This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json) Hash identifier: zzslNiE+LBGGrKZcWVNIUtRHAwkmf3/sieeKeokvYMU= Subject key identifier: 0C:E8:E4:65:81:36:D6:CF:59:8B:1D:E0:3E:EE:4A:57:9B:A3:DC:7D Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58 Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758 Certificate serial: 019AF208C17D16592EC6AF5EFE71FE6D0C30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft Manifest number: 15E2 Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: 3jtmNH1oAciu2L4ju13TEfknBlCL4cY+Hy5zpL85vNA=) 2: D7sSJq2EzuylXPTSVOWPxBm3Ho8.roa (hash: gmpCwmfjITdv8gtFNL4Zn9iouUW+u1PcPnCsYBgoNzM=) 3: efe5amh4jlMydhivq3OF5qbDCpI.roa (hash: 6iw2gnDcZP6ZZJX73WBgPOkeEQEpMVtjxP8058iyjOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c1:7d:16:59:2e:c6:af:5e:fe:71:fe:6d:0c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758 Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=0ce8e4658136d6cf598b1de03eee4a579ba3dc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a4:03:fc:14:d8:fe:9a:43:ab:1f:5f:79:35: 83:bd:c9:9e:40:cf:64:3a:1d:7e:b7:c2:d0:4b:4d: c1:7b:ff:06:e7:b1:68:3a:2c:00:c4:84:8d:e2:87: 18:34:61:8e:93:62:fb:86:f2:aa:c1:d8:0c:71:7c: 02:61:c2:eb:87:64:25:3c:36:21:e7:fb:26:7f:e5: e7:7f:b5:e7:fa:b6:44:b6:75:11:d4:27:13:f6:44: df:52:1f:82:53:b7:76:68:5d:f3:88:53:67:d8:58: d2:30:0e:5f:60:f7:6e:07:fc:aa:d8:6a:04:46:c8: 31:24:26:d7:c8:b3:f1:7c:29:ef:52:b9:54:e2:17: 2f:e5:91:b2:3c:be:2a:3e:62:3b:76:4b:a5:16:33: cc:dc:eb:ad:51:f6:3b:18:7c:0b:d7:61:c9:f6:ce: 49:82:47:a8:96:6d:96:1b:44:61:69:3a:de:d0:b4: 5d:2e:f9:67:a4:46:a0:af:be:74:28:aa:f4:20:5c: 0a:82:29:80:bb:af:ad:89:37:f9:e2:77:15:b1:d5: 05:e2:71:55:71:7e:a5:16:3b:bf:45:d3:75:9d:94: fc:97:e6:a3:a2:0b:8b:64:57:56:6f:ed:ed:18:91: f3:8c:be:d4:c7:a3:78:5d:09:59:87:ac:30:0a:6e: 4f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E8:E4:65:81:36:D6:CF:59:8B:1D:E0:3E:EE:4A:57:9B:A3:DC:7D X509v3 Authority Key Identifier: keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:cb:6e:87:ca:e6:03:00:dc:cf:d0:04:e4:26:10:42:fc:15: c9:60:1e:50:5a:3d:af:3e:24:7c:46:25:f5:cd:9e:f8:9c:fa: 3b:c0:be:80:9c:6a:a2:5d:fc:a5:47:be:7d:7b:38:c8:4d:9f: 1e:fc:ce:c8:a4:b6:eb:50:0f:71:2f:4d:bc:d3:a6:e5:48:d6: cb:00:39:6b:7d:6a:08:5a:14:bf:7b:8a:8e:f3:09:4b:50:be: 80:ca:2f:b4:07:c4:06:f7:38:f1:d7:6c:cf:33:6c:b9:aa:cc: c7:57:26:d7:75:5e:f5:10:d2:f7:ee:c8:9b:e1:8c:bc:28:1a: e1:97:4d:7a:4b:5d:1e:50:11:ee:d3:14:4f:7f:38:04:5c:c8: 5a:50:3c:d3:69:83:54:09:31:a6:17:2c:27:0c:06:bf:02:3e: 3e:60:3f:96:63:2e:49:aa:44:09:06:2b:2a:f4:7b:35:3c:5c: fe:97:c4:c0:22:08:0e:bb:b2:ba:2e:65:80:9e:e7:19:32:60: 29:aa:1b:a0:16:c6:54:87:f7:f2:b8:dc:03:fd:a3:61:f2:c6: 1b:e3:7d:ba:b6:9a:b2:fe:d4:9f:89:c5:8f:f8:e3:4d:f3:e0: ed:c9:65:0b:b4:12:3e:50:a0:93:9b:ea:a5:97:b7:8f:da:e5: 94:62:55:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMF9Flkuxq9e/nH+bQwwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOWE3ZjdmZGQ1NGExN2NlNWUxMmE0MTgyZWI2NTI0Nzlm OWQ3NTgwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD EygwY2U4ZTQ2NTgxMzZkNmNmNTk4YjFkZTAzZWVlNGE1NzliYTNkYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aQD/BTY/ppDqx9feTWDvcmeQM9k Oh1+t8LQS03Be/8G57FoOiwAxISN4ocYNGGOk2L7hvKqwdgMcXwCYcLrh2QlPDYh 5/smf+Xnf7Xn+rZEtnUR1CcT9kTfUh+CU7d2aF3ziFNn2FjSMA5fYPduB/yq2GoE RsgxJCbXyLPxfCnvUrlU4hcv5ZGyPL4qPmI7dkulFjPM3OutUfY7GHwL12HJ9s5J gkeolm2WG0RhaTre0LRdLvlnpEagr750KKr0IFwKgimAu6+tiTf54ncVsdUF4nFV cX6lFju/RdN1nZT8l+ajoguLZFdWb+3tGJHzjL7Ux6N4XQlZh6wwCm5PGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzo5GWBNtbPWYsd4D7uSlebo9x9MB8GA1UdIwQY MBaAFNCaf3/dVKF85eEqQYLrZSR5+ddYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgt NTg3NWE0NDg5ZGJhLzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgtNTg3NWE0NDg5ZGJh LzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMtuh8rm AwDcz9AE5CYQQvwVyWAeUFo9rz4kfEYl9c2e+Jz6O8C+gJxqol38pUe+fXs4yE2f HvzOyKS261APcS9NvNOm5UjWywA5a31qCFoUv3uKjvMJS1C+gMovtAfEBvc48dds zzNsuarMx1cm13Ve9RDS9+7Im+GMvCga4ZdNektdHlAR7tMUT384BFzIWlA802mD VAkxphcsJwwGvwI+PmA/lmMuSapECQYrKvR7NTxc/pfEwCIIDruyui5lgJ7nGTJg KaoboBbGVIf38rjcA/2jYfLGG+N9uraasv7Un4nFj/jjTfPg7cllC7QSPlCgk5vq pZe3j9rllGJVLg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:16:35 2025 by rpki-client