This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft File: 0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json) Hash identifier: MKEsbdE7eOm/0wx3K2D3AOdM0ayg9CPTUmWW/uyB/Yc= Subject key identifier: 4A:D6:F2:AB:ED:A5:9B:9C:CF:79:5A:D7:A3:65:77:07:82:63:67:23 Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40 Certificate issuer: /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40 Certificate serial: 019AF12DF4D3C30E18E26DFA6E0D757F0609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft Manifest number: 11DB Signing time: Sat 06 Dec 2025 01:01:52 +0000 Manifest this update: Sat 06 Dec 2025 01:01:52 +0000 Manifest next update: Sun 07 Dec 2025 01:01:52 +0000 Files and hashes: 1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: LA6tUFPnHSsPzmhCxGXvnSSxN0kiYrqQVHmx8e5gGq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f4:d3:c3:0e:18:e2:6d:fa:6e:0d:75:7f:06:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40 Validity Not Before: Dec 6 01:01:52 2025 GMT Not After : Dec 7 01:01:52 2025 GMT Subject: CN=4ad6f2abeda59b9ccf795ad7a365770782636723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:71:1c:7d:a8:01:29:95:83:a6:b6:f5:a5: 56:95:31:6a:52:18:cb:8b:6f:0b:67:fc:5c:a9:29: 48:00:1c:22:34:03:9d:3d:81:7a:c2:a7:71:b0:d8: 23:92:ac:ee:0f:f7:45:f5:b4:c0:0b:29:ad:16:e8: 1c:dd:b4:d9:c9:26:ec:19:20:7b:ee:d2:ad:72:3c: c4:32:0e:32:49:4b:10:86:66:e2:fa:8b:f0:ba:ac: e8:1b:9c:2d:14:62:9d:cc:03:d7:f1:53:ce:82:c0: 85:5e:0d:2e:b1:04:b3:f1:27:a9:ca:ec:a2:e0:93: b2:db:69:eb:ea:38:b3:f3:f1:ca:c0:66:31:5f:d2: e8:a2:c0:da:bd:ae:06:bd:ad:df:06:46:d1:4f:3a: 81:5d:97:66:86:c5:52:1d:73:f1:f4:ff:c4:79:71: 3e:83:c5:db:25:b5:5c:d4:50:2b:cc:09:59:48:b7: 1a:fc:c6:49:87:3e:8a:12:92:ee:49:46:84:6c:fe: b7:f6:7c:e4:92:1d:9a:6b:88:5c:67:96:94:22:e1: 02:db:bb:e9:0c:20:90:f3:90:04:2b:91:7a:18:93: 72:b9:83:be:d6:0e:b7:97:45:ea:2f:a1:2d:ff:0d: e2:80:1a:d5:5b:35:a1:4d:c2:5c:b5:43:b1:58:08: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D6:F2:AB:ED:A5:9B:9C:CF:79:5A:D7:A3:65:77:07:82:63:67:23 X509v3 Authority Key Identifier: keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:2e:96:8e:55:56:32:37:1b:b9:ba:83:d9:e8:eb:5a:d7:d6: e1:aa:b9:aa:b2:1e:26:72:6c:63:c2:42:50:b7:33:c0:4c:74: ae:e4:0f:5b:c0:1a:ae:64:b1:43:04:7b:b3:cb:c3:59:83:7f: 89:1f:47:c9:d5:ca:c7:f4:16:3c:f8:18:c4:bc:84:f0:ca:ea: 12:51:8e:e8:93:d6:a2:a3:58:7e:e4:6d:cd:07:07:b5:0b:95: d3:e7:fd:80:35:8e:cd:2b:4d:96:77:ee:06:49:27:40:c4:a7: dd:f9:0d:8e:df:16:55:ac:59:4c:3a:19:8d:ce:a9:6e:1f:e2: 77:ac:be:63:20:19:b7:ad:29:f1:0c:a1:fe:7a:e7:d5:ff:f8: 18:46:11:1c:40:2b:59:af:bb:29:7e:03:56:da:ec:c3:d2:59: ee:cd:b5:10:81:d6:d0:fe:db:25:43:4f:45:e0:67:03:4c:90: bd:74:9a:f0:ca:2f:20:25:83:23:d0:a9:12:93:0b:79:67:f1: 67:d1:d2:e8:97:48:68:fb:b4:b6:f2:69:9a:a9:9c:a5:f7:30: 61:11:e1:9a:eb:b4:36:99:2b:00:e5:87:7a:69:6d:26:d0:2d: 83:df:4d:c1:20:0c:1e:81:50:60:02:3e:d5:21:ec:a5:20:50: cf:4b:57:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfTTww4Y4m36bg11fwYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzZlMGUyZGM1YTI4NDM4ZTMwZWJmZDFkNmE2YTk0ZGIz ZDFjNDAwHhcNMjUxMjA2MDEwMTUyWhcNMjUxMjA3MDEwMTUyWjAzMTEwLwYDVQQD Eyg0YWQ2ZjJhYmVkYTU5YjljY2Y3OTVhZDdhMzY1NzcwNzgyNjM2NzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNNxHH2oASmVg6a29aVWlTFqUhjL i28LZ/xcqSlIABwiNAOdPYF6wqdxsNgjkqzuD/dF9bTACymtFugc3bTZySbsGSB7 7tKtcjzEMg4ySUsQhmbi+ovwuqzoG5wtFGKdzAPX8VPOgsCFXg0usQSz8Sepyuyi 4JOy22nr6jiz8/HKwGYxX9LoosDava4Gva3fBkbRTzqBXZdmhsVSHXPx9P/EeXE+ g8XbJbVc1FArzAlZSLca/MZJhz6KEpLuSUaEbP639nzkkh2aa4hcZ5aUIuEC27vp DCCQ85AEK5F6GJNyuYO+1g63l0XqL6Et/w3igBrVWzWhTcJctUOxWAhL0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErW8qvtpZucz3la16NldweCY2cjMB8GA1UdIwQY MBaAFNI24OLcWihDjjDr/R1qapTbPRxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpiZzR0eGFLRU9PTU92OUhXcHFsTnM5SEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MTZhMjMtYjU5NC00OWU5LTg5NTkt OWQ0MzJmMTI4YTI1LzEvMGpiZzR0eGFLRU9PTU92OUhXcHFsTnM5SEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MTZhMjMtYjU5NC00OWU5LTg5NTktOWQ0MzJmMTI4YTI1 LzEvMGpiZzR0eGFLRU9PTU92OUhXcHFsTnM5SEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAki6WjlVW MjcbubqD2ejrWtfW4aq5qrIeJnJsY8JCULczwEx0ruQPW8AarmSxQwR7s8vDWYN/ iR9HydXKx/QWPPgYxLyE8MrqElGO6JPWoqNYfuRtzQcHtQuV0+f9gDWOzStNlnfu BkknQMSn3fkNjt8WVaxZTDoZjc6pbh/id6y+YyAZt60p8Qyh/nrn1f/4GEYRHEAr Wa+7KX4DVtrsw9JZ7s21EIHW0P7bJUNPReBnA0yQvXSa8MovICWDI9CpEpMLeWfx Z9HS6JdIaPu0tvJpmqmcpfcwYRHhmuu0NpkrAOWHemltJtAtg99NwSAMHoFQYAI+ 1SHspSBQz0tXaA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:23 2025 by rpki-client