This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft File: C0ojfRF9934LiqUS9vJfsgf5orE.mft (raw, json) Hash identifier: QNHsKhsIbYUUO/isPEWk8kV7Ifs2GKUqVQdAtxcZGtI= Subject key identifier: C9:22:C8:4A:58:1E:07:88:A5:C4:29:6C:4A:E4:AE:7D:A6:BE:3B:18 Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1 Certificate issuer: /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1 Certificate serial: 019AF19AF99BA4A12941DD323D5AFAB07155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft Manifest number: 12FC Signing time: Sat 06 Dec 2025 03:00:56 +0000 Manifest this update: Sat 06 Dec 2025 03:00:56 +0000 Manifest next update: Sun 07 Dec 2025 03:00:56 +0000 Files and hashes: 1: C0ojfRF9934LiqUS9vJfsgf5orE.crl (hash: KfdV0m4abXT2rs2iQuL/R561EXgxTllJhuaXlwO4MeY=) 2: ubaYGhsK3un9FzpeOuJImEsVY0k.roa (hash: GKSurghCGTsvWWfo6kF8DtoCXANGJM6Q52lyK44WE3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f9:9b:a4:a1:29:41:dd:32:3d:5a:fa:b0:71:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1 Validity Not Before: Dec 6 03:00:56 2025 GMT Not After : Dec 7 03:00:56 2025 GMT Subject: CN=c922c84a581e0788a5c4296c4ae4ae7da6be3b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:86:f7:68:8c:49:d7:78:b2:fa:7e:0c:a9:a6: b3:e3:b0:37:58:ac:c6:b4:d5:66:66:1f:74:00:cd: a0:7f:18:f5:32:ed:28:5c:f8:0d:7f:bf:7d:25:dd: f1:98:85:3f:32:3c:64:7c:db:63:2f:bc:10:79:19: 51:33:dd:6e:c4:26:05:a8:d0:dc:75:89:c1:a7:17: d9:ab:32:24:64:39:ba:b5:80:19:8a:92:b5:59:b5: 14:52:7d:43:eb:fb:21:36:1f:f9:86:df:ea:0c:df: 8a:69:38:6b:e3:2a:27:db:f9:ae:c7:d3:5e:25:d6: 19:fc:f7:6c:95:bd:d7:83:f8:29:ab:0a:16:1a:38: 94:b4:8b:74:10:0a:cc:e9:62:46:21:b5:8b:40:d3: a6:4a:33:99:3f:b9:97:20:5d:6d:78:78:e2:43:38: 9e:c0:b2:d9:1e:32:6a:fa:ee:a2:75:e9:69:ba:25: 1b:b5:4f:2c:16:d0:f2:31:0d:6e:13:f8:c8:1e:ef: 48:32:23:92:70:14:ea:0b:21:1b:bc:ea:cc:51:97: 2d:af:9d:0e:da:4d:46:2f:0f:c2:a1:07:7c:87:d5: e4:ef:64:93:64:ad:1e:f8:aa:c9:93:a2:57:55:88: 4d:b7:0e:45:96:4f:8e:ba:71:46:20:a0:19:08:22: ca:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:22:C8:4A:58:1E:07:88:A5:C4:29:6C:4A:E4:AE:7D:A6:BE:3B:18 X509v3 Authority Key Identifier: keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c5:7a:ae:3d:c8:ea:59:32:8d:1c:92:b5:61:5a:87:12:8a: d5:e2:11:56:dc:c8:af:f5:c1:d1:f0:4e:ad:69:10:b8:da:3c: 63:02:e3:f0:f1:51:a9:f0:6e:36:ef:cf:2b:c6:39:26:d4:ee: 45:79:35:63:e2:3f:b1:cb:c4:34:ea:dd:b8:38:bf:a8:61:6a: d6:79:6b:40:8e:72:41:12:66:51:72:3e:4b:40:de:50:c6:e9: 0c:b0:d5:4d:64:bb:c7:e9:c3:8f:d4:d0:f0:00:7b:fa:45:7d: 74:20:e1:a8:2f:18:3d:67:da:e8:d1:f6:8e:3b:40:82:b5:45: af:1c:c0:c1:26:9d:9f:87:39:df:fc:d0:92:34:4d:a3:a0:cc: d5:6d:a2:df:2e:f5:d9:f5:71:62:24:8e:ac:ab:e8:01:9a:ed: be:e1:3e:2d:8e:8e:cc:9e:4e:09:f7:3d:69:e9:04:14:7f:3b: 69:65:69:35:46:4f:47:97:13:f9:f6:f1:27:13:fc:49:bf:25: 51:f5:30:68:4a:2c:bb:ee:f1:20:88:d3:1c:35:c5:87:1b:bc: de:32:1c:60:4c:f7:ce:21:df:8c:67:ce:df:5a:28:7f:5e:ca: d6:fd:38:a6:90:ee:22:81:d4:9b:72:09:8c:f4:57:a7:a4:0b: 7b:88:77:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvmbpKEpQd0yPVr6sHFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGEyMzdkMTE3ZGY3N2UwYjhhYTUxMmY2ZjI1ZmIyMDdm OWEyYjEwHhcNMjUxMjA2MDMwMDU2WhcNMjUxMjA3MDMwMDU2WjAzMTEwLwYDVQQD EyhjOTIyYzg0YTU4MWUwNzg4YTVjNDI5NmM0YWU0YWU3ZGE2YmUzYjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ib3aIxJ13iy+n4Mqaaz47A3WKzG tNVmZh90AM2gfxj1Mu0oXPgNf799Jd3xmIU/MjxkfNtjL7wQeRlRM91uxCYFqNDc dYnBpxfZqzIkZDm6tYAZipK1WbUUUn1D6/shNh/5ht/qDN+KaThr4yon2/mux9Ne JdYZ/Pdslb3Xg/gpqwoWGjiUtIt0EArM6WJGIbWLQNOmSjOZP7mXIF1teHjiQzie wLLZHjJq+u6idelpuiUbtU8sFtDyMQ1uE/jIHu9IMiOScBTqCyEbvOrMUZctr50O 2k1GLw/CoQd8h9Xk72STZK0e+KrJk6JXVYhNtw5Flk+OunFGIKAZCCLKBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkiyEpYHgeIpcQpbErkrn2mvjsYMB8GA1UdIwQY MBaAFAtKI30Rffd+C4qlEvbyX7IH+aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yYjU3ZmQtZGZlZC00MzYzLWI2YTIt MjVjOWFmYmIzMjIxLzEvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yYjU3ZmQtZGZlZC00MzYzLWI2YTItMjVjOWFmYmIzMjIx LzEvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8V6rj3I 6lkyjRyStWFahxKK1eIRVtzIr/XB0fBOrWkQuNo8YwLj8PFRqfBuNu/PK8Y5JtTu RXk1Y+I/scvENOrduDi/qGFq1nlrQI5yQRJmUXI+S0DeUMbpDLDVTWS7x+nDj9TQ 8AB7+kV9dCDhqC8YPWfa6NH2jjtAgrVFrxzAwSadn4c53/zQkjRNo6DM1W2i3y71 2fVxYiSOrKvoAZrtvuE+LY6OzJ5OCfc9aekEFH87aWVpNUZPR5cT+fbxJxP8Sb8l UfUwaEosu+7xIIjTHDXFhxu83jIcYEz3ziHfjGfO31oof17K1v04ppDuIoHUm3IJ jPRXp6QLe4h3xA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:23 2025 by rpki-client