This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft File: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json) Hash identifier: JJLiYtKCJrokytEBnxexng72JIGS858nf80rKIE+DVA= Subject key identifier: 0A:2D:6D:FE:C3:53:00:AC:A1:1C:57:9D:A8:1D:39:4F:1C:97:81:97 Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25 Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25 Certificate serial: 019AF12EC11B45F7299CC1B974CC5278BCD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft Manifest number: 0E6C Signing time: Sat 06 Dec 2025 01:02:44 +0000 Manifest this update: Sat 06 Dec 2025 01:02:44 +0000 Manifest next update: Sun 07 Dec 2025 01:02:44 +0000 Files and hashes: 1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: z0GU4KQYagB05sGg1df2bWdqLYfkqXs/XQU9OPQ909c=) 2: Ts2grdh3WhIBgvviR4SebdJHIVA.roa (hash: gCLhNsBpATqkGaeD3Tm7dpZpLjmibJqVgNt4Igote+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c1:1b:45:f7:29:9c:c1:b9:74:cc:52:78:bc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25 Validity Not Before: Dec 6 01:02:44 2025 GMT Not After : Dec 7 01:02:44 2025 GMT Subject: CN=0a2d6dfec35300aca11c579da81d394f1c978197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:07:e2:e1:9a:68:01:45:1c:7b:eb:3b:19: 2c:8d:94:c8:06:ae:90:71:28:e8:e3:79:71:0a:81: 6c:88:1c:c4:d5:61:65:43:9e:45:f4:bf:5a:87:87: 97:92:5f:67:39:b9:01:df:7a:9a:9e:ed:1b:28:72: 82:74:d9:99:41:1b:12:c9:46:b0:da:19:cb:62:7c: 3d:ca:24:8f:1e:35:77:9c:c0:75:7b:b8:78:06:1f: 20:3c:21:d0:43:4b:97:e3:5f:72:53:8d:35:d2:71: 25:4b:57:48:70:97:a3:2a:d0:49:b9:94:a3:23:23: fb:aa:00:f8:e1:ae:fb:61:bb:9f:05:80:41:1c:f9: 44:d3:38:83:e2:b8:00:5c:3b:0d:c9:9a:53:35:a9: a7:38:43:f8:5e:28:a1:9b:ed:25:6a:95:b7:27:bb: 2f:9d:d1:d3:5b:eb:f7:8d:43:c5:08:e7:05:3d:d2: 0d:1b:08:98:f7:2b:db:7d:66:ee:d4:6a:70:2f:d0: d7:5f:36:4d:d6:ff:b1:8b:9c:13:76:f2:e4:a4:a5: e3:9e:a6:39:bf:f5:7e:6b:2a:4c:7a:7f:18:6e:7d: 96:bd:26:73:87:ae:36:fc:04:0e:fb:41:12:1d:f8: 07:ff:c0:b3:36:eb:62:9b:0d:71:fe:72:9f:ce:d4: ba:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2D:6D:FE:C3:53:00:AC:A1:1C:57:9D:A8:1D:39:4F:1C:97:81:97 X509v3 Authority Key Identifier: keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:84:0a:ff:e7:a5:48:8c:0a:42:da:af:50:e3:43:1e:6c:72: 5e:b7:c1:c5:32:1c:15:b5:60:87:d6:7f:d0:1b:8e:7c:59:d2: a4:b4:bb:93:27:69:36:32:b3:ca:25:27:26:40:71:49:eb:27: aa:b2:f4:f5:70:22:4c:ed:b1:7e:b2:cf:ab:85:6a:48:04:3e: e2:0a:d3:01:2a:e1:6e:5b:d1:b2:47:9d:44:2e:ae:a9:c3:9f: ff:1a:a3:ec:2c:29:bd:ae:64:67:35:ff:0e:cc:8a:82:b8:e3: a5:8d:77:7d:cc:12:8e:7d:fc:7c:0b:94:d4:7f:83:39:a9:06: e5:e2:78:f2:99:22:e8:98:f3:0b:2c:94:8c:24:83:78:1b:39: d0:98:cf:fc:58:70:70:58:9a:ef:8c:ca:a9:5d:d6:1c:73:c7: 22:25:52:43:c1:8e:5a:2e:a5:97:4e:e0:05:f3:e9:68:28:ee: 0b:a3:93:c6:19:64:b1:40:b5:b1:b2:5f:78:13:14:a3:ea:3b: 19:3c:20:2d:f7:d3:00:20:b0:4b:7d:e5:54:6b:e2:e3:37:a1: 08:88:cc:23:8a:e0:44:a3:ec:ff:44:bd:ba:00:76:16:4b:d0: 2a:2c:1c:4b:0e:89:08:0e:92:25:4c:93:16:fc:6f:7e:71:aa: 8c:4e:25:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsEbRfcpnMG5dMxSeLzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTEwOTQ0NzA0ZDcyM2M4ZGQ5Y2U3MzBjYWJmOTZmZTI2 YmFiMjUwHhcNMjUxMjA2MDEwMjQ0WhcNMjUxMjA3MDEwMjQ0WjAzMTEwLwYDVQQD EygwYTJkNmRmZWMzNTMwMGFjYTExYzU3OWRhODFkMzk0ZjFjOTc4MTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr90H4uGaaAFFHHvrOxksjZTIBq6Q cSjo43lxCoFsiBzE1WFlQ55F9L9ah4eXkl9nObkB33qanu0bKHKCdNmZQRsSyUaw 2hnLYnw9yiSPHjV3nMB1e7h4Bh8gPCHQQ0uX419yU4010nElS1dIcJejKtBJuZSj IyP7qgD44a77YbufBYBBHPlE0ziD4rgAXDsNyZpTNamnOEP4Xiihm+0lapW3J7sv ndHTW+v3jUPFCOcFPdINGwiY9yvbfWbu1GpwL9DXXzZN1v+xi5wTdvLkpKXjnqY5 v/V+aypMen8Ybn2WvSZzh642/AQO+0ESHfgH/8CzNutimw1x/nKfztS6OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAotbf7DUwCsoRxXnagdOU8cl4GXMB8GA1UdIwQY MBaAFNChCURwTXI8jdnOcwyr+W/ia6slMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mODUyZTUtOTE2Zi00ZDVlLWEzMDUt OGEwZjA0NTA1NjQ3LzEvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9mODUyZTUtOTE2Zi00ZDVlLWEzMDUtOGEwZjA0NTA1NjQ3 LzEvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYQK/+el SIwKQtqvUONDHmxyXrfBxTIcFbVgh9Z/0BuOfFnSpLS7kydpNjKzyiUnJkBxSesn qrL09XAiTO2xfrLPq4VqSAQ+4grTASrhblvRskedRC6uqcOf/xqj7Cwpva5kZzX/ DsyKgrjjpY13fcwSjn38fAuU1H+DOakG5eJ48pki6JjzCyyUjCSDeBs50JjP/Fhw cFia74zKqV3WHHPHIiVSQ8GOWi6ll07gBfPpaCjuC6OTxhlksUC1sbJfeBMUo+o7 GTwgLffTACCwS33lVGvi4zehCIjMI4rgRKPs/0S9ugB2FkvQKiwcSw6JCA6SJUyT FvxvfnGqjE4lRw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:10 2025 by rpki-client