This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft File: D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json) Hash identifier: QxMF8rLfGrnc8LJ8729KE+Rq711knDqfR3pkOEdKpbc= Subject key identifier: 23:58:9D:53:3C:4C:55:6E:4C:97:96:9F:C1:48:9E:BD:C2:40:DA:DE Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D Certificate issuer: /CN=0ff8e93f3472ea6be58f3feb74495470095a177d Certificate serial: 019AF23F724E9AE5DC97B1943F90FAB89DB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: QGX3JDBv7Z9pLf32sFPv0N62mxhPHg7RpmEgdDKId4Q=) 2: hfGXrKTt6u41NiQkrNCRG03FgTo.roa (hash: DUf/jFg7LXlvnvWQ7PksqyhLZu7mleW34Ka9y48nKKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:72:4e:9a:e5:dc:97:b1:94:3f:90:fa:b8:9d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=23589d533c4c556e4c97969fc1489ebdc240dade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:1b:e9:23:1f:81:21:c6:41:c9:72:be:45: 9a:c4:68:51:9f:7f:6d:e5:6f:88:91:8d:4d:61:ba: b0:06:86:2e:81:bb:17:ce:87:2f:20:10:32:d6:dc: 58:df:fb:df:1b:7c:09:54:67:0e:84:60:c7:89:14: f0:5d:b7:1b:9c:8b:26:0b:69:c9:bb:3e:f2:f7:ee: c0:ce:1c:cc:75:50:4e:3a:c7:47:58:e9:6a:bc:4a: 93:21:ae:f2:88:d0:e6:76:18:8b:1e:2e:ce:8a:1d: dd:0f:d6:08:f3:9f:53:5d:85:10:86:e4:c0:0d:e7: 35:05:b7:bd:9d:b8:cc:61:43:c2:3a:90:75:ab:04: ea:ca:3d:40:31:f0:41:98:df:38:d0:b3:65:e8:38: dd:8d:c2:5d:70:f9:b6:f8:fa:fc:3d:a9:99:56:ed: 08:0c:5a:33:7d:43:1c:ef:d8:57:71:25:cd:93:83: 53:f6:28:6c:2e:b9:7e:b7:3e:c0:1b:d8:87:7d:70: 38:e2:43:21:76:dc:2f:b2:50:6e:29:97:fb:71:be: 3e:54:01:59:2a:78:6d:96:4a:09:0c:78:24:ea:48: b7:48:33:25:d2:b7:18:81:32:f5:e3:39:07:e1:20: 1b:0d:9c:01:d4:ff:5c:08:cd:9d:e1:b1:8c:b3:4e: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:58:9D:53:3C:4C:55:6E:4C:97:96:9F:C1:48:9E:BD:C2:40:DA:DE X509v3 Authority Key Identifier: keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6d:57:3f:d6:67:fe:ea:09:a9:d2:d1:d8:c2:ea:bb:bb:6f: 6c:f4:0e:8c:9a:81:6a:cf:26:ba:b5:fd:2c:b2:a2:7f:23:87: 87:c9:87:c5:1c:a1:da:b7:05:e5:86:7a:f1:72:0b:3f:23:ce: e3:81:3b:55:ad:f7:bc:f3:63:c3:29:0b:36:3c:9f:57:81:af: 15:86:75:fc:1d:e3:98:42:bc:60:e1:ed:91:80:9d:f3:de:d0: 6c:85:0e:2e:84:65:98:fd:3a:0a:ef:45:e0:ab:2e:62:a3:68: 86:13:2f:03:95:8d:5c:23:e4:01:f3:f6:3c:d7:72:0d:e6:27: d6:7b:60:1b:5a:2e:6e:54:44:6f:95:7b:fe:57:1a:14:15:a2: fa:0a:f3:c0:88:53:86:de:77:c4:87:9c:eb:1a:a0:1e:e6:72: 1a:be:43:50:e9:1d:9e:ec:02:ee:d3:13:57:c9:28:9a:fb:8d: 09:2e:29:2c:23:58:5a:0e:28:a6:76:14:b0:eb:73:46:ed:16: b5:d9:93:2e:7d:b9:7c:a1:72:9e:3c:da:1e:a1:31:c5:fd:4e: ab:53:d3:6b:e7:c1:a4:57:25:26:fe:31:9c:c4:fb:a1:f3:cc: 03:2c:2c:e8:13:56:b4:ab:f3:cc:76:90:a6:63:ad:b0:22:6e: 33:97:ad:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3JOmuXcl7GUP5D6uJ22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjhlOTNmMzQ3MmVhNmJlNThmM2ZlYjc0NDk1NDcwMDk1 YTE3N2QwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD EygyMzU4OWQ1MzNjNGM1NTZlNGM5Nzk2OWZjMTQ4OWViZGMyNDBkYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRsb6SMfgSHGQclyvkWaxGhRn39t 5W+IkY1NYbqwBoYugbsXzocvIBAy1txY3/vfG3wJVGcOhGDHiRTwXbcbnIsmC2nJ uz7y9+7AzhzMdVBOOsdHWOlqvEqTIa7yiNDmdhiLHi7Oih3dD9YI859TXYUQhuTA Dec1Bbe9nbjMYUPCOpB1qwTqyj1AMfBBmN840LNl6DjdjcJdcPm2+Pr8PamZVu0I DFozfUMc79hXcSXNk4NT9ihsLrl+tz7AG9iHfXA44kMhdtwvslBuKZf7cb4+VAFZ KnhtlkoJDHgk6ki3SDMl0rcYgTL14zkH4SAbDZwB1P9cCM2d4bGMs0668wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNYnVM8TFVuTJeWn8FInr3CQNreMB8GA1UdIwQY MBaAFA/46T80cupr5Y8/63RJVHAJWhd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYt ZmNlM2Q1OTBjNmRiLzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYtZmNlM2Q1OTBjNmRi LzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeG1XP9Zn /uoJqdLR2MLqu7tvbPQOjJqBas8murX9LLKifyOHh8mHxRyh2rcF5YZ68XILPyPO 44E7Va33vPNjwykLNjyfV4GvFYZ1/B3jmEK8YOHtkYCd897QbIUOLoRlmP06Cu9F 4KsuYqNohhMvA5WNXCPkAfP2PNdyDeYn1ntgG1oublREb5V7/lcaFBWi+grzwIhT ht53xIec6xqgHuZyGr5DUOkdnuwC7tMTV8komvuNCS4pLCNYWg4opnYUsOtzRu0W tdmTLn25fKFynjzaHqExxf1Oq1PTa+fBpFclJv4xnMT7ofPMAyws6BNWtKvzzHaQ pmOtsCJuM5et6g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:55 2025 by rpki-client