2:DA:33:84:42:0E:8E:A3:CF:2F:E1:E0:DE:B0:44:4F X509v3 Authority Key Identifier: keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e7:64:e1:83:5c:f9:00:1b:aa:ea:2c:2b:7e:e8:10:85:0d: c5:f9:35:63:dd:89:be:f0:3f:52:8d:64:79:47:91:c6:b5:24: 6d:fb:b2:2b:61:e6:b7:59:15:a6:de:2a:cf:e9:04:de:cb:1c: 52:2d:23:a6:82:25:fa:27:6c:d9:f0:96:e8:58:21:d0:61:d5: e8:34:d6:64:4c:63:11:b7:d7:79:a5:1f:5f:60:c3:7b:d1:46: 5b:71:04:57:6f:37:89:26:a4:11:d0:02:6a:eb:ca:76:85:be: 09:56:29:65:42:0f:bb:eb:d5:57:6b:a0:ee:3f:b7:10:05:62: 99:ce:1d:1f:93:e0:1e:2c:b0:7b:11:0f:3a:3e:e6:cc:99:c6: 17:41:fd:5d:80:b1:0c:2e:8a:4f:e9:47:b7:f4:71:3f:13:b4: 62:60:db:8a:86:35:61:38:f7:0d:f8:70:39:7f:02:70:00:65: 64:be:5c:92:23:04:87:a3:1c:b0:07:a2:3c:e1:a2:35:87:0c: d8:e7:59:78:b8:7b:54:0e:8f:5d:84:a0:08:d4:15:38:09:9a: 7f:a1:57:ad:5a:d2:1f:03:43:ee:b2:69:6e:e9:21:0c:a6:b3: a0:1e:3f:18:93:a9:bd:1f:74:6d:99:a1:15:74:70:01:b2:4a: db:f4:a9:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLS2TgK983MPkhjHqhE9mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZGM1NzBiYzFjOTY0YmFiN2VkNTZjNjczYWE0MDUxOGY4 NTQ1NzgwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD Eyg4NDJjOGVkM2QyZGEzMzg0NDIwZThlYTNjZjJmZTFlMGRlYjA0NDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eS7PWXCbMINQ/JTpiwHYdCkfB/5 bhmEZmSgZw6Ty78yWVEm1DZYQY5JwCOUzwn0XA31TEADHZ9IvzwE77D8CJAa37tK OZcB1+4JaIyrjGgdK9iXvxpCeMyBkV/aPXXnNWzJYpVrLBKE9kq8dra2WoOzzcC9 aLCSA1rbJLTzAESK4SRyKaxYQ9bNLJQ1JAGmwxsCw6mU5foZC/d90BlVgvg7VnIK gPvJZXDvvXyvoP2vVjp7ZFKJvpAC72CmNzHQExAaYKWQlO1E7mBf6/Kf/d/m0L1Y 5YL6HOT4d4GQ4LdwcpmzKmW1LKXmteIwRKFr/+aDZZ271Pac4OxQQeWMRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQsjtPS2jOEQg6Oo88v4eDesERPMB8GA1UdIwQY MBaAFNDcVwvByWS6t+1WxnOqQFGPhUV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2Yt ZDM4ZGQwYjc4OTA5LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2YtZDM4ZGQwYjc4OTA5 LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+dk4YNc +QAbquosK37oEIUNxfk1Y92JvvA/Uo1keUeRxrUkbfuyK2Hmt1kVpt4qz+kE3ssc Ui0jpoIl+ids2fCW6Fgh0GHV6DTWZExjEbfXeaUfX2DDe9FGW3EEV283iSakEdAC auvKdoW+CVYpZUIPu+vVV2ug7j+3EAVimc4dH5PgHiywexEPOj7mzJnGF0H9XYCx DC6KT+lHt/RxPxO0YmDbioY1YTj3DfhwOX8CcABlZL5ckiMEh6McsAeiPOGiNYcM 2OdZeLh7VA6PXYSgCNQVOAmaf6FXrVrSHwND7rJpbukhDKazoB4/GJOpvR90bZmh FXRwAbJK2/Sp0A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:05 2025 by rpki-client