This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft File: _0ywnegmUO5MxDJ-q2dwt6sUfvs.mft (raw, json) Hash identifier: nyz7pHdmxFL4Cyd5EdWGran2U78VBTlSAAhw8c4KqDc= Subject key identifier: 77:9A:00:43:24:2E:2E:30:3E:A2:D3:3B:37:FD:CE:EB:3A:52:17:1D Authority key identifier: FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB Certificate issuer: /CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb Certificate serial: 019AFBB137E38D60AC3F577D53B7982787BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft Manifest number: 1768 Signing time: Mon 08 Dec 2025 02:01:26 +0000 Manifest this update: Mon 08 Dec 2025 02:01:26 +0000 Manifest next update: Tue 09 Dec 2025 02:01:26 +0000 Files and hashes: 1: RcUeax2IJNxx-VLzmeCKMxA0SJU.roa (hash: vene8siI5AmwNR1jjMXzcgVgONNVdoSDnnxQWvu3CqU=) 2: _0ywnegmUO5MxDJ-q2dwt6sUfvs.crl (hash: x+ZRZuxHyhvHkDM2hfS+WgvHjyYbk5M8yGs/1iEN90U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b1:37:e3:8d:60:ac:3f:57:7d:53:b7:98:27:87:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb Validity Not Before: Dec 8 02:01:26 2025 GMT Not After : Dec 9 02:01:26 2025 GMT Subject: CN=779a0043242e2e303ea2d33b37fdceeb3a52171d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b1:e7:4e:b5:56:a1:8a:75:98:68:55:b4:4b: 8b:8b:2d:f0:1f:04:d3:f3:e4:f1:1e:30:e5:d0:9a: 1d:96:3b:f0:e4:02:a6:8b:b6:ac:91:b0:90:de:bf: 51:d2:dd:f2:a4:8b:01:0c:63:1c:42:9b:12:d9:43: 59:20:1a:ef:94:21:e2:35:09:da:6c:fd:a7:24:56: e7:18:a2:7a:26:85:b4:ac:b5:f8:09:d8:44:4a:9e: 63:16:71:27:ab:c7:57:71:68:28:bb:99:04:53:be: 0d:e4:40:2e:f5:69:15:51:22:ad:e0:41:60:e0:f1: 14:b3:b3:b4:01:28:7a:67:2f:62:85:67:5c:14:7b: 34:56:45:f8:d7:a5:f5:42:60:6b:7a:be:82:38:11: 76:96:75:8b:63:2e:2b:ad:38:17:fc:c3:bf:e2:f8: d3:39:09:54:c7:28:ee:ff:bc:43:05:84:17:94:45: 71:42:51:c9:6a:11:14:c4:01:d2:d1:d1:0c:c3:15: a1:5c:5a:e6:82:93:1e:97:eb:54:21:f1:2b:44:f2: da:9f:7d:5a:80:bb:c0:50:4d:4a:89:e8:22:de:62: 76:7b:3d:f0:b9:32:41:21:0c:f9:67:c6:a7:9a:35: 8e:08:c3:d1:cb:f5:1a:c4:bf:44:1b:81:46:d6:90: 10:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9A:00:43:24:2E:2E:30:3E:A2:D3:3B:37:FD:CE:EB:3A:52:17:1D X509v3 Authority Key Identifier: keyid:FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f4:d3:fa:35:be:fc:9f:25:69:26:8c:c8:a0:fa:40:6d:55: 91:c1:bf:74:6f:33:15:ba:ed:6a:f0:55:62:97:50:90:ba:8c: 4f:93:9c:1e:08:90:89:a5:f1:db:99:8b:c8:b4:19:70:91:c5: 83:f7:e8:6d:8d:a3:8b:9d:0b:ce:f7:97:91:21:d8:7b:ce:e8: 1c:ed:d6:e7:97:da:aa:42:80:c8:f1:37:15:9f:b0:ee:cd:ba: 0a:d1:77:f1:d4:be:d9:dd:70:f0:e0:a1:6c:7d:2f:82:b4:bb: c2:74:4f:b5:7e:ed:b3:89:b5:b6:6f:63:a1:be:46:08:65:31: fd:8c:b1:ce:95:21:96:3f:a5:fe:3f:4f:4d:25:43:19:46:a5: ee:51:2e:a3:d6:7a:c9:60:71:af:11:9a:7b:66:96:b2:ae:e3: b4:f4:95:55:79:4e:da:96:fa:55:30:6e:42:d9:1d:71:8b:ab: 40:94:90:e7:72:1e:56:21:bb:8b:9a:02:85:9c:57:d2:04:0d: 4a:75:8f:47:f7:bd:aa:f3:3b:20:f1:c5:fe:cf:69:8b:90:9e: 03:1e:23:32:4c:58:d2:cd:45:85:c8:01:b5:28:bd:44:2a:b8: bd:09:a0:48:36:6b:63:7a:8b:d6:db:0b:b9:c9:53:29:a5:f9: 02:79:fb:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sTfjjWCsP1d9U7eYJ4e/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGNiMDlkZTgyNjUwZWU0Y2M0MzI3ZWFiNjc3MGI3YWIx NDdlZmIwHhcNMjUxMjA4MDIwMTI2WhcNMjUxMjA5MDIwMTI2WjAzMTEwLwYDVQQD Eyg3NzlhMDA0MzI0MmUyZTMwM2VhMmQzM2IzN2ZkY2VlYjNhNTIxNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27HnTrVWoYp1mGhVtEuLiy3wHwTT 8+TxHjDl0Jodljvw5AKmi7askbCQ3r9R0t3ypIsBDGMcQpsS2UNZIBrvlCHiNQna bP2nJFbnGKJ6JoW0rLX4CdhESp5jFnEnq8dXcWgou5kEU74N5EAu9WkVUSKt4EFg 4PEUs7O0ASh6Zy9ihWdcFHs0VkX416X1QmBrer6COBF2lnWLYy4rrTgX/MO/4vjT OQlUxyju/7xDBYQXlEVxQlHJahEUxAHS0dEMwxWhXFrmgpMel+tUIfErRPLan31a gLvAUE1Kiegi3mJ2ez3wuTJBIQz5Z8anmjWOCMPRy/UaxL9EG4FG1pAQ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeaAEMkLi4wPqLTOzf9zus6UhcdMB8GA1UdIwQY MBaAFP9MsJ3oJlDuTMQyfqtncLerFH77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzB5d25lZ21VTzVNeERKLXEyZHd0NnNVZnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hZWQ5NDYtOWVmYS00OGI3LWE4Yzct MTQ2NWE0YjUyMTM2LzEvXzB5d25lZ21VTzVNeERKLXEyZHd0NnNVZnZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9hZWQ5NDYtOWVmYS00OGI3LWE4YzctMTQ2NWE0YjUyMTM2 LzEvXzB5d25lZ21VTzVNeERKLXEyZHd0NnNVZnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPTT+jW+ /J8laSaMyKD6QG1VkcG/dG8zFbrtavBVYpdQkLqMT5OcHgiQiaXx25mLyLQZcJHF g/fobY2ji50LzveXkSHYe87oHO3W55faqkKAyPE3FZ+w7s26CtF38dS+2d1w8OCh bH0vgrS7wnRPtX7ts4m1tm9job5GCGUx/YyxzpUhlj+l/j9PTSVDGUal7lEuo9Z6 yWBxrxGae2aWsq7jtPSVVXlO2pb6VTBuQtkdcYurQJSQ53IeViG7i5oChZxX0gQN SnWPR/e9qvM7IPHF/s9pi5CeAx4jMkxY0s1FhcgBtSi9RCq4vQmgSDZrY3qL1tsL uclTKaX5Ann7GQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:26 2025 by rpki-client