This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json) Hash identifier: hSyefprSXjhCAyKOq1JgBfBXL4KXRv1TadP20+VZACA= Subject key identifier: 10:99:58:E1:18:00:10:3E:21:B7:DA:4C:48:B0:98:53:87:C1:77:CA Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd Certificate serial: 019AF50A9D7EE42C511C8CA647933EE780BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft Manifest number: 12F9 Signing time: Sat 06 Dec 2025 19:01:44 +0000 Manifest this update: Sat 06 Dec 2025 19:01:44 +0000 Manifest next update: Sun 07 Dec 2025 19:01:44 +0000 Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: nccqVk0O3a29m6iwCIzBReZbApBqbVofhjAZj+vw0GA=) 2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:9d:7e:e4:2c:51:1c:8c:a6:47:93:3e:e7:80:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd Validity Not Before: Dec 6 19:01:44 2025 GMT Not After : Dec 7 19:01:44 2025 GMT Subject: CN=109958e11800103e21b7da4c48b0985387c177ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a2:ac:b3:4d:f5:c8:14:44:f9:6a:89:e3:66: 80:79:75:60:dd:ac:0e:90:7d:ae:a5:3f:eb:0b:d8: 2c:5a:c1:0c:b2:db:1b:ba:95:dc:55:b9:b7:35:24: fe:35:07:98:e1:bf:94:32:9e:6b:7b:8b:77:5c:28: 38:43:b5:6f:2b:dc:5d:49:5e:df:72:ce:35:99:e1: 2c:83:a3:be:e4:60:89:63:f0:4e:c4:18:1e:1e:77: 89:aa:73:2a:29:d3:ad:18:13:34:79:6d:b6:8b:0c: fa:de:5a:32:4f:70:9f:8a:3e:2f:ee:b5:f1:a5:ad: d4:c6:03:31:e8:04:76:84:44:d2:60:72:ca:70:f6: 15:b0:34:33:34:95:ee:0e:a8:48:3d:7d:b8:75:f6: 49:c3:22:9f:06:0e:1b:12:bd:09:16:08:14:ad:98: 7e:26:9b:34:94:a8:42:64:22:ea:3b:64:9a:9a:27: 0b:63:34:f9:97:5f:f6:ba:05:32:1b:71:ba:3a:cd: a7:99:1b:e7:9e:60:c4:b5:e6:90:87:c4:25:98:64: 3e:81:44:f5:55:10:62:df:eb:20:06:be:e4:d3:df: 3c:7d:3f:7c:d1:6e:b7:8e:62:53:a3:62:e4:69:30: 52:c8:b9:cc:95:d3:b8:37:4a:a2:ea:e6:f1:a3:b8: 5a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:99:58:E1:18:00:10:3E:21:B7:DA:4C:48:B0:98:53:87:C1:77:CA X509v3 Authority Key Identifier: keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:57:fb:d3:29:77:04:27:ab:42:73:ca:cc:b9:57:3b:13:78: e3:d2:52:c4:c3:8a:b7:7f:0e:35:00:5e:ad:ce:4b:0f:70:e9: 4b:6d:87:50:e2:83:59:76:ee:37:c2:59:02:83:84:b9:f5:9e: b0:a5:5a:04:e7:67:47:f7:f2:b8:d3:bf:9a:79:3c:f4:97:68: b6:ae:d0:87:f5:8f:f6:bd:0a:59:c9:f4:d6:7f:d3:ab:7d:0a: 82:53:05:50:3b:8a:e4:82:5f:c2:b8:68:17:03:59:30:85:d6: 77:c7:22:2c:21:d7:d5:d2:18:21:68:06:8a:0f:8c:af:9c:cc: fe:7a:7d:1b:32:b0:95:5f:63:e5:c9:73:ee:02:01:43:35:e7: af:3e:35:32:01:df:f6:86:cc:74:7c:25:61:bf:18:bd:99:b6: 22:e7:90:0f:1d:3a:39:71:0d:ce:5b:ae:14:81:ec:c6:29:41: e1:44:06:91:84:d9:c0:d4:0c:9b:66:13:dc:62:90:f6:d8:28: 1d:56:f4:b8:4e:09:f8:66:9b:f7:62:4f:2e:5f:e9:8a:23:c4: 7f:7d:d4:e3:dc:37:0c:d3:78:c0:cb:a5:cc:34:0d:68:44:2a: b4:0f:f4:64:65:27:5e:00:7b:38:53:28:7f:64:4b:a8:ae:8a: 9d:6f:04:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cp1+5CxRHIymR5M+54C8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUwN2ExYTFmNjViZDExNmUxMWY5ZjExMDg2MDRiNmU5 NWNjZmQwHhcNMjUxMjA2MTkwMTQ0WhcNMjUxMjA3MTkwMTQ0WjAzMTEwLwYDVQQD EygxMDk5NThlMTE4MDAxMDNlMjFiN2RhNGM0OGIwOTg1Mzg3YzE3N2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KKss031yBRE+WqJ42aAeXVg3awO kH2upT/rC9gsWsEMstsbupXcVbm3NST+NQeY4b+UMp5re4t3XCg4Q7VvK9xdSV7f cs41meEsg6O+5GCJY/BOxBgeHneJqnMqKdOtGBM0eW22iwz63loyT3Cfij4v7rXx pa3UxgMx6AR2hETSYHLKcPYVsDQzNJXuDqhIPX24dfZJwyKfBg4bEr0JFggUrZh+ Jps0lKhCZCLqO2SamicLYzT5l1/2ugUyG3G6Os2nmRvnnmDEteaQh8QlmGQ+gUT1 VRBi3+sgBr7k0988fT980W63jmJTo2LkaTBSyLnMldO4N0qi6ubxo7hapwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCZWOEYABA+IbfaTEiwmFOHwXfKMB8GA1UdIwQY MBaAFNHeB6Gh9lvRFuEfnxEIYEtulcz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2Mt OTlmMTgyMjEzZDRmLzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2MtOTlmMTgyMjEzZDRm LzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVf70yl3 BCerQnPKzLlXOxN449JSxMOKt38ONQBerc5LD3DpS22HUOKDWXbuN8JZAoOEufWe sKVaBOdnR/fyuNO/mnk89Jdotq7Qh/WP9r0KWcn01n/Tq30KglMFUDuK5IJfwrho FwNZMIXWd8ciLCHX1dIYIWgGig+Mr5zM/np9GzKwlV9j5clz7gIBQzXnrz41MgHf 9obMdHwlYb8YvZm2IueQDx06OXENzluuFIHsxilB4UQGkYTZwNQMm2YT3GKQ9tgo HVb0uE4J+Gab92JPLl/piiPEf33U49w3DNN4wMulzDQNaEQqtA/0ZGUnXgB7OFMo f2RLqK6KnW8E2A== -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:09 2025 by rpki-client