This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json) Hash identifier: Wifo2IFwK8A4XWDea1tK24WSjCHNVfJmFQQ07Cpfm9U= Subject key identifier: D4:D1:CE:FE:56:F6:61:D3:91:C2:A8:23:C2:4E:97:6E:74:A6:72:2F Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Certificate serial: 019B39468667B73DFC8C8F1E757FFEA40102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft Manifest number: 0FB4 Signing time: Sat 20 Dec 2025 01:01:21 +0000 Manifest this update: Sat 20 Dec 2025 01:01:21 +0000 Manifest next update: Sun 21 Dec 2025 01:01:21 +0000 Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=) 2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=) 3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: ym4AB1/S4JUqCT2AP1fCd5/vnolYpiuFO8/6WCgjHTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:86:67:b7:3d:fc:8c:8f:1e:75:7f:fe:a4:01:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Validity Not Before: Dec 20 01:01:21 2025 GMT Not After : Dec 21 01:01:21 2025 GMT Subject: CN=d4d1cefe56f661d391c2a823c24e976e74a6722f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:8a:c2:19:de:ab:af:db:54:7c:ee:a3:3d: 5e:1a:f0:67:75:c0:de:32:81:09:2e:2f:b3:93:db: b3:9c:ce:ca:68:64:bd:45:7a:0e:51:74:2a:48:4c: e7:99:43:10:f8:d6:f6:7b:0d:43:cc:9c:76:0d:82: ed:f6:23:2a:79:f8:1c:ed:a0:d8:66:fd:96:23:50: 41:77:2d:26:22:b0:59:5c:5d:bf:9c:e1:05:df:9c: b1:81:b3:a3:bb:ed:1a:b8:3c:d5:8a:98:30:4d:3e: 55:41:03:c3:ff:e6:9d:a2:03:51:41:58:17:06:fa: c3:3a:5f:c9:45:02:e5:3e:cc:d7:15:94:66:02:29: 4b:84:51:b4:7b:ce:14:b6:9e:2e:aa:1b:68:89:60: 86:df:a1:8b:2d:cb:4f:53:f2:23:a4:8e:8c:3a:69: d3:29:4b:72:f5:57:f8:c5:0c:2b:9c:06:9b:3e:11: 15:be:64:fd:6f:1f:97:4f:a8:3f:71:c1:fa:35:1c: 4f:39:c6:69:6d:44:40:57:3e:bf:8b:28:56:b6:19: 9d:38:e3:a0:52:c3:f0:ee:b0:58:da:08:7b:47:eb: 05:c0:c5:57:82:ee:5e:e9:af:56:95:96:54:17:4c: 43:39:52:b1:c6:ae:43:8f:e2:a1:0f:ef:cf:1c:59: 5b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D1:CE:FE:56:F6:61:D3:91:C2:A8:23:C2:4E:97:6E:74:A6:72:2F X509v3 Authority Key Identifier: keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ae:27:f5:b4:70:28:3e:02:2c:a7:16:39:22:ed:ea:e6:12: 05:c3:62:6e:92:e0:43:30:dc:54:ab:de:b0:2f:99:6b:22:df: 0f:55:2a:01:19:28:0c:e6:32:09:2a:77:7e:4e:04:a4:aa:77: 55:07:ea:a9:2d:45:e7:78:3e:0f:c2:20:97:cc:46:2e:63:f2: 40:29:63:7c:ed:4e:c3:8a:7f:ca:d0:52:50:ad:2a:38:c7:20: 77:ef:ae:d0:49:31:47:b4:7e:ca:4b:c0:44:b8:1f:bf:d5:f7: a4:ea:48:ce:af:45:4f:41:ae:90:ea:16:0f:ad:7f:68:0e:87: 41:4c:d1:ad:74:9b:08:ca:95:b8:bc:d3:25:69:37:5f:6c:cd: 1a:a6:d9:f4:da:fc:f1:75:95:04:ba:d6:d0:15:5c:c8:89:72: f3:a3:2f:52:19:72:7e:c4:79:76:98:34:eb:56:64:90:92:2a: b1:d9:f6:32:99:b3:d9:94:a4:ae:17:49:62:ef:87:d9:f9:7c: 33:54:d2:7a:4b:ac:ec:3d:b3:19:1a:d6:a0:51:dd:b6:c5:43: 2e:0e:23:ba:a4:49:c5:af:fb:6d:a6:ff:7a:eb:3c:c4:1d:f5: a0:3d:f7:19:c2:76:e0:80:87:09:24:a8:4b:1f:36:19:0d:a6: 7d:48:14:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RoZntz38jI8edX/+pAECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWY2MjY2ZjYxYTFlY2NkNGRlZTA5NGNjNzFjNmRiODZi YmIzN2IwHhcNMjUxMjIwMDEwMTIxWhcNMjUxMjIxMDEwMTIxWjAzMTEwLwYDVQQD EyhkNGQxY2VmZTU2ZjY2MWQzOTFjMmE4MjNjMjRlOTc2ZTc0YTY3MjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwaKwhneq6/bVHzuoz1eGvBndcDe MoEJLi+zk9uznM7KaGS9RXoOUXQqSEznmUMQ+Nb2ew1DzJx2DYLt9iMqefgc7aDY Zv2WI1BBdy0mIrBZXF2/nOEF35yxgbOju+0auDzVipgwTT5VQQPD/+adogNRQVgX BvrDOl/JRQLlPszXFZRmAilLhFG0e84Utp4uqhtoiWCG36GLLctPU/IjpI6MOmnT KUty9Vf4xQwrnAabPhEVvmT9bx+XT6g/ccH6NRxPOcZpbURAVz6/iyhWthmdOOOg UsPw7rBY2gh7R+sFwMVXgu5e6a9WlZZUF0xDOVKxxq5Dj+KhD+/PHFlbMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTRzv5W9mHTkcKoI8JOl250pnIvMB8GA1UdIwQY MBaAFKSfYmb2Gh7M1N7glMxxxtuGu7N7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEt OThiZTMzNWYzYzU0LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEtOThiZTMzNWYzYzU0 LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe64n9bRw KD4CLKcWOSLt6uYSBcNibpLgQzDcVKvesC+ZayLfD1UqARkoDOYyCSp3fk4EpKp3 VQfqqS1F53g+D8Igl8xGLmPyQCljfO1Ow4p/ytBSUK0qOMcgd++u0EkxR7R+ykvA RLgfv9X3pOpIzq9FT0GukOoWD61/aA6HQUzRrXSbCMqVuLzTJWk3X2zNGqbZ9Nr8 8XWVBLrW0BVcyIly86MvUhlyfsR5dpg061ZkkJIqsdn2Mpmz2ZSkrhdJYu+H2fl8 M1TSekus7D2zGRrWoFHdtsVDLg4juqRJxa/7bab/eus8xB31oD33GcJ24ICHCSSo Sx82GQ2mfUgUeQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:58:43 2025 by rpki-client