This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft File: 0jxZJVkZvdmrA73hxceIBixLmfM.mft (raw, json) Hash identifier: cR8VjzSR9j3LisKyDnKMu8HKO9BZuWMWIDOixagK2Xs= Subject key identifier: 7D:BE:C3:53:24:33:D8:35:A3:3A:C5:45:17:54:56:85:0C:74:26:D9 Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3 Certificate issuer: /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3 Certificate serial: 019AF05146411C85512AD77F9835D74B1F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft Manifest number: 0893 Signing time: Fri 05 Dec 2025 21:00:49 +0000 Manifest this update: Fri 05 Dec 2025 21:00:49 +0000 Manifest next update: Sat 06 Dec 2025 21:00:49 +0000 Files and hashes: 1: 0jxZJVkZvdmrA73hxceIBixLmfM.crl (hash: ZT+oIc8+dyqAZZHlIYL5NoISvpYMLDvXOPhChENlLTI=) 2: JC586knHAJCWuyAHAdSdP6vCZvc.roa (hash: 5tWj8kAF7Tk8U+7sz2E535dJcNrZC7NIfrQwoPJI7rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:46:41:1c:85:51:2a:d7:7f:98:35:d7:4b:1f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3 Validity Not Before: Dec 5 21:00:49 2025 GMT Not After : Dec 6 21:00:49 2025 GMT Subject: CN=7dbec3532433d835a33ac545175456850c7426d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:68:d1:71:cd:a3:22:79:e5:69:6a:62:86: de:39:71:ca:3d:f2:b4:d6:86:c0:ee:a9:a8:19:1a: 09:9f:7c:b4:36:58:69:07:5b:35:2a:ca:ad:6d:6c: 94:a3:c4:88:0c:d7:77:cf:4e:6c:56:9f:f1:50:01: a9:18:b3:40:b6:8b:c5:2e:c3:9a:a4:46:ca:62:3e: f2:35:c3:26:35:b0:ac:a2:88:da:29:89:c1:0a:3b: 53:1a:e7:27:28:42:62:e9:c1:d2:64:be:6f:8e:a8: 07:06:35:ee:e1:24:01:fb:bb:2e:16:3c:b9:1d:c4: 62:1d:98:bb:50:1f:cc:a4:dc:2b:bc:59:58:5c:e5: 06:84:da:05:b6:81:57:17:6b:4b:27:21:4e:2c:16: 77:fd:74:5e:1b:dd:15:22:04:49:a2:46:a1:db:6a: 45:db:d7:5e:d2:62:8e:c5:13:53:29:ed:b2:93:20: 8c:f0:38:4d:c5:36:df:ed:c9:d5:1b:51:99:d0:49: aa:00:dd:1e:d6:00:a3:81:64:fb:b5:76:6f:71:45: 1c:be:d6:a2:b3:ba:1a:d9:e3:42:3d:6d:4d:f0:a8: d0:37:d2:fb:8d:3c:67:a8:94:85:25:a1:c2:7e:47: 5c:5f:33:be:8f:9d:86:09:60:c2:9e:13:74:2d:b0: 84:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BE:C3:53:24:33:D8:35:A3:3A:C5:45:17:54:56:85:0C:74:26:D9 X509v3 Authority Key Identifier: keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d6:05:9f:10:96:73:4e:a7:2d:b4:60:b4:30:af:de:58:f8: c9:c5:50:92:25:71:13:84:5d:5e:91:1c:36:88:0e:17:a2:13: 54:e8:96:90:64:4c:92:ff:f3:86:16:a7:80:9d:ad:44:2e:5f: 87:72:9b:32:a7:3c:0d:2b:9e:87:4a:41:df:b2:53:3f:ce:ab: 85:a0:9a:17:23:a3:ab:27:ca:61:7b:79:c7:e9:80:bc:ca:6c: 94:47:bb:c3:fa:0e:9c:3f:32:3b:d2:81:ca:7c:19:fc:de:0d: 83:e6:68:4e:78:8f:21:56:de:38:58:89:f9:f3:03:83:fb:03: f9:23:68:94:9c:08:a2:b2:59:a8:19:45:88:12:d2:27:40:60: 1e:9c:19:54:79:09:ef:28:8b:e5:50:1c:c6:71:f5:b8:8e:91: eb:c1:87:8e:b0:2f:02:cf:b7:d3:fa:bc:cf:23:e6:a1:ba:d5: d9:49:12:d8:6a:e7:fa:a4:b0:11:3c:f2:df:ac:81:d1:3d:3a: 59:bb:c0:17:7f:11:f7:41:d6:b2:a0:3d:c1:79:83:0a:3b:77: 5d:8d:3d:fa:15:fb:95:cb:f4:85:98:ba:83:89:bc:87:75:f4: ee:5e:e8:04:30:53:b1:57:2b:f4:d6:6f:07:41:d3:45:bf:a4: 80:31:cf:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUUZBHIVRKtd/mDXXSx90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyM2M1OTI1NTkxOWJkZDlhYjAzYmRlMWM1Yzc4ODA2MmM0 Yjk5ZjMwHhcNMjUxMjA1MjEwMDQ5WhcNMjUxMjA2MjEwMDQ5WjAzMTEwLwYDVQQD Eyg3ZGJlYzM1MzI0MzNkODM1YTMzYWM1NDUxNzU0NTY4NTBjNzQyNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5lo0XHNoyJ55WlqYobeOXHKPfK0 1obA7qmoGRoJn3y0NlhpB1s1KsqtbWyUo8SIDNd3z05sVp/xUAGpGLNAtovFLsOa pEbKYj7yNcMmNbCsoojaKYnBCjtTGucnKEJi6cHSZL5vjqgHBjXu4SQB+7suFjy5 HcRiHZi7UB/MpNwrvFlYXOUGhNoFtoFXF2tLJyFOLBZ3/XReG90VIgRJokah22pF 29de0mKOxRNTKe2ykyCM8DhNxTbf7cnVG1GZ0EmqAN0e1gCjgWT7tXZvcUUcvtai s7oa2eNCPW1N8KjQN9L7jTxnqJSFJaHCfkdcXzO+j52GCWDCnhN0LbCEEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2+w1MkM9g1ozrFRRdUVoUMdCbZMB8GA1UdIwQY MBaAFNI8WSVZGb3ZqwO94cXHiAYsS5nzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZmMzZjYtNmExYS00Y2RjLWExNDct ZGE4YjJkNTc2YmYxLzEvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZmMzZjYtNmExYS00Y2RjLWExNDctZGE4YjJkNTc2YmYx LzEvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtYFnxCW c06nLbRgtDCv3lj4ycVQkiVxE4RdXpEcNogOF6ITVOiWkGRMkv/zhhangJ2tRC5f h3KbMqc8DSueh0pB37JTP86rhaCaFyOjqyfKYXt5x+mAvMpslEe7w/oOnD8yO9KB ynwZ/N4Ng+ZoTniPIVbeOFiJ+fMDg/sD+SNolJwIorJZqBlFiBLSJ0BgHpwZVHkJ 7yiL5VAcxnH1uI6R68GHjrAvAs+30/q8zyPmobrV2UkS2Grn+qSwETzy36yB0T06 WbvAF38R90HWsqA9wXmDCjt3XY09+hX7lcv0hZi6g4m8h3X07l7oBDBTsVcr9NZv B0HTRb+kgDHP+w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:02:54 2025 by rpki-client