This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json) Hash identifier: P1LK24N3iZnMRpeIQr6VH3Cqmr7DRQ6NtxgsFjhhorE= Subject key identifier: 45:64:8F:EC:FA:28:0E:43:7C:92:29:A7:C1:63:C8:47:3A:10:87:A0 Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb Certificate serial: 019B34C5B858B544C61F77318030245FDEA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft Manifest number: 1683 Signing time: Fri 19 Dec 2025 04:02:11 +0000 Manifest this update: Fri 19 Dec 2025 04:02:11 +0000 Manifest next update: Sat 20 Dec 2025 04:02:11 +0000 Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: gsplTTjQrN6zpNgDTQTBG0B+1FX2RGcyxmDFvn9CL7Y=) 2: RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa (hash: mZqoFIWYuSZ97LTT9lIF7CSJPGIZ96DKu7+NicnF+sU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:b8:58:b5:44:c6:1f:77:31:80:30:24:5f:de:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb Validity Not Before: Dec 19 04:02:11 2025 GMT Not After : Dec 20 04:02:11 2025 GMT Subject: CN=45648fecfa280e437c9229a7c163c8473a1087a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:76:58:33:bb:1b:bf:76:66:5b:6f:d8:1c: 0b:4a:5a:26:10:94:2e:35:8e:35:f3:ed:da:4a:2f: 3a:6a:6e:45:91:d6:00:00:42:1c:4b:30:e1:84:b1: 7d:9d:2a:c2:4f:a3:34:71:74:30:91:da:39:6d:1e: 9b:5e:1e:ef:f4:be:86:d4:b3:a5:b6:bb:28:dd:1c: 35:11:33:c6:66:d9:39:d8:32:7d:0c:26:b0:28:ab: 51:f9:1e:17:c1:d4:12:bf:44:b4:3d:a9:28:04:46: 5f:37:1c:a0:09:30:f6:fe:2b:7c:94:53:f2:a5:61: 43:ef:8e:2e:b7:c9:78:53:85:5b:ce:1a:38:a5:77: a4:d0:9b:cc:2d:8c:45:ee:96:bf:16:88:d0:58:55: 74:0f:97:35:32:72:a4:78:12:e0:73:2d:44:3e:fc: 15:9f:0f:1d:a2:96:57:ec:58:69:82:6b:eb:74:78: 39:8f:55:30:ef:17:b8:c8:dd:45:bb:46:01:fb:2c: 2f:f8:aa:f3:2b:35:12:84:9d:38:96:77:af:76:c0: 6c:08:a4:5f:0b:4c:f7:c2:04:47:18:37:f4:40:c2: 32:49:65:da:c4:62:38:a9:c0:25:38:53:b4:de:2e: 45:b0:84:fd:f5:af:e2:ec:77:fd:82:6a:fe:f1:f2: 6f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:64:8F:EC:FA:28:0E:43:7C:92:29:A7:C1:63:C8:47:3A:10:87:A0 X509v3 Authority Key Identifier: keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:fe:83:09:d2:3b:44:bd:0f:d4:0c:bf:d5:a2:3d:bf:5d:89: d5:e2:ab:c3:59:35:f9:3d:24:20:d6:69:17:86:59:2f:80:0c: 5f:3f:a6:93:43:7c:15:5f:3b:ff:23:be:6b:33:77:89:7b:89: 86:31:dc:d0:db:c8:2f:c6:85:e3:50:a8:96:05:9a:0c:56:7f: b6:fa:72:06:7f:32:4d:91:99:16:85:43:d0:3d:ca:85:5d:fe: 5d:f6:5d:bc:9d:c1:0a:5d:07:bd:4d:50:de:ec:58:c5:07:1a: df:46:0b:96:2c:84:62:7a:aa:53:c9:14:a4:50:dd:00:d0:62: 90:2f:42:f0:02:38:aa:33:e4:75:a1:cc:40:2f:90:21:2a:96: 17:2b:b0:39:8e:fc:bb:b5:a1:05:05:5b:5b:a7:85:c9:7d:5b: a8:f4:27:40:60:3b:7d:41:e8:a3:0c:ac:8b:a1:eb:8a:41:5c: 96:88:a4:88:dc:06:a7:53:29:5e:58:3d:12:2b:9a:93:8b:fe: 1f:cc:af:c0:15:64:cd:50:b2:78:92:75:83:d3:fc:2d:13:09: 73:59:fd:8a:52:f9:09:7d:38:db:a4:d3:16:67:ff:45:06:81: 14:14:fb:72:55:11:32:3c:a2:a6:a7:73:60:e4:cc:03:eb:2f: 26:81:b8:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xbhYtUTGH3cxgDAkX96oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOGZjYmRmNTcyYmNhZjkzZTE1NDRkZTEwYTE3NmNiMzAx MTA2YmIwHhcNMjUxMjE5MDQwMjExWhcNMjUxMjIwMDQwMjExWjAzMTEwLwYDVQQD Eyg0NTY0OGZlY2ZhMjgwZTQzN2M5MjI5YTdjMTYzYzg0NzNhMTA4N2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz92WDO7G792Zltv2BwLSlomEJQu NY418+3aSi86am5FkdYAAEIcSzDhhLF9nSrCT6M0cXQwkdo5bR6bXh7v9L6G1LOl trso3Rw1ETPGZtk52DJ9DCawKKtR+R4XwdQSv0S0PakoBEZfNxygCTD2/it8lFPy pWFD744ut8l4U4Vbzho4pXek0JvMLYxF7pa/FojQWFV0D5c1MnKkeBLgcy1EPvwV nw8dopZX7FhpgmvrdHg5j1Uw7xe4yN1Fu0YB+ywv+KrzKzUShJ04lnevdsBsCKRf C0z3wgRHGDf0QMIySWXaxGI4qcAlOFO03i5FsIT99a/i7Hf9gmr+8fJvOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVkj+z6KA5DfJIpp8FjyEc6EIegMB8GA1UdIwQY MBaAFNKPy99XK8r5PhVE3hChdsswEQa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTIt MGZlODM5OWRlNzI3LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTItMGZlODM5OWRlNzI3 LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVf6DCdI7 RL0P1Ay/1aI9v12J1eKrw1k1+T0kINZpF4ZZL4AMXz+mk0N8FV87/yO+azN3iXuJ hjHc0NvIL8aF41ColgWaDFZ/tvpyBn8yTZGZFoVD0D3KhV3+XfZdvJ3BCl0HvU1Q 3uxYxQca30YLliyEYnqqU8kUpFDdANBikC9C8AI4qjPkdaHMQC+QISqWFyuwOY78 u7WhBQVbW6eFyX1bqPQnQGA7fUHoowysi6HrikFcloikiNwGp1MpXlg9Eiuak4v+ H8yvwBVkzVCyeJJ1g9P8LRMJc1n9ilL5CX0426TTFmf/RQaBFBT7clURMjyipqdz YOTMA+svJoG4hg== -----END CERTIFICATE-----Generated at Fri Dec 19 05:43:35 2025 by rpki-client