This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft File: 0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json) Hash identifier: Htgc/ko508TyRSrtTplSgRaGT3L9a2hPU5MXwWYPmhg= Subject key identifier: 2A:B2:A3:BC:E8:68:E7:C4:2B:33:8F:F5:CE:B9:E1:43:B0:F7:E9:F1 Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55 Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855 Certificate serial: 019AF16471DA60AC5C462F2C93026CC95A1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: NHmWj3Zpnv0KKSgKSPt127t+YWBxtyRGI4T8W7xS0eY=) 2: zWlbMie9smiEiWEP03iooF2NKYI.roa (hash: i3CosfERz9PWPOxFmY5jsq43lJm4fTA/Cty1Zgq6vks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:71:da:60:ac:5c:46:2f:2c:93:02:6c:c9:5a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855 Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=2ab2a3bce868e7c42b338ff5ceb9e143b0f7e9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:4b:a5:e4:42:8c:47:c9:a9:68:82:b6:f4: 9b:cd:d5:43:65:1f:af:3f:b0:ce:2b:08:af:6e:58: ae:37:3f:46:52:1c:8e:37:93:24:68:f6:12:ad:a8: 46:72:a3:aa:1d:1f:64:e0:94:54:d8:7a:58:1b:8a: 50:2f:57:a3:b8:bb:b0:67:3b:a1:eb:be:ba:81:9c: 34:33:55:31:2c:18:47:ff:64:c0:c6:5c:0c:22:64: 88:7b:cd:42:e1:01:02:b8:5b:48:a8:6c:e9:b4:50: ac:18:7a:c0:8a:d0:2e:e1:d5:7d:6c:1a:86:a4:ad: 32:0b:a7:d5:84:4b:58:49:fd:39:b4:5b:5b:55:0c: 53:0f:8b:8c:5e:b6:32:c4:68:52:5f:2c:5c:3b:bf: f6:61:06:8c:16:1c:73:8a:74:09:0c:d5:e6:09:45: 7b:3a:0c:51:b1:bd:a0:67:ce:75:93:9d:17:1e:6e: f6:17:34:35:c8:58:d6:e9:02:d9:42:1e:2c:d0:8e: ca:35:cd:02:81:93:8a:ff:f0:e3:75:05:cd:0c:b2: 0e:01:46:3f:a5:25:5a:b9:1d:ce:71:6a:ee:ed:28: a6:9b:ee:19:d3:35:1d:af:07:f5:95:65:6a:13:3c: c8:8a:ab:62:dd:44:1e:c1:ef:6a:a0:b1:b3:4b:69: 9a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B2:A3:BC:E8:68:E7:C4:2B:33:8F:F5:CE:B9:E1:43:B0:F7:E9:F1 X509v3 Authority Key Identifier: keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:13:bf:d8:86:93:53:54:03:ff:d7:c8:1e:57:5a:b2:8a:2e: 49:f7:ff:f3:f3:f1:eb:88:d4:9d:3f:c6:06:7d:b3:12:22:fd: 7b:77:6a:b0:98:90:00:01:cd:59:e8:60:32:c0:e6:6c:79:b8: eb:fb:bc:93:ab:5b:10:8d:b1:c8:ae:80:67:70:15:fc:78:ae: c8:6e:de:47:d6:bb:2b:db:f8:11:47:a9:27:9c:ea:7d:04:22: 09:61:70:53:97:f5:7f:09:98:c5:73:04:14:5e:0c:2c:e6:22: d4:e8:a0:c9:12:ae:60:97:4c:4f:cc:33:bf:36:97:04:79:0f: fb:08:c4:4d:99:a2:d8:d8:17:27:95:bf:2f:a7:22:84:2f:fb: e4:fd:e6:33:b9:97:eb:c6:62:5d:f7:78:e8:2c:22:2c:ea:6c: a8:9e:4d:3c:05:e8:e9:4a:a9:c7:0e:e5:66:f2:8f:ef:a7:26: 2f:24:2d:5d:61:46:ff:60:cf:3a:90:43:87:c8:85:01:4d:b1: fd:21:db:c4:02:3c:9c:44:56:5a:73:82:9e:ac:92:42:ca:6a: ac:a1:30:97:e6:d2:a0:66:4b:3d:0d:b1:a9:c4:4b:b0:a5:d3: 9e:3e:67:0b:fb:03:39:b7:fa:85:fc:0c:63:b4:92:5c:c9:c1: fa:a9:49:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHHaYKxcRi8skwJsyVofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOTRlYjBlOTg5ODdhMmFkZjhmOTVhMDNlNzg2NTk5MWEy MDE4NTUwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD EygyYWIyYTNiY2U4NjhlN2M0MmIzMzhmZjVjZWI5ZTE0M2IwZjdlOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB5LpeRCjEfJqWiCtvSbzdVDZR+v P7DOKwivbliuNz9GUhyON5MkaPYSrahGcqOqHR9k4JRU2HpYG4pQL1ejuLuwZzuh 6766gZw0M1UxLBhH/2TAxlwMImSIe81C4QECuFtIqGzptFCsGHrAitAu4dV9bBqG pK0yC6fVhEtYSf05tFtbVQxTD4uMXrYyxGhSXyxcO7/2YQaMFhxzinQJDNXmCUV7 OgxRsb2gZ851k50XHm72FzQ1yFjW6QLZQh4s0I7KNc0CgZOK//DjdQXNDLIOAUY/ pSVauR3OcWru7Simm+4Z0zUdrwf1lWVqEzzIiqti3UQewe9qoLGzS2maTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqyo7zoaOfEKzOP9c654UOw9+nxMB8GA1UdIwQY MBaAFNCU6w6YmHoq34+VoD54ZZkaIBhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAt ZTRhODZiMGZmZDJlLzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAtZTRhODZiMGZmZDJl LzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhO/2IaT U1QD/9fIHldasoouSff/8/Px64jUnT/GBn2zEiL9e3dqsJiQAAHNWehgMsDmbHm4 6/u8k6tbEI2xyK6AZ3AV/HiuyG7eR9a7K9v4EUepJ5zqfQQiCWFwU5f1fwmYxXME FF4MLOYi1OigyRKuYJdMT8wzvzaXBHkP+wjETZmi2NgXJ5W/L6cihC/75P3mM7mX 68ZiXfd46CwiLOpsqJ5NPAXo6Uqpxw7lZvKP76cmLyQtXWFG/2DPOpBDh8iFAU2x /SHbxAI8nERWWnOCnqySQspqrKEwl+bSoGZLPQ2xqcRLsKXTnj5nC/sDObf6hfwM Y7SSXMnB+qlJXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:52 2025 by rpki-client