This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json) Hash identifier: 7RCQEWrXKnUpgVuPNmM1PukC4cvVdkCxOVMWSK4yfl8= Subject key identifier: E7:6B:64:FA:32:28:E2:0E:33:EB:BC:AF:66:C6:46:39:00:96:B5:05 Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21 Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121 Certificate serial: 019AF38A1391600C5EE7823A0AAC8FFB6F49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:01:43 +0000 Manifest this update: Sat 06 Dec 2025 12:01:43 +0000 Manifest next update: Sun 07 Dec 2025 12:01:43 +0000 Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: OPS6WFC3H9i2OSN4AH0YAJbSqzrhHz1iEonzTC2eDM4=) 2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:13:91:60:0c:5e:e7:82:3a:0a:ac:8f:fb:6f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121 Validity Not Before: Dec 6 12:01:43 2025 GMT Not After : Dec 7 12:01:43 2025 GMT Subject: CN=e76b64fa3228e20e33ebbcaf66c646390096b505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:fb:48:bc:2e:2d:3c:8c:9a:18:9d:1a:a1: a6:79:ef:ec:bb:21:b4:36:80:43:9a:15:7f:27:59: 51:04:29:2a:0f:0a:08:65:06:97:b3:74:a0:2e:27: 90:c1:68:24:c1:13:c9:68:e3:f2:69:96:bf:28:1d: 03:4f:cc:e4:b7:26:1b:cc:23:9a:81:88:ad:74:69: 56:f6:13:b1:8a:2f:47:a4:cc:c9:40:75:0b:d0:50: 21:53:69:d6:ad:32:0c:37:a2:06:c5:d6:aa:81:51: 20:32:84:f8:b5:cf:ce:75:fd:b8:6c:35:a6:a9:5d: 14:eb:10:5e:1c:93:c6:54:18:7e:4f:7d:4f:63:c6: 1d:4c:31:d3:20:e0:a7:f3:4c:0d:5d:ce:4d:57:93: 53:fc:63:1c:6e:74:37:6f:95:b7:c5:42:c1:bc:6a: 9d:43:c2:a8:4c:33:d6:e5:4e:a4:31:dd:08:eb:8a: 69:b2:5f:18:32:c9:16:84:66:c9:af:4e:ab:99:fd: 02:b5:84:df:82:ac:1c:68:40:dd:f3:81:13:a8:52: 4e:63:6a:05:51:6e:fb:0a:61:8a:99:c0:3f:47:5a: 7c:bf:f0:fb:36:72:2d:d6:c6:92:3c:26:bb:91:c1: 52:fc:75:da:a5:6d:c8:bd:11:2b:21:18:34:3d:a6: 3e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6B:64:FA:32:28:E2:0E:33:EB:BC:AF:66:C6:46:39:00:96:B5:05 X509v3 Authority Key Identifier: keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:aa:e5:55:a4:32:a2:d9:e3:cc:25:fa:fa:c9:6f:0c:16:98: 55:df:7b:ec:2c:62:8f:5b:f3:b0:b7:7c:53:18:eb:a7:68:76: 3d:10:5d:e8:74:c3:4d:8a:3a:b2:38:b6:3b:cd:31:b0:85:cb: 4c:de:7b:46:11:7f:e5:aa:70:12:eb:ba:03:10:13:f9:4b:99: 67:58:29:4f:58:22:eb:18:e8:46:d4:3d:8b:62:64:18:c8:be: 0a:6b:f0:62:df:cc:ba:e3:b2:e7:83:1d:60:36:37:1f:6d:a1: db:7e:db:d9:56:bf:65:29:e4:c5:0b:75:a5:84:ff:3c:a5:23: 1e:d5:d2:0c:a6:b9:9e:08:4f:13:71:03:e6:83:d9:ac:11:f0: 15:58:ad:f9:37:e6:d5:69:ae:eb:b8:1e:64:69:fe:5b:09:6a: 85:5c:d0:65:cb:8e:28:94:2f:f2:44:9d:a5:d2:18:03:0f:08: ba:97:90:4f:55:01:b0:aa:9e:1e:be:0b:6a:9a:21:73:1a:bd: 7a:e3:e6:d4:48:80:f4:ac:9a:0c:7b:ab:14:1f:b1:2c:6a:d2: 09:29:ca:f5:08:51:4f:ca:97:d3:4a:a3:6d:ed:59:33:66:5f: 40:19:00:1d:d5:88:16:87:be:6b:ea:f8:1b:f6:71:21:a7:41: ad:63:3a:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihORYAxe54I6CqyP+29JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNWYyY2QxYTlmMGRhNDM1ZjJlM2IzZWU3MGU2NGZkYWY0 YjYxMjEwHhcNMjUxMjA2MTIwMTQzWhcNMjUxMjA3MTIwMTQzWjAzMTEwLwYDVQQD EyhlNzZiNjRmYTMyMjhlMjBlMzNlYmJjYWY2NmM2NDYzOTAwOTZiNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncz7SLwuLTyMmhidGqGmee/suyG0 NoBDmhV/J1lRBCkqDwoIZQaXs3SgLieQwWgkwRPJaOPyaZa/KB0DT8zktyYbzCOa gYitdGlW9hOxii9HpMzJQHUL0FAhU2nWrTIMN6IGxdaqgVEgMoT4tc/Odf24bDWm qV0U6xBeHJPGVBh+T31PY8YdTDHTIOCn80wNXc5NV5NT/GMcbnQ3b5W3xULBvGqd Q8KoTDPW5U6kMd0I64ppsl8YMskWhGbJr06rmf0CtYTfgqwcaEDd84ETqFJOY2oF UW77CmGKmcA/R1p8v/D7NnIt1saSPCa7kcFS/HXapW3IvRErIRg0PaY+vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdrZPoyKOIOM+u8r2bGRjkAlrUFMB8GA1UdIwQY MBaAFNJfLNGp8NpDXy47PucOZP2vS2EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yZDEyNWYtMWE2MC00NjhkLWE5M2Et YzViNmFlY2I2YzljLzEvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yZDEyNWYtMWE2MC00NjhkLWE5M2EtYzViNmFlY2I2Yzlj LzEvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqarlVaQy otnjzCX6+slvDBaYVd977Cxij1vzsLd8Uxjrp2h2PRBd6HTDTYo6sji2O80xsIXL TN57RhF/5apwEuu6AxAT+UuZZ1gpT1gi6xjoRtQ9i2JkGMi+CmvwYt/MuuOy54Md YDY3H22h237b2Va/ZSnkxQt1pYT/PKUjHtXSDKa5nghPE3ED5oPZrBHwFVit+Tfm 1Wmu67geZGn+WwlqhVzQZcuOKJQv8kSdpdIYAw8IupeQT1UBsKqeHr4Lapohcxq9 euPm1EiA9KyaDHurFB+xLGrSCSnK9QhRT8qX00qjbe1ZM2ZfQBkAHdWIFoe+a+r4 G/ZxIadBrWM6fQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:10:29 2025 by rpki-client