This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft File: 0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json) Hash identifier: nJZDBKAz9cO62JJcUhtVggPHlDZSOirYKD7bbf38Dls= Subject key identifier: 79:3C:37:87:2E:AD:5C:F9:02:C6:37:AE:09:1C:88:36:79:40:BA:37 Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17 Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17 Certificate serial: 019AF12E61E7EE2460C8460130BE0D97C9BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft Manifest number: 0BF1 Signing time: Sat 06 Dec 2025 01:02:19 +0000 Manifest this update: Sat 06 Dec 2025 01:02:19 +0000 Manifest next update: Sun 07 Dec 2025 01:02:19 +0000 Files and hashes: 1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: ODEN4D8tuU2jdqcimr8ZbUpgLBH1WFZkXZIENeyjIus=) 2: qFkl9TmjJ7JQHzPlKEWAsMr-VIk.roa (hash: bNPdsQRy04HtNn/c+rfGq3WnL/GPuEnpubOXCkWKru8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:61:e7:ee:24:60:c8:46:01:30:be:0d:97:c9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17 Validity Not Before: Dec 6 01:02:19 2025 GMT Not After : Dec 7 01:02:19 2025 GMT Subject: CN=793c37872ead5cf902c637ae091c88367940ba37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:1a:4c:17:36:03:21:61:fc:3b:e5:d4:16: cd:85:99:b9:15:4b:2e:c7:d3:1d:3c:6e:0a:b2:ee: 9f:97:0e:ef:b2:c9:86:54:bf:9a:0a:a5:59:8d:76: fa:60:bb:8a:06:f2:4a:ba:61:39:3a:8f:18:16:57: 6a:ab:33:6a:29:9d:7e:76:fb:9b:6d:68:f7:0d:13: f7:46:07:30:47:bd:01:3c:21:71:ef:ca:f6:38:07: 4c:4a:fb:1e:db:7d:a1:6b:14:24:88:9f:cf:bc:c3: 8c:7e:7d:36:4a:27:96:87:87:6c:63:ad:54:a8:e3: fb:e5:67:10:7c:47:ca:00:81:a8:8a:05:0c:eb:7f: 2a:ce:ad:37:c6:99:78:32:22:7b:42:05:7f:f7:d5: ad:28:56:0d:d5:e8:f9:e9:0d:f8:58:9e:62:fc:ea: a8:aa:1d:e2:23:ba:7c:57:e5:f1:74:1d:4d:91:c5: f0:18:a8:7c:12:6c:cc:db:e4:27:f5:2a:e4:00:7c: 63:de:7a:ef:d9:95:0c:b9:79:d2:37:53:61:c6:3b: 59:3b:71:83:ae:90:8c:04:36:f7:50:81:e9:4d:b3: fd:e0:39:66:a5:94:f3:2b:aa:10:3b:66:bb:49:aa: 9f:42:71:6b:3b:79:40:aa:68:c2:fb:14:06:d5:d4: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3C:37:87:2E:AD:5C:F9:02:C6:37:AE:09:1C:88:36:79:40:BA:37 X509v3 Authority Key Identifier: keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:3b:7c:54:8d:ac:3f:a1:5a:e9:30:d8:61:3e:6a:d1:ed:59: cc:76:dc:c5:6b:1a:2f:71:41:e7:c0:f9:e0:3b:af:89:d4:06: f4:65:c3:72:42:23:35:b0:75:11:44:99:1a:3b:9e:87:14:16: bc:ac:2e:13:48:75:7c:2f:52:ae:1c:17:30:77:01:17:36:6b: c5:76:0f:13:96:64:c6:dc:76:e0:2c:80:d7:e6:0f:e3:50:b0: 79:40:0c:8b:20:12:51:e6:45:9b:71:24:80:49:fb:8d:a5:a8: a0:f8:b9:05:10:c2:aa:60:30:d3:9a:82:04:b6:c4:9e:27:db: c3:e9:3c:1c:a8:18:1f:b7:4e:d5:9f:68:3d:30:c6:a0:91:97: 10:76:a7:6a:f5:ab:d7:bc:66:30:66:38:f7:b4:12:d0:88:de: 61:54:ba:5c:81:a0:e8:82:cd:e9:7d:2c:19:94:8d:74:e2:b3: d2:17:92:e6:23:ec:8b:ac:4d:1a:6c:1d:6c:c2:3a:15:3e:40: ec:9a:0a:77:9d:89:8d:ff:46:b9:bd:96:31:b7:c0:8b:ee:dd: d9:8a:bd:13:c3:10:bd:07:09:74:1d:08:29:0c:67:98:2d:b4: 6c:e4:e8:c8:78:41:87:d2:8b:c9:2c:e1:ad:69:f7:cc:3d:75: ff:53:91:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmHn7iRgyEYBML4Nl8m/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyM2Y3ODM3M2NiOTY2NTRkMDMwNjA2NDY5MmVmYzRhZTc3 MTVmMTcwHhcNMjUxMjA2MDEwMjE5WhcNMjUxMjA3MDEwMjE5WjAzMTEwLwYDVQQD Eyg3OTNjMzc4NzJlYWQ1Y2Y5MDJjNjM3YWUwOTFjODgzNjc5NDBiYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVMaTBc2AyFh/Dvl1BbNhZm5FUsu x9MdPG4Ksu6flw7vssmGVL+aCqVZjXb6YLuKBvJKumE5Oo8YFldqqzNqKZ1+dvub bWj3DRP3RgcwR70BPCFx78r2OAdMSvse232haxQkiJ/PvMOMfn02SieWh4dsY61U qOP75WcQfEfKAIGoigUM638qzq03xpl4MiJ7QgV/99WtKFYN1ej56Q34WJ5i/Oqo qh3iI7p8V+XxdB1NkcXwGKh8EmzM2+Qn9SrkAHxj3nrv2ZUMuXnSN1NhxjtZO3GD rpCMBDb3UIHpTbP94DlmpZTzK6oQO2a7SaqfQnFrO3lAqmjC+xQG1dQKRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk8N4curVz5AsY3rgkciDZ5QLo3MB8GA1UdIwQY MBaAFNI/eDc8uWZU0DBgZGku/ErncV8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGo5NE56eTVabFRRTUdCa2FTNzhTdWR4WHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZTFlNzgtZGYyNC00ZmM2LWIwNzct MzlmZTcyM2VmNzMwLzEvMGo5NE56eTVabFRRTUdCa2FTNzhTdWR4WHhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85ZTFlNzgtZGYyNC00ZmM2LWIwNzctMzlmZTcyM2VmNzMw LzEvMGo5NE56eTVabFRRTUdCa2FTNzhTdWR4WHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzt8VI2s P6Fa6TDYYT5q0e1ZzHbcxWsaL3FB58D54DuvidQG9GXDckIjNbB1EUSZGjuehxQW vKwuE0h1fC9SrhwXMHcBFzZrxXYPE5Zkxtx24CyA1+YP41CweUAMiyASUeZFm3Ek gEn7jaWooPi5BRDCqmAw05qCBLbEnifbw+k8HKgYH7dO1Z9oPTDGoJGXEHanavWr 17xmMGY497QS0IjeYVS6XIGg6ILN6X0sGZSNdOKz0heS5iPsi6xNGmwdbMI6FT5A 7JoKd52Jjf9Gub2WMbfAi+7d2Yq9E8MQvQcJdB0IKQxnmC20bOToyHhBh9KLySzh rWn3zD11/1ORwg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:06 2025 by rpki-client