This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft File: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft (raw, json) Hash identifier: HrKdLMEI/RViszXTN1T3El419SCukADSwHqaAFQS2/Q= Subject key identifier: FB:12:23:0E:82:D3:85:23:57:72:D0:51:E5:E1:23:76:3E:8E:A5:3D Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32 Certificate issuer: /CN=d09da99a73ba7202418f73718932dc8d7c153e32 Certificate serial: 019B3F4810AC1419946C24B5921C819B5CE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 05:00:45 +0000 Manifest this update: Sun 21 Dec 2025 05:00:45 +0000 Manifest next update: Mon 22 Dec 2025 05:00:45 +0000 Files and hashes: 1: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl (hash: YoTzJvJydP/928pqJvJxacOXU4YxRdi3iIgMO5pfJeY=) 2: nJUcoCNc07cyfYEUlMwbz1g_DaE.roa (hash: Ib/IQqjAiE9xz41/z9I1UMYPE1ywAN0ig2dufXZbgBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:10:ac:14:19:94:6c:24:b5:92:1c:81:9b:5c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32 Validity Not Before: Dec 21 05:00:45 2025 GMT Not After : Dec 22 05:00:45 2025 GMT Subject: CN=fb12230e82d385235772d051e5e123763e8ea53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:44:21:2e:80:2f:07:72:bd:34:75:36:d5:a9: 22:cc:fb:20:6b:30:a8:f3:84:97:4a:18:36:ca:56: 2c:b5:15:98:9e:fc:4d:de:31:c4:b2:7f:44:ce:41: 75:2b:3e:fd:10:0f:d6:9e:57:9c:0f:91:7c:5f:18: c1:ac:d3:f6:7b:ad:ab:72:28:31:b9:56:2e:4a:50: 48:43:06:88:0e:07:e2:29:b1:50:3e:22:d7:74:2b: 8b:ce:88:15:fb:20:41:86:9a:46:de:29:d9:4e:32: b4:6b:95:53:b1:3b:99:41:5c:60:ad:af:42:ef:2b: c6:e2:b9:93:df:d1:bd:e3:1f:e0:5b:5b:78:c1:06: 15:d4:79:23:4c:d6:15:41:2f:9f:2a:3c:3a:4e:69: 80:60:a2:e4:43:8b:cb:15:07:07:4e:e1:41:29:dd: 52:2c:41:f7:fb:20:a2:51:c1:3d:78:4a:76:15:16: 6a:02:69:0f:b7:17:cf:1f:a0:db:8a:c6:20:c0:de: 4a:5a:41:d9:eb:b6:c4:b3:3a:53:e2:14:d4:fa:65: 94:5c:85:b4:47:51:de:eb:dc:02:85:10:52:2e:a0: f4:f5:9b:e9:e5:a9:cb:8d:98:18:be:20:bc:75:cb: eb:0a:60:40:32:f9:2f:d7:48:c4:fc:70:c6:bd:8e: fe:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:12:23:0E:82:D3:85:23:57:72:D0:51:E5:E1:23:76:3E:8E:A5:3D X509v3 Authority Key Identifier: keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:74:77:55:9c:36:68:c4:e9:2c:29:57:54:73:53:40:8c:df: 29:12:76:84:1b:15:8c:2e:9e:33:4a:97:50:4f:8c:2c:8e:67: 13:91:27:a6:6c:ba:63:31:f0:e1:57:6a:90:d2:be:2d:72:33: a4:11:da:0a:1c:8a:19:8d:53:45:20:95:b2:c1:21:ed:67:e4: 52:c1:96:2c:7f:08:8c:8e:16:8f:c9:82:0d:b7:78:af:30:3e: cd:4d:8b:39:f4:4b:16:83:f3:c9:26:37:c8:6e:d5:a4:5a:37: 03:2a:85:6e:20:90:4c:6e:fa:38:08:d2:92:a1:ad:b8:b2:7c: 25:a8:6e:18:9f:47:dc:48:63:41:28:77:07:70:87:73:42:50: d0:78:6a:40:de:e5:de:95:1c:b4:90:bc:b4:d6:e1:e0:5a:81: d6:16:4c:80:4d:93:3e:76:a3:62:94:c2:65:d1:ac:10:d9:f4: 62:01:1e:77:04:da:dc:60:d2:c0:35:a6:db:47:3a:17:94:ed: 5e:61:83:2f:4b:50:67:a9:50:58:ee:51:e1:79:40:8c:65:f2: 23:12:2f:6e:b4:6c:86:df:62:6a:33:5a:ef:67:57:11:d5:39: 85:64:81:b4:b6:ee:a4:d6:ec:2d:22:3c:5d:5e:27:a3:9d:0f: e3:b1:36:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SBCsFBmUbCS1khyBm1zoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOWRhOTlhNzNiYTcyMDI0MThmNzM3MTg5MzJkYzhkN2Mx NTNlMzIwHhcNMjUxMjIxMDUwMDQ1WhcNMjUxMjIyMDUwMDQ1WjAzMTEwLwYDVQQD EyhmYjEyMjMwZTgyZDM4NTIzNTc3MmQwNTFlNWUxMjM3NjNlOGVhNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0QhLoAvB3K9NHU21akizPsgazCo 84SXShg2ylYstRWYnvxN3jHEsn9EzkF1Kz79EA/WnlecD5F8XxjBrNP2e62rcigx uVYuSlBIQwaIDgfiKbFQPiLXdCuLzogV+yBBhppG3inZTjK0a5VTsTuZQVxgra9C 7yvG4rmT39G94x/gW1t4wQYV1HkjTNYVQS+fKjw6TmmAYKLkQ4vLFQcHTuFBKd1S LEH3+yCiUcE9eEp2FRZqAmkPtxfPH6DbisYgwN5KWkHZ67bEszpT4hTU+mWUXIW0 R1He69wChRBSLqD09Zvp5anLjZgYviC8dcvrCmBAMvkv10jE/HDGvY7+TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsSIw6C04UjV3LQUeXhI3Y+jqU9MB8GA1UdIwQY MBaAFNCdqZpzunICQY9zcYky3I18FT4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEoycG1uTzZjZ0pCajNOeGlUTGNqWHdWUGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84YTJjZWQtODdhZS00MWVhLWIzYjAt ZGNlYmY2MTk3ZTBlLzEvMEoycG1uTzZjZ0pCajNOeGlUTGNqWHdWUGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC84YTJjZWQtODdhZS00MWVhLWIzYjAtZGNlYmY2MTk3ZTBl LzEvMEoycG1uTzZjZ0pCajNOeGlUTGNqWHdWUGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHR3VZw2 aMTpLClXVHNTQIzfKRJ2hBsVjC6eM0qXUE+MLI5nE5Enpmy6YzHw4VdqkNK+LXIz pBHaChyKGY1TRSCVssEh7WfkUsGWLH8IjI4Wj8mCDbd4rzA+zU2LOfRLFoPzySY3 yG7VpFo3AyqFbiCQTG76OAjSkqGtuLJ8JahuGJ9H3EhjQSh3B3CHc0JQ0HhqQN7l 3pUctJC8tNbh4FqB1hZMgE2TPnajYpTCZdGsENn0YgEedwTa3GDSwDWm20c6F5Tt XmGDL0tQZ6lQWO5R4XlAjGXyIxIvbrRsht9iajNa72dXEdU5hWSBtLbupNbsLSI8 XV4no50P47E2+A== -----END CERTIFICATE-----Generated at Sun Dec 21 11:17:45 2025 by rpki-client