This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft File: D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json) Hash identifier: mqegsRctGmVdfSJMJ2dq4oEV11MP5RlVXHI9fgYybWQ= Subject key identifier: 91:52:5C:1F:B6:8C:AB:64:4D:BA:3E:B7:D0:C6:9D:AE:2C:BA:9D:1F Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D Certificate issuer: /CN=0ff8e93f3472ea6be58f3feb74495470095a177d Certificate serial: 019B3BA235B427ADCAB8BBFDE58B37A4CD81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 12:00:44 +0000 Manifest this update: Sat 20 Dec 2025 12:00:44 +0000 Manifest next update: Sun 21 Dec 2025 12:00:44 +0000 Files and hashes: 1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: Rj4T6mN5g/sfKI6rEqMoGV0hg0AY+7fGTZf/Wll1wl0=) 2: hfGXrKTt6u41NiQkrNCRG03FgTo.roa (hash: DUf/jFg7LXlvnvWQ7PksqyhLZu7mleW34Ka9y48nKKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:35:b4:27:ad:ca:b8:bb:fd:e5:8b:37:a4:cd:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d Validity Not Before: Dec 20 12:00:44 2025 GMT Not After : Dec 21 12:00:44 2025 GMT Subject: CN=91525c1fb68cab644dba3eb7d0c69dae2cba9d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:b5:93:99:6d:c2:a7:06:c1:14:3f:0b:25: 4d:8e:71:85:f9:4b:ee:1c:af:a7:70:98:0a:cc:91: df:46:5b:ab:e1:8e:fa:58:50:7d:5f:41:62:b2:12: da:ca:2e:d3:2d:05:57:95:39:f6:48:89:4e:70:07: d6:b1:81:e6:df:66:c7:ab:d0:4d:17:1c:30:a1:ae: c4:b9:44:48:9d:65:35:81:d2:d1:59:90:db:de:ff: 23:11:6c:cf:e6:b4:39:d7:26:80:d6:48:bb:3d:43: dc:06:6d:6e:a3:de:90:11:4e:19:b9:1a:a9:10:b7: a7:33:53:c1:77:6b:0d:a1:d1:ea:e5:54:f8:82:83: b3:eb:91:2d:f1:a0:44:71:1f:da:9c:f2:ab:73:fa: 91:7a:17:f0:69:76:0e:00:63:3d:0f:e7:11:30:0f: cf:ea:09:98:ef:a0:76:6d:86:ca:93:f6:98:03:de: 12:67:6a:4a:cd:82:0a:e1:46:21:52:c1:07:b0:ed: 15:5c:4d:92:1d:f0:1c:25:d3:b0:b1:be:1b:de:56: 14:8f:33:7b:c9:6e:6a:d9:ee:20:00:ef:02:a4:9d: 3c:14:d3:e1:05:e4:95:cb:3d:ed:99:16:dc:e7:45: 80:70:4a:aa:e3:65:30:92:88:00:a4:6a:f6:b2:c4: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:52:5C:1F:B6:8C:AB:64:4D:BA:3E:B7:D0:C6:9D:AE:2C:BA:9D:1F X509v3 Authority Key Identifier: keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f6:bf:2c:bd:0b:e5:5b:f7:aa:a6:cc:aa:e6:ca:4f:1d:a0: d6:45:38:ac:d2:07:19:32:be:a4:e9:6e:1e:d9:86:cd:65:6a: 9e:e9:e0:46:e2:28:ee:d1:2e:83:b4:2b:52:93:e3:72:9c:22: af:6b:4b:7e:5d:9e:1a:77:eb:a7:f1:b7:51:c8:c7:51:a1:c7: 0d:5a:40:9c:bb:86:08:7d:ce:80:29:4f:83:0b:f6:61:1b:e9: e6:32:f8:2a:e1:78:c1:9d:d1:69:67:31:9a:83:de:7d:13:00: b7:65:e0:2b:ec:90:7d:df:95:28:36:cb:eb:77:ca:e3:35:35: 93:dc:22:4f:12:4a:cd:2b:eb:ac:df:3f:a1:de:35:f8:e7:49: e2:08:55:48:c3:1f:02:a9:31:4c:3d:54:89:5f:e5:a1:93:de: 2a:57:e3:1e:14:b4:b4:9b:7f:73:3a:69:7b:50:8a:5f:14:84: 89:39:ce:29:a4:cd:92:35:92:48:71:4d:2a:d6:58:b1:bb:96: 6e:28:91:4d:d4:07:32:f3:40:eb:64:68:42:c5:1a:6b:e2:5f: 7c:be:74:13:40:e7:d2:e1:94:0b:83:81:1f:ae:59:b9:f4:38: 17:70:cd:67:cd:0a:32:b5:84:a9:14:fc:24:2d:ef:ad:f9:96: c2:93:e7:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ojW0J63KuLv95Ys3pM2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjhlOTNmMzQ3MmVhNmJlNThmM2ZlYjc0NDk1NDcwMDk1 YTE3N2QwHhcNMjUxMjIwMTIwMDQ0WhcNMjUxMjIxMTIwMDQ0WjAzMTEwLwYDVQQD Eyg5MTUyNWMxZmI2OGNhYjY0NGRiYTNlYjdkMGM2OWRhZTJjYmE5ZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Bu1k5ltwqcGwRQ/CyVNjnGF+Uvu HK+ncJgKzJHfRlur4Y76WFB9X0FishLayi7TLQVXlTn2SIlOcAfWsYHm32bHq9BN Fxwwoa7EuURInWU1gdLRWZDb3v8jEWzP5rQ51yaA1ki7PUPcBm1uo96QEU4ZuRqp ELenM1PBd2sNodHq5VT4goOz65Et8aBEcR/anPKrc/qRehfwaXYOAGM9D+cRMA/P 6gmY76B2bYbKk/aYA94SZ2pKzYIK4UYhUsEHsO0VXE2SHfAcJdOwsb4b3lYUjzN7 yW5q2e4gAO8CpJ08FNPhBeSVyz3tmRbc50WAcEqq42UwkogApGr2ssSVTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFSXB+2jKtkTbo+t9DGna4sup0fMB8GA1UdIwQY MBaAFA/46T80cupr5Y8/63RJVHAJWhd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYt ZmNlM2Q1OTBjNmRiLzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYtZmNlM2Q1OTBjNmRi LzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfa/LL0L 5Vv3qqbMqubKTx2g1kU4rNIHGTK+pOluHtmGzWVqnungRuIo7tEug7QrUpPjcpwi r2tLfl2eGnfrp/G3UcjHUaHHDVpAnLuGCH3OgClPgwv2YRvp5jL4KuF4wZ3RaWcx moPefRMAt2XgK+yQfd+VKDbL63fK4zU1k9wiTxJKzSvrrN8/od41+OdJ4ghVSMMf AqkxTD1UiV/loZPeKlfjHhS0tJt/czppe1CKXxSEiTnOKaTNkjWSSHFNKtZYsbuW biiRTdQHMvNA62RoQsUaa+JffL50E0Dn0uGUC4OBH65ZufQ4F3DNZ80KMrWEqRT8 JC3vrfmWwpPnRA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:37:43 2025 by rpki-client