This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json) Hash identifier: MRVFsFYusJi0rdP8qdxtxBOo5g8fshRQTlMMQSjj9Xw= Subject key identifier: 1E:1C:3D:70:5B:10:EF:3B:3E:B7:BE:32:43:D8:EA:2F:88:6D:91:2D Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab Certificate serial: 019AF19B99CAA70282EAEE61A20C07E17FF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft Manifest number: 09C4 Signing time: Sat 06 Dec 2025 03:01:37 +0000 Manifest this update: Sat 06 Dec 2025 03:01:37 +0000 Manifest next update: Sun 07 Dec 2025 03:01:37 +0000 Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: XteKiLIBQYyTtO8Nlz7E3O9ZnzMsEwQblvDyaqjiBw0=) 2: tkNgBbUczBhXw3Q7nsd4bFDL5Ko.roa (hash: 2ZBjCKDVEUumVBdfZIcGHq5+w377C2/RlriHj7O796c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:99:ca:a7:02:82:ea:ee:61:a2:0c:07:e1:7f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab Validity Not Before: Dec 6 03:01:37 2025 GMT Not After : Dec 7 03:01:37 2025 GMT Subject: CN=1e1c3d705b10ef3b3eb7be3243d8ea2f886d912d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:49:59:59:ae:7f:9f:9e:8b:4a:24:63:ad:1a: 9f:13:69:d2:f6:5f:9c:d2:b7:29:44:15:02:21:81: 88:ff:dd:5d:30:39:2c:84:fe:d2:57:d4:3e:ab:d8: a4:1f:39:59:f0:05:04:c1:09:30:d3:45:a4:c8:5d: 42:4f:8d:ff:00:e6:dd:6e:5b:6f:e8:71:79:08:21: 29:af:bd:9e:bd:55:72:e8:de:b6:60:e1:45:6d:f0: ac:16:a3:48:ba:18:9f:68:10:0e:33:1b:67:3e:57: 6c:6e:a9:13:0d:b0:0e:ab:31:c2:a2:b3:f4:68:66: aa:84:8c:16:ab:9a:0b:e3:ef:70:be:e5:b1:ce:8e: 17:a0:e8:b1:94:c8:31:99:94:d4:86:1a:30:3a:a8: 6d:bb:02:26:20:2f:d5:b4:59:84:94:a2:43:ee:24: 29:62:91:45:7a:eb:ec:94:3c:e2:ae:1d:26:b4:b0: 61:ba:4a:cb:02:bc:cb:43:8d:32:21:9f:22:6b:3f: 0c:9b:3a:86:db:26:a8:05:65:05:f0:13:f4:1a:cc: f0:89:21:d4:64:5f:c7:44:5a:17:34:70:ef:2f:c3: 72:ce:29:8a:e1:40:67:1c:cb:b1:a0:fb:d4:97:30: 1e:81:c7:0d:6f:cc:27:be:79:1c:19:89:9f:3a:01: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1C:3D:70:5B:10:EF:3B:3E:B7:BE:32:43:D8:EA:2F:88:6D:91:2D X509v3 Authority Key Identifier: keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4b:68:04:f9:43:f0:e5:3e:32:ca:92:05:63:6b:af:94:61: 76:d3:45:99:4a:8e:71:6a:68:dd:ba:26:1b:4d:56:ef:f5:9b: 9c:dd:1f:8d:61:21:9f:08:4e:4a:73:0c:4b:58:a3:86:12:77: a7:2c:de:3a:a2:64:ab:9e:b1:01:b9:7a:a6:f9:aa:7a:d2:d9: 80:3b:45:08:30:b2:19:3a:ad:ab:6e:28:89:03:d6:bf:41:de: c5:2e:99:ea:95:43:bc:4e:ad:db:83:ab:25:57:8d:ac:bf:49: 37:f0:1a:4b:8e:b9:a3:6f:a6:ab:a6:95:66:c4:d4:22:7d:d5: 4f:3f:f8:80:fd:1e:90:cb:c7:60:b4:d8:0d:3a:3a:1a:1c:4a: b6:2f:f3:a1:11:64:20:27:1e:0c:4c:bb:51:af:11:93:dc:d7: 77:2d:3e:ad:e0:1c:4e:b5:60:a3:0a:66:15:bc:92:74:41:2d: b3:df:10:c2:af:9e:9e:c8:c7:8e:db:b8:57:cb:d5:19:15:bd: 48:91:71:e8:60:e3:f8:35:dd:17:be:35:df:c3:e8:cf:0c:aa: 12:6a:fa:41:38:fe:4e:42:5c:38:9e:1c:3c:85:e9:24:ab:4c: 4a:25:4c:85:56:1b:4d:cf:d1:25:70:b8:cc:10:ba:70:67:68: d4:73:bd:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5nKpwKC6u5hogwH4X/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNDkxNzcwY2U5YjY2MzAwMmE3OTQ1NDJkOTg4NmQxYTJj ZTYzYWIwHhcNMjUxMjA2MDMwMTM3WhcNMjUxMjA3MDMwMTM3WjAzMTEwLwYDVQQD EygxZTFjM2Q3MDViMTBlZjNiM2ViN2JlMzI0M2Q4ZWEyZjg4NmQ5MTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ElZWa5/n56LSiRjrRqfE2nS9l+c 0rcpRBUCIYGI/91dMDkshP7SV9Q+q9ikHzlZ8AUEwQkw00WkyF1CT43/AObdbltv 6HF5CCEpr72evVVy6N62YOFFbfCsFqNIuhifaBAOMxtnPldsbqkTDbAOqzHCorP0 aGaqhIwWq5oL4+9wvuWxzo4XoOixlMgxmZTUhhowOqhtuwImIC/VtFmElKJD7iQp YpFFeuvslDzirh0mtLBhukrLArzLQ40yIZ8iaz8MmzqG2yaoBWUF8BP0GszwiSHU ZF/HRFoXNHDvL8NyzimK4UBnHMuxoPvUlzAegccNb8wnvnkcGYmfOgGPswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4cPXBbEO87Pre+MkPY6i+IbZEtMB8GA1UdIwQY MBaAFNJJF3DOm2YwAqeUVC2YhtGizmOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEt ODVjMGQwMWY5ZGUyLzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEtODVjMGQwMWY5ZGUy LzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEtoBPlD 8OU+MsqSBWNrr5RhdtNFmUqOcWpo3bomG01W7/WbnN0fjWEhnwhOSnMMS1ijhhJ3 pyzeOqJkq56xAbl6pvmqetLZgDtFCDCyGTqtq24oiQPWv0HexS6Z6pVDvE6t24Or JVeNrL9JN/AaS465o2+mq6aVZsTUIn3VTz/4gP0ekMvHYLTYDTo6GhxKti/zoRFk ICceDEy7Ua8Rk9zXdy0+reAcTrVgowpmFbySdEEts98Qwq+ensjHjtu4V8vVGRW9 SJFx6GDj+DXdF74138PozwyqEmr6QTj+TkJcOJ4cPIXpJKtMSiVMhVYbTc/RJXC4 zBC6cGdo1HO9PA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:40 2025 by rpki-client