This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.mft (raw, json) Hash identifier: biDTWY6hB8YFO4eYgniNiyAY2bCJRNWxLK4O8fNvXok= Subject key identifier: EE:DA:B8:6E:57:E0:DF:BF:F5:24:DE:A4:66:39:DE:11:6B:B6:7F:08 Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae Certificate serial: 019B2C9D937B13A1EBEECE0C28366A817203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft Manifest number: 0860 Signing time: Wed 17 Dec 2025 14:01:22 +0000 Manifest this update: Wed 17 Dec 2025 14:01:22 +0000 Manifest next update: Thu 18 Dec 2025 14:01:22 +0000 Files and hashes: 1: 0HCWDtmg2hybfiRX6ry2YEeNCK4.crl (hash: d5I6SmqVU88EsUsaHTDRX0wl1UyETeMXZudep15VXcY=) 2: ZYblDAaDwwmnrchNjFrf0zm4tO0.roa (hash: TUJh6mrSVIERTxbeRqv55tj1PiJ2BrobmYQdllbfBL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:93:7b:13:a1:eb:ee:ce:0c:28:36:6a:81:72:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae Validity Not Before: Dec 17 14:01:22 2025 GMT Not After : Dec 18 14:01:22 2025 GMT Subject: CN=eedab86e57e0dfbff524dea46639de116bb67f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:ab:8f:6d:e5:6f:9a:ae:33:89:9f:10:ca: 8b:ed:96:1f:f5:c6:b3:0d:40:9f:c7:ae:46:bd:20: cd:e5:f9:72:53:00:12:f8:8e:28:08:9f:44:30:b2: 98:b9:1e:20:13:cf:e1:63:9b:27:6a:12:f7:8a:47: 7e:9b:3b:67:55:ce:d8:32:c8:c4:55:77:ab:6e:dd: 8c:08:a5:6b:ca:a6:6a:4e:ac:48:2d:80:5e:d5:9d: 7a:c1:23:88:ec:09:f7:56:83:7e:70:d9:d8:e5:66: 0f:e7:dd:cd:e0:b8:e1:b6:2a:16:82:77:5d:39:3f: 35:9b:ee:44:5e:dc:eb:27:17:f3:4c:67:19:65:86: ac:8c:72:df:cd:fb:2a:74:02:31:8f:64:1e:10:aa: 47:19:f8:9b:b5:be:9b:e9:06:e7:b9:99:d7:77:a3: aa:bf:e3:63:75:66:d8:8e:ae:b4:f1:e4:25:90:8d: 50:58:2a:82:52:1e:2f:ad:00:31:75:37:16:6f:92: 9a:73:a7:ec:6d:6c:70:6a:f4:8d:11:e1:ff:29:de: 50:4c:bd:20:21:b2:27:95:41:33:f4:2a:ec:d0:ef: e4:61:2a:48:39:af:dc:e6:bd:77:7f:f5:4b:a5:5a: 4e:d8:93:96:78:35:6c:0c:97:64:67:c5:80:6d:88: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DA:B8:6E:57:E0:DF:BF:F5:24:DE:A4:66:39:DE:11:6B:B6:7F:08 X509v3 Authority Key Identifier: keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:67:50:11:bd:62:1b:dd:a5:3d:16:f4:e7:bc:cc:c3:91:5d: 35:c1:c6:1a:78:31:ec:43:cd:0d:f8:a1:47:53:74:08:8d:9a: 70:dd:af:57:f2:7c:5d:46:ae:51:ee:18:3b:98:a7:44:f3:37: 05:45:f6:b6:53:0d:ba:6e:05:d8:b5:c7:fa:80:a7:fd:d5:65: 1b:e7:86:76:fc:d2:90:c1:2d:b7:c4:68:ae:90:79:b9:7d:f3: ec:90:e1:0f:b2:0e:ad:6d:11:e4:2a:37:f3:8d:a2:44:6d:cd: a3:bc:f6:e1:91:0f:bd:d2:5e:8f:a6:e7:92:19:54:70:56:fa: 13:59:81:22:a5:77:f8:a2:78:b6:53:ce:75:9c:f3:ae:c4:60: 90:dd:2c:6a:7f:0f:d0:00:aa:4f:68:d8:90:bc:f2:6f:dc:38: 2b:20:e4:b4:b4:cb:a0:82:40:fe:2e:3b:ed:20:28:64:a6:83: 82:b6:32:d5:a5:ae:be:d6:f1:d2:7d:da:b2:8f:4b:68:79:25: 50:c2:0d:5b:f0:f9:91:28:74:57:b0:25:b1:e9:dc:66:e2:6a: 82:74:85:37:80:fc:dd:0d:3c:0e:15:a4:c7:1d:e3:77:ef:74: 2c:ce:34:a7:0d:78:ab:10:ae:97:ee:f7:f8:37:c0:22:f0:98: c1:de:c6:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnZN7E6Hr7s4MKDZqgXIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNzA5NjBlZDlhMGRhMWM5YjdlMjQ1N2VhYmNiNjYwNDc4 ZDA4YWUwHhcNMjUxMjE3MTQwMTIyWhcNMjUxMjE4MTQwMTIyWjAzMTEwLwYDVQQD EyhlZWRhYjg2ZTU3ZTBkZmJmZjUyNGRlYTQ2NjM5ZGUxMTZiYjY3ZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY6rj23lb5quM4mfEMqL7ZYf9caz DUCfx65GvSDN5flyUwAS+I4oCJ9EMLKYuR4gE8/hY5snahL3ikd+mztnVc7YMsjE VXerbt2MCKVryqZqTqxILYBe1Z16wSOI7An3VoN+cNnY5WYP593N4LjhtioWgndd OT81m+5EXtzrJxfzTGcZZYasjHLfzfsqdAIxj2QeEKpHGfibtb6b6QbnuZnXd6Oq v+NjdWbYjq608eQlkI1QWCqCUh4vrQAxdTcWb5Kac6fsbWxwavSNEeH/Kd5QTL0g IbInlUEz9Crs0O/kYSpIOa/c5r13f/VLpVpO2JOWeDVsDJdkZ8WAbYhHrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7auG5X4N+/9STepGY53hFrtn8IMB8GA1UdIwQY MBaAFNBwlg7ZoNocm34kV+q8tmBHjQiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYt NmVlZmRhMTEwOGFkLzEvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYtNmVlZmRhMTEwOGFk LzEvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmdQEb1i G92lPRb057zMw5FdNcHGGngx7EPNDfihR1N0CI2acN2vV/J8XUauUe4YO5inRPM3 BUX2tlMNum4F2LXH+oCn/dVlG+eGdvzSkMEtt8RorpB5uX3z7JDhD7IOrW0R5Co3 842iRG3No7z24ZEPvdJej6bnkhlUcFb6E1mBIqV3+KJ4tlPOdZzzrsRgkN0san8P 0ACqT2jYkLzyb9w4KyDktLTLoIJA/i477SAoZKaDgrYy1aWuvtbx0n3aso9LaHkl UMINW/D5kSh0V7AlsencZuJqgnSFN4D83Q08DhWkxx3jd+90LM40pw14qxCul+73 +DfAIvCYwd7GTw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:36:08 2025 by rpki-client