This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json) Hash identifier: j7qSAJ34/qBybGPs8wH6dbTzvEA7TVf5zSVBTrdDLFA= Subject key identifier: C4:44:A1:66:A0:61:64:95:EB:A4:A5:C1:37:1A:D4:91:3D:30:B1:04 Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac Certificate serial: 019AF6F84745FAB40090A11014BAF52067BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft Manifest number: 1484 Signing time: Sun 07 Dec 2025 04:00:57 +0000 Manifest this update: Sun 07 Dec 2025 04:00:57 +0000 Manifest next update: Mon 08 Dec 2025 04:00:57 +0000 Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: sy2zPclQfWCg4GsozaYWR+qogVzm0fG/v8cyNaUiLqc=) 2: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (hash: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:47:45:fa:b4:00:90:a1:10:14:ba:f5:20:67:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac Validity Not Before: Dec 7 04:00:57 2025 GMT Not After : Dec 8 04:00:57 2025 GMT Subject: CN=c444a166a0616495eba4a5c1371ad4913d30b104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:55:94:d3:a8:ce:e5:6f:87:ad:19:c4:08:b0: 09:24:72:f6:e6:94:2a:f6:65:68:fc:d1:5a:e4:fb: cc:3a:fb:5b:55:61:50:78:09:3a:2d:42:c8:36:06: a0:2d:7f:cc:65:9b:5b:08:85:ef:56:57:c8:bf:e8: 8a:ee:e3:a5:2c:cd:73:d7:01:87:4f:7d:f4:27:e3: 4a:9a:a6:4f:fd:ce:d9:98:26:80:42:dc:3d:ed:cc: 7c:a7:4e:62:84:26:36:f9:e7:fa:38:19:30:e3:33: cb:50:aa:ac:ad:19:cb:a7:2f:5c:e1:69:04:36:60: b4:75:ec:9d:7d:f1:50:63:4f:2b:53:2a:ee:a9:da: 53:ea:f9:b6:79:5d:9a:16:b6:b4:09:88:6f:ab:57: c6:74:49:a0:c0:61:11:ee:c2:5b:87:ab:98:42:e3: 55:bc:8e:63:9a:87:13:1d:49:88:20:90:d9:b0:bd: 76:c8:bb:5a:bc:36:73:60:64:1e:d5:5e:e6:e7:a2: 50:f8:30:58:c0:e1:de:16:ab:b9:25:20:1e:48:1b: d2:60:05:f7:18:a4:05:31:7a:0d:0d:63:b3:18:d7: 82:20:58:03:b3:30:f9:1a:6d:da:a4:13:d8:81:97: d0:70:61:f2:f6:17:c9:86:c4:f0:39:65:8e:90:b1: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:44:A1:66:A0:61:64:95:EB:A4:A5:C1:37:1A:D4:91:3D:30:B1:04 X509v3 Authority Key Identifier: keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:4c:ac:90:3f:fa:62:bc:2f:30:73:26:f2:22:95:19:b1:ff: 10:9b:23:53:85:54:71:cd:e5:d0:80:04:2c:3f:89:b8:92:26: ed:c4:d5:0d:32:f3:d3:66:49:d6:4d:1f:c1:4f:fe:3d:54:20: b8:0b:d8:aa:1a:01:74:98:83:86:8f:a0:03:ed:03:96:d9:3d: 27:79:a2:90:0b:ea:fa:3c:80:2d:4e:5e:f8:11:cc:14:b6:b9: 13:af:85:8e:56:ff:9a:20:a6:f8:d9:79:0b:0c:1e:1e:c3:4d: fa:6a:9b:27:32:14:3b:1e:7a:ec:59:a5:11:e3:60:da:e4:18: 96:52:99:ad:e3:c5:69:01:95:f2:e3:de:87:72:c9:67:7a:af: 59:92:69:60:70:3b:90:7c:76:66:d7:c5:70:d9:06:f5:8d:08: 2f:c3:66:1b:78:79:3d:64:33:7a:12:23:37:48:77:6d:d7:e8: ac:ef:2b:36:44:37:d4:d1:a1:75:81:22:0e:a4:42:24:d3:d5: e2:38:99:f0:02:b9:89:55:a9:42:ce:fb:e6:56:ed:00:b0:00: a9:07:04:39:b5:33:48:8d:dd:42:b8:8b:0b:84:14:3c:22:5f: b4:18:f5:8c:3c:df:41:05:e1:82:04:89:8d:6d:74:15:a2:36: 47:6f:8a:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+EdF+rQAkKEQFLr1IGe/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzQ3OThlMDcxMmYxNTUyOTJkMzIxMWY3YzQ0NzIyM2Nj ZDQ5YWMwHhcNMjUxMjA3MDQwMDU3WhcNMjUxMjA4MDQwMDU3WjAzMTEwLwYDVQQD EyhjNDQ0YTE2NmEwNjE2NDk1ZWJhNGE1YzEzNzFhZDQ5MTNkMzBiMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFWU06jO5W+HrRnECLAJJHL25pQq 9mVo/NFa5PvMOvtbVWFQeAk6LULINgagLX/MZZtbCIXvVlfIv+iK7uOlLM1z1wGH T330J+NKmqZP/c7ZmCaAQtw97cx8p05ihCY2+ef6OBkw4zPLUKqsrRnLpy9c4WkE NmC0deydffFQY08rUyruqdpT6vm2eV2aFra0CYhvq1fGdEmgwGER7sJbh6uYQuNV vI5jmocTHUmIIJDZsL12yLtavDZzYGQe1V7m56JQ+DBYwOHeFqu5JSAeSBvSYAX3 GKQFMXoNDWOzGNeCIFgDszD5Gm3apBPYgZfQcGHy9hfJhsTwOWWOkLEC9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMREoWagYWSV66SlwTca1JE9MLEEMB8GA1UdIwQY MBaAFNI0eY4HEvFVKS0yEffERyI8zUmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEt ODJmN2I5OWM1NDY3LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEtODJmN2I5OWM1NDY3 LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUyskD/6 YrwvMHMm8iKVGbH/EJsjU4VUcc3l0IAELD+JuJIm7cTVDTLz02ZJ1k0fwU/+PVQg uAvYqhoBdJiDho+gA+0Dltk9J3mikAvq+jyALU5e+BHMFLa5E6+Fjlb/miCm+Nl5 CwweHsNN+mqbJzIUOx567FmlEeNg2uQYllKZrePFaQGV8uPeh3LJZ3qvWZJpYHA7 kHx2ZtfFcNkG9Y0IL8NmG3h5PWQzehIjN0h3bdforO8rNkQ31NGhdYEiDqRCJNPV 4jiZ8AK5iVWpQs775lbtALAAqQcEObUzSI3dQriLC4QUPCJftBj1jDzfQQXhggSJ jW10FaI2R2+Kiw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:47:16 2025 by rpki-client