This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json) Hash identifier: /vIsbch3dYh2kN0Hi98Y4INyrZx+vaibBi+9u8jQJf4= Subject key identifier: AF:9B:6A:18:9B:FF:E3:46:11:FB:08:C9:51:DF:65:74:1E:92:CE:46 Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58 Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758 Certificate serial: 019B397CF49CCF42C703ED690A937DD47DFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft Manifest number: 1607 Signing time: Sat 20 Dec 2025 02:00:48 +0000 Manifest this update: Sat 20 Dec 2025 02:00:48 +0000 Manifest next update: Sun 21 Dec 2025 02:00:48 +0000 Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: YR9TPGqPK8eM9xxuSUEhQuaHyFmvFLlgOGKE/VqcvSU=) 2: D7sSJq2EzuylXPTSVOWPxBm3Ho8.roa (hash: gmpCwmfjITdv8gtFNL4Zn9iouUW+u1PcPnCsYBgoNzM=) 3: efe5amh4jlMydhivq3OF5qbDCpI.roa (hash: 6iw2gnDcZP6ZZJX73WBgPOkeEQEpMVtjxP8058iyjOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:f4:9c:cf:42:c7:03:ed:69:0a:93:7d:d4:7d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758 Validity Not Before: Dec 20 02:00:48 2025 GMT Not After : Dec 21 02:00:48 2025 GMT Subject: CN=af9b6a189bffe34611fb08c951df65741e92ce46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b4:75:b9:36:16:2d:ac:8e:83:d7:04:a3:7f: 05:43:59:a1:1d:9c:82:2f:5c:aa:78:27:0a:e7:8c: 60:0a:07:04:69:0b:3b:7b:15:cb:7f:36:31:d4:a0: 66:02:a9:7a:7c:85:1a:64:1b:27:e1:af:76:ec:fd: b6:aa:5e:8b:20:c7:1e:86:36:3d:e2:15:80:6e:4a: 8d:f9:e7:05:dd:d6:d9:bd:d1:9c:5e:dc:0d:3f:8c: 5a:d2:71:05:25:30:c9:17:0d:2a:02:19:a0:16:05: a6:64:3d:99:ee:5e:ed:f3:c4:27:19:e3:b5:3c:81: 80:7d:0a:6f:31:c8:f2:31:b6:b6:bd:a5:3a:5d:fb: fd:b2:2e:bf:12:68:e7:f7:ae:36:ad:b6:fb:4e:6a: 89:85:6d:f3:fb:40:ae:0c:f7:a2:b9:69:64:10:12: d5:9b:0d:88:a2:3b:f8:55:92:b0:ce:03:ee:2d:c4: 78:20:a0:ca:ea:0d:00:fc:68:b7:ec:05:93:08:60: 12:33:2b:34:73:02:4e:b1:7e:7e:00:2e:86:2a:df: c2:fd:85:75:98:50:41:1d:b6:5d:26:6c:2f:cd:c5: fc:e0:e1:3d:56:1b:fb:b9:79:5c:28:62:84:1e:5f: 6c:21:86:46:a8:f3:b8:ee:47:ab:2f:cd:4b:9d:99: 80:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9B:6A:18:9B:FF:E3:46:11:FB:08:C9:51:DF:65:74:1E:92:CE:46 X509v3 Authority Key Identifier: keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:16:c1:d9:83:fc:43:6c:1d:0f:14:67:78:18:23:3d:f0:94: 1e:62:33:de:f4:06:34:48:65:d6:f6:ae:9f:9b:b6:ca:22:54: 46:c2:d1:c4:ef:bd:33:9c:e1:f3:fc:12:18:eb:b2:e0:e5:a6: 8d:a8:0b:91:c2:72:36:36:7f:48:3b:f6:7f:79:74:5e:97:23: 5c:99:a9:41:b8:3a:74:8a:02:84:89:d2:86:14:91:95:29:52: f8:71:d0:14:e6:5f:3c:35:06:83:db:eb:fa:68:34:2b:52:08: d9:63:fd:eb:86:5b:f4:ca:da:e5:4a:9f:01:49:6f:db:5c:82: da:5f:39:54:0d:cc:29:3a:7a:4a:86:0a:cb:07:01:5f:49:1a: 39:66:25:17:d4:f7:eb:25:88:1f:3a:52:f0:fb:f9:4b:e7:b1: e0:fd:b6:35:6c:eb:b0:8a:89:db:b6:3a:4d:e5:94:1a:ca:a6: 38:7b:8c:4d:3f:a5:57:14:e1:d4:75:1a:02:b1:2f:6c:9b:67: 97:d1:71:94:60:93:1b:18:36:3a:c3:0b:40:40:c1:84:95:0a: ba:15:6d:f5:7e:51:ba:a9:2f:43:f2:e6:fd:25:0c:a4:96:e1: bc:56:63:d1:79:c2:e4:0f:56:5f:67:08:69:18:07:fa:85:dd: 77:3e:6d:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fPScz0LHA+1pCpN91H36MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOWE3ZjdmZGQ1NGExN2NlNWUxMmE0MTgyZWI2NTI0Nzlm OWQ3NTgwHhcNMjUxMjIwMDIwMDQ4WhcNMjUxMjIxMDIwMDQ4WjAzMTEwLwYDVQQD EyhhZjliNmExODliZmZlMzQ2MTFmYjA4Yzk1MWRmNjU3NDFlOTJjZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bR1uTYWLayOg9cEo38FQ1mhHZyC L1yqeCcK54xgCgcEaQs7exXLfzYx1KBmAql6fIUaZBsn4a927P22ql6LIMcehjY9 4hWAbkqN+ecF3dbZvdGcXtwNP4xa0nEFJTDJFw0qAhmgFgWmZD2Z7l7t88QnGeO1 PIGAfQpvMcjyMba2vaU6Xfv9si6/Emjn9642rbb7TmqJhW3z+0CuDPeiuWlkEBLV mw2Iojv4VZKwzgPuLcR4IKDK6g0A/Gi37AWTCGASMys0cwJOsX5+AC6GKt/C/YV1 mFBBHbZdJmwvzcX84OE9Vhv7uXlcKGKEHl9sIYZGqPO47kerL81LnZmAZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+bahib/+NGEfsIyVHfZXQeks5GMB8GA1UdIwQY MBaAFNCaf3/dVKF85eEqQYLrZSR5+ddYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgt NTg3NWE0NDg5ZGJhLzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgtNTg3NWE0NDg5ZGJh LzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxbB2YP8 Q2wdDxRneBgjPfCUHmIz3vQGNEhl1vaun5u2yiJURsLRxO+9M5zh8/wSGOuy4OWm jagLkcJyNjZ/SDv2f3l0XpcjXJmpQbg6dIoChInShhSRlSlS+HHQFOZfPDUGg9vr +mg0K1II2WP964Zb9Mra5UqfAUlv21yC2l85VA3MKTp6SoYKywcBX0kaOWYlF9T3 6yWIHzpS8Pv5S+ex4P22NWzrsIqJ27Y6TeWUGsqmOHuMTT+lVxTh1HUaArEvbJtn l9FxlGCTGxg2OsMLQEDBhJUKuhVt9X5RuqkvQ/Lm/SUMpJbhvFZj0XnC5A9WX2cI aRgH+oXddz5tVQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:30 2025 by rpki-client