This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json) Hash identifier: k5UDtAQe1ilEq5bc240nN2PT+1iyzFl5+XGAg78mjF0= Subject key identifier: 62:27:78:C0:AD:26:CA:32:D8:7E:DE:7F:C4:3E:BC:CA:EF:B5:C2:F3 Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Certificate serial: 019B3CEB9A29BF435A8554485962DA9C411D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft Manifest number: 11C3 Signing time: Sat 20 Dec 2025 18:00:31 +0000 Manifest this update: Sat 20 Dec 2025 18:00:31 +0000 Manifest next update: Sun 21 Dec 2025 18:00:31 +0000 Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: RlRE/dLQvR93OsBhoN72ovBQKPFFHBVKwJCztdszNlQ=) 2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:9a:29:bf:43:5a:85:54:48:59:62:da:9c:41:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Validity Not Before: Dec 20 18:00:31 2025 GMT Not After : Dec 21 18:00:31 2025 GMT Subject: CN=622778c0ad26ca32d87ede7fc43ebccaefb5c2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:35:3f:ea:25:59:69:58:ae:0f:85:8a:2e:22: 4f:78:a8:8e:78:39:7f:fe:8c:df:fb:c4:8c:a1:2c: 06:ea:25:da:3f:28:2e:fb:cb:fb:1c:57:68:15:7e: 54:dc:24:66:31:85:31:2c:b4:e6:e2:51:8d:fa:eb: 36:72:46:0d:0f:e0:2b:c5:ba:e4:59:61:6c:85:8d: e3:2f:dc:85:ee:7c:75:dc:2f:e3:59:d4:38:9f:e2: 56:72:dc:d8:36:35:44:e9:f8:b3:e2:c9:6f:b5:03: 49:4c:3d:eb:76:f6:fc:4b:af:0b:c4:bf:94:2d:63: 65:ba:49:c7:43:8c:af:7f:30:d6:47:c4:6c:02:72: 11:a1:22:e7:63:90:25:60:1b:93:cb:4e:93:3b:7a: eb:ad:9d:98:4e:30:c7:b0:8a:ad:a7:ed:97:20:ac: c9:af:ea:6c:73:d5:83:7f:d6:c5:6e:d2:a1:46:80: 0b:bd:a6:14:1b:c0:3f:69:ec:f8:c9:81:59:4d:a1: cd:1e:19:74:ca:ac:39:33:12:37:f8:ab:f8:9b:c3: 1c:52:e7:1b:30:c6:07:c3:68:26:99:89:df:1a:c9: a0:0d:1f:3f:e7:18:1d:64:91:f3:83:92:40:5e:ae: 51:f9:54:5f:e7:65:2d:33:ed:2d:e1:5d:72:93:35: 1e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:27:78:C0:AD:26:CA:32:D8:7E:DE:7F:C4:3E:BC:CA:EF:B5:C2:F3 X509v3 Authority Key Identifier: keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:39:70:1a:d5:a6:b3:a7:0f:cb:80:cd:dc:ae:97:35:71:89: 26:00:dc:41:95:b6:25:1b:b7:c6:42:5a:ae:de:36:e2:ae:fa: 67:78:b2:9b:aa:1b:a3:c9:1a:75:2a:47:10:e4:7b:20:b6:4c: 91:c7:6f:dc:2f:fa:71:75:43:c1:b1:88:46:94:bf:d9:f3:13: 74:90:6f:ea:0c:92:29:42:ee:81:e2:9f:eb:2b:31:8a:62:a5: 5e:d1:37:e6:c9:c0:7e:74:31:e6:30:09:c5:b6:90:6a:6e:78: a2:89:fb:ca:76:d2:99:e1:aa:d2:dd:29:fa:ba:c5:8d:54:c5: 67:b7:63:37:fb:9b:9d:f7:34:9d:07:db:6d:c7:73:3f:3f:f2: 64:b3:5c:8c:78:3a:13:93:78:e1:c9:0d:0b:14:3c:70:29:9b: 28:4d:94:24:9c:99:f7:d8:1e:21:16:35:99:2d:13:19:99:c2: cd:b0:c5:4d:d0:ac:69:5f:ae:77:b9:3f:3e:46:27:7f:13:a7: be:4a:96:b9:dc:ff:6c:42:e6:c2:71:0e:81:f8:b4:6e:9b:c1: 2f:62:6a:37:03:cb:38:ec:80:df:ff:5b:47:98:0a:f0:8d:af: 13:4d:e2:ea:4b:0b:0b:85:b9:6e:ce:72:30:73:b0:7e:e4:ce: 23:09:f1:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs865opv0NahVRIWWLanEEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTE2YmY3ZTBlM2I5MzMwYjU0NDgzZTE5ZjYxM2IwMmI2 MjdiZWYwHhcNMjUxMjIwMTgwMDMxWhcNMjUxMjIxMTgwMDMxWjAzMTEwLwYDVQQD Eyg2MjI3NzhjMGFkMjZjYTMyZDg3ZWRlN2ZjNDNlYmNjYWVmYjVjMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzU/6iVZaViuD4WKLiJPeKiOeDl/ /ozf+8SMoSwG6iXaPygu+8v7HFdoFX5U3CRmMYUxLLTm4lGN+us2ckYND+Arxbrk WWFshY3jL9yF7nx13C/jWdQ4n+JWctzYNjVE6fiz4slvtQNJTD3rdvb8S68LxL+U LWNluknHQ4yvfzDWR8RsAnIRoSLnY5AlYBuTy06TO3rrrZ2YTjDHsIqtp+2XIKzJ r+psc9WDf9bFbtKhRoALvaYUG8A/aez4yYFZTaHNHhl0yqw5MxI3+Kv4m8McUucb MMYHw2gmmYnfGsmgDR8/5xgdZJHzg5JAXq5R+VRf52UtM+0t4V1ykzUeWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIneMCtJsoy2H7ef8Q+vMrvtcLzMB8GA1UdIwQY MBaAFNCha/fg47kzC1RIPhn2E7ArYnvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2Mt NGVmMDNjMTA4MWY4LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2MtNGVmMDNjMTA4MWY4 LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzlwGtWm s6cPy4DN3K6XNXGJJgDcQZW2JRu3xkJart424q76Z3iym6obo8kadSpHEOR7ILZM kcdv3C/6cXVDwbGIRpS/2fMTdJBv6gySKULugeKf6ysximKlXtE35snAfnQx5jAJ xbaQam54oon7ynbSmeGq0t0p+rrFjVTFZ7djN/ubnfc0nQfbbcdzPz/yZLNcjHg6 E5N44ckNCxQ8cCmbKE2UJJyZ99geIRY1mS0TGZnCzbDFTdCsaV+ud7k/PkYnfxOn vkqWudz/bELmwnEOgfi0bpvBL2JqNwPLOOyA3/9bR5gK8I2vE03i6ksLC4W5bs5y MHOwfuTOIwnxrQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:46:52 2025 by rpki-client