This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json) Hash identifier: 0dmm8W1Kes6cBUscANtN+aDPsNiRicObLjn1PQVbHzU= Subject key identifier: 08:90:D4:CE:B3:C4:C4:C1:DB:C3:B4:26:B8:E9:6B:EF:F1:86:FF:AC Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f Certificate serial: 019B2B8A8539B2A458CE003F6DEEEB471D82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 09:00:56 +0000 Manifest this update: Wed 17 Dec 2025 09:00:56 +0000 Manifest next update: Thu 18 Dec 2025 09:00:56 +0000 Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: pvGJ37w4IAghwraB94f2TRAS9NLPexAJF9s205vUNhU=) 2: TWeGvhRSmnN9ba3aLN_PX9mER2s.roa (hash: 6BkkLF5ZMW9w4BTie7IiuTOLhKMimv1AW7aDs2REbaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:85:39:b2:a4:58:ce:00:3f:6d:ee:eb:47:1d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f Validity Not Before: Dec 17 09:00:56 2025 GMT Not After : Dec 18 09:00:56 2025 GMT Subject: CN=0890d4ceb3c4c4c1dbc3b426b8e96beff186ffac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:30:2f:88:05:df:43:e8:93:74:2d:a9:d1: 7b:1f:8f:14:0b:61:88:6d:18:c4:f4:98:0b:de:bf: 86:dd:78:78:2e:09:17:20:6e:83:ea:1a:ec:75:7f: a5:20:a0:ce:a4:06:9e:81:8f:b1:b6:29:62:07:a6: a5:f4:ae:ce:17:f2:eb:af:4d:64:ce:cd:ca:a4:71: 56:a9:22:c5:71:cd:78:7b:7b:ae:db:bd:66:5a:b7: 5d:97:4c:db:af:f4:ac:51:f3:28:3f:f8:38:f8:ba: 89:42:79:ad:9b:3c:47:0e:27:35:3e:53:22:43:74: 83:c3:83:01:7d:e6:d2:1e:31:db:f8:eb:52:88:03: f9:8a:e9:3c:b4:6a:a5:f6:5f:60:1d:77:f7:1a:67: 34:83:eb:66:b6:f6:56:66:d1:68:f8:c9:bc:38:fb: 4a:3a:e3:37:b8:ea:85:00:34:3b:3f:e8:97:3b:89: 71:b3:4d:b0:ce:8a:78:73:85:50:dd:54:28:3c:bf: af:fd:94:43:8f:11:32:3c:e3:21:2a:ae:be:91:50: 3d:61:fe:0a:f7:7b:34:4a:4c:77:9b:d1:d0:5f:8e: be:2c:af:a1:33:f3:56:ab:00:8d:2c:16:a9:44:bc: d1:a5:d2:20:cf:66:7d:06:9d:f5:80:11:43:5d:27: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:90:D4:CE:B3:C4:C4:C1:DB:C3:B4:26:B8:E9:6B:EF:F1:86:FF:AC X509v3 Authority Key Identifier: keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:8b:a0:8c:78:ce:38:e0:eb:5d:63:03:f5:67:de:da:48:c4: 2e:a0:1d:79:09:bd:14:cf:b5:76:23:76:e7:ef:24:16:06:35: 79:03:65:94:2d:83:43:0f:6c:be:b5:8a:ca:ab:6a:76:a6:87: d8:72:8f:b7:6c:47:06:9d:be:3d:72:58:e6:5e:47:5d:27:d9: 4f:45:49:0d:f0:b5:a4:da:7a:a8:9b:a9:b3:cd:71:09:65:ee: f6:28:04:0a:b6:94:43:68:89:3b:7f:6c:0f:86:c5:cc:02:6e: d5:b7:09:9d:7e:e8:17:c8:0b:95:1c:c1:9a:02:32:e0:a6:52: b3:ec:42:32:64:ad:1e:f7:14:c2:6d:66:88:20:a2:72:dd:4c: cd:a3:3a:97:33:7e:38:ca:c9:7c:2b:7e:1f:00:cd:16:29:18: 37:89:01:eb:f2:c0:8a:0b:e0:14:21:92:24:73:2a:5b:0f:07: cc:e6:11:2a:7e:16:dc:08:a1:5e:0e:e3:fa:a6:f9:f8:53:d1: 4c:ba:86:0c:75:53:37:d3:c6:14:ae:8f:be:52:53:56:7d:d4: c0:e7:b8:e1:73:f7:0d:30:bd:be:4d:ec:52:77:fa:da:d2:f1: 47:10:75:82:58:20:54:01:b1:3d:8e:8f:30:1b:02:db:c7:fc: 08:4e:f3:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrioU5sqRYzgA/be7rRx2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzE1ZjBhZWMwZTMzNjY2MmRlOWY2MzcxNTIxY2UyNWU4 ZGUxMGYwHhcNMjUxMjE3MDkwMDU2WhcNMjUxMjE4MDkwMDU2WjAzMTEwLwYDVQQD EygwODkwZDRjZWIzYzRjNGMxZGJjM2I0MjZiOGU5NmJlZmYxODZmZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWAwL4gF30Pok3QtqdF7H48UC2GI bRjE9JgL3r+G3Xh4LgkXIG6D6hrsdX+lIKDOpAaegY+xtiliB6al9K7OF/Lrr01k zs3KpHFWqSLFcc14e3uu271mWrddl0zbr/SsUfMoP/g4+LqJQnmtmzxHDic1PlMi Q3SDw4MBfebSHjHb+OtSiAP5iuk8tGql9l9gHXf3Gmc0g+tmtvZWZtFo+Mm8OPtK OuM3uOqFADQ7P+iXO4lxs02wzop4c4VQ3VQoPL+v/ZRDjxEyPOMhKq6+kVA9Yf4K 93s0Skx3m9HQX46+LK+hM/NWqwCNLBapRLzRpdIgz2Z9Bp31gBFDXSdUMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiQ1M6zxMTB28O0Jrjpa+/xhv+sMB8GA1UdIwQY MBaAFNHBXwrsDjNmYt6fY3FSHOJejeEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1Yjct ODVkNjM0YzViZDUwLzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1YjctODVkNjM0YzViZDUw LzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYugjHjO OODrXWMD9Wfe2kjELqAdeQm9FM+1diN25+8kFgY1eQNllC2DQw9svrWKyqtqdqaH 2HKPt2xHBp2+PXJY5l5HXSfZT0VJDfC1pNp6qJups81xCWXu9igECraUQ2iJO39s D4bFzAJu1bcJnX7oF8gLlRzBmgIy4KZSs+xCMmStHvcUwm1miCCict1MzaM6lzN+ OMrJfCt+HwDNFikYN4kB6/LAigvgFCGSJHMqWw8HzOYRKn4W3AihXg7j+qb5+FPR TLqGDHVTN9PGFK6PvlJTVn3UwOe44XP3DTC9vk3sUnf62tLxRxB1glggVAGxPY6P MBsC28f8CE7z2Q== -----END CERTIFICATE-----Generated at Wed Dec 17 13:44:02 2025 by rpki-client