This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json) Hash identifier: 5oCnTJKfm62Y0ZpUaUuuf5/hchNe8EB3d4+MqkHD94k= Subject key identifier: 8B:11:7D:42:B7:0F:67:35:62:A9:63:7D:3B:4A:A0:03:71:7E:2D:6D Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb Certificate serial: 019AF12E3DACBEE84A6EC4E130E61D64ECAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft Manifest number: 1660 Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: V6YJvOPCrw/ceDOLmXjT7N//HY+vwR+nOq3sR605bbs=) 2: RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa (hash: mZqoFIWYuSZ97LTT9lIF7CSJPGIZ96DKu7+NicnF+sU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3d:ac:be:e8:4a:6e:c4:e1:30:e6:1d:64:ec:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=8b117d42b70f673562a9637d3b4aa003717e2d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6b:fc:6f:bc:03:00:3a:f1:b0:78:37:d3:a9: bb:a4:70:94:7d:0a:da:c8:59:b4:0f:74:42:51:78: e6:a7:02:cc:c6:53:f5:1e:6d:7b:1c:a9:d3:b3:e1: b8:75:c0:03:69:b0:c2:8e:71:72:72:55:04:61:3b: 19:e6:b8:3e:3a:2b:61:0f:40:16:66:4a:2f:11:db: a8:cc:e4:a2:61:91:84:b6:06:30:21:07:20:91:05: ad:cc:6c:23:c7:ff:e7:cd:f2:79:b1:12:00:be:a1: 62:d6:ff:d6:45:08:77:67:f7:ca:52:ba:a5:29:a5: e4:c9:eb:ec:0b:01:ea:f1:59:c0:20:c7:f9:71:ff: ac:e5:e5:d4:65:a4:79:66:fd:93:ac:07:09:74:81: 79:19:5d:9c:17:6f:3b:f7:e8:5c:50:0d:14:6e:f9: f8:6d:0f:91:cc:62:23:d5:0c:61:07:87:9e:37:c5: 8c:b1:61:b0:81:e6:23:d1:a0:73:a7:d0:bc:1d:26: 6e:39:57:41:13:8a:af:1f:0b:6a:ec:44:a6:02:b1: 89:42:4f:61:b1:52:4b:d0:cd:95:60:dd:45:8f:12: 17:03:e5:34:ff:28:88:94:ac:8d:10:b7:ae:8d:13: 06:e0:01:5d:0b:9d:9e:76:bb:16:cb:6b:99:20:62: db:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:11:7D:42:B7:0F:67:35:62:A9:63:7D:3B:4A:A0:03:71:7E:2D:6D X509v3 Authority Key Identifier: keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7c:bc:d7:2b:bc:a6:b8:ea:46:96:89:14:69:eb:b1:ab:9f: 14:5f:bb:09:99:95:cc:ec:c2:46:43:95:08:e7:19:32:75:f6: 52:f0:bb:56:7e:13:8b:16:6b:91:57:7d:bf:f8:12:0f:87:c9: ec:eb:55:3d:f9:9f:fc:3b:f5:40:8f:18:59:bd:d5:57:a3:02: b7:51:33:82:af:9f:66:14:09:2d:da:45:89:fe:59:f6:5e:2e: 5e:68:51:2d:ec:96:eb:d1:88:47:f4:c4:c4:3d:4f:3c:2c:ce: eb:aa:ed:0c:08:0d:81:f9:05:cc:e0:97:c9:65:93:bd:4d:75: cb:a6:c4:eb:05:84:33:c3:14:a5:9f:99:de:4e:55:53:0b:9d: 43:65:5a:ed:84:9c:84:3e:6f:5b:39:24:bf:5d:ec:4d:b0:bc: e4:79:f1:de:cb:46:30:9c:3c:67:20:d0:c8:33:0c:43:eb:2d: 94:4f:3c:6a:e2:00:62:cc:c1:a1:b6:21:3b:14:a4:8e:1e:d9: 36:12:ef:da:f7:3a:b1:18:db:7c:d1:09:ec:ff:f1:f5:26:08: de:65:b5:0b:e6:71:0d:0f:cd:fe:59:88:ee:34:20:0c:cc:a5: 16:1e:a2:33:8c:de:a1:b4:35:11:44:fe:18:96:f3:79:16:ce: d6:93:f8:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLj2svuhKbsThMOYdZOyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOGZjYmRmNTcyYmNhZjkzZTE1NDRkZTEwYTE3NmNiMzAx MTA2YmIwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD Eyg4YjExN2Q0MmI3MGY2NzM1NjJhOTYzN2QzYjRhYTAwMzcxN2UyZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92v8b7wDADrxsHg306m7pHCUfQra yFm0D3RCUXjmpwLMxlP1Hm17HKnTs+G4dcADabDCjnFyclUEYTsZ5rg+OithD0AW ZkovEduozOSiYZGEtgYwIQcgkQWtzGwjx//nzfJ5sRIAvqFi1v/WRQh3Z/fKUrql KaXkyevsCwHq8VnAIMf5cf+s5eXUZaR5Zv2TrAcJdIF5GV2cF2879+hcUA0Ubvn4 bQ+RzGIj1QxhB4eeN8WMsWGwgeYj0aBzp9C8HSZuOVdBE4qvHwtq7ESmArGJQk9h sVJL0M2VYN1FjxIXA+U0/yiIlKyNELeujRMG4AFdC52edrsWy2uZIGLbUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsRfUK3D2c1YqljfTtKoANxfi1tMB8GA1UdIwQY MBaAFNKPy99XK8r5PhVE3hChdsswEQa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTIt MGZlODM5OWRlNzI3LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTItMGZlODM5OWRlNzI3 LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXy81yu8 prjqRpaJFGnrsaufFF+7CZmVzOzCRkOVCOcZMnX2UvC7Vn4TixZrkVd9v/gSD4fJ 7OtVPfmf/Dv1QI8YWb3VV6MCt1Ezgq+fZhQJLdpFif5Z9l4uXmhRLeyW69GIR/TE xD1PPCzO66rtDAgNgfkFzOCXyWWTvU11y6bE6wWEM8MUpZ+Z3k5VUwudQ2Va7YSc hD5vWzkkv13sTbC85Hnx3stGMJw8ZyDQyDMMQ+stlE88auIAYszBobYhOxSkjh7Z NhLv2vc6sRjbfNEJ7P/x9SYI3mW1C+ZxDQ/N/lmI7jQgDMylFh6iM4zeobQ1EUT+ GJbzeRbO1pP4uQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:49:12 2025 by rpki-client