This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft File: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft (raw, json) Hash identifier: 3iFH7imv3E0Pg7Qw79SMcZUbgI49KVA8fFQSQW1CJKw= Subject key identifier: C9:D1:94:42:A2:BF:C9:7B:CE:7A:8E:65:05:95:5C:56:AF:45:8E:D1 Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32 Certificate issuer: /CN=d09da99a73ba7202418f73718932dc8d7c153e32 Certificate serial: 019AF2095C09070DEC9A783198767D069063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl (hash: tuEAgCuBWMSktqHvJFp7L9C/d8kng+5HNzk0F1zpOF4=) 2: nJUcoCNc07cyfYEUlMwbz1g_DaE.roa (hash: Ib/IQqjAiE9xz41/z9I1UMYPE1ywAN0ig2dufXZbgBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5c:09:07:0d:ec:9a:78:31:98:76:7d:06:90:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32 Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=c9d19442a2bfc97bce7a8e6505955c56af458ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d2:1f:7d:5a:e3:5a:29:5d:a9:47:1a:8f:54: 16:ed:1a:77:eb:c3:43:b0:ac:c5:74:32:26:c2:ca: c9:eb:e6:40:af:42:0a:a3:98:8b:ab:08:fb:4b:62: 7c:bf:24:f0:a4:ae:d2:a7:d0:e7:8b:07:be:89:95: 6b:eb:df:54:87:43:21:af:ae:b7:99:e2:d1:7a:d3: c1:d6:d0:85:65:69:2c:8f:0f:f8:70:3a:57:5d:7b: 34:62:8f:54:67:0b:ec:c9:f1:82:49:2f:5c:b4:bf: a1:b9:42:39:3b:d0:00:09:5c:ef:2d:31:fb:d7:9f: 75:e7:55:3b:d6:64:7c:73:6c:b6:22:07:f1:ed:92: 69:23:90:00:eb:9c:9c:86:fd:fd:05:bd:fc:7c:65: 8c:6e:11:47:65:d9:38:0c:97:ac:bd:ae:aa:8a:3f: 64:7f:2c:39:44:3c:9e:67:16:4a:46:54:98:e7:65: 2e:07:28:37:7f:37:bc:aa:08:90:5c:1c:07:3c:6f: a2:7b:41:e7:c0:55:73:24:82:eb:10:25:a2:74:d5: a7:51:d5:70:8e:a8:16:a2:78:8d:bf:f3:19:10:44: c7:da:ad:9f:c3:17:56:59:f5:6d:c5:d8:ce:9d:0d: 4f:6f:3a:97:f6:18:18:8b:13:78:b3:cf:b7:da:54: 70:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D1:94:42:A2:BF:C9:7B:CE:7A:8E:65:05:95:5C:56:AF:45:8E:D1 X509v3 Authority Key Identifier: keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9e:67:90:4d:17:19:5c:3c:87:b2:b2:e7:33:fa:73:8a:6a: f9:09:a5:16:61:d1:53:4e:16:7c:21:a4:8a:41:08:31:69:60: 46:7e:2d:8f:dd:43:23:a2:51:70:9b:70:c5:a5:7c:f6:03:66: b2:35:13:92:2b:c8:94:4c:f4:0d:a9:d7:57:7c:bd:36:16:d5: b6:33:a0:90:83:a2:b9:84:fe:15:ec:58:ac:50:2d:a3:f3:9f: 02:5e:29:9d:ca:e5:8d:4b:70:1a:d1:dd:4b:9a:ef:74:c6:02: fb:bf:ee:22:76:7e:12:51:b5:2a:06:80:dd:f3:49:ae:c8:0d: b6:2a:6e:96:46:d1:65:83:b9:99:b8:f3:2e:49:c6:e1:18:99: e4:19:8b:ab:e6:eb:7a:94:be:42:1e:79:89:6f:75:f9:1c:ff: 84:60:a7:24:d1:e2:65:d0:f9:57:7a:99:9e:14:67:bf:07:92: 7c:c8:9d:2d:47:15:90:59:58:94:61:dc:4a:ce:d2:38:ab:ba: 44:85:3b:71:fe:48:fd:88:ad:98:bc:31:1a:c2:15:69:89:4b: 3e:48:a5:fb:6d:29:b1:ba:66:61:28:a1:28:63:51:2f:4b:41: d3:b0:75:7b:95:7c:1e:3a:e6:5c:62:f3:b2:25:7b:31:8d:34: f7:21:3e:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVwJBw3smngxmHZ9BpBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOWRhOTlhNzNiYTcyMDI0MThmNzM3MTg5MzJkYzhkN2Mx NTNlMzIwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EyhjOWQxOTQ0MmEyYmZjOTdiY2U3YThlNjUwNTk1NWM1NmFmNDU4ZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19IffVrjWildqUcaj1QW7Rp368ND sKzFdDImwsrJ6+ZAr0IKo5iLqwj7S2J8vyTwpK7Sp9Dniwe+iZVr699Uh0Mhr663 meLRetPB1tCFZWksjw/4cDpXXXs0Yo9UZwvsyfGCSS9ctL+huUI5O9AACVzvLTH7 159151U71mR8c2y2Igfx7ZJpI5AA65ychv39Bb38fGWMbhFHZdk4DJesva6qij9k fyw5RDyeZxZKRlSY52UuByg3fze8qgiQXBwHPG+ie0HnwFVzJILrECWidNWnUdVw jqgWoniNv/MZEETH2q2fwxdWWfVtxdjOnQ1PbzqX9hgYixN4s8+32lRwJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnRlEKiv8l7znqOZQWVXFavRY7RMB8GA1UdIwQY MBaAFNCdqZpzunICQY9zcYky3I18FT4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEoycG1uTzZjZ0pCajNOeGlUTGNqWHdWUGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84YTJjZWQtODdhZS00MWVhLWIzYjAt ZGNlYmY2MTk3ZTBlLzEvMEoycG1uTzZjZ0pCajNOeGlUTGNqWHdWUGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC84YTJjZWQtODdhZS00MWVhLWIzYjAtZGNlYmY2MTk3ZTBl LzEvMEoycG1uTzZjZ0pCajNOeGlUTGNqWHdWUGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO55nkE0X GVw8h7Ky5zP6c4pq+QmlFmHRU04WfCGkikEIMWlgRn4tj91DI6JRcJtwxaV89gNm sjUTkivIlEz0DanXV3y9NhbVtjOgkIOiuYT+FexYrFAto/OfAl4pncrljUtwGtHd S5rvdMYC+7/uInZ+ElG1KgaA3fNJrsgNtipulkbRZYO5mbjzLknG4RiZ5BmLq+br epS+Qh55iW91+Rz/hGCnJNHiZdD5V3qZnhRnvweSfMidLUcVkFlYlGHcSs7SOKu6 RIU7cf5I/YitmLwxGsIVaYlLPkil+20psbpmYSihKGNRL0tB07B1e5V8HjrmXGLz siV7MY009yE+LQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:53 2025 by rpki-client