This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft File: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json) Hash identifier: owlC3wHkX/33fuox7Omx+QEnTe+RaZVg7vkAeuyr/zE= Subject key identifier: 94:AC:09:5A:FA:40:60:96:C7:19:72:18:82:38:90:F0:3F:21:5D:B1 Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05 Certificate issuer: /CN=d098e907c63457e6ca6281dfe297d972bffda805 Certificate serial: 019AF23F7D1A98B8E65876079FDE0B87C296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft Manifest number: 128D Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: b9m2NKuBeiLxw7l2kgViJQ3b2PEU1wx+jajStWzl3q4=) 2: ur2jQXpGWWYECBsXTeT3ihs6vVk.roa (hash: BxlFUb0zmMnW7XaJszRYUfw8FuEEod2RQjrGiW/bsc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7d:1a:98:b8:e6:58:76:07:9f:de:0b:87:c2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=94ac095afa406096c7197218823890f03f215db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:30:aa:f0:51:74:8b:7b:5f:50:68:8d:e2: a8:55:bc:a4:13:be:6c:56:c8:87:9c:43:a8:ea:b4: 0e:80:b8:9b:f1:b2:3c:66:23:31:6d:16:70:c8:bd: de:e9:a4:53:4a:44:36:ed:79:4a:a0:48:7d:c6:27: 96:b3:bf:dd:1c:e3:f3:15:03:25:ca:40:4a:6f:a0: 41:0d:63:fd:56:7d:f7:80:ac:b7:67:13:76:a0:b0: 1e:7c:06:83:a4:81:99:ab:da:23:a0:6b:8f:40:e4: 83:f4:1e:17:9b:f0:f3:59:31:42:e7:50:dc:ef:b8: da:62:08:5d:b8:5b:02:78:1e:83:c1:ff:33:d2:3d: 7f:79:83:e6:d6:57:16:cd:a9:45:86:de:32:70:ee: bb:01:d0:cd:54:f9:9f:5c:c0:ef:45:ce:ce:e2:17: 7f:b7:52:6a:d9:93:a2:9d:86:60:1b:51:e1:73:62: 96:86:12:78:03:0d:96:0f:2f:a1:e6:bb:b5:07:91: 0f:c0:05:70:76:70:36:55:c8:df:81:c1:8c:f0:3e: 9c:3f:ba:e6:ec:6f:ac:66:6a:11:70:b0:5d:ba:eb: 9a:4d:2c:19:79:12:87:a8:72:f0:bc:5e:f6:88:e7: ff:c9:ca:be:a0:e1:d6:89:ef:26:9c:eb:fc:76:49: 5c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AC:09:5A:FA:40:60:96:C7:19:72:18:82:38:90:F0:3F:21:5D:B1 X509v3 Authority Key Identifier: keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:40:6b:a7:97:0a:0b:c5:08:d2:59:60:48:31:c7:5d:b3:41: 8a:d4:0d:0a:f0:e6:b0:38:99:3c:a8:48:0e:4e:dc:13:a4:62: 1b:c5:b9:48:7f:50:2d:eb:85:a6:f4:bf:a9:69:db:e4:5b:26: 4e:89:5e:95:4c:5f:49:d0:12:a7:9d:85:77:43:21:a4:2a:57: e5:c7:0f:e8:78:2d:c2:b6:62:be:8c:b3:e9:94:df:f6:40:d7: 44:70:89:79:26:14:b6:b9:48:0c:30:09:9f:6f:1d:f1:ba:a4: e7:42:1a:94:0d:c9:a5:d4:8b:49:d1:8a:48:69:28:35:5b:3c: 94:d3:0a:f5:89:93:9b:24:7b:2c:3a:3f:9f:16:0e:c5:78:e0: 56:1e:0a:59:9e:82:a8:e9:8d:f9:a9:88:69:dc:ce:d8:15:fd: bf:34:14:b9:c7:ee:39:31:04:54:a8:84:b0:d8:f6:79:45:30: a5:4f:4c:c2:51:81:b9:82:e1:38:c6:5f:05:c1:cb:e9:2f:7a: 00:00:a6:4b:47:2b:42:e2:d7:55:f1:3c:c1:c4:38:e6:cc:8d: e7:ae:b2:4d:23:de:df:69:7f:1f:ba:7a:54:b6:a7:df:94:f1: 1c:80:6e:c7:aa:ec:71:d9:6c:0b:93:f0:6a:d6:77:04:5a:7f: 61:51:6e:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP30amLjmWHYHn94Lh8KWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOThlOTA3YzYzNDU3ZTZjYTYyODFkZmUyOTdkOTcyYmZm ZGE4MDUwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD Eyg5NGFjMDk1YWZhNDA2MDk2YzcxOTcyMTg4MjM4OTBmMDNmMjE1ZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5QwqvBRdIt7X1BojeKoVbykE75s VsiHnEOo6rQOgLib8bI8ZiMxbRZwyL3e6aRTSkQ27XlKoEh9xieWs7/dHOPzFQMl ykBKb6BBDWP9Vn33gKy3ZxN2oLAefAaDpIGZq9ojoGuPQOSD9B4Xm/DzWTFC51Dc 77jaYghduFsCeB6Dwf8z0j1/eYPm1lcWzalFht4ycO67AdDNVPmfXMDvRc7O4hd/ t1Jq2ZOinYZgG1Hhc2KWhhJ4Aw2WDy+h5ru1B5EPwAVwdnA2VcjfgcGM8D6cP7rm 7G+sZmoRcLBduuuaTSwZeRKHqHLwvF72iOf/ycq+oOHWie8mnOv8dklcOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSsCVr6QGCWxxlyGII4kPA/IV2xMB8GA1UdIwQY MBaAFNCY6QfGNFfmymKB3+KX2XK//agFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2Mt MTBlMTNkNDNmMGRkLzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2MtMTBlMTNkNDNmMGRk LzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEBrp5cK C8UI0llgSDHHXbNBitQNCvDmsDiZPKhIDk7cE6RiG8W5SH9QLeuFpvS/qWnb5Fsm TolelUxfSdASp52Fd0MhpCpX5ccP6HgtwrZivoyz6ZTf9kDXRHCJeSYUtrlIDDAJ n28d8bqk50IalA3JpdSLSdGKSGkoNVs8lNMK9YmTmyR7LDo/nxYOxXjgVh4KWZ6C qOmN+amIadzO2BX9vzQUucfuOTEEVKiEsNj2eUUwpU9MwlGBuYLhOMZfBcHL6S96 AACmS0crQuLXVfE8wcQ45syN566yTSPe32l/H7p6VLan35TxHIBux6rscdlsC5Pw atZ3BFp/YVFu0g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:17 2025 by rpki-client