This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json) Hash identifier: Bzsuk/Xwj06qCsGA+XzcYx7eov2vGz5QSD65ie43cfg= Subject key identifier: 3D:7C:57:01:C3:B5:C5:F0:64:37:39:8C:CA:04:B7:61:12:89:75:09 Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Certificate serial: 019AF23F8750BEA2844A607BCD8E10C0E486 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft Manifest number: 1622 Signing time: Sat 06 Dec 2025 06:00:40 +0000 Manifest this update: Sat 06 Dec 2025 06:00:40 +0000 Manifest next update: Sun 07 Dec 2025 06:00:40 +0000 Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: izqm1BT9t/zX8fwwteX27NyoItGzIdALKhEKcZChXQU=) 2: Eoa2DgYKZQhIPrEs2BVXe4pbre4.roa (hash: Lzu15VnANjg8WWEayf+Lga5VSNyXHu7NEi9f0IPI47U=) 3: N1PB4wkghMthA8l4GP9N1SzOEWE.roa (hash: 8LPlkWhxVtJM+jMtTkRPToXaYbmZ6b57zhGOgt0FEmU=) 4: V7B5ePYrHsO0XNRkMFSzpgb0L6o.roa (hash: mqOCLJjTNfcn+4Yc3m3WAArsC6xNXAO5dY/bAJctVR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:87:50:be:a2:84:4a:60:7b:cd:8e:10:c0:e4:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Validity Not Before: Dec 6 06:00:40 2025 GMT Not After : Dec 7 06:00:40 2025 GMT Subject: CN=3d7c5701c3b5c5f06437398cca04b76112897509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:9c:b6:33:d1:98:95:6e:74:34:fd:24:90: d8:63:a2:59:86:41:55:eb:b7:de:9d:d1:54:8b:be: d9:ba:c5:35:93:41:00:2b:c2:a7:cb:5a:4f:43:f0: 36:c2:31:02:12:45:6a:9f:36:df:7b:7f:48:fd:bc: 07:b2:f0:50:34:90:ac:78:a2:cb:d1:93:f6:a6:39: 00:38:c3:52:2d:5f:eb:6d:44:20:4d:04:11:57:03: 32:40:f0:5e:02:0e:f9:47:f5:72:f6:ed:3c:ff:98: ea:c9:ce:06:4f:70:78:21:22:ea:58:19:40:46:37: c2:c2:10:36:91:87:ed:b7:45:1d:b7:a8:f0:37:95: 91:c1:2a:a3:6a:f9:17:28:ae:a0:b0:f5:bf:63:05: 4c:b9:99:a3:0f:8a:c9:57:38:38:9a:11:17:41:1e: a1:c2:bd:69:d9:d9:a5:39:09:cd:34:76:d0:25:2c: 17:34:32:e5:bf:34:3f:ac:61:a5:22:b2:3b:e1:d2: 9a:db:3b:90:66:ac:77:22:ea:bf:b7:f7:5d:c4:44: ff:07:1c:b1:6c:3f:86:1c:b8:5b:6f:92:0c:d4:21: a2:0b:4e:5c:b5:8a:58:e6:b3:b9:1a:bf:35:26:e2: 99:2f:42:29:7d:61:5d:dc:4d:0d:75:4c:7f:b5:d4: b9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7C:57:01:C3:B5:C5:F0:64:37:39:8C:CA:04:B7:61:12:89:75:09 X509v3 Authority Key Identifier: keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:93:5c:84:be:e4:b3:fe:e4:a3:19:ca:2e:7f:3d:54:48:6b: 14:d8:47:35:83:f7:12:55:57:e5:c6:94:2c:c8:0a:59:10:7d: 2b:a8:84:bf:41:f0:18:b7:e4:fc:d8:7d:d2:af:d9:3c:67:c6: 1c:f7:09:63:01:a8:81:69:cd:09:6f:92:b9:a8:79:b6:b3:8c: 2e:d2:a8:02:3b:ef:5c:66:5a:f0:38:2a:01:91:62:e1:fd:e3: 3c:81:46:96:12:3c:9e:a9:5e:d6:86:fb:3f:9e:0b:91:d3:d3: ea:b9:1b:40:73:ab:da:00:ba:9e:bf:9b:7a:28:db:b8:a1:ac: 3f:d8:5c:b8:67:0b:b6:07:1e:50:1b:e5:aa:ed:ed:6d:cd:2a: 89:b0:f8:fd:73:4e:1b:e4:1c:c5:35:26:76:ce:16:f2:4e:1a: e3:de:cb:aa:6b:ed:17:d3:e6:37:d0:75:4c:d9:81:c3:d7:d6: 57:39:2a:9a:85:31:43:dd:45:8e:aa:0a:69:9e:f2:93:8a:52: 94:cb:a5:fc:de:08:7d:22:85:1b:db:4f:42:88:fb:4a:e0:00: 07:0d:ba:a2:56:a3:52:29:64:13:4b:4a:ce:85:ea:39:19:e0: 17:f3:ae:80:3a:dc:64:b2:f4:02:99:ec:03:07:93:10:c9:a5: 93:cd:8f:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4dQvqKESmB7zY4QwOSGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzFkNWZkNGUyMGFkZTVmMTFiNjZhZmIxMGE1NGM4ZmZl NGIwNDAwHhcNMjUxMjA2MDYwMDQwWhcNMjUxMjA3MDYwMDQwWjAzMTEwLwYDVQQD EygzZDdjNTcwMWMzYjVjNWYwNjQzNzM5OGNjYTA0Yjc2MTEyODk3NTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fCctjPRmJVudDT9JJDYY6JZhkFV 67fendFUi77ZusU1k0EAK8Kny1pPQ/A2wjECEkVqnzbfe39I/bwHsvBQNJCseKLL 0ZP2pjkAOMNSLV/rbUQgTQQRVwMyQPBeAg75R/Vy9u08/5jqyc4GT3B4ISLqWBlA RjfCwhA2kYftt0Udt6jwN5WRwSqjavkXKK6gsPW/YwVMuZmjD4rJVzg4mhEXQR6h wr1p2dmlOQnNNHbQJSwXNDLlvzQ/rGGlIrI74dKa2zuQZqx3Iuq/t/ddxET/Bxyx bD+GHLhbb5IM1CGiC05ctYpY5rO5Gr81JuKZL0IpfWFd3E0NdUx/tdS5OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD18VwHDtcXwZDc5jMoEt2ESiXUJMB8GA1UdIwQY MBaAFNLB1f1OIK3l8Rtmr7EKVMj/5LBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTkt YTA5YTg3NWY1OTAzLzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTktYTA5YTg3NWY1OTAz LzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJNchL7k s/7koxnKLn89VEhrFNhHNYP3ElVX5caULMgKWRB9K6iEv0HwGLfk/Nh90q/ZPGfG HPcJYwGogWnNCW+Suah5trOMLtKoAjvvXGZa8DgqAZFi4f3jPIFGlhI8nqle1ob7 P54LkdPT6rkbQHOr2gC6nr+beijbuKGsP9hcuGcLtgceUBvlqu3tbc0qibD4/XNO G+QcxTUmds4W8k4a497LqmvtF9PmN9B1TNmBw9fWVzkqmoUxQ91FjqoKaZ7yk4pS lMul/N4IfSKFG9tPQoj7SuAABw26olajUilkE0tKzoXqORngF/OugDrcZLL0Apns AweTEMmlk82POw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:00 2025 by rpki-client