This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json) Hash identifier: 4ccuSIHL5YNX/5gqAw+Y/QzWgLJKF/GAmvJoZP1+Ujo= Subject key identifier: 4A:DF:2C:42:4E:5C:A8:89:D3:F5:F1:8A:1F:BD:DE:66:A3:16:74:5A Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82 Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982 Certificate serial: 019AFCC48D2FAB56550757F59853AFE698E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft Manifest number: 1769 Signing time: Mon 08 Dec 2025 07:02:10 +0000 Manifest this update: Mon 08 Dec 2025 07:02:10 +0000 Manifest next update: Tue 09 Dec 2025 07:02:10 +0000 Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: 5rDFr4UdbwEXeZS/UL5lUD9FJOYOzoBiQR/u2jEyipQ=) 2: J8ZSaP5X7b8oUB1RfXySs77eTwE.roa (hash: O5hpA9e+z6B0C4p8y7a0RLXHzllt/qs6YXqVQLo/Jo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:8d:2f:ab:56:55:07:57:f5:98:53:af:e6:98:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982 Validity Not Before: Dec 8 07:02:10 2025 GMT Not After : Dec 9 07:02:10 2025 GMT Subject: CN=4adf2c424e5ca889d3f5f18a1fbdde66a316745a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:04:22:dc:be:78:3a:65:ad:f0:09:85:e5:f8: 55:85:5f:e3:52:17:fc:21:f6:bf:e0:e7:60:f6:30: 1a:5e:c0:3b:3f:e4:3b:06:0a:06:d6:78:ea:3e:3e: ed:58:0b:f4:f6:12:45:a9:4a:c6:9f:9c:bc:f8:35: 0b:e8:ee:55:2d:48:27:08:02:9d:d4:75:70:1a:fc: 41:fc:e0:6b:66:31:01:f4:3c:69:94:ab:ef:2b:10: 60:bb:ef:c9:ae:5e:55:66:cf:73:c0:4d:dc:0c:ec: b6:8c:d0:f0:00:7a:f1:0f:b8:87:87:c4:6e:18:81: 89:55:0c:af:c6:59:2e:b3:ce:cc:f2:ce:c8:bc:3b: 10:13:49:8a:44:f9:c6:47:f6:1b:83:9f:14:d1:71: 33:0f:7a:21:ad:b5:ad:b1:90:9b:84:07:a4:e2:e2: 63:24:a5:d9:db:07:83:34:a2:b3:3f:27:2d:65:e2: 09:99:64:93:be:f4:45:94:d3:89:3b:02:62:61:c3: 44:56:ea:b7:c4:c3:c4:4c:30:6b:d0:25:d0:cd:b4: 32:0f:90:d6:70:be:0e:c6:cf:0b:61:31:19:03:7a: be:6f:9a:ea:9b:4e:8d:e6:21:6a:15:28:86:bd:47: b8:a4:20:57:7e:55:91:06:10:56:a4:38:21:8d:f5: 13:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DF:2C:42:4E:5C:A8:89:D3:F5:F1:8A:1F:BD:DE:66:A3:16:74:5A X509v3 Authority Key Identifier: keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:58:26:58:cc:a0:05:8e:c0:43:87:73:a0:63:49:a3:5c:38: e3:f2:94:4a:91:d5:63:a1:c3:43:31:26:36:b4:d1:41:07:0a: 5c:ec:b5:40:6c:f4:e5:5c:60:ab:53:02:42:01:34:25:73:f2: 5e:d1:3d:53:24:8a:31:2c:20:00:d9:42:65:7f:ad:4d:06:1f: 74:f1:f8:4e:d7:d9:93:37:aa:f5:55:7a:42:f1:58:f0:ec:70: aa:f3:77:f3:f8:4e:b1:64:fd:77:7d:76:9e:97:02:02:24:24: e2:44:eb:df:c3:72:c5:75:ae:e7:86:aa:3f:64:5c:66:ab:be: 66:19:42:83:d2:36:da:99:b4:bf:f1:c5:39:20:cb:85:3a:6f: 71:aa:b5:00:b9:6d:fa:1d:a1:6f:8d:63:ce:73:95:5e:7e:f7: 6b:db:83:20:47:8f:e7:ff:f6:ea:93:b7:c3:4f:b1:bc:31:e4: ad:d5:d1:02:bf:72:f0:0e:31:b0:46:76:5d:e5:29:e5:f0:4c: 0b:20:ae:c9:3b:26:66:c0:ec:f7:4a:75:98:ec:8e:28:2d:5c: ed:5c:6d:6a:2c:3c:04:53:72:e0:ed:c2:d7:28:28:4e:64:18: 9d:94:79:ab:b3:56:cd:74:31:09:61:20:63:f0:46:72:5c:03: 53:65:71:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xI0vq1ZVB1f1mFOv5pjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMGJhNjMzZjFlOTgyNDA3NmQxNjFhOTgzZDhiOGU4ODEy NjM5ODIwHhcNMjUxMjA4MDcwMjEwWhcNMjUxMjA5MDcwMjEwWjAzMTEwLwYDVQQD Eyg0YWRmMmM0MjRlNWNhODg5ZDNmNWYxOGExZmJkZGU2NmEzMTY3NDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAQi3L54OmWt8AmF5fhVhV/jUhf8 Ifa/4Odg9jAaXsA7P+Q7BgoG1njqPj7tWAv09hJFqUrGn5y8+DUL6O5VLUgnCAKd 1HVwGvxB/OBrZjEB9DxplKvvKxBgu+/Jrl5VZs9zwE3cDOy2jNDwAHrxD7iHh8Ru GIGJVQyvxlkus87M8s7IvDsQE0mKRPnGR/Ybg58U0XEzD3ohrbWtsZCbhAek4uJj JKXZ2weDNKKzPyctZeIJmWSTvvRFlNOJOwJiYcNEVuq3xMPETDBr0CXQzbQyD5DW cL4Oxs8LYTEZA3q+b5rqm06N5iFqFSiGvUe4pCBXflWRBhBWpDghjfUTxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErfLEJOXKiJ0/Xxih+93majFnRaMB8GA1UdIwQY MBaAFNALpjPx6YJAdtFhqYPYuOiBJjmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEF1bU1fSHBna0IyMFdHcGc5aTQ2SUVtT1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MDg2NjctMGIzOS00ZGEwLTlhYTAt M2NjMTFiYzlkNTk0LzEvMEF1bU1fSHBna0IyMFdHcGc5aTQ2SUVtT1lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80MDg2NjctMGIzOS00ZGEwLTlhYTAtM2NjMTFiYzlkNTk0 LzEvMEF1bU1fSHBna0IyMFdHcGc5aTQ2SUVtT1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFgmWMyg BY7AQ4dzoGNJo1w44/KUSpHVY6HDQzEmNrTRQQcKXOy1QGz05Vxgq1MCQgE0JXPy XtE9UySKMSwgANlCZX+tTQYfdPH4TtfZkzeq9VV6QvFY8OxwqvN38/hOsWT9d312 npcCAiQk4kTr38NyxXWu54aqP2RcZqu+ZhlCg9I22pm0v/HFOSDLhTpvcaq1ALlt +h2hb41jznOVXn73a9uDIEeP5//26pO3w0+xvDHkrdXRAr9y8A4xsEZ2XeUp5fBM CyCuyTsmZsDs90p1mOyOKC1c7Vxtaiw8BFNy4O3C1ygoTmQYnZR5q7NWzXQxCWEg Y/BGclwDU2VxNQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:52 2025 by rpki-client