This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft File: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft (raw, json) Hash identifier: 3v+FS/obU/lJjFhSzO5tZZIEcqGOtBEClV++LtcuVkk= Subject key identifier: 7D:E6:14:D4:6E:4F:92:99:6B:AB:EF:23:3C:CC:F0:9B:B2:86:96:84 Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6 Certificate issuer: /CN=d095364395ccfd8543977358fa9b71f9271544f6 Certificate serial: 019B3D59C1AB418250E518AFBA1F6017334E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft Manifest number: 0F53 Signing time: Sat 20 Dec 2025 20:00:50 +0000 Manifest this update: Sat 20 Dec 2025 20:00:50 +0000 Manifest next update: Sun 21 Dec 2025 20:00:50 +0000 Files and hashes: 1: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl (hash: 4oCBVlKL3ilBrmgIhgAxN2UWlbDmnJBXybhLr1+S1s0=) 2: WMhbwojz363aPcIT4pKLzOiKIQA.roa (hash: t03L1DneJHTF/s4FlG1CvztpxUkTwBNYCp5o+q76WB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:c1:ab:41:82:50:e5:18:af:ba:1f:60:17:33:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6 Validity Not Before: Dec 20 20:00:50 2025 GMT Not After : Dec 21 20:00:50 2025 GMT Subject: CN=7de614d46e4f92996babef233cccf09bb2869684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:55:46:ab:6c:34:da:f5:99:ed:4e:b4:65: ef:bc:87:48:2b:82:70:0f:94:b5:3e:da:8f:9a:ab: bf:3e:1e:fb:37:d4:59:b9:42:51:af:73:5b:de:9d: 22:71:63:19:8c:b5:0c:fb:35:9a:75:9b:dd:ea:97: 45:80:c5:2a:af:e6:50:d8:99:49:55:2e:9f:c7:25: 78:fa:5b:bf:d7:86:e6:9d:2f:be:87:f6:8f:c4:f5: 5e:e6:41:87:59:98:d8:10:0d:00:bf:57:7c:1b:7b: 37:7a:86:37:8e:ac:36:3e:b3:51:41:2a:83:ff:2d: 3a:6a:19:0a:d0:e1:d3:ff:21:b8:8c:e2:6d:2c:92: dc:2f:36:e4:60:76:92:dc:d7:9d:8d:2e:41:aa:b4: 1b:49:d3:58:38:a8:4b:aa:e5:ec:3e:07:e5:75:37: e9:1c:ad:7d:fc:d3:7c:76:b4:37:28:af:44:7d:c2: 01:38:8e:3f:4c:ef:aa:76:a9:54:dc:5e:22:c1:38: 1f:4f:75:1c:56:50:9c:e7:94:bf:42:81:b3:e2:b0: a7:a0:d8:fd:8b:48:df:df:20:ac:07:74:af:8e:7f: 3e:6c:4e:e2:b5:e8:46:4b:20:47:9f:77:07:d3:3b: e0:60:41:99:3c:b0:49:ad:99:ea:0b:bf:e3:b6:a8: 89:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E6:14:D4:6E:4F:92:99:6B:AB:EF:23:3C:CC:F0:9B:B2:86:96:84 X509v3 Authority Key Identifier: keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:56:66:fe:de:95:7f:fa:b5:86:43:0f:44:53:4c:df:30:1a: 15:90:6a:43:91:f7:bc:a2:38:b8:b3:7e:50:2e:ce:e1:1d:ad: f0:2b:4b:a7:2b:b0:d7:fa:1b:bc:45:2f:01:d8:30:b1:d1:fd: a7:66:1a:08:1e:cf:0e:bc:a8:cc:5c:40:67:68:8e:3c:14:ec: ae:18:18:10:d6:59:6a:e5:94:30:00:bd:86:d3:7c:b1:71:79: a3:e7:8d:e6:a4:88:0b:1e:20:6f:61:bf:c9:f3:f9:51:1e:23: d0:e8:26:64:61:27:6d:28:44:e2:03:fd:8c:e3:28:6d:da:e1: af:be:2d:9e:2f:68:1a:3f:bb:f2:b6:28:1f:b0:fc:05:a2:99: 3b:b9:58:8f:6c:62:46:2f:2e:82:24:60:14:2e:a6:7e:b3:bd: cb:ee:ec:42:d6:6a:39:a2:7c:68:87:22:e7:26:d5:23:d4:e6: 4f:8a:61:b0:62:7d:e4:4a:42:b1:a3:5e:7e:ed:ef:68:f8:66: 5f:89:8a:9f:7f:36:ed:b1:06:9e:17:a2:ff:2b:d7:79:f6:05: 1d:d3:4c:08:57:99:ec:d3:6a:22:5e:bb:e6:76:da:16:63:c6: 6e:64:c7:b8:96:50:61:70:71:f1:a1:6d:9f:2a:df:62:78:ed: c0:9f:33:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WcGrQYJQ5Rivuh9gFzNOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOTUzNjQzOTVjY2ZkODU0Mzk3NzM1OGZhOWI3MWY5Mjcx NTQ0ZjYwHhcNMjUxMjIwMjAwMDUwWhcNMjUxMjIxMjAwMDUwWjAzMTEwLwYDVQQD Eyg3ZGU2MTRkNDZlNGY5Mjk5NmJhYmVmMjMzY2NjZjA5YmIyODY5Njg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssFVRqtsNNr1me1OtGXvvIdIK4Jw D5S1PtqPmqu/Ph77N9RZuUJRr3Nb3p0icWMZjLUM+zWadZvd6pdFgMUqr+ZQ2JlJ VS6fxyV4+lu/14bmnS++h/aPxPVe5kGHWZjYEA0Av1d8G3s3eoY3jqw2PrNRQSqD /y06ahkK0OHT/yG4jOJtLJLcLzbkYHaS3NedjS5BqrQbSdNYOKhLquXsPgfldTfp HK19/NN8drQ3KK9EfcIBOI4/TO+qdqlU3F4iwTgfT3UcVlCc55S/QoGz4rCnoNj9 i0jf3yCsB3Svjn8+bE7itehGSyBHn3cH0zvgYEGZPLBJrZnqC7/jtqiJwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3mFNRuT5KZa6vvIzzM8JuyhpaEMB8GA1UdIwQY MBaAFNCVNkOVzP2FQ5dzWPqbcfknFUT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpVMlE1WE1fWVZEbDNOWS1wdHgtU2NWUlBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9kYWM3MzItNGFjYS00YmY4LWE2ZGIt ZTA3OTUyZGI5NjdiLzEvMEpVMlE1WE1fWVZEbDNOWS1wdHgtU2NWUlBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9kYWM3MzItNGFjYS00YmY4LWE2ZGItZTA3OTUyZGI5Njdi LzEvMEpVMlE1WE1fWVZEbDNOWS1wdHgtU2NWUlBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFZm/t6V f/q1hkMPRFNM3zAaFZBqQ5H3vKI4uLN+UC7O4R2t8CtLpyuw1/obvEUvAdgwsdH9 p2YaCB7PDryozFxAZ2iOPBTsrhgYENZZauWUMAC9htN8sXF5o+eN5qSICx4gb2G/ yfP5UR4j0OgmZGEnbShE4gP9jOMobdrhr74tni9oGj+78rYoH7D8BaKZO7lYj2xi Ri8ugiRgFC6mfrO9y+7sQtZqOaJ8aIci5ybVI9TmT4phsGJ95EpCsaNefu3vaPhm X4mKn3827bEGnhei/yvXefYFHdNMCFeZ7NNqIl675nbaFmPGbmTHuJZQYXBx8aFt nyrfYnjtwJ8zkA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:40 2025 by rpki-client