This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft File: 0MzQmlS_pjFBmXzWU7d7yZOS72I.mft (raw, json) Hash identifier: W8roSV2w372nngra7Q/KaF2v8F4S1CyBe31XaOS6nYQ= Subject key identifier: 29:1A:7D:1A:EA:1F:A9:4D:A3:50:2D:22:B7:E1:CF:81:73:DB:74:7F Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62 Certificate issuer: /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62 Certificate serial: 019B0D807CA0198A3436D73090AAB4219D92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft Manifest number: 0981 Signing time: Thu 11 Dec 2025 13:01:22 +0000 Manifest this update: Thu 11 Dec 2025 13:01:22 +0000 Manifest next update: Fri 12 Dec 2025 13:01:22 +0000 Files and hashes: 1: 0MzQmlS_pjFBmXzWU7d7yZOS72I.crl (hash: jl9lAnCN5FPomyTH0AxZE5yfDEqDd44WcJmFbeVlj8Y=) 2: DqE8gRgoYoMtwrum6k0T5AcgbA0.roa (hash: 7aUKY9kAGmruCwUgSEXbHojzDkwM52NN/3MTuZeZTP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:7c:a0:19:8a:34:36:d7:30:90:aa:b4:21:9d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62 Validity Not Before: Dec 11 13:01:22 2025 GMT Not After : Dec 12 13:01:22 2025 GMT Subject: CN=291a7d1aea1fa94da3502d22b7e1cf8173db747f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:f5:e1:27:88:d3:72:ed:50:32:25:bf:d3: f6:78:ac:5c:d5:fc:02:3b:d9:6b:0e:f9:e3:21:5b: 46:6a:92:08:be:5e:1c:3e:50:62:f7:3e:f4:0b:6e: 87:1d:2a:40:9c:7e:2b:85:06:4b:69:a4:c1:f2:ce: ac:bc:9e:1b:b2:70:7d:5e:82:79:15:7a:47:67:9f: e0:fe:05:71:99:de:68:a9:69:37:f2:18:36:2f:1d: ad:1f:b8:71:f9:5d:99:0c:c2:1e:dc:f3:e4:3b:5a: 9b:6f:72:74:2c:dc:2f:c9:b3:ab:b9:5a:b6:96:73: 7a:1b:5c:06:e8:99:8e:69:1c:c3:d2:15:83:b8:e1: 28:36:65:98:98:23:50:1a:8f:aa:59:2a:ed:fc:38: 78:72:31:c1:cc:4e:d5:a8:1c:09:b5:e9:84:e9:05: 6c:91:58:6d:5c:8f:e9:53:ee:1f:80:03:80:34:37: ba:90:36:af:91:c1:e1:96:6f:07:c7:b9:23:63:c3: 77:78:e0:9d:5c:d5:0f:19:4e:b0:c1:21:09:67:0e: 5c:43:5a:e6:dd:ec:f6:79:fd:cb:35:8c:ab:cd:ae: 16:b3:4b:cb:e3:c7:70:66:2f:fe:a7:c7:fa:e3:b0: 07:91:ef:4c:b9:23:1c:ec:5b:52:de:fa:0f:99:5b: 6d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1A:7D:1A:EA:1F:A9:4D:A3:50:2D:22:B7:E1:CF:81:73:DB:74:7F X509v3 Authority Key Identifier: keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a3:b4:08:94:44:5c:1b:6c:5c:0a:a8:53:6c:ae:ad:85:be: 30:75:78:38:be:23:a0:af:af:62:e7:d9:48:74:03:f3:7c:e5: 83:00:fc:c7:38:26:81:da:48:91:b7:bd:7a:cd:08:51:55:fd: 97:c7:09:ef:43:83:6f:8b:b3:5f:fd:a5:d8:3a:75:95:61:f3: 9d:ef:3f:02:8e:f2:8e:bb:ec:98:74:be:02:49:f7:1f:62:ed: d9:54:a9:ee:70:67:18:b8:b0:a5:69:4a:4f:0c:1b:1e:41:d8: f1:90:f9:fc:a8:ca:3c:2f:1a:c5:60:c3:cf:da:c0:ee:ad:72: e0:27:51:97:91:98:56:18:f3:fa:70:06:71:3d:13:fd:47:7d: 72:c3:ce:4f:8a:d9:52:75:e6:10:ac:74:b2:c3:68:15:57:b2: 1b:ea:d4:e2:40:ec:93:1b:fd:14:83:1b:58:ad:61:dc:cc:07: 5f:3c:1d:24:4c:65:9f:12:a5:3d:92:ea:d0:85:45:76:dd:5c: bb:a3:3a:bb:db:b7:df:59:fe:00:98:69:5b:84:71:b0:1c:21: 28:e5:69:2f:43:eb:5c:41:5f:e2:be:44:84:b6:c1:01:05:3c: 3d:6e:a8:ad:29:e8:fb:2f:58:0e:b6:83:56:e1:c2:83:b1:87: 36:c8:52:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgHygGYo0NtcwkKq0IZ2SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwY2NkMDlhNTRiZmE2MzE0MTk5N2NkNjUzYjc3YmM5OTM5 MmVmNjIwHhcNMjUxMjExMTMwMTIyWhcNMjUxMjEyMTMwMTIyWjAzMTEwLwYDVQQD EygyOTFhN2QxYWVhMWZhOTRkYTM1MDJkMjJiN2UxY2Y4MTczZGI3NDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCL14SeI03LtUDIlv9P2eKxc1fwC O9lrDvnjIVtGapIIvl4cPlBi9z70C26HHSpAnH4rhQZLaaTB8s6svJ4bsnB9XoJ5 FXpHZ5/g/gVxmd5oqWk38hg2Lx2tH7hx+V2ZDMIe3PPkO1qbb3J0LNwvybOruVq2 lnN6G1wG6JmOaRzD0hWDuOEoNmWYmCNQGo+qWSrt/Dh4cjHBzE7VqBwJtemE6QVs kVhtXI/pU+4fgAOANDe6kDavkcHhlm8Hx7kjY8N3eOCdXNUPGU6wwSEJZw5cQ1rm 3ez2ef3LNYyrza4Ws0vL48dwZi/+p8f647AHke9MuSMc7FtS3voPmVtt6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkafRrqH6lNo1AtIrfhz4Fz23R/MB8GA1UdIwQY MBaAFNDM0JpUv6YxQZl81lO3e8mTku9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMzZiM2YtNDU5ZS00YTk2LWE0YWIt M2I5OTA4NzhhNTJiLzEvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xMzZiM2YtNDU5ZS00YTk2LWE0YWItM2I5OTA4NzhhNTJi LzEvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKO0CJRE XBtsXAqoU2yurYW+MHV4OL4joK+vYufZSHQD83zlgwD8xzgmgdpIkbe9es0IUVX9 l8cJ70ODb4uzX/2l2Dp1lWHzne8/Ao7yjrvsmHS+Akn3H2Lt2VSp7nBnGLiwpWlK TwwbHkHY8ZD5/KjKPC8axWDDz9rA7q1y4CdRl5GYVhjz+nAGcT0T/Ud9csPOT4rZ UnXmEKx0ssNoFVeyG+rU4kDskxv9FIMbWK1h3MwHXzwdJExlnxKlPZLq0IVFdt1c u6M6u9u331n+AJhpW4RxsBwhKOVpL0PrXEFf4r5EhLbBAQU8PW6orSno+y9YDraD VuHCg7GHNshS1A== -----END CERTIFICATE-----Generated at Thu Dec 11 17:02:40 2025 by rpki-client