This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft File: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft (raw, json) Hash identifier: MkMci5mtNK5mhFY1SVjvCWq1e/GdJuHRbAp8v4Or+F0= Subject key identifier: 35:54:30:28:1E:16:E3:7A:65:D1:8C:FD:2E:A0:43:D1:10:02:83:70 Authority key identifier: D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80 Certificate issuer: /CN=d291741252bb9c4cda80047dfb01ce98c219d180 Certificate serial: 019B3344B6BEEDD426D390018FB3B71E3E33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft Manifest number: 1637 Signing time: Thu 18 Dec 2025 21:01:39 +0000 Manifest this update: Thu 18 Dec 2025 21:01:39 +0000 Manifest next update: Fri 19 Dec 2025 21:01:39 +0000 Files and hashes: 1: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl (hash: QoLuickpcfdghSdk2VViQ1mxJcYKVkM6++nk4KI0icc=) 2: 24F3NWEaUDo-ywzWotAmlAOE0aY.roa (hash: ERf1+Eo8kcPOcjF9iXtlxaEqblrqJRaC4jpu9Wj4DSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:b6:be:ed:d4:26:d3:90:01:8f:b3:b7:1e:3e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d291741252bb9c4cda80047dfb01ce98c219d180 Validity Not Before: Dec 18 21:01:39 2025 GMT Not After : Dec 19 21:01:39 2025 GMT Subject: CN=355430281e16e37a65d18cfd2ea043d110028370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:fb:cc:1e:d3:35:cd:59:a9:ce:57:9d:05: a0:e7:90:ed:46:0e:92:e7:92:1a:c8:45:f6:5b:18: 4e:96:ab:b0:2f:5a:03:5a:2a:cf:28:cd:a0:73:ab: 1a:e4:4d:77:d3:dd:fc:11:c1:ee:e5:97:c0:4d:f0: 37:53:16:4f:a7:cc:76:8c:d5:06:12:10:4b:d2:56: 43:70:d9:50:5a:79:f9:59:25:8f:d9:75:0e:bc:77: e4:e0:65:85:e1:72:fa:d0:67:06:30:31:97:59:26: 95:b0:7d:5f:1b:b4:a9:da:6a:cd:1e:8c:66:6e:56: b8:da:73:19:cb:72:a2:2d:c7:6d:e2:4e:37:5b:3d: be:ab:47:c3:6a:21:07:34:db:4d:e9:ce:c6:89:b2: b2:87:01:b1:59:b6:ee:e0:76:9f:c9:a9:bb:62:82: a2:80:0e:ac:b8:d3:05:6b:1d:be:39:b3:f1:01:94: c3:c4:c2:65:89:e8:a4:99:d9:6f:b6:df:cf:3b:06: 95:0c:46:b9:b7:a2:68:66:f8:1a:82:6a:1b:5a:e4: 5f:c5:4d:e2:63:e7:91:00:b0:9b:6b:4e:04:45:ee: 20:1b:fa:9b:bf:3a:43:f1:29:b3:5f:fd:5f:7b:67: c4:34:ee:93:f8:b8:42:86:6e:13:28:50:87:82:08: 39:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:54:30:28:1E:16:E3:7A:65:D1:8C:FD:2E:A0:43:D1:10:02:83:70 X509v3 Authority Key Identifier: keyid:D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:25:d7:e8:95:8c:47:7c:3c:94:02:58:53:49:ab:9a:e5:9d: a3:f1:40:ed:5b:f0:a5:ff:0d:65:7c:ec:d8:e5:9e:d5:6e:71: 58:75:30:38:8a:78:ee:93:c3:39:cd:94:3f:2b:e0:59:ec:40: 99:ad:95:45:5d:bb:b9:71:2d:2f:de:85:7f:f0:e6:1d:e1:df: fd:e7:49:f2:bf:9c:f7:2e:22:53:9f:ab:e2:50:4b:e3:f8:2e: 8c:fb:9f:67:8b:dd:55:05:3e:b9:a1:77:47:0a:7e:c0:81:28: 78:13:12:af:ce:09:77:8b:8c:f9:c1:e0:8a:20:12:90:61:c4: 68:51:a1:bd:64:af:f3:c2:b0:bf:34:1f:68:0d:b5:26:12:27: e8:d1:71:88:0e:71:c7:f5:7f:b1:34:38:50:53:48:91:64:81: e4:e7:3c:24:48:97:47:30:fa:6b:fd:83:01:28:36:dd:f9:d2: 67:b9:9a:c2:04:4a:de:fc:c9:60:dd:d6:d3:6b:df:ee:9c:8e: 17:37:6d:0d:b5:bd:2d:96:23:0f:d8:8f:6c:19:34:be:3f:1a: 07:59:d5:97:d9:5d:3d:79:2e:93:f9:da:32:f9:53:05:46:5b: 3b:57:4e:57:fc:72:fa:cb:4f:97:35:67:b9:5d:04:f7:91:c0: 4c:8a:07:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRLa+7dQm05ABj7O3Hj4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOTE3NDEyNTJiYjljNGNkYTgwMDQ3ZGZiMDFjZTk4YzIx OWQxODAwHhcNMjUxMjE4MjEwMTM5WhcNMjUxMjE5MjEwMTM5WjAzMTEwLwYDVQQD EygzNTU0MzAyODFlMTZlMzdhNjVkMThjZmQyZWEwNDNkMTEwMDI4MzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5z7zB7TNc1Zqc5XnQWg55DtRg6S 55IayEX2WxhOlquwL1oDWirPKM2gc6sa5E130938EcHu5ZfATfA3UxZPp8x2jNUG EhBL0lZDcNlQWnn5WSWP2XUOvHfk4GWF4XL60GcGMDGXWSaVsH1fG7Sp2mrNHoxm bla42nMZy3KiLcdt4k43Wz2+q0fDaiEHNNtN6c7GibKyhwGxWbbu4Hafyam7YoKi gA6suNMFax2+ObPxAZTDxMJlieikmdlvtt/POwaVDEa5t6JoZvgagmobWuRfxU3i Y+eRALCba04ERe4gG/qbvzpD8SmzX/1fe2fENO6T+LhChm4TKFCHggg5NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVUMCgeFuN6ZdGM/S6gQ9EQAoNwMB8GA1UdIwQY MBaAFNKRdBJSu5xM2oAEffsBzpjCGdGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHBGMEVsSzduRXphZ0FSOS13SE9tTUlaMFlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zYmE2ZmMtMmQ0OS00YWZmLTkyMjkt NDhiOTU3MjY0YzI2LzEvMHBGMEVsSzduRXphZ0FSOS13SE9tTUlaMFlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zYmE2ZmMtMmQ0OS00YWZmLTkyMjktNDhiOTU3MjY0YzI2 LzEvMHBGMEVsSzduRXphZ0FSOS13SE9tTUlaMFlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSXX6JWM R3w8lAJYU0mrmuWdo/FA7Vvwpf8NZXzs2OWe1W5xWHUwOIp47pPDOc2UPyvgWexA ma2VRV27uXEtL96Ff/DmHeHf/edJ8r+c9y4iU5+r4lBL4/gujPufZ4vdVQU+uaF3 Rwp+wIEoeBMSr84Jd4uM+cHgiiASkGHEaFGhvWSv88KwvzQfaA21JhIn6NFxiA5x x/V/sTQ4UFNIkWSB5Oc8JEiXRzD6a/2DASg23fnSZ7mawgRK3vzJYN3W02vf7pyO FzdtDbW9LZYjD9iPbBk0vj8aB1nVl9ldPXkuk/naMvlTBUZbO1dOV/xy+stPlzVn uV0E95HATIoHNg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:21:44 2025 by rpki-client