This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json) Hash identifier: s6mZc9pDxRcDR88RtrBL0nIi/UmbVwyxjXGVdKjhHuo= Subject key identifier: 16:40:95:C2:C8:AE:27:45:D8:E1:0A:FD:92:C6:B9:23:E3:74:F7:A8 Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d Certificate serial: 019AF208F013C3CFB341DA97DA672928AA58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft Manifest number: 0B66 Signing time: Sat 06 Dec 2025 05:01:03 +0000 Manifest this update: Sat 06 Dec 2025 05:01:03 +0000 Manifest next update: Sun 07 Dec 2025 05:01:03 +0000 Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: AVWW7yiwTgsuFPllU88PKjT5rvquFUh4WYuDGPjDem0=) 2: PdXLVimBA8zILWLashg1LUqBqm8.roa (hash: IrtzMysR6KSQR0SZiM1b2jUK5M57dKBFlK4qFH4B+Mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f0:13:c3:cf:b3:41:da:97:da:67:29:28:aa:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d Validity Not Before: Dec 6 05:01:03 2025 GMT Not After : Dec 7 05:01:03 2025 GMT Subject: CN=164095c2c8ae2745d8e10afd92c6b923e374f7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:87:d7:a5:b8:93:9d:84:11:04:83:88:a1:2b: 50:27:16:83:d3:bb:b7:3e:8d:98:70:3f:4f:49:4f: db:dc:84:d1:9e:df:6d:86:76:5b:92:d7:17:8e:fc: 46:20:a2:09:1e:89:75:7f:b4:dd:24:7c:f7:06:11: 3b:53:48:14:8c:d2:fe:a4:ef:b6:0c:0c:d8:a2:a7: 4a:9a:e3:6e:e6:15:16:12:47:ed:e5:d5:fd:36:99: a1:9c:5b:b8:c4:2a:a4:7f:c9:60:e5:73:e2:b5:40: cd:3e:c5:ab:e5:69:77:38:c8:c9:76:15:f9:cc:c2: 3a:8a:72:41:c4:97:6b:a4:07:57:d9:73:11:db:ec: 7d:95:a5:7b:01:a4:72:c5:fe:5b:56:ab:60:21:65: 53:1b:0b:72:b3:07:01:a2:84:d4:6d:2d:9d:55:05: 73:b8:e4:d5:98:4e:cd:fc:37:4a:dd:a3:89:17:9d: 01:85:9e:1f:08:d6:8a:fa:1b:55:94:5c:88:22:fd: f6:e9:a4:3e:39:76:8e:b4:20:1c:3a:0b:2a:79:e3: 8a:1d:c5:32:d8:8f:12:3e:43:c8:15:2d:2a:bf:4d: 32:59:a2:a5:99:b3:7f:63:e0:c8:22:45:82:ea:ae: 0d:e4:9a:a7:44:bd:ee:38:a6:ea:f2:b4:11:c5:f8: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:40:95:C2:C8:AE:27:45:D8:E1:0A:FD:92:C6:B9:23:E3:74:F7:A8 X509v3 Authority Key Identifier: keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:5b:63:9f:e9:56:5f:4d:04:25:42:30:7c:ad:74:8a:7c:03: 30:73:cb:87:2e:76:fd:6c:e5:e6:27:dc:19:85:5b:64:c0:64: 09:11:3e:5b:89:c3:03:ee:c5:2a:11:08:33:07:81:11:07:55: 1a:39:2a:58:6e:bf:b6:93:a4:35:43:c0:55:42:ab:c1:82:b2: e9:55:61:c4:8f:23:ce:39:09:30:49:78:ce:3a:46:93:ab:3e: 1d:4e:99:86:11:c0:fe:28:ca:06:c9:1e:37:ba:83:32:ab:8a: 22:87:9c:6d:a4:aa:9b:4e:11:d7:41:40:d3:db:26:e5:67:23: 4e:7d:bf:95:0b:84:46:1a:0a:48:3a:a3:e2:50:40:ec:8f:7f: 3c:15:46:d8:4e:aa:d2:dd:2b:ce:2b:d0:cb:a4:a2:24:8b:6f: 99:67:84:4e:cc:a1:ce:11:b9:08:c0:c7:82:f6:bb:c5:6a:f3: 53:b2:31:9f:7a:63:a5:3b:00:d5:58:50:78:46:7a:0b:ed:60: af:82:1b:a2:3a:72:1d:ef:53:b6:b9:c7:30:86:b2:08:cf:e5: 78:be:26:9b:db:b7:f2:45:60:c8:dc:24:50:c5:70:4d:69:b6: 45:fa:52:c5:d1:62:e5:82:b6:94:34:5a:01:00:3a:72:f9:c8: f0:8c:4f:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPATw8+zQdqX2mcpKKpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyN2I4NzdmODk5MzQxMjY5YmVjNjdjNmUzYTBhODg4YmE3 YWU5OGQwHhcNMjUxMjA2MDUwMTAzWhcNMjUxMjA3MDUwMTAzWjAzMTEwLwYDVQQD EygxNjQwOTVjMmM4YWUyNzQ1ZDhlMTBhZmQ5MmM2YjkyM2UzNzRmN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuofXpbiTnYQRBIOIoStQJxaD07u3 Po2YcD9PSU/b3ITRnt9thnZbktcXjvxGIKIJHol1f7TdJHz3BhE7U0gUjNL+pO+2 DAzYoqdKmuNu5hUWEkft5dX9NpmhnFu4xCqkf8lg5XPitUDNPsWr5Wl3OMjJdhX5 zMI6inJBxJdrpAdX2XMR2+x9laV7AaRyxf5bVqtgIWVTGwtyswcBooTUbS2dVQVz uOTVmE7N/DdK3aOJF50BhZ4fCNaK+htVlFyIIv326aQ+OXaOtCAcOgsqeeOKHcUy 2I8SPkPIFS0qv00yWaKlmbN/Y+DIIkWC6q4N5JqnRL3uOKbq8rQRxfiuEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZAlcLIridF2OEK/ZLGuSPjdPeoMB8GA1UdIwQY MBaAFNJ7h3+Jk0Emm+xnxuOgqIi6eumNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80NDVlZDAtNDhiMy00MDhlLWExYmMt OTk3OWRmNTJiMDE4LzEvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80NDVlZDAtNDhiMy00MDhlLWExYmMtOTk3OWRmNTJiMDE4 LzEvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1tjn+lW X00EJUIwfK10inwDMHPLhy52/Wzl5ifcGYVbZMBkCRE+W4nDA+7FKhEIMweBEQdV GjkqWG6/tpOkNUPAVUKrwYKy6VVhxI8jzjkJMEl4zjpGk6s+HU6ZhhHA/ijKBske N7qDMquKIoecbaSqm04R10FA09sm5WcjTn2/lQuERhoKSDqj4lBA7I9/PBVG2E6q 0t0rzivQy6SiJItvmWeETsyhzhG5CMDHgva7xWrzU7Ixn3pjpTsA1VhQeEZ6C+1g r4IbojpyHe9TtrnHMIayCM/leL4mm9u38kVgyNwkUMVwTWm2RfpSxdFi5YK2lDRa AQA6cvnI8IxPuw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:15 2025 by rpki-client