This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft File: 0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft (raw, json) Hash identifier: 3uKkcuSkBsghjanQ497qMcXNP4Rum4bJd41i7iyCgfU= Subject key identifier: 86:C4:84:35:57:33:A0:4F:28:51:D8:6C:D3:E3:AA:2C:F6:5D:55:D5 Authority key identifier: D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74 Certificate issuer: /CN=d09363cfebbbf92a51e428533d3e8ad412aa3374 Certificate serial: 019AF2AD4A57D10F467854F64A6B6B173585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:00:34 +0000 Manifest this update: Sat 06 Dec 2025 08:00:34 +0000 Manifest next update: Sun 07 Dec 2025 08:00:34 +0000 Files and hashes: 1: 0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl (hash: lGEer134VqC3Ko2I0iWop4W7ZVrBp+4ea7P3G5cJpds=) 2: K0MDRhPja4FBoWQBNDrKCNqcl-Q.roa (hash: WPTwJ7uNCLk7bUU9KEWKxx4fN9uRask9g0nASALMjjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4a:57:d1:0f:46:78:54:f6:4a:6b:6b:17:35:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d09363cfebbbf92a51e428533d3e8ad412aa3374 Validity Not Before: Dec 6 08:00:34 2025 GMT Not After : Dec 7 08:00:34 2025 GMT Subject: CN=86c484355733a04f2851d86cd3e3aa2cf65d55d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:c4:56:0b:42:85:98:02:ea:22:e2:9b:28: 0b:22:01:4d:12:da:98:a4:5d:5c:9a:76:60:50:3e: 03:b5:b5:ae:93:ee:e4:55:b1:68:fd:3d:a8:8c:4d: 47:db:0c:33:5a:71:b5:d4:5c:5a:3a:bf:d0:b7:04: ee:19:e8:81:d6:d4:e4:05:7d:8b:02:30:ea:ac:4c: 1d:b5:5e:d6:75:f9:58:fe:fd:9d:ed:35:36:a7:9f: d2:0c:dc:99:15:51:a5:e6:7c:6e:ad:f9:5d:c8:ee: 5d:b2:8d:21:c8:67:74:22:b6:c1:f3:01:6e:c9:06: 0e:b0:e4:61:5c:fb:8d:d4:c2:d3:61:43:73:72:6a: 31:87:57:94:4a:7a:e9:35:4e:cc:07:3a:12:15:af: 96:69:59:f7:99:dc:53:ac:f6:1f:ae:dc:d9:94:14: bd:81:aa:2f:93:d8:a0:b7:5c:6a:57:aa:31:98:a5: a9:ef:f7:ac:ca:7c:ab:1e:54:ab:80:13:f1:fc:01: 7c:e0:0c:b9:07:48:c8:83:06:bc:25:56:1b:ec:ff: 4d:b8:57:8a:cc:2b:0f:11:8a:fd:18:58:54:51:25: 82:c4:a7:26:d3:00:80:36:62:30:1f:dd:02:63:d3: bc:b4:1e:7c:3a:88:4a:89:3f:5a:08:92:24:fa:69: 45:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C4:84:35:57:33:A0:4F:28:51:D8:6C:D3:E3:AA:2C:F6:5D:55:D5 X509v3 Authority Key Identifier: keyid:D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:73:48:3c:8e:5f:2d:f7:c8:64:e2:51:2a:c3:66:9b:70:3b: 5f:64:9b:e9:cf:04:bd:59:af:ba:3c:70:f1:92:5a:6e:42:1c: e7:11:61:0b:d6:d4:70:90:b6:d7:1e:c5:a2:7a:91:e4:ee:81: d4:45:4c:19:fb:76:f5:c2:e9:d4:fd:49:77:61:c2:8f:96:db: 5e:bb:b4:a9:29:08:a1:6b:65:41:74:6f:b0:f2:fb:58:ea:00: a9:fa:be:09:e2:f7:08:ac:b4:e0:44:d9:0a:a9:b2:5f:bd:7f: 76:e3:62:21:73:bf:7f:48:9b:9a:1e:36:e3:6d:28:45:ef:01: cd:88:23:fa:7e:34:04:26:d1:c9:ba:ab:75:d3:df:73:b0:43: b0:1d:01:59:a9:b9:59:15:07:34:75:28:89:24:e7:37:b6:c4: 29:35:78:93:41:33:c1:3c:0a:81:e5:31:cb:8d:20:20:de:47: 0f:8f:c2:07:a1:c0:df:44:db:b3:36:46:57:14:57:1d:94:37: b6:2b:ef:d1:38:19:3b:10:35:7b:21:68:8a:fd:b5:d1:54:dc: fa:1b:5e:5d:ec:29:7f:b7:50:f8:85:bb:73:29:d9:4b:5a:58: bb:a2:ee:dd:55:b0:13:bd:6d:41:f8:69:df:00:fc:62:0b:4b: 89:96:c9:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUpX0Q9GeFT2SmtrFzWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOTM2M2NmZWJiYmY5MmE1MWU0Mjg1MzNkM2U4YWQ0MTJh YTMzNzQwHhcNMjUxMjA2MDgwMDM0WhcNMjUxMjA3MDgwMDM0WjAzMTEwLwYDVQQD Eyg4NmM0ODQzNTU3MzNhMDRmMjg1MWQ4NmNkM2UzYWEyY2Y2NWQ1NWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1fEVgtChZgC6iLimygLIgFNEtqY pF1cmnZgUD4DtbWuk+7kVbFo/T2ojE1H2wwzWnG11FxaOr/QtwTuGeiB1tTkBX2L AjDqrEwdtV7WdflY/v2d7TU2p5/SDNyZFVGl5nxurfldyO5dso0hyGd0IrbB8wFu yQYOsORhXPuN1MLTYUNzcmoxh1eUSnrpNU7MBzoSFa+WaVn3mdxTrPYfrtzZlBS9 gaovk9igt1xqV6oxmKWp7/esynyrHlSrgBPx/AF84Ay5B0jIgwa8JVYb7P9NuFeK zCsPEYr9GFhUUSWCxKcm0wCANmIwH90CY9O8tB58OohKiT9aCJIk+mlFNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbEhDVXM6BPKFHYbNPjqiz2XVXVMB8GA1UdIwQY MBaAFNCTY8/ru/kqUeQoUz0+itQSqjN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpOanotdTctU3BSNUNoVFBUNksxQktxTTNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wODE2NGEtODgyMS00N2MxLWJkNDgt NWY5ZTQ4MmYxYmY0LzEvMEpOanotdTctU3BSNUNoVFBUNksxQktxTTNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wODE2NGEtODgyMS00N2MxLWJkNDgtNWY5ZTQ4MmYxYmY0 LzEvMEpOanotdTctU3BSNUNoVFBUNksxQktxTTNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXNIPI5f LffIZOJRKsNmm3A7X2Sb6c8EvVmvujxw8ZJabkIc5xFhC9bUcJC21x7FonqR5O6B 1EVMGft29cLp1P1Jd2HCj5bbXru0qSkIoWtlQXRvsPL7WOoAqfq+CeL3CKy04ETZ CqmyX71/duNiIXO/f0ibmh42420oRe8BzYgj+n40BCbRybqrddPfc7BDsB0BWam5 WRUHNHUoiSTnN7bEKTV4k0EzwTwKgeUxy40gIN5HD4/CB6HA30TbszZGVxRXHZQ3 tivv0TgZOxA1eyFoiv210VTc+hteXewpf7dQ+IW7cynZS1pYu6Lu3VWwE71tQfhp 3wD8YgtLiZbJsA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:16 2025 by rpki-client