This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json) Hash identifier: SM8V+vXAvTc+F1viwwtaoR6o64mSaQThsYR6cS3pI/Y= Subject key identifier: E5:C4:DD:9F:E8:83:B5:74:2A:8A:D8:29:66:CC:7F:FD:03:E9:61:1B Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60 Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60 Certificate serial: 019AF57774E72ED255BBE35B6852F4298D1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 21:00:37 +0000 Manifest this update: Sat 06 Dec 2025 21:00:37 +0000 Manifest next update: Sun 07 Dec 2025 21:00:37 +0000 Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=) 2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: 0OQV66ihPeJAuJRWYE2tw7K4ZpJCkSLyx+Kh80QVv70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:74:e7:2e:d2:55:bb:e3:5b:68:52:f4:29:8d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60 Validity Not Before: Dec 6 21:00:37 2025 GMT Not After : Dec 7 21:00:37 2025 GMT Subject: CN=e5c4dd9fe883b5742a8ad82966cc7ffd03e9611b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:25:b0:f7:c6:55:8a:59:12:c8:82:f5:50:2c: 2e:b0:4d:09:01:21:82:57:6c:42:08:bf:de:45:64: 36:dc:fe:79:93:47:75:41:3b:8c:4a:6f:28:0d:af: fd:06:49:af:f2:c7:2e:ad:ec:91:63:44:2d:f8:0c: 89:24:74:f6:2a:09:0f:97:c6:02:9d:3f:50:10:a7: 96:93:2a:94:8c:22:d6:91:4a:d5:ea:2a:6b:e0:bf: db:97:a4:b2:81:73:c3:a4:37:74:56:58:72:c8:10: da:a5:c6:01:fb:c3:50:ba:a9:d1:59:a7:4b:3e:42: 97:cd:89:6b:22:d6:de:0f:cb:3b:66:b2:fb:e9:52: c4:a0:7d:b7:9e:78:2d:8c:93:7f:0c:f5:dd:fe:8b: 85:8d:da:48:ba:44:29:81:42:e2:39:20:41:3b:6e: 66:1b:03:c6:b7:76:dc:42:8c:00:66:0c:fa:88:1a: 9d:25:5d:f6:12:33:68:d7:19:ce:e8:12:0c:0d:a9: ac:9d:e9:79:73:2b:37:f0:cc:ef:22:16:a7:2f:da: b3:78:21:67:9b:c4:01:bf:24:e2:8c:0b:19:65:fa: c1:2d:d3:05:a5:0e:6d:73:88:5d:30:61:7d:56:0a: c7:38:8c:fe:ec:51:5b:ff:c9:95:c9:4b:56:0f:1a: 6c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C4:DD:9F:E8:83:B5:74:2A:8A:D8:29:66:CC:7F:FD:03:E9:61:1B X509v3 Authority Key Identifier: keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ae:1b:74:6d:9f:f1:52:6a:9b:0f:79:a3:73:58:29:03:dd: de:18:b0:a5:6d:5e:1d:c7:3a:46:88:0e:72:6f:4e:8d:a5:e5: 39:f0:67:45:28:68:f8:e7:34:62:c5:2f:04:c8:52:33:c4:61: 5d:e4:a5:47:d4:05:fa:40:79:e2:11:04:fa:74:4c:20:b4:f5: 37:84:b4:dd:78:f3:f5:e0:a0:98:7d:e2:af:89:2f:1a:b7:d6: ef:02:c1:6f:04:54:c4:36:ba:33:e0:96:c5:35:44:cf:9d:8d: 7a:70:41:43:2d:9e:d2:00:d3:bf:95:94:8f:af:dc:23:74:35: 38:9c:d4:13:93:d3:c7:38:dd:c4:1a:12:a8:8f:da:cb:e2:69: cd:28:7d:1a:94:e7:c9:c6:1e:52:fc:ba:70:be:a4:ef:e6:c6: 9c:35:51:d0:d7:1d:5c:1b:b0:af:f8:51:4d:05:33:b7:38:11: 5c:62:2e:a5:03:f8:22:e0:24:95:e3:98:be:eb:ab:c7:c7:8d: f8:d3:f7:f0:c1:bf:bc:e1:09:f9:5e:88:fa:d3:d6:c6:51:2b: 66:ce:4a:93:7e:8c:2c:0a:06:2a:3e:b9:ad:10:26:fb:0a:1f: 03:73:95:6a:43:2b:e1:51:c5:62:36:de:f1:cd:e0:07:05:d8: 11:c7:80:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d3TnLtJVu+NbaFL0KY0fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDhmYjljZjE3ZGVjZTZhZGRiMDhlZWZkOWJlZTg0MmMx ZTJiNjAwHhcNMjUxMjA2MjEwMDM3WhcNMjUxMjA3MjEwMDM3WjAzMTEwLwYDVQQD EyhlNWM0ZGQ5ZmU4ODNiNTc0MmE4YWQ4Mjk2NmNjN2ZmZDAzZTk2MTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSWw98ZVilkSyIL1UCwusE0JASGC V2xCCL/eRWQ23P55k0d1QTuMSm8oDa/9Bkmv8scureyRY0Qt+AyJJHT2KgkPl8YC nT9QEKeWkyqUjCLWkUrV6ipr4L/bl6SygXPDpDd0VlhyyBDapcYB+8NQuqnRWadL PkKXzYlrItbeD8s7ZrL76VLEoH23nngtjJN/DPXd/ouFjdpIukQpgULiOSBBO25m GwPGt3bcQowAZgz6iBqdJV32EjNo1xnO6BIMDamsnel5cys38MzvIhanL9qzeCFn m8QBvyTijAsZZfrBLdMFpQ5tc4hdMGF9VgrHOIz+7FFb/8mVyUtWDxpsSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXE3Z/og7V0KorYKWbMf/0D6WEbMB8GA1UdIwQY MBaAFP9I+5zxfezmrdsI7v2b7oQsHitgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzIt OTA1NDA3ZWIwZjUzLzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzItOTA1NDA3ZWIwZjUz LzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZa4bdG2f 8VJqmw95o3NYKQPd3hiwpW1eHcc6RogOcm9OjaXlOfBnRSho+Oc0YsUvBMhSM8Rh XeSlR9QF+kB54hEE+nRMILT1N4S03Xjz9eCgmH3ir4kvGrfW7wLBbwRUxDa6M+CW xTVEz52NenBBQy2e0gDTv5WUj6/cI3Q1OJzUE5PTxzjdxBoSqI/ay+JpzSh9GpTn ycYeUvy6cL6k7+bGnDVR0NcdXBuwr/hRTQUztzgRXGIupQP4IuAkleOYvuurx8eN +NP38MG/vOEJ+V6I+tPWxlErZs5Kk36MLAoGKj65rRAm+wofA3OVakMr4VHFYjbe 8c3gBwXYEceAMQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:08:58 2025 by rpki-client