This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json) Hash identifier: Xgul7uq+wmdvZ8V6hHjbpJL9TnO/lI9Qxt4yJ9Wztcc= Subject key identifier: 95:C6:17:10:0B:9B:09:8D:EB:21:62:FB:78:1C:14:23:F6:F3:6C:A1 Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08 Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08 Certificate serial: 019B2BF8A35F1EA2705535573E7FAFF856D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft Manifest number: 0702 Signing time: Wed 17 Dec 2025 11:01:13 +0000 Manifest this update: Wed 17 Dec 2025 11:01:13 +0000 Manifest next update: Thu 18 Dec 2025 11:01:13 +0000 Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: R+11WJHyOC3JZcSft3XddXRqoP3f6lb5lLww6oNt02U=) 2: MODcJVbQ7tIyULkAi32tBDPkIQ0.roa (hash: b4XxIhCxRBgha/DwCew59vKJiKvbCmMkhqVHdTGJTgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:a3:5f:1e:a2:70:55:35:57:3e:7f:af:f8:56:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08 Validity Not Before: Dec 17 11:01:13 2025 GMT Not After : Dec 18 11:01:13 2025 GMT Subject: CN=95c617100b9b098deb2162fb781c1423f6f36ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f7:10:48:8c:ea:56:f8:d0:46:8b:65:b2:69: 1c:af:a6:12:1f:5c:10:3b:74:7f:f3:d4:66:4a:a9: 4e:9a:e5:76:58:31:23:ca:bf:5a:8e:96:f0:23:c8: 07:5e:04:76:4a:71:92:f4:16:e7:8e:0a:3b:22:b9: d5:93:25:68:ee:7a:4c:9d:3f:f0:73:5c:db:3e:36: b2:23:90:86:6e:44:94:a9:3f:92:a9:c0:cc:33:7e: 53:f4:e5:8a:39:fb:78:6f:8e:18:67:15:eb:d1:47: b2:99:57:50:1d:56:36:5e:eb:15:c1:41:5e:46:1d: 98:20:1a:16:61:c5:bb:7c:3c:ca:19:1c:44:93:1c: 77:33:3d:79:2f:e4:b4:d4:dd:64:c1:4b:2f:70:7f: d2:7a:11:d5:6a:63:27:60:4b:8c:de:20:ec:01:e5: f1:a5:74:48:6a:7e:15:cd:94:96:b7:13:e2:7e:a0: 69:cb:22:69:e6:f4:15:d4:20:d2:04:c0:1c:8e:cc: f6:bf:26:98:a5:91:e0:28:8a:44:b6:93:fd:6c:40: de:c5:8c:82:05:82:71:9f:96:46:2c:78:e4:a7:99: ea:71:69:2f:08:62:60:51:21:44:c2:76:97:af:7a: c4:15:0e:78:ab:57:75:85:0f:de:27:a9:32:51:05: ad:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C6:17:10:0B:9B:09:8D:EB:21:62:FB:78:1C:14:23:F6:F3:6C:A1 X509v3 Authority Key Identifier: keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:6d:3a:92:e3:b0:9f:f8:bc:97:2a:69:65:43:a1:3b:c6:90: 05:f5:08:66:1d:60:a6:2a:18:c3:3b:f8:26:eb:93:b0:75:f6: b9:28:c4:2b:c5:c7:0a:2a:11:0d:b1:47:7e:1d:03:66:01:5f: 7f:1d:a8:e9:45:52:2d:59:5a:d1:7e:c5:26:e2:0c:52:6c:39: 54:81:75:e6:c4:82:c5:68:14:61:9c:e9:df:28:3d:84:e4:b6: 6a:ca:96:c7:d5:fa:c9:94:61:45:88:55:28:e3:aa:26:40:b2: c6:6f:6c:eb:79:22:c8:cd:a6:f1:2a:85:70:90:d3:68:05:b4: 01:1d:37:d0:0e:df:bc:fb:52:a6:5a:a6:ae:5f:25:b8:e2:cd: 7d:20:0f:07:1b:7b:c1:4e:b7:6e:9b:65:43:6c:d2:d4:5e:f4: af:db:3d:a0:ee:b3:f1:89:6d:f2:cc:44:d6:69:de:d0:78:24: 6c:8e:cc:5f:c5:7b:53:7a:8a:db:78:07:b2:85:00:8a:de:f1: c1:e1:2b:6f:2f:33:04:59:c7:33:86:af:40:2b:bb:ad:34:6b: 61:ec:63:ec:64:08:0f:e0:2e:47:b7:a6:79:5e:ec:a0:2c:7b: 89:eb:1d:e5:5c:6d:4f:0d:eb:34:90:4e:60:b9:ef:41:55:e8: e4:3b:4f:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+KNfHqJwVTVXPn+v+FbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzA4ZGQxMTIwNmZhNTJkYjAwNGU0NTVhYzhkOTk1YWY0 YzNiMDgwHhcNMjUxMjE3MTEwMTEzWhcNMjUxMjE4MTEwMTEzWjAzMTEwLwYDVQQD Eyg5NWM2MTcxMDBiOWIwOThkZWIyMTYyZmI3ODFjMTQyM2Y2ZjM2Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvcQSIzqVvjQRotlsmkcr6YSH1wQ O3R/89RmSqlOmuV2WDEjyr9ajpbwI8gHXgR2SnGS9Bbnjgo7IrnVkyVo7npMnT/w c1zbPjayI5CGbkSUqT+SqcDMM35T9OWKOft4b44YZxXr0UeymVdQHVY2XusVwUFe Rh2YIBoWYcW7fDzKGRxEkxx3Mz15L+S01N1kwUsvcH/SehHVamMnYEuM3iDsAeXx pXRIan4VzZSWtxPifqBpyyJp5vQV1CDSBMAcjsz2vyaYpZHgKIpEtpP9bEDexYyC BYJxn5ZGLHjkp5nqcWkvCGJgUSFEwnaXr3rEFQ54q1d1hQ/eJ6kyUQWtjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXGFxALmwmN6yFi+3gcFCP282yhMB8GA1UdIwQY MBaAFNIwjdESBvpS2wBORVrI2ZWvTDsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYt ZGFkYmVlMWUyYzJjLzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYtZGFkYmVlMWUyYzJj LzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp206kuOw n/i8lyppZUOhO8aQBfUIZh1gpioYwzv4JuuTsHX2uSjEK8XHCioRDbFHfh0DZgFf fx2o6UVSLVla0X7FJuIMUmw5VIF15sSCxWgUYZzp3yg9hOS2asqWx9X6yZRhRYhV KOOqJkCyxm9s63kiyM2m8SqFcJDTaAW0AR030A7fvPtSplqmrl8luOLNfSAPBxt7 wU63bptlQ2zS1F70r9s9oO6z8Ylt8sxE1mne0HgkbI7MX8V7U3qK23gHsoUAit7x weErby8zBFnHM4avQCu7rTRrYexj7GQID+AuR7emeV7soCx7iesd5VxtTw3rNJBO YLnvQVXo5DtP/w== -----END CERTIFICATE-----Generated at Wed Dec 17 13:23:26 2025 by rpki-client