This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json) Hash identifier: eN6VCWP36ee4+hv/m3ALC/MGG/BkdQe0clX/swyXB3Y= Subject key identifier: EF:5E:27:5F:BB:06:DC:2B:E0:FA:EF:2B:42:6E:91:46:13:F2:00:7D Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88 Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88 Certificate serial: 019AF2095D1030371E67657922C53C43D9DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: qNbiRudbC8Fh+Tp6OiFn448CR7JafcSGM1H6QJBZ6Ec=) 2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=) 3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5d:10:30:37:1e:67:65:79:22:c5:3c:43:d9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88 Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=ef5e275fbb06dc2be0faef2b426e914613f2007d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:97:1c:92:61:bd:9b:29:aa:13:f7:9c:fe:26: cf:1e:56:7d:12:c1:2a:8c:07:a7:97:3d:8e:d9:f1: f1:95:d5:62:02:5b:a5:9a:74:26:28:49:4e:4e:0a: e6:bf:b8:a6:2c:2b:9c:93:84:c4:09:3f:e0:75:67: 97:c5:5e:e0:8c:89:c3:fd:1d:b6:30:ef:f5:0e:f4: bc:08:50:d1:f7:81:ae:39:d2:ae:3d:f8:a5:b6:79: 9e:3a:e2:1d:74:03:eb:45:ee:31:93:6a:b7:1e:07: 84:84:76:7e:e5:fb:dc:03:32:dd:98:57:92:36:23: e4:24:2d:43:08:19:ed:46:6b:3d:04:06:c9:07:8d: 7f:0c:1f:a4:ef:0f:18:a8:31:64:c5:a7:ce:22:0f: 90:f7:a9:86:e6:7a:fb:ee:af:fb:fc:2b:80:6f:e0: ce:da:23:92:31:25:be:f9:b5:fe:ac:1d:39:f6:96: f8:77:c0:71:5c:f5:cd:38:c2:f1:cf:98:c2:17:f3: 28:b1:a6:c4:22:ae:b6:63:00:4d:80:04:54:38:d6: d5:15:b1:7c:17:09:97:55:f0:6f:9a:be:67:d8:a4: ce:f0:ca:72:9c:3d:20:e4:7e:c2:4c:cb:9a:a3:aa: b0:8a:c6:22:c3:29:9a:19:03:1a:e5:23:84:2c:14: e9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5E:27:5F:BB:06:DC:2B:E0:FA:EF:2B:42:6E:91:46:13:F2:00:7D X509v3 Authority Key Identifier: keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:da:4e:aa:55:8e:b5:e6:80:8f:c3:4d:48:57:a5:4d:c9:68: a5:b3:60:ff:8e:a7:43:7c:31:de:ea:b2:5f:6a:83:54:f1:c0: c1:68:fd:92:d4:df:f0:58:ae:eb:7f:36:6a:13:64:7e:7f:4c: 1a:6b:fa:99:77:81:f9:99:eb:79:94:f1:f3:84:e6:7d:22:a9: a3:94:06:61:11:40:66:56:97:f4:8d:67:d4:4c:0e:6b:17:d5: 85:3d:55:b0:db:6b:2a:cc:92:64:34:17:c2:14:6f:56:fa:19: 8f:ee:7f:12:86:87:85:2d:80:c0:61:1a:d7:48:41:c5:a4:71: 60:8b:96:7c:93:78:27:9e:35:68:54:af:91:43:4c:58:1e:9e: 76:f5:f3:f1:0d:d2:40:fc:63:41:41:ba:b5:a5:34:87:29:9e: 1c:3a:bc:0e:5c:03:d3:4c:fa:8d:27:18:23:b8:b2:09:69:0e: 4f:1a:3e:4a:40:5f:4b:28:1a:c0:49:30:22:00:09:5b:35:bc: 8f:0e:86:c9:46:bc:d1:68:dc:6e:7f:37:91:22:78:90:2e:fa: 66:4b:eb:17:85:e3:e5:33:95:97:20:13:48:0b:fd:46:a3:f8: 9e:fc:15:ae:f1:88:31:44:ff:b8:f8:84:18:87:33:9b:46:a9: 92:59:2c:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCV0QMDceZ2V5IsU8Q9nbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzcwODA5OWY3YTIwNTU2NGI1ZjhlMDVkMjE3YmQyZmFl NGRlODgwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD EyhlZjVlMjc1ZmJiMDZkYzJiZTBmYWVmMmI0MjZlOTE0NjEzZjIwMDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5cckmG9mymqE/ec/ibPHlZ9EsEq jAenlz2O2fHxldViAlulmnQmKElOTgrmv7imLCuck4TECT/gdWeXxV7gjInD/R22 MO/1DvS8CFDR94GuOdKuPfiltnmeOuIddAPrRe4xk2q3HgeEhHZ+5fvcAzLdmFeS NiPkJC1DCBntRms9BAbJB41/DB+k7w8YqDFkxafOIg+Q96mG5nr77q/7/CuAb+DO 2iOSMSW++bX+rB059pb4d8BxXPXNOMLxz5jCF/MosabEIq62YwBNgARUONbVFbF8 FwmXVfBvmr5n2KTO8MpynD0g5H7CTMuao6qwisYiwymaGQMa5SOELBTp0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9eJ1+7Btwr4PrvK0JukUYT8gB9MB8GA1UdIwQY MBaAFNI3CAmfeiBVZLX44F0he9L65N6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjIt NWU5N2Y0YTUxMmU1LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjItNWU5N2Y0YTUxMmU1 LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0NpOqlWO teaAj8NNSFelTclopbNg/46nQ3wx3uqyX2qDVPHAwWj9ktTf8Fiu6382ahNkfn9M Gmv6mXeB+ZnreZTx84TmfSKpo5QGYRFAZlaX9I1n1EwOaxfVhT1VsNtrKsySZDQX whRvVvoZj+5/EoaHhS2AwGEa10hBxaRxYIuWfJN4J541aFSvkUNMWB6edvXz8Q3S QPxjQUG6taU0hymeHDq8DlwD00z6jScYI7iyCWkOTxo+SkBfSygawEkwIgAJWzW8 jw6GyUa80Wjcbn83kSJ4kC76ZkvrF4Xj5TOVlyATSAv9RqP4nvwVrvGIMUT/uPiE GIczm0apklksIA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:05 2025 by rpki-client