This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json) Hash identifier: VOSkb28X/lFXrYW3pOJvYxijfQOakhvzdY5KdGV0Bvc= Subject key identifier: BA:72:BB:B8:03:F8:A8:AA:F9:75:1E:17:72:4F:09:ED:C5:8A:D3:63 Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93 Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93 Certificate serial: 019B3F1138892ABBC0B4E7BDD56DFE5327DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft Manifest number: 1783 Signing time: Sun 21 Dec 2025 04:00:51 +0000 Manifest this update: Sun 21 Dec 2025 04:00:51 +0000 Manifest next update: Mon 22 Dec 2025 04:00:51 +0000 Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: +YqB+n6zm/I36SpYF9PTRvoxDPLaR+Hnp8sbVUXn298=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:38:89:2a:bb:c0:b4:e7:bd:d5:6d:fe:53:27:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93 Validity Not Before: Dec 21 04:00:51 2025 GMT Not After : Dec 22 04:00:51 2025 GMT Subject: CN=ba72bbb803f8a8aaf9751e17724f09edc58ad363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:8d:a5:ac:17:38:a0:dc:44:e6:a7:07:34: 3c:e8:6a:64:72:1d:b2:08:53:cd:5a:3d:ed:ad:a2: 5a:ef:d8:c3:cd:77:3c:a6:d3:b8:60:5e:e8:5a:0a: 3a:ab:ab:1c:54:fc:01:3b:19:89:55:50:f9:88:d1: 15:9e:4a:bf:bf:e9:06:08:9d:41:1a:96:99:c9:5c: 06:c3:9d:7d:06:44:f0:34:62:76:5b:9d:d6:6e:5f: 85:c5:cc:49:e0:31:21:89:69:36:4b:aa:04:3b:87: 17:0e:50:ad:6d:3b:5b:9c:cb:06:0e:24:47:fa:65: 4c:05:41:0a:54:6d:56:fc:d6:d8:fb:c2:8c:0a:3e: de:c2:20:48:57:5e:8b:2a:f0:41:05:49:a9:0c:e2: 4e:4d:77:68:dc:a2:f6:3f:7c:2c:2d:51:63:eb:cf: ae:f8:46:0a:6a:18:08:f1:fa:55:19:38:f1:87:f7: bf:18:62:85:6f:ce:39:82:28:7e:9e:07:2d:7e:62: 55:a2:10:64:c4:3a:1c:c6:d9:e3:b3:1c:db:ea:62: 0b:b2:f8:6d:85:c1:3b:c5:37:13:b0:75:de:da:8e: e0:bf:a4:27:23:0b:cc:93:88:a9:eb:29:73:f9:77: 40:a1:98:82:0c:d8:e3:9d:f1:fd:d0:76:a8:46:c4: bd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:BB:B8:03:F8:A8:AA:F9:75:1E:17:72:4F:09:ED:C5:8A:D3:63 X509v3 Authority Key Identifier: keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:65:5f:82:f1:12:03:96:c4:c8:7b:a9:03:8d:9e:87:87:4e: a7:8f:56:4b:da:ea:8f:db:19:42:16:0f:c1:2c:ce:29:2b:54: c2:16:e4:71:9a:cf:f5:f6:7d:35:08:a0:62:08:2d:3f:27:c3: 9c:82:4a:ec:2b:28:f3:93:63:97:dc:68:b0:71:48:5d:0c:b7: c6:37:41:59:7d:a5:9a:27:0d:36:ff:00:6d:6e:5a:b2:c2:18: 8a:c1:77:0d:62:17:20:5f:1b:16:77:bf:89:fe:21:31:a1:55: fe:40:5e:f9:54:ea:bf:59:75:d0:b8:dd:69:0a:61:8a:79:68: ac:60:80:ee:af:24:dd:b8:2b:dc:9c:37:d4:99:8b:a0:d7:d5: c7:3e:97:f6:18:82:56:d5:a0:77:70:e1:5c:46:cc:c2:07:21: 9e:cf:f4:ad:45:a1:e4:20:b7:da:78:18:5d:9e:42:02:9d:45: 5d:41:51:1a:b9:fb:0d:d1:cd:f4:4c:60:74:a9:3a:9d:18:0e: bd:0d:2d:f8:6f:8b:3f:a4:a8:b7:cf:6c:f7:35:04:de:a9:5c: 98:93:8d:c9:2c:af:68:c4:f0:5c:47:8e:10:5a:9f:83:89:c0: 25:47:f0:06:ec:b3:99:36:8a:c7:f9:42:42:33:e8:5d:79:b3: 5f:a7:8c:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ETiJKrvAtOe91W3+UyfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOGY1NTRhZWQ3ZjhlNzE0NmU5Y2I2M2Y1ZTMxYTVkYjFl MWJhOTMwHhcNMjUxMjIxMDQwMDUxWhcNMjUxMjIyMDQwMDUxWjAzMTEwLwYDVQQD EyhiYTcyYmJiODAzZjhhOGFhZjk3NTFlMTc3MjRmMDllZGM1OGFkMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpmNpawXOKDcROanBzQ86Gpkch2y CFPNWj3traJa79jDzXc8ptO4YF7oWgo6q6scVPwBOxmJVVD5iNEVnkq/v+kGCJ1B GpaZyVwGw519BkTwNGJ2W53Wbl+FxcxJ4DEhiWk2S6oEO4cXDlCtbTtbnMsGDiRH +mVMBUEKVG1W/NbY+8KMCj7ewiBIV16LKvBBBUmpDOJOTXdo3KL2P3wsLVFj68+u +EYKahgI8fpVGTjxh/e/GGKFb845gih+ngctfmJVohBkxDocxtnjsxzb6mILsvht hcE7xTcTsHXe2o7gv6QnIwvMk4ip6ylz+XdAoZiCDNjjnfH90HaoRsS99QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpyu7gD+Kiq+XUeF3JPCe3FitNjMB8GA1UdIwQY MBaAFNKPVUrtf45xRunLY/XjGl2x4bqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2Mt MTA2ZWQxNTkwMTI5LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2MtMTA2ZWQxNTkwMTI5 LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2VfgvES A5bEyHupA42eh4dOp49WS9rqj9sZQhYPwSzOKStUwhbkcZrP9fZ9NQigYggtPyfD nIJK7Cso85Njl9xosHFIXQy3xjdBWX2lmicNNv8AbW5assIYisF3DWIXIF8bFne/ if4hMaFV/kBe+VTqv1l10LjdaQphinlorGCA7q8k3bgr3Jw31JmLoNfVxz6X9hiC VtWgd3DhXEbMwgchns/0rUWh5CC32ngYXZ5CAp1FXUFRGrn7DdHN9ExgdKk6nRgO vQ0t+G+LP6Sot89s9zUE3qlcmJONySyvaMTwXEeOEFqfg4nAJUfwBuyzmTaKx/lC QjPoXXmzX6eM3g== -----END CERTIFICATE-----Generated at Sun Dec 21 05:26:07 2025 by rpki-client