This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json) Hash identifier: c3G9YbqYnyHPkLgTDknAcgFqkwvRybdYCy4QY+/bTUQ= Subject key identifier: 04:A4:0C:B3:59:43:6F:8F:9A:3B:1D:6F:0A:80:3B:BB:B9:90:68:7C Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08 Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08 Certificate serial: 019AF209080BB6D66A7FB0160FA59B49BE98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft Manifest number: 06E4 Signing time: Sat 06 Dec 2025 05:01:09 +0000 Manifest this update: Sat 06 Dec 2025 05:01:09 +0000 Manifest next update: Sun 07 Dec 2025 05:01:09 +0000 Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: TUdBYakSaNkTRvAhBT/58c7z/kHcM21g34Ahhj3+6rk=) 2: MODcJVbQ7tIyULkAi32tBDPkIQ0.roa (hash: b4XxIhCxRBgha/DwCew59vKJiKvbCmMkhqVHdTGJTgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:08:0b:b6:d6:6a:7f:b0:16:0f:a5:9b:49:be:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08 Validity Not Before: Dec 6 05:01:09 2025 GMT Not After : Dec 7 05:01:09 2025 GMT Subject: CN=04a40cb359436f8f9a3b1d6f0a803bbbb990687c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:1a:94:4e:ef:3b:72:0c:57:c1:ce:c0:60: 12:0c:f2:a6:17:71:d0:7a:86:36:b7:89:cf:05:c1: 37:a2:18:0f:5c:a4:f3:14:d5:45:ef:d2:9f:8e:2a: 65:97:f5:1e:89:b3:16:ae:90:42:61:76:fe:a8:b6: a5:3a:79:2b:d7:f7:46:d3:8a:fe:2f:03:8a:f6:b5: 30:ec:0e:00:f2:04:a7:06:10:fc:64:79:8a:7b:74: ac:87:e1:3e:31:03:68:1c:46:8d:cc:8b:42:0f:60: 5e:fe:11:8e:51:f1:91:aa:ac:c7:0a:38:7b:48:e7: 68:1e:e5:9f:97:37:c0:48:12:b7:80:a1:54:74:da: a3:67:19:ce:dd:3c:6d:5b:cd:4e:c8:f7:a3:da:6c: e8:ed:b5:60:56:76:9d:e1:d1:1a:59:e0:02:be:26: 4b:91:49:d0:36:99:0f:b7:72:d1:5b:d3:71:1f:03: e8:06:85:32:c1:72:d2:24:9d:53:6c:8a:9e:de:7d: c6:5d:b8:05:78:6b:58:99:cb:1f:80:ab:00:47:5a: 49:11:66:10:48:3a:18:9c:c2:71:26:aa:7b:00:d7: 73:81:94:5a:ee:e8:15:92:5b:fd:28:33:96:e0:af: 13:b3:b5:19:b1:6a:99:68:0e:db:aa:fe:2d:0a:fa: 99:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A4:0C:B3:59:43:6F:8F:9A:3B:1D:6F:0A:80:3B:BB:B9:90:68:7C X509v3 Authority Key Identifier: keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:51:37:11:51:dd:67:3b:ae:b8:93:3f:fc:d6:31:88:3e:f2: 57:12:0d:8e:cb:9c:b5:77:11:00:be:8a:44:e0:46:e7:c1:8c: 08:d4:ca:3d:c2:97:58:12:63:ae:12:60:e1:75:89:3f:fa:29: 62:4f:1b:28:c5:81:65:f0:7a:1b:fb:77:19:30:0a:2c:6f:8a: e3:b3:a6:e8:42:59:b0:8e:40:ad:6b:e0:e1:72:11:db:44:df: 8f:73:09:4f:1d:e9:3b:6e:50:cd:db:a2:84:05:5c:2c:4a:cb: 7b:20:ae:48:6a:c9:4c:27:4e:74:3c:71:f6:cb:33:26:90:ec: 65:b1:5c:6a:af:fc:a9:ef:bc:1e:9a:88:83:bf:86:62:94:21: 72:7f:ed:c8:7b:3a:34:c1:1c:b4:ae:b9:02:ca:20:4b:19:2b: 36:d1:06:e3:7c:e5:8e:a1:c0:4c:ad:97:b1:36:01:76:c4:c8: cd:5d:b6:a1:b6:22:85:65:a9:9f:06:6c:61:9c:ae:21:d2:90: c5:95:9c:40:4f:90:97:6a:2e:03:0f:1d:9a:ca:e6:64:66:ba: 34:4e:74:70:88:19:88:7b:aa:fc:af:d8:76:bd:25:64:f4:d6: ff:e7:81:18:c1:0d:64:2f:c6:06:bd:08:b2:53:55:99:ba:4c: 04:e3:b6:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQgLttZqf7AWD6WbSb6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzA4ZGQxMTIwNmZhNTJkYjAwNGU0NTVhYzhkOTk1YWY0 YzNiMDgwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD EygwNGE0MGNiMzU5NDM2ZjhmOWEzYjFkNmYwYTgwM2JiYmI5OTA2ODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNEalE7vO3IMV8HOwGASDPKmF3HQ eoY2t4nPBcE3ohgPXKTzFNVF79Kfjipll/UeibMWrpBCYXb+qLalOnkr1/dG04r+ LwOK9rUw7A4A8gSnBhD8ZHmKe3Ssh+E+MQNoHEaNzItCD2Be/hGOUfGRqqzHCjh7 SOdoHuWflzfASBK3gKFUdNqjZxnO3TxtW81OyPej2mzo7bVgVnad4dEaWeACviZL kUnQNpkPt3LRW9NxHwPoBoUywXLSJJ1TbIqe3n3GXbgFeGtYmcsfgKsAR1pJEWYQ SDoYnMJxJqp7ANdzgZRa7ugVklv9KDOW4K8Ts7UZsWqZaA7bqv4tCvqZ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASkDLNZQ2+PmjsdbwqAO7u5kGh8MB8GA1UdIwQY MBaAFNIwjdESBvpS2wBORVrI2ZWvTDsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYt ZGFkYmVlMWUyYzJjLzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYtZGFkYmVlMWUyYzJj LzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFE3EVHd ZzuuuJM//NYxiD7yVxINjsuctXcRAL6KROBG58GMCNTKPcKXWBJjrhJg4XWJP/op Yk8bKMWBZfB6G/t3GTAKLG+K47Om6EJZsI5ArWvg4XIR20Tfj3MJTx3pO25Qzdui hAVcLErLeyCuSGrJTCdOdDxx9sszJpDsZbFcaq/8qe+8HpqIg7+GYpQhcn/tyHs6 NMEctK65AsogSxkrNtEG43zljqHATK2XsTYBdsTIzV22obYihWWpnwZsYZyuIdKQ xZWcQE+Ql2ouAw8dmsrmZGa6NE50cIgZiHuq/K/Ydr0lZPTW/+eBGMENZC/GBr0I slNVmbpMBOO2CA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:22 2025 by rpki-client