This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft File: 0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json) Hash identifier: z++CLQh2rtaUwTxHWVOescojMlfm92SriaUyHFx8SPY= Subject key identifier: 31:7F:D3:51:DF:BF:F7:06:4B:3B:02:CA:21:22:B5:D0:32:AC:AC:5E Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63 Certificate issuer: /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63 Certificate serial: 019AF12DE8FB6EF3FCB0747F3F6237D0E617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft Manifest number: 0D2B Signing time: Sat 06 Dec 2025 01:01:49 +0000 Manifest this update: Sat 06 Dec 2025 01:01:49 +0000 Manifest next update: Sun 07 Dec 2025 01:01:49 +0000 Files and hashes: 1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: UNqx1P/+WOrMvhD+fq71TYCqmfyULFjqyDqp4tdHWGQ=) 2: 1qLqqTllve4zCxVAYOzBHvpeKI4.roa (hash: vb9EDboxZKlgHYFjRAGPCvT6HrDSb4Ej+FgPnOTiZKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e8:fb:6e:f3:fc:b0:74:7f:3f:62:37:d0:e6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63 Validity Not Before: Dec 6 01:01:49 2025 GMT Not After : Dec 7 01:01:49 2025 GMT Subject: CN=317fd351dfbff7064b3b02ca2122b5d032acac5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:1d:bf:03:14:aa:84:ca:64:e6:ad:c1:5a: 73:93:6a:1e:d1:e3:d0:17:1a:99:c7:f3:3a:97:ac: 1e:b1:69:17:2f:99:46:32:1b:ab:9c:1f:65:9b:97: ba:be:6a:15:d3:b2:cd:99:b4:11:aa:ca:21:fa:03: 01:56:bf:95:eb:46:10:6e:ac:fc:ec:25:3e:a8:b1: 04:5b:8e:83:44:b3:c5:ce:fe:19:9f:bf:13:db:5f: 11:8b:d8:65:fa:69:b5:cf:12:e3:bc:7b:f7:6b:59: 75:c5:c8:66:05:d0:36:d9:c7:85:f4:26:8b:a0:42: a3:97:64:0c:da:eb:45:5a:c7:95:1c:d2:d0:00:bf: 3f:e8:57:d5:23:ad:25:c6:f1:6f:e9:de:49:9c:16: 84:2f:36:88:85:90:f6:b5:f5:42:50:ad:ed:d2:70: ca:5a:30:c2:1a:6d:03:da:17:d9:be:e3:f5:f9:76: 58:d0:a6:61:37:ad:be:f3:c9:79:c0:af:97:df:5a: df:fa:d2:e0:e4:6e:ea:66:56:83:9d:12:14:9b:fb: 2e:c0:8b:9a:d4:d7:29:77:e7:c7:91:a8:76:d1:c8: 02:06:3f:61:d1:2b:f1:7b:3f:86:9c:26:2a:3b:d3: eb:b7:1a:fe:d8:02:c8:eb:a1:4e:54:32:30:d8:3a: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7F:D3:51:DF:BF:F7:06:4B:3B:02:CA:21:22:B5:D0:32:AC:AC:5E X509v3 Authority Key Identifier: keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8e:31:28:7f:82:d2:aa:3a:54:e2:23:56:48:5b:a9:e5:8c: 56:b7:83:de:99:c1:c4:b4:47:ff:27:58:15:64:92:0e:fa:35: 9e:0c:00:60:f8:06:6c:2d:0c:1d:e5:0c:66:3f:1d:3f:ab:9e: ee:c6:c2:bd:b4:2a:57:9b:b2:26:70:30:53:2b:a8:a8:2c:50: 65:5c:bd:04:07:0d:ba:25:1e:3a:72:7c:98:c7:9e:2d:b9:bd: c9:55:86:2e:31:cc:16:2f:39:ff:cb:29:e8:4e:95:3b:7c:13: 58:48:23:67:ec:12:1a:de:45:4a:0b:63:5b:be:12:82:37:51: 33:90:3a:41:f1:af:08:97:12:a9:4b:a2:76:4e:f3:c5:dc:18: 60:d3:c5:6a:b5:09:47:71:03:0a:2a:c2:99:9a:09:51:ca:be: fd:cb:b7:ab:22:b0:88:ce:b5:c0:b3:24:a2:94:01:2e:d4:9d: 8b:2c:cc:1a:0c:17:3c:f3:67:bd:46:23:81:50:09:8d:53:ab: ba:4b:71:04:3e:27:01:17:27:43:12:c6:5d:8a:34:43:b8:ed: 24:7a:ac:49:2a:ab:88:d7:81:6a:9f:a2:32:6f:00:97:13:b3: 1f:90:9d:8b:d4:c8:03:21:25:fa:75:51:33:52:18:ad:68:6c: d1:4e:2b:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLej7bvP8sHR/P2I30OYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYmQ0Y2E3ZjMzMWFhMmFkOTEyNDBhNjU4M2ExNzZjMDA1 ZThhNjMwHhcNMjUxMjA2MDEwMTQ5WhcNMjUxMjA3MDEwMTQ5WjAzMTEwLwYDVQQD EygzMTdmZDM1MWRmYmZmNzA2NGIzYjAyY2EyMTIyYjVkMDMyYWNhYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFQdvwMUqoTKZOatwVpzk2oe0ePQ FxqZx/M6l6wesWkXL5lGMhurnB9lm5e6vmoV07LNmbQRqsoh+gMBVr+V60YQbqz8 7CU+qLEEW46DRLPFzv4Zn78T218Ri9hl+mm1zxLjvHv3a1l1xchmBdA22ceF9CaL oEKjl2QM2utFWseVHNLQAL8/6FfVI60lxvFv6d5JnBaELzaIhZD2tfVCUK3t0nDK WjDCGm0D2hfZvuP1+XZY0KZhN62+88l5wK+X31rf+tLg5G7qZlaDnRIUm/suwIua 1Ncpd+fHkah20cgCBj9h0Svxez+GnCYqO9Prtxr+2ALI66FOVDIw2DrINQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF/01Hfv/cGSzsCyiEitdAyrKxeMB8GA1UdIwQY MBaAFNC9TKfzMaoq2RJAplg6F2wAXopjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xZDk0NDAtY2VlOC00MzgzLWIwYTAt ZTBiNWE5MmRmOTQwLzEvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xZDk0NDAtY2VlOC00MzgzLWIwYTAtZTBiNWE5MmRmOTQw LzEvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi44xKH+C 0qo6VOIjVkhbqeWMVreD3pnBxLRH/ydYFWSSDvo1ngwAYPgGbC0MHeUMZj8dP6ue 7sbCvbQqV5uyJnAwUyuoqCxQZVy9BAcNuiUeOnJ8mMeeLbm9yVWGLjHMFi85/8sp 6E6VO3wTWEgjZ+wSGt5FSgtjW74SgjdRM5A6QfGvCJcSqUuidk7zxdwYYNPFarUJ R3EDCirCmZoJUcq+/cu3qyKwiM61wLMkopQBLtSdiyzMGgwXPPNnvUYjgVAJjVOr uktxBD4nARcnQxLGXYo0Q7jtJHqsSSqriNeBap+iMm8AlxOzH5Cdi9TIAyEl+nVR M1IYrWhs0U4rkw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:45 2025 by rpki-client