This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft File: _0t7padsE3FS0NDzUk_WIBuBW-8.mft (raw, json) Hash identifier: OU8yb/SP/39IwDt3bUIMiayMptfmufFnArF/a5nxlRo= Subject key identifier: 04:DD:22:58:D7:51:E1:0A:6B:AB:5E:29:3A:3D:9B:63:A0:EA:72:4A Authority key identifier: FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF Certificate issuer: /CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef Certificate serial: 019AF3F7352FD54B944ADEC215B58589D551 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft Manifest number: 0293 Signing time: Sat 06 Dec 2025 14:00:55 +0000 Manifest this update: Sat 06 Dec 2025 14:00:55 +0000 Manifest next update: Sun 07 Dec 2025 14:00:55 +0000 Files and hashes: 1: _0t7padsE3FS0NDzUk_WIBuBW-8.crl (hash: CIOAY65sO2CHzup4hJ0b6leSpUepIIEhIOAKNGD95C0=) 2: dzWaTBaulL5kl6N51Aq9Q2INFwQ.roa (hash: qCU96anqXB1vi9FIqkKYJeT2OcA8oxOe7J0O6GEIhmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:35:2f:d5:4b:94:4a:de:c2:15:b5:85:89:d5:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef Validity Not Before: Dec 6 14:00:55 2025 GMT Not After : Dec 7 14:00:55 2025 GMT Subject: CN=04dd2258d751e10a6bab5e293a3d9b63a0ea724a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:69:b2:ca:fb:b2:76:c8:c6:dc:06:27:c7: ac:a9:61:16:eb:96:8b:fb:7d:70:79:bc:a8:c2:92: 4d:69:6c:e0:c1:6f:3b:2c:d8:e7:c8:c2:24:50:84: 84:86:12:c7:65:9c:4d:b2:83:dd:2b:d2:06:6b:af: 59:32:4d:02:aa:04:6b:35:23:98:9b:21:bf:c9:8d: da:f8:ee:9d:e4:fc:8e:2e:10:21:cf:8d:54:45:8b: 8d:0d:b7:b6:6d:ce:7b:cb:45:58:4d:55:32:14:84: 29:8d:7c:10:d1:cb:1a:60:1f:8a:2c:e4:7f:5f:cc: dc:d1:b5:21:fd:25:8b:21:ea:c4:a4:21:25:72:6c: 27:bd:80:54:b4:f5:36:c8:e2:23:5e:f2:f8:0e:84: da:63:4e:9d:00:5c:3e:8f:c6:64:bf:78:49:21:18: 44:48:f6:d8:ad:63:5c:49:99:c3:42:fc:68:34:01: c2:7d:5e:b1:74:c1:cd:47:f9:9d:23:bb:33:79:7b: 9c:cf:1d:d6:2c:61:6f:d0:8a:60:81:e8:10:27:91: b9:d5:ee:a7:8a:c9:83:8d:03:0f:56:fe:62:38:e0: 58:66:bc:94:32:e9:4f:87:d5:5c:ab:60:e3:02:f8: 57:81:ca:96:9f:93:8d:d8:77:e5:0d:68:17:a1:4c: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DD:22:58:D7:51:E1:0A:6B:AB:5E:29:3A:3D:9B:63:A0:EA:72:4A X509v3 Authority Key Identifier: keyid:FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:75:17:3d:d2:cd:f3:be:1f:80:ec:db:3b:6f:67:f6:16:a3: 88:c8:9e:22:6a:80:78:0e:48:21:7d:a8:54:d7:c7:0d:4e:ce: d4:5a:7a:d2:6c:d5:ea:5e:94:4b:09:11:f0:6d:d6:8d:f1:7e: 8f:bf:22:c3:00:d7:9e:44:eb:57:d5:bd:e5:f3:ea:06:d4:af: 05:0b:37:8f:6a:02:96:aa:a1:d1:02:a1:67:e4:0d:3c:2d:ab: 8d:18:34:ff:db:bb:ce:e6:4b:2d:7a:32:3a:00:32:17:b1:c4: a4:1d:4c:fb:32:f8:f7:22:cb:b6:31:32:79:0a:22:bf:ce:a1: 07:9b:9f:ec:7e:b5:53:9d:26:2b:7d:4d:c5:55:a9:2e:16:47: 9e:04:b3:13:3e:3c:22:c5:e3:1a:4e:30:48:8b:e0:42:8d:4a: ef:26:03:c2:99:27:60:6c:90:b6:93:65:c5:42:b6:59:62:2c: bc:02:1e:53:e2:87:72:2d:81:dd:c2:c5:aa:f4:40:18:c9:f2: f0:d8:89:95:a0:1d:c3:42:79:55:08:ab:e1:17:4d:37:87:77: 9b:2e:c1:c5:66:49:5c:a7:00:95:e4:0d:ed:1b:1f:bb:50:1f: a8:6a:06:be:14:90:bf:35:ba:61:58:75:69:e1:a3:55:ea:8c: 38:6b:3a:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9zUv1UuUSt7CFbWFidVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGI3YmE1YTc2YzEzNzE1MmQwZDBmMzUyNGZkNjIwMWI4 MTViZWYwHhcNMjUxMjA2MTQwMDU1WhcNMjUxMjA3MTQwMDU1WjAzMTEwLwYDVQQD EygwNGRkMjI1OGQ3NTFlMTBhNmJhYjVlMjkzYTNkOWI2M2EwZWE3MjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0plpssr7snbIxtwGJ8esqWEW65aL +31webyowpJNaWzgwW87LNjnyMIkUISEhhLHZZxNsoPdK9IGa69ZMk0CqgRrNSOY myG/yY3a+O6d5PyOLhAhz41URYuNDbe2bc57y0VYTVUyFIQpjXwQ0csaYB+KLOR/ X8zc0bUh/SWLIerEpCElcmwnvYBUtPU2yOIjXvL4DoTaY06dAFw+j8Zkv3hJIRhE SPbYrWNcSZnDQvxoNAHCfV6xdMHNR/mdI7szeXuczx3WLGFv0IpggegQJ5G51e6n ismDjQMPVv5iOOBYZryUMulPh9Vcq2DjAvhXgcqWn5ON2HflDWgXoUzsTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATdIljXUeEKa6teKTo9m2Og6nJKMB8GA1UdIwQY MBaAFP9Le6WnbBNxUtDQ81JP1iAbgVvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAt OGY5NWI4NTI0YzM1LzEvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAtOGY5NWI4NTI0YzM1 LzEvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXUXPdLN 874fgOzbO29n9hajiMieImqAeA5IIX2oVNfHDU7O1Fp60mzV6l6USwkR8G3WjfF+ j78iwwDXnkTrV9W95fPqBtSvBQs3j2oClqqh0QKhZ+QNPC2rjRg0/9u7zuZLLXoy OgAyF7HEpB1M+zL49yLLtjEyeQoiv86hB5uf7H61U50mK31NxVWpLhZHngSzEz48 IsXjGk4wSIvgQo1K7yYDwpknYGyQtpNlxUK2WWIsvAIeU+KHci2B3cLFqvRAGMny 8NiJlaAdw0J5VQir4RdNN4d3my7BxWZJXKcAleQN7Rsfu1AfqGoGvhSQvzW6YVh1 aeGjVeqMOGs67w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:35 2025 by rpki-client