This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft File: 0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json) Hash identifier: 9DPV447AosL1wwUMjxuCswBJpdE2VSxYhC6F65gYH/U= Subject key identifier: 0D:5B:BA:98:30:5C:C2:C0:AE:57:DB:F1:3E:0D:42:27:B6:53:D4:0E Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4 Certificate issuer: /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4 Certificate serial: 019AF1D1D1D790517F4442920BFEA811D7DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft Manifest number: 0721 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: xekUpXN8As8Xfz1QPr0tYvmU3hGltevLtnUXGav5tWk=) 2: wc2YTTqZu_ZfiRjMD3y02xaUsko.roa (hash: LM/FwSmelKssGweHrskFer212d31QKucqPggfsRe9io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d1:d7:90:51:7f:44:42:92:0b:fe:a8:11:d7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4 Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=0d5bba98305cc2c0ae57dbf13e0d4227b653d40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:09:bc:63:83:9d:12:b8:34:20:cd:90:23: f7:cc:0b:a6:84:f6:b5:e7:4b:af:82:5a:e9:ee:86: fa:83:67:4c:7e:6f:9e:b0:30:6c:47:a5:e7:79:f7: 41:79:9c:07:44:d5:c3:f6:d7:7d:29:82:2b:41:d1: 39:36:72:ed:77:d2:86:a9:4a:08:d2:e1:61:54:a6: e4:6d:9e:67:75:c8:ba:89:22:be:4b:c8:98:ac:27: d0:54:d4:da:27:66:4c:5e:cb:5a:21:43:08:6b:7b: ae:65:2e:f1:14:99:4a:30:e6:e9:70:6f:be:69:0e: aa:d4:ae:3f:2a:74:d7:a5:6c:48:26:c7:3c:59:25: 1e:32:c0:2d:b9:5e:f6:94:c0:d5:25:d2:cb:d4:a5: e4:a6:86:2a:e8:6d:05:a8:05:70:b3:92:ee:bb:da: 95:ca:51:d0:6a:9d:49:31:bb:ee:22:ad:87:90:56: e9:7d:b5:78:23:fc:30:57:e4:04:aa:5b:ec:2f:5d: 64:e6:82:7f:b3:7e:e1:10:2f:64:95:31:cc:71:fd: 85:33:b4:58:5a:46:ed:b5:ac:05:3d:5e:1d:bd:2c: e6:3c:88:9e:00:bd:76:d6:39:db:c9:fa:e4:a4:17: c6:54:f9:ea:04:3b:cb:54:4d:b5:97:04:5b:1f:5c: 37:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5B:BA:98:30:5C:C2:C0:AE:57:DB:F1:3E:0D:42:27:B6:53:D4:0E X509v3 Authority Key Identifier: keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:5e:f1:54:7a:27:1d:82:78:f4:c5:04:f9:da:f5:67:90:27: a3:74:3f:f2:08:fa:1c:5f:13:6b:fd:39:ac:a3:af:9e:0c:cd: d4:95:e6:90:d5:ea:e7:b0:18:24:3f:d4:66:35:cd:56:6d:10: ff:10:43:ac:25:c1:85:a0:2e:93:fa:46:29:8a:a2:89:bd:3f: d4:bf:54:e2:76:e9:e8:ce:f2:ec:f1:be:f0:b0:14:86:0c:28: 92:b4:71:69:aa:a8:4b:45:1f:e7:8c:96:8c:19:de:fc:91:20: 7b:29:cf:9c:e2:e3:d0:85:08:6c:96:63:e8:2c:ca:77:a0:0a: 92:c3:c5:60:4a:eb:0e:c8:16:67:f2:b2:e6:cb:d7:c0:7a:04: 8e:2b:e7:51:f5:05:bc:4c:33:f0:a6:f5:18:6b:77:40:1e:28: 43:ed:c9:87:0d:2e:91:9c:23:a8:fa:1d:ad:c2:a9:ab:b8:84: 41:54:6f:09:2d:81:a0:63:d7:ec:1e:62:e0:62:4b:83:03:e0: 55:8c:bc:cd:f8:44:e3:e2:b0:61:96:f2:ca:b1:ff:88:0f:ac: 99:b3:fc:15:dd:59:9b:cf:fb:04:eb:bc:95:8c:13:15:b4:bd: 39:f8:1e:9b:b4:d7:f3:1e:4c:ce:b9:f5:35:76:5b:18:b0:e6: 3e:ac:52:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dHXkFF/REKSC/6oEdfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNWE5ZTJjNGFjOGJjMDJiYzNmZjg5MjVhYzEzMTc0ZDJk NDc4YzQwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD EygwZDViYmE5ODMwNWNjMmMwYWU1N2RiZjEzZTBkNDIyN2I2NTNkNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqIJvGODnRK4NCDNkCP3zAumhPa1 50uvglrp7ob6g2dMfm+esDBsR6XnefdBeZwHRNXD9td9KYIrQdE5NnLtd9KGqUoI 0uFhVKbkbZ5ndci6iSK+S8iYrCfQVNTaJ2ZMXstaIUMIa3uuZS7xFJlKMObpcG++ aQ6q1K4/KnTXpWxIJsc8WSUeMsAtuV72lMDVJdLL1KXkpoYq6G0FqAVws5Luu9qV ylHQap1JMbvuIq2HkFbpfbV4I/wwV+QEqlvsL11k5oJ/s37hEC9klTHMcf2FM7RY WkbttawFPV4dvSzmPIieAL121jnbyfrkpBfGVPnqBDvLVE21lwRbH1w3jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1bupgwXMLArlfb8T4NQie2U9QOMB8GA1UdIwQY MBaAFNJanixKyLwCvD/4klrBMXTS1HjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxxZUxFckl2QUs4UF9pU1dzRXhkTkxVZU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iMjU4MmYtNTg2Yi00MzZhLWE2ZTMt ZTA2OWVlMTA3YWRkLzEvMGxxZUxFckl2QUs4UF9pU1dzRXhkTkxVZU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iMjU4MmYtNTg2Yi00MzZhLWE2ZTMtZTA2OWVlMTA3YWRk LzEvMGxxZUxFckl2QUs4UF9pU1dzRXhkTkxVZU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAul7xVHon HYJ49MUE+dr1Z5Ano3Q/8gj6HF8Ta/05rKOvngzN1JXmkNXq57AYJD/UZjXNVm0Q /xBDrCXBhaAuk/pGKYqiib0/1L9U4nbp6M7y7PG+8LAUhgwokrRxaaqoS0Uf54yW jBne/JEgeynPnOLj0IUIbJZj6CzKd6AKksPFYErrDsgWZ/Ky5svXwHoEjivnUfUF vEwz8Kb1GGt3QB4oQ+3Jhw0ukZwjqPodrcKpq7iEQVRvCS2BoGPX7B5i4GJLgwPg VYy8zfhE4+KwYZbyyrH/iA+smbP8Fd1Zm8/7BOu8lYwTFbS9Ofgem7TX8x5Mzrn1 NXZbGLDmPqxS5A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:16 2025 by rpki-client