This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json) Hash identifier: 7oXHk/4tvWgb218g4Iy3PXCxEkPoiP8UDjZdYNXgqmc= Subject key identifier: 58:C8:D9:3C:3E:73:83:E3:8C:9C:19:91:6E:3D:AE:04:10:1D:0A:39 Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08 Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08 Certificate serial: 019B2A09B439226EFB392EDBED84211952D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft Manifest number: 0701 Signing time: Wed 17 Dec 2025 02:00:37 +0000 Manifest this update: Wed 17 Dec 2025 02:00:37 +0000 Manifest next update: Thu 18 Dec 2025 02:00:37 +0000 Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: e8uqyhSb0pLmYzSo6O/B6BtlvcK8YVHnJjOskQ2OFG8=) 2: MODcJVbQ7tIyULkAi32tBDPkIQ0.roa (hash: b4XxIhCxRBgha/DwCew59vKJiKvbCmMkhqVHdTGJTgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:09:b4:39:22:6e:fb:39:2e:db:ed:84:21:19:52:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08 Validity Not Before: Dec 17 02:00:37 2025 GMT Not After : Dec 18 02:00:37 2025 GMT Subject: CN=58c8d93c3e7383e38c9c19916e3dae04101d0a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8d:da:6a:ad:15:2e:63:5e:47:74:ae:22:73: a4:1a:17:eb:f2:dd:e4:53:a7:f9:28:c0:e3:47:dc: ad:1a:81:4a:a8:a2:e5:18:c7:3f:b7:0d:01:ec:4f: 54:4a:91:34:f1:4a:5f:2e:09:76:ac:12:eb:c3:58: 0c:73:01:e9:31:2d:df:19:89:e2:c3:c7:d6:e6:0f: 2f:41:8a:02:ef:2a:bc:f9:b7:11:02:41:14:25:78: e4:79:15:d7:f4:4f:6f:0f:b1:37:50:09:d7:1a:7d: d8:a7:a4:36:4f:2e:78:dc:9e:64:52:1f:f1:e7:77: 3a:c7:57:07:0e:1c:ef:a8:31:03:6e:77:b4:31:f6: b6:95:ae:22:5d:2d:a5:fb:80:1b:39:0f:f0:7f:6b: 0e:cb:22:84:80:08:e0:84:41:be:69:05:f2:cd:f0: 17:38:f7:56:93:67:07:69:81:fe:2a:83:1d:a2:80: fd:e1:fa:e6:60:7c:78:12:35:c8:6a:5e:0b:d4:db: 95:83:44:9b:62:6a:b8:df:fc:53:65:32:91:a1:93: d1:03:24:69:af:5d:a2:9a:4b:3d:81:8c:3f:a0:65: ab:69:b3:3d:b6:80:22:c6:63:25:0f:7b:08:72:98: ce:56:15:dc:66:c4:ee:d6:c1:b9:8c:ff:58:5a:3e: af:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C8:D9:3C:3E:73:83:E3:8C:9C:19:91:6E:3D:AE:04:10:1D:0A:39 X509v3 Authority Key Identifier: keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2d:c4:c8:c0:f3:42:a7:77:63:f9:a5:bc:c0:1d:3f:b2:64: 6b:08:35:d8:95:c0:da:d7:23:ab:6f:e1:da:29:73:39:5b:4b: 9a:f7:02:94:40:f1:10:a6:78:63:a7:ef:c5:83:67:ec:6d:b0: 30:30:c2:f7:57:ba:1f:28:2b:1d:1c:c5:0b:9b:35:9a:f8:6c: f8:8c:82:01:71:87:5b:21:be:37:6a:f8:0a:63:af:d3:a9:8e: 1b:f4:04:82:9c:d6:f1:09:9f:a6:40:08:6a:f9:b9:ab:b9:13: f5:d9:c4:89:68:42:d8:7e:a5:6b:05:55:3f:3b:76:48:f7:12: 57:6b:a5:29:38:11:05:85:fc:27:7c:d9:26:39:50:4b:69:bb: a8:54:81:e5:4c:a5:48:46:bf:6a:a1:97:af:a1:3c:a4:5e:74: 7e:81:5b:02:d7:03:5a:a6:e3:06:89:61:30:1e:13:62:27:ad: 40:10:d6:06:2c:bf:3b:1a:73:89:7e:b0:d5:9d:a2:d2:55:d2: 6b:3d:08:2a:92:3e:7b:d8:b8:e5:09:07:50:bb:fd:f9:b5:d1: 43:f1:19:37:f9:04:03:8c:e0:89:6b:65:76:b7:7f:17:10:62: 2e:04:93:60:d6:41:0a:f1:d5:e9:2e:64:84:30:e3:13:79:6f: 99:ab:2e:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqCbQ5Im77OS7b7YQhGVLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzA4ZGQxMTIwNmZhNTJkYjAwNGU0NTVhYzhkOTk1YWY0 YzNiMDgwHhcNMjUxMjE3MDIwMDM3WhcNMjUxMjE4MDIwMDM3WjAzMTEwLwYDVQQD Eyg1OGM4ZDkzYzNlNzM4M2UzOGM5YzE5OTE2ZTNkYWUwNDEwMWQwYTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I3aaq0VLmNeR3SuInOkGhfr8t3k U6f5KMDjR9ytGoFKqKLlGMc/tw0B7E9USpE08UpfLgl2rBLrw1gMcwHpMS3fGYni w8fW5g8vQYoC7yq8+bcRAkEUJXjkeRXX9E9vD7E3UAnXGn3Yp6Q2Ty543J5kUh/x 53c6x1cHDhzvqDEDbne0Mfa2la4iXS2l+4AbOQ/wf2sOyyKEgAjghEG+aQXyzfAX OPdWk2cHaYH+KoMdooD94frmYHx4EjXIal4L1NuVg0SbYmq43/xTZTKRoZPRAyRp r12imks9gYw/oGWrabM9toAixmMlD3sIcpjOVhXcZsTu1sG5jP9YWj6vJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjI2Tw+c4PjjJwZkW49rgQQHQo5MB8GA1UdIwQY MBaAFNIwjdESBvpS2wBORVrI2ZWvTDsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYt ZGFkYmVlMWUyYzJjLzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYtZGFkYmVlMWUyYzJj LzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdC3EyMDz Qqd3Y/mlvMAdP7Jkawg12JXA2tcjq2/h2ilzOVtLmvcClEDxEKZ4Y6fvxYNn7G2w MDDC91e6HygrHRzFC5s1mvhs+IyCAXGHWyG+N2r4CmOv06mOG/QEgpzW8QmfpkAI avm5q7kT9dnEiWhC2H6lawVVPzt2SPcSV2ulKTgRBYX8J3zZJjlQS2m7qFSB5Uyl SEa/aqGXr6E8pF50foFbAtcDWqbjBolhMB4TYietQBDWBiy/OxpziX6w1Z2i0lXS az0IKpI+e9i45QkHULv9+bXRQ/EZN/kEA4zgiWtldrd/FxBiLgSTYNZBCvHV6S5k hDDjE3lvmasuOg== -----END CERTIFICATE-----Generated at Wed Dec 17 09:45:48 2025 by rpki-client