This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft File: 0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft (raw, json) Hash identifier: W476N9JqIu4oQGIMb5ITq9WCfsmNqX4OWRu/I3HSK8A= Subject key identifier: 35:60:74:DF:66:43:A4:C4:02:27:9B:AA:EF:33:29:A3:05:AD:31:05 Authority key identifier: D2:D4:BD:71:A4:3D:8C:DD:46:2A:61:EE:E0:D9:47:00:C7:E6:42:5F Certificate issuer: /CN=d2d4bd71a43d8cdd462a61eee0d94700c7e6425f Certificate serial: 019AF0BF82829C9BA425666EA461C817673E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft Manifest number: DB Signing time: Fri 05 Dec 2025 23:01:13 +0000 Manifest this update: Fri 05 Dec 2025 23:01:13 +0000 Manifest next update: Sat 06 Dec 2025 23:01:13 +0000 Files and hashes: 1: 0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl (hash: M4vdAYo9Nds/JTHNdyBBf/EWLIQhvlH9OCRmMDxxTm4=) 2: KKgMs-wElUJViKwmcf1fvk9lnVM.roa (hash: J4sRQGzBOdgtJ9HehK5V6sdntDrbSLepduIzznR8wJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:82:82:9c:9b:a4:25:66:6e:a4:61:c8:17:67:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2d4bd71a43d8cdd462a61eee0d94700c7e6425f Validity Not Before: Dec 5 23:01:13 2025 GMT Not After : Dec 6 23:01:13 2025 GMT Subject: CN=356074df6643a4c402279baaef3329a305ad3105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:d3:a4:00:f3:79:60:dd:99:fb:27:3b:b5: 4b:60:0d:e4:b8:81:52:d3:b6:23:ad:81:ce:32:f6: 6e:1f:7c:f1:11:56:c2:24:4c:f6:c4:ff:94:f4:4a: 22:5a:22:35:96:df:20:f4:dd:04:24:bc:8e:f0:8d: 47:a4:ae:92:b9:85:e5:da:dc:78:88:d9:9b:f4:5a: f5:35:70:30:ac:c7:4a:ce:92:93:65:4d:06:d6:e6: f1:a5:40:51:c4:dd:40:47:b1:dc:a8:14:a9:01:2c: 97:1c:bb:65:d7:29:44:9f:70:e7:2c:33:bc:39:55: 60:eb:65:4b:18:54:13:91:99:01:f1:20:c8:fb:51: 20:42:a7:ac:ba:15:b0:61:91:86:05:01:2e:cc:d7: 73:57:43:39:91:41:20:bf:7b:ae:8e:7c:53:ed:17: 8b:03:b9:43:3b:68:93:9c:ad:17:e6:16:9f:46:c2: be:27:40:a9:c1:48:05:1b:fc:14:54:a1:03:a4:5b: 6e:f9:d0:47:70:1d:07:84:06:bf:4c:12:94:bb:7f: 9f:52:8f:3b:bb:ca:df:e9:e2:8c:60:fa:b1:c7:da: ed:c3:93:d7:48:15:2e:bd:5e:c2:15:2b:bf:bd:77: a9:94:ff:8c:e3:98:09:4b:f6:2c:03:f7:30:98:67: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:60:74:DF:66:43:A4:C4:02:27:9B:AA:EF:33:29:A3:05:AD:31:05 X509v3 Authority Key Identifier: keyid:D2:D4:BD:71:A4:3D:8C:DD:46:2A:61:EE:E0:D9:47:00:C7:E6:42:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:f5:9e:06:62:80:ef:ca:47:27:87:02:b4:11:d0:d7:17:41: 5e:f5:4b:48:36:70:41:df:c6:dc:49:ea:25:c8:02:48:82:11: 39:4e:15:75:16:56:bb:37:ce:6c:04:51:ee:4e:20:61:50:d8: 67:41:14:d0:3b:41:aa:a0:88:ee:1e:4c:bf:47:70:5d:93:df: e2:be:80:b6:9c:b9:d8:a0:d7:e1:82:b5:b6:52:4c:d3:be:9a: 4d:e2:9e:f2:a8:13:c5:4b:67:0e:85:47:6d:93:2d:b5:e1:f3: e3:e7:ce:0c:2e:e8:35:91:a8:f3:74:3a:1e:f1:0c:17:10:31: 96:c7:03:5f:1a:a4:2b:2d:2a:dc:00:19:bc:15:43:94:ba:34: 62:78:b3:49:aa:6c:22:0f:c3:0a:95:cc:86:a6:5d:87:92:74: 1f:ea:b7:37:fa:ac:66:c8:98:dc:a0:18:2d:fd:dc:4d:da:ba: e5:01:48:89:f9:d6:24:f9:07:fe:4e:6b:df:0a:9b:f2:a9:00: cd:3c:85:42:53:56:28:9a:05:89:73:5d:93:84:f8:0e:95:78: 50:70:3a:92:c3:11:e7:55:b2:c8:50:32:1b:a6:f5:47:de:27: 7a:46:f7:ef:9c:8e:d9:2b:f7:6d:1c:75:6a:da:e1:1b:7e:67: 5f:04:74:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4KCnJukJWZupGHIF2c+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZDRiZDcxYTQzZDhjZGQ0NjJhNjFlZWUwZDk0NzAwYzdl NjQyNWYwHhcNMjUxMjA1MjMwMTEzWhcNMjUxMjA2MjMwMTEzWjAzMTEwLwYDVQQD EygzNTYwNzRkZjY2NDNhNGM0MDIyNzliYWFlZjMzMjlhMzA1YWQzMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQHTpADzeWDdmfsnO7VLYA3kuIFS 07YjrYHOMvZuH3zxEVbCJEz2xP+U9EoiWiI1lt8g9N0EJLyO8I1HpK6SuYXl2tx4 iNmb9Fr1NXAwrMdKzpKTZU0G1ubxpUBRxN1AR7HcqBSpASyXHLtl1ylEn3DnLDO8 OVVg62VLGFQTkZkB8SDI+1EgQqesuhWwYZGGBQEuzNdzV0M5kUEgv3uujnxT7ReL A7lDO2iTnK0X5hafRsK+J0CpwUgFG/wUVKEDpFtu+dBHcB0HhAa/TBKUu3+fUo87 u8rf6eKMYPqxx9rtw5PXSBUuvV7CFSu/vXeplP+M45gJS/YsA/cwmGeN7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVgdN9mQ6TEAiebqu8zKaMFrTEFMB8GA1UdIwQY MBaAFNLUvXGkPYzdRiph7uDZRwDH5kJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHRTOWNhUTlqTjFHS21IdTRObEhBTWZtUWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MWRkMDAtYjU3Yi00NjM4LWEwOGIt Njg1M2M0MWNhMDNlLzEvMHRTOWNhUTlqTjFHS21IdTRObEhBTWZtUWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80MWRkMDAtYjU3Yi00NjM4LWEwOGItNjg1M2M0MWNhMDNl LzEvMHRTOWNhUTlqTjFHS21IdTRObEhBTWZtUWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyfWeBmKA 78pHJ4cCtBHQ1xdBXvVLSDZwQd/G3EnqJcgCSIIROU4VdRZWuzfObARR7k4gYVDY Z0EU0DtBqqCI7h5Mv0dwXZPf4r6Atpy52KDX4YK1tlJM076aTeKe8qgTxUtnDoVH bZMtteHz4+fODC7oNZGo83Q6HvEMFxAxlscDXxqkKy0q3AAZvBVDlLo0YnizSaps Ig/DCpXMhqZdh5J0H+q3N/qsZsiY3KAYLf3cTdq65QFIifnWJPkH/k5r3wqb8qkA zTyFQlNWKJoFiXNdk4T4DpV4UHA6ksMR51WyyFAyG6b1R94nekb375yO2Sv3bRx1 atrhG35nXwR0Rw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:55 2025 by rpki-client