This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft File: 0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json) Hash identifier: abhDW1GPZ+Hha8tZuJZ/0tdcBezsrwZaJY+QSqT/yfI= Subject key identifier: 3E:6E:CA:15:7B:7F:65:46:EA:DD:DB:28:90:46:DB:8B:97:D6:43:0C Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E Certificate issuer: /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e Certificate serial: 019B2B53A7A70DC01059E1C67B1BC45C7591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 08:01:01 +0000 Manifest this update: Wed 17 Dec 2025 08:01:01 +0000 Manifest next update: Thu 18 Dec 2025 08:01:01 +0000 Files and hashes: 1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: SzDwek/PPM7gBhvhwgMgRWTc63dpsnp2FM2qvszCBCk=) 2: 814d1F1Lpiv2ZmQt3nv-Q0MhR14.roa (hash: vJZyCty8aaf+QpA3OskD2b+GSFI6e+26K8I9XWLd+A4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:a7:a7:0d:c0:10:59:e1:c6:7b:1b:c4:5c:75:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e Validity Not Before: Dec 17 08:01:01 2025 GMT Not After : Dec 18 08:01:01 2025 GMT Subject: CN=3e6eca157b7f6546eadddb289046db8b97d6430c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:d7:b0:95:b2:60:e5:96:89:19:6f:00:c4: 77:c8:fb:81:11:63:46:ff:a1:ab:da:a8:12:8a:07: da:b0:ee:e4:b0:48:99:65:12:b1:8f:c7:57:67:5b: 91:c4:ce:7c:fc:45:e2:c5:4b:63:4d:a1:ea:de:9e: 4d:e2:87:db:02:4a:1d:94:fd:71:82:a3:8b:cc:16: 35:1a:26:71:d4:83:f6:e4:93:55:01:0e:0c:46:7f: dc:6f:9e:10:0f:39:bf:dd:b8:83:a6:d0:41:c2:18: cb:53:5b:5a:04:84:4c:7d:7c:03:e7:b2:44:5e:ba: 67:76:43:d9:ee:13:14:71:3d:e6:43:2f:ce:5f:e1: 2f:0d:33:ac:82:29:ed:b5:8b:8a:d5:9b:85:d1:e4: b8:18:17:20:6a:7b:6c:4f:b9:bf:89:07:84:db:24: f8:a5:81:bb:96:2c:7a:91:79:95:ca:89:f3:2e:d7: b4:58:02:19:53:2e:d3:82:b8:89:d1:57:39:c3:e9: 7d:b5:ac:cc:fd:06:3c:3a:4a:ea:59:c6:e6:b8:85: 0e:0e:2f:d3:42:6d:70:bf:83:96:cf:96:5f:a5:ee: 59:f1:7c:a1:7b:f1:3c:19:de:dd:45:58:b7:88:91: fe:67:bd:55:3e:03:94:e4:8c:ef:61:db:db:98:a1: 5d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6E:CA:15:7B:7F:65:46:EA:DD:DB:28:90:46:DB:8B:97:D6:43:0C X509v3 Authority Key Identifier: keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:bf:b7:7b:66:bf:30:fb:33:bd:1f:d0:52:41:0f:f7:9b:e0: 4a:4b:38:50:97:62:59:36:7a:e6:d1:04:8a:ae:d1:f0:d5:78: 67:f9:32:04:94:d4:4d:8a:1f:06:c4:b9:7b:68:16:7b:2e:52: 67:cf:5c:70:4b:94:2e:f3:77:b7:e0:55:1a:a7:c6:46:9b:69: fb:c1:be:c0:50:b1:7e:e7:82:a8:aa:df:c7:91:02:0f:76:7f: 28:7b:ee:d9:16:3d:b6:26:39:ec:13:13:65:6c:4a:df:a9:07: 71:4e:b6:92:9c:e9:6f:6d:35:b8:b4:a1:42:cd:9a:28:fc:15: 63:b0:8c:44:83:71:da:6c:c6:4b:c5:56:97:bc:66:b8:31:62: cd:3c:49:85:2e:bd:31:5a:58:64:c4:07:25:a4:76:1b:f5:fd: 11:79:e7:1b:aa:05:01:e0:b8:56:32:40:5c:5f:4d:9f:d7:7c: 20:94:02:78:e8:9f:d5:8b:7d:2e:cb:65:25:98:b8:d4:f7:24: 06:d8:8c:e1:1e:45:20:3b:ec:b1:f4:a8:68:48:87:03:1e:b1: 5a:c7:1b:6b:ec:40:f1:4c:45:54:4d:56:f8:26:fe:80:42:0b: a7:b8:bf:78:cb:23:68:4c:a7:50:44:a8:55:f9:11:04:7a:8f: c7:ad:c4:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU6enDcAQWeHGexvEXHWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZThkNGNiOGU0NDJlYzM4YTZiYzNmYTQwMGEyYTUxN2Nl ZTBkMWUwHhcNMjUxMjE3MDgwMTAxWhcNMjUxMjE4MDgwMTAxWjAzMTEwLwYDVQQD EygzZTZlY2ExNTdiN2Y2NTQ2ZWFkZGRiMjg5MDQ2ZGI4Yjk3ZDY0MzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuArXsJWyYOWWiRlvAMR3yPuBEWNG /6Gr2qgSigfasO7ksEiZZRKxj8dXZ1uRxM58/EXixUtjTaHq3p5N4ofbAkodlP1x gqOLzBY1GiZx1IP25JNVAQ4MRn/cb54QDzm/3biDptBBwhjLU1taBIRMfXwD57JE XrpndkPZ7hMUcT3mQy/OX+EvDTOsginttYuK1ZuF0eS4GBcgantsT7m/iQeE2yT4 pYG7lix6kXmVyonzLte0WAIZUy7TgriJ0Vc5w+l9tazM/QY8OkrqWcbmuIUODi/T Qm1wv4OWz5Zfpe5Z8Xyhe/E8Gd7dRVi3iJH+Z71VPgOU5IzvYdvbmKFdZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5uyhV7f2VG6t3bKJBG24uX1kMMMB8GA1UdIwQY MBaAFNPo1MuORC7DimvD+kAKKlF87g0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYt NWQ1ODcxMWYzNjYyLzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYtNWQ1ODcxMWYzNjYy LzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt7+3e2a/ MPszvR/QUkEP95vgSks4UJdiWTZ65tEEiq7R8NV4Z/kyBJTUTYofBsS5e2gWey5S Z89ccEuULvN3t+BVGqfGRptp+8G+wFCxfueCqKrfx5ECD3Z/KHvu2RY9tiY57BMT ZWxK36kHcU62kpzpb201uLShQs2aKPwVY7CMRINx2mzGS8VWl7xmuDFizTxJhS69 MVpYZMQHJaR2G/X9EXnnG6oFAeC4VjJAXF9Nn9d8IJQCeOif1Yt9LstlJZi41Pck BtiM4R5FIDvssfSoaEiHAx6xWscba+xA8UxFVE1W+Cb+gEILp7i/eMsjaEynUESo VfkRBHqPx63Eaw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:29:38 2025 by rpki-client