This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft File: 0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json) Hash identifier: FbmJvIzp9AoFnqqc2UXs08ptMVXJ+f0eD5kORh8MQcs= Subject key identifier: 8A:97:21:C3:01:3E:F7:22:3D:6E:BC:AB:5F:DB:BC:5D:31:42:12:E6 Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40 Certificate issuer: /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40 Certificate serial: 019B5F4239E502F427CA877CC63933EC9CEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft Manifest number: 1214 Signing time: Sat 27 Dec 2025 10:02:14 +0000 Manifest this update: Sat 27 Dec 2025 10:02:14 +0000 Manifest next update: Sun 28 Dec 2025 10:02:14 +0000 Files and hashes: 1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: wGKzfqR1nIBAzXT4FqYBGkE5qzFiPb95rf8eVM7DoIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:42:39:e5:02:f4:27:ca:87:7c:c6:39:33:ec:9c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40 Validity Not Before: Dec 27 10:02:14 2025 GMT Not After : Dec 28 10:02:14 2025 GMT Subject: CN=8a9721c3013ef7223d6ebcab5fdbbc5d314212e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8c:1d:f0:f5:3f:28:f5:e0:21:f6:ac:f3:87: 2d:50:09:a3:6b:90:20:5c:0a:57:75:df:83:50:5c: 31:9c:2c:10:34:7f:d5:17:dc:b5:11:31:64:8d:d1: 13:3f:e6:d8:4e:3e:4d:42:65:09:ed:6b:b6:3b:06: 60:7d:b6:cb:25:4a:ea:1e:9d:33:1c:40:fc:28:5b: be:52:0f:b5:c4:04:30:f4:9a:d1:b0:59:40:4a:a2: d5:5a:f6:69:21:a6:37:da:c9:35:41:21:8c:13:fa: 62:f7:c5:61:5c:c0:9a:1b:cb:cd:d2:00:c4:73:4f: 1e:8e:60:00:37:f2:5c:96:12:57:12:0c:0a:d2:de: c6:af:24:5c:48:c2:cf:b2:a2:31:24:e4:9f:6f:8b: a8:d0:0f:98:39:ba:af:93:93:91:49:4d:24:93:ab: 46:b0:e5:ea:e9:4d:06:c7:65:e0:de:fe:2e:59:c1: 85:7e:54:44:74:89:30:50:a1:2f:d2:36:4e:ac:08: 2d:ee:00:28:98:0a:31:ef:8f:3f:49:44:bf:13:cc: d6:48:d4:85:c6:56:f7:b1:82:0a:1d:da:2a:55:70: a8:61:41:c1:a8:69:70:64:6f:46:8f:e1:52:95:3d: c9:70:9b:c2:f7:e4:29:27:64:ee:4a:f4:81:8d:4b: 93:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:97:21:C3:01:3E:F7:22:3D:6E:BC:AB:5F:DB:BC:5D:31:42:12:E6 X509v3 Authority Key Identifier: keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:67:3a:88:8b:74:28:cd:c4:e1:7f:66:e2:49:f9:24:88:66: db:47:6c:33:5e:d6:12:8e:4b:4c:c8:37:12:69:28:67:33:01: 3c:ec:5b:f8:38:d6:c7:11:74:d5:5d:37:56:71:3d:46:ea:08: ff:0b:08:fd:6f:59:76:be:32:2c:b8:84:9c:34:ed:29:32:ce: 47:75:5d:69:06:19:4b:d2:75:a3:c6:1b:a0:46:b0:9a:81:92: c1:e6:6a:81:89:81:0e:99:4f:22:be:fb:69:c3:fa:b2:93:d0: e0:15:c3:fe:36:0b:4f:25:67:30:cc:e2:f1:95:d2:d6:d0:43: 6d:d8:f8:b6:4e:ed:39:a4:b9:f5:5b:4d:cb:0e:05:d1:c9:96: f7:fc:ec:15:d6:d7:1f:c8:d9:df:b9:f2:9a:0a:59:04:86:55: 61:48:7e:55:5a:d6:96:71:f0:5e:3d:e0:de:fe:32:69:06:9a: a4:8a:0e:c3:95:bb:a0:c9:20:4d:80:67:44:a0:4d:48:fc:79: ae:c9:3a:75:79:25:5f:41:95:11:f4:84:10:0c:a0:f3:c7:8a: 26:10:ac:66:c7:7c:7c:ac:1d:39:61:0d:a3:81:0b:9c:2b:3f: 4c:a5:4c:40:1b:40:66:13:6d:6c:0d:6c:be:c0:25:7c:7e:b8: 1c:15:32:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQjnlAvQnyod8xjkz7JzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzZlMGUyZGM1YTI4NDM4ZTMwZWJmZDFkNmE2YTk0ZGIz ZDFjNDAwHhcNMjUxMjI3MTAwMjE0WhcNMjUxMjI4MTAwMjE0WjAzMTEwLwYDVQQD Eyg4YTk3MjFjMzAxM2VmNzIyM2Q2ZWJjYWI1ZmRiYmM1ZDMxNDIxMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1owd8PU/KPXgIfas84ctUAmja5Ag XApXdd+DUFwxnCwQNH/VF9y1ETFkjdETP+bYTj5NQmUJ7Wu2OwZgfbbLJUrqHp0z HED8KFu+Ug+1xAQw9JrRsFlASqLVWvZpIaY32sk1QSGME/pi98VhXMCaG8vN0gDE c08ejmAAN/JclhJXEgwK0t7GryRcSMLPsqIxJOSfb4uo0A+YObqvk5ORSU0kk6tG sOXq6U0Gx2Xg3v4uWcGFflREdIkwUKEv0jZOrAgt7gAomAox748/SUS/E8zWSNSF xlb3sYIKHdoqVXCoYUHBqGlwZG9Gj+FSlT3JcJvC9+QpJ2TuSvSBjUuTuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqXIcMBPvciPW68q1/bvF0xQhLmMB8GA1UdIwQY MBaAFNI24OLcWihDjjDr/R1qapTbPRxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpiZzR0eGFLRU9PTU92OUhXcHFsTnM5SEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MTZhMjMtYjU5NC00OWU5LTg5NTkt OWQ0MzJmMTI4YTI1LzEvMGpiZzR0eGFLRU9PTU92OUhXcHFsTnM5SEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MTZhMjMtYjU5NC00OWU5LTg5NTktOWQ0MzJmMTI4YTI1 LzEvMGpiZzR0eGFLRU9PTU92OUhXcHFsTnM5SEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2c6iIt0 KM3E4X9m4kn5JIhm20dsM17WEo5LTMg3EmkoZzMBPOxb+DjWxxF01V03VnE9RuoI /wsI/W9Zdr4yLLiEnDTtKTLOR3VdaQYZS9J1o8YboEawmoGSweZqgYmBDplPIr77 acP6spPQ4BXD/jYLTyVnMMzi8ZXS1tBDbdj4tk7tOaS59VtNyw4F0cmW9/zsFdbX H8jZ37nymgpZBIZVYUh+VVrWlnHwXj3g3v4yaQaapIoOw5W7oMkgTYBnRKBNSPx5 rsk6dXklX0GVEfSEEAyg88eKJhCsZsd8fKwdOWENo4ELnCs/TKVMQBtAZhNtbA1s vsAlfH64HBUyeQ== -----END CERTIFICATE-----Generated at Sat Dec 27 15:42:15 2025 by rpki-client