This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft File: 0lYiRXob4zoBJYhmoGfgRH39iWQ.mft (raw, json) Hash identifier: WtcJsQ78LyoC1+1/dyD0DTJ8daGgMQlCbqvOLyJPHUw= Subject key identifier: 15:48:AD:F4:F5:79:47:47:B4:21:E3:B8:A4:53:81:3A:BD:C7:98:88 Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64 Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964 Certificate serial: 019B34C46CCD385DC6D584F487267E5CA375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft Manifest number: 0A54 Signing time: Fri 19 Dec 2025 04:00:46 +0000 Manifest this update: Fri 19 Dec 2025 04:00:46 +0000 Manifest next update: Sat 20 Dec 2025 04:00:46 +0000 Files and hashes: 1: 0lYiRXob4zoBJYhmoGfgRH39iWQ.crl (hash: nW3LCm8TQXUF5CtMgAC9AwXO+8+m9se9ScbRBP/oNr4=) 2: POa1_1lG2fZrcfZRxbGnmzL6mIU.roa (hash: hZbXwNqNEsVBnStQz74wqfWaYd+uX0JeS3LWv9uiIFs=) 3: XhmVOxeypIhl-8QtBoFXZmkyOfo.roa (hash: NGVstEUWv/DepTwZpuQa7X5iSrpsHNmeXxcUSdEmq9U=) 4: Y8x1Dc8lYBa9pr_hu1HUt6VfoiQ.roa (hash: tNZ2tMN+vQdGUpJ50iWyGDf4dzENZz5DtzgcHTVz9wQ=) 5: hJHifVMBaH30EqpePenT1Sqap70.roa (hash: QomOS52IIn3hGg0bKejEi6GxR/26/6+mZUMxHEwlzCc=) 6: k1JgfKb3srL6aXDXnzvzd4pJb2w.roa (hash: +LhNHAlBDK0qBIHLLIuzyw+Dk5hZ7SHq+3e02Y/fFBg=) 7: p51-PJoT-E47Il5-C4i0wMvLMrQ.roa (hash: v6b35eBQ2NIYxUqWiW7LPB2L21OTBBy59B+EGu/7XOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:6c:cd:38:5d:c6:d5:84:f4:87:26:7e:5c:a3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964 Validity Not Before: Dec 19 04:00:46 2025 GMT Not After : Dec 20 04:00:46 2025 GMT Subject: CN=1548adf4f5794747b421e3b8a453813abdc79888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:56:b7:1a:b1:16:8f:c9:f9:3d:3c:79:38: cf:d7:79:07:2e:26:e6:da:d8:5f:92:a9:5b:3c:fb: 82:41:90:eb:5e:6b:71:b9:2d:b6:44:c9:73:b9:9d: 8e:28:df:46:6f:5b:e1:3f:35:b0:48:7f:6f:f9:38: 93:ee:00:de:dd:52:3e:23:cd:b2:8c:34:97:a6:99: 6a:5b:7c:56:27:80:39:8f:49:fa:5a:ec:12:6f:67: 91:f8:57:a9:6b:16:ba:78:19:4c:02:ab:8a:fb:62: 74:d3:b6:a9:24:82:61:1d:d6:2e:7c:96:ac:50:fc: 66:ba:32:59:ef:8c:3e:21:66:ee:e2:0e:cf:aa:40: c6:a1:6d:02:eb:f9:cd:0c:2a:4e:85:3b:18:c0:7c: 7b:f6:c3:96:c2:2c:ff:53:85:b9:e6:9b:c8:72:5f: 2c:4e:ff:c4:0b:4f:e7:33:b9:db:ee:aa:76:2c:d3: 66:6f:9a:05:ad:b3:cf:28:bd:67:6c:ab:5d:0b:ee: f6:ee:a1:68:fb:76:0b:48:c1:a3:08:cf:50:fe:bb: 0a:d5:da:12:76:a6:45:6f:1d:c6:e7:81:0d:71:17: b7:f6:b6:77:09:28:cc:aa:1d:c7:6c:19:0f:2d:e1: 8c:dd:59:96:fc:9f:e4:98:90:ea:e2:73:51:d1:ba: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:48:AD:F4:F5:79:47:47:B4:21:E3:B8:A4:53:81:3A:BD:C7:98:88 X509v3 Authority Key Identifier: keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d7:5c:42:67:b4:60:b6:7c:4f:e3:41:d8:6c:67:72:f8:50: 39:f2:d6:e8:5b:27:19:a6:cf:2a:2a:46:76:33:90:2b:25:f0: 01:72:0b:90:e2:78:10:61:0a:ab:58:dc:44:35:6a:f7:30:b9: 84:3e:74:4a:a1:2e:43:ff:bb:eb:ff:7d:58:55:d6:dc:74:3f: ab:d2:e2:0c:43:5d:8d:b6:bf:9a:e2:1d:bb:ad:1e:62:7a:82: e7:ec:b7:c8:a0:48:d0:57:a4:5e:d8:ce:02:97:a6:91:bf:86: be:c1:d7:1b:3b:bc:78:64:67:69:ea:74:8f:01:4e:59:2c:8c: d9:61:8d:16:47:4a:3e:33:52:51:db:d2:80:da:c5:e1:64:4f: e1:4e:22:d5:f7:6f:45:d6:c1:aa:c4:5b:7c:84:6d:c2:e2:36: 4c:e5:3e:70:d8:98:f1:3e:00:fd:4a:0a:b9:d5:49:82:ac:30: 98:46:57:ac:15:f7:19:ee:ca:bc:9f:36:60:46:6e:63:8b:99: 4c:76:20:89:c7:15:8c:bc:5c:04:55:98:cc:49:08:d6:56:bc: cc:94:22:b3:64:e8:4e:0e:67:fe:16:83:37:15:c4:74:8a:aa: 65:c6:94:7e:08:d7:dd:37:37:fc:e4:b7:ac:2a:53:a6:22:fc: 02:38:0d:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xGzNOF3G1YT0hyZ+XKN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNTYyMjQ1N2ExYmUzM2EwMTI1ODg2NmEwNjdlMDQ0N2Rm ZDg5NjQwHhcNMjUxMjE5MDQwMDQ2WhcNMjUxMjIwMDQwMDQ2WjAzMTEwLwYDVQQD EygxNTQ4YWRmNGY1Nzk0NzQ3YjQyMWUzYjhhNDUzODEzYWJkYzc5ODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujxWtxqxFo/J+T08eTjP13kHLibm 2thfkqlbPPuCQZDrXmtxuS22RMlzuZ2OKN9Gb1vhPzWwSH9v+TiT7gDe3VI+I82y jDSXpplqW3xWJ4A5j0n6WuwSb2eR+Fepaxa6eBlMAquK+2J007apJIJhHdYufJas UPxmujJZ74w+IWbu4g7PqkDGoW0C6/nNDCpOhTsYwHx79sOWwiz/U4W55pvIcl8s Tv/EC0/nM7nb7qp2LNNmb5oFrbPPKL1nbKtdC+727qFo+3YLSMGjCM9Q/rsK1doS dqZFbx3G54ENcRe39rZ3CSjMqh3HbBkPLeGM3VmW/J/kmJDq4nNR0bo5tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVIrfT1eUdHtCHjuKRTgTq9x5iIMB8GA1UdIwQY MBaAFNJWIkV6G+M6ASWIZqBn4ER9/YlkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxZaVJYb2I0em9CSllobW9HZmdSSDM5aVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNmI0N2ItZjJjZS00ZjJiLTlkMzMt NDU1NzllNDE4ZmY3LzEvMGxZaVJYb2I0em9CSllobW9HZmdSSDM5aVdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yNmI0N2ItZjJjZS00ZjJiLTlkMzMtNDU1NzllNDE4ZmY3 LzEvMGxZaVJYb2I0em9CSllobW9HZmdSSDM5aVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtdcQme0 YLZ8T+NB2GxncvhQOfLW6FsnGabPKipGdjOQKyXwAXILkOJ4EGEKq1jcRDVq9zC5 hD50SqEuQ/+76/99WFXW3HQ/q9LiDENdjba/muIdu60eYnqC5+y3yKBI0FekXtjO Apemkb+GvsHXGzu8eGRnaep0jwFOWSyM2WGNFkdKPjNSUdvSgNrF4WRP4U4i1fdv RdbBqsRbfIRtwuI2TOU+cNiY8T4A/UoKudVJgqwwmEZXrBX3Ge7KvJ82YEZuY4uZ THYgiccVjLxcBFWYzEkI1la8zJQis2ToTg5n/haDNxXEdIqqZcaUfgjX3Tc3/OS3 rCpTpiL8AjgNBQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:29:15 2025 by rpki-client