This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json) Hash identifier: 1Tns6RghGPpS076Xc+luf4SgAj8skmHhlBjNU+G1IcE= Subject key identifier: F3:57:46:57:FD:54:88:D8:29:2B:1E:B8:2F:D8:12:FB:73:AD:AD:C6 Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d Certificate serial: 019B552B3DE88A13CBE400F1FA6B070C608E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft Manifest number: 0A1E Signing time: Thu 25 Dec 2025 11:00:55 +0000 Manifest this update: Thu 25 Dec 2025 11:00:55 +0000 Manifest next update: Fri 26 Dec 2025 11:00:55 +0000 Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: UPtBS84Gq1UJwsKe8BpDhf15PJu/lXwsJpVkz9esYmU=) 2: 5J9wJGQ0taRuLtnFbImmMo45f_4.roa (hash: q/JovfJlsI12rHgirdt0sAWA1cHPW79Cc1hgkirK79U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:3d:e8:8a:13:cb:e4:00:f1:fa:6b:07:0c:60:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d Validity Not Before: Dec 25 11:00:55 2025 GMT Not After : Dec 26 11:00:55 2025 GMT Subject: CN=f3574657fd5488d8292b1eb82fd812fb73adadc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:77:6d:be:e1:dc:75:d8:08:0f:b8:cc:b2: cf:22:1c:3d:9a:6c:68:b0:22:c7:27:a6:3d:93:a2: 92:81:04:0f:a4:d7:a1:6b:65:75:9c:25:58:75:55: 77:59:56:ba:5f:71:ad:a5:24:eb:46:0f:d0:81:fa: a6:e0:3a:9f:8e:a5:ca:d1:9a:b7:8b:9d:10:96:00: f4:5d:7c:ea:3f:87:d7:d8:72:7b:b3:c5:00:c6:ef: 9b:ce:9f:ef:c7:47:78:1c:4c:31:55:86:71:49:96: 9c:d1:e0:e0:dc:f7:52:06:7d:4b:12:27:97:7d:21: e3:b9:49:53:36:15:07:da:c2:98:b6:ba:a6:bb:b1: 11:0b:c0:fb:34:0e:f4:a0:56:1c:50:65:fc:4d:b7: ea:1f:e4:e4:c8:5b:2c:4c:74:a3:b6:12:bd:42:aa: 65:09:a3:1f:a2:8d:d1:d2:0c:ed:78:87:dc:f8:fa: 43:64:d5:c4:f8:5e:a0:23:5a:bd:47:43:0b:23:bb: 9f:a4:04:1d:89:3d:02:13:71:5c:0b:36:33:78:df: 8a:df:85:cb:36:3e:b7:0e:dc:5d:36:a6:e9:93:d5: b6:f5:e2:d3:37:96:ee:a0:cc:b3:29:14:23:4a:5c: 72:be:71:6c:f6:de:53:f9:c6:55:0d:49:ee:f6:81: 1f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:57:46:57:FD:54:88:D8:29:2B:1E:B8:2F:D8:12:FB:73:AD:AD:C6 X509v3 Authority Key Identifier: keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:08:37:39:5d:3d:c3:f5:c4:66:e3:a1:cc:37:07:dd:26:90: 59:69:df:a6:7a:36:34:a1:71:84:92:1e:db:f2:fd:a0:84:a7: 41:8c:c3:21:d6:bf:e5:b8:24:de:f3:42:f9:1f:61:62:c3:ec: db:e7:b3:fc:4f:c8:ff:69:5b:0f:fd:a9:bb:6a:41:1d:9b:86: 3e:db:d9:ce:94:cb:d7:80:77:5a:74:dd:a0:39:9a:12:c7:2e: ca:80:74:5e:51:b6:bb:87:dd:25:78:bc:8c:f2:09:bd:e5:65: 0f:3c:72:cb:ff:ce:92:2f:3e:cc:86:00:28:b4:e1:b0:7f:b2: a5:e7:ab:1c:7b:85:bb:49:22:f7:33:5d:6e:e0:17:24:c6:2d: 20:f7:53:e7:fb:83:e0:d2:2a:0a:b2:a6:7e:94:95:75:ff:d6: 3c:f6:fb:5d:ca:40:ca:20:98:aa:e8:1f:35:e1:11:82:80:8b: d5:d0:ea:3c:5e:28:f6:ff:8a:6e:f1:a1:ce:8b:36:84:ec:06: b1:79:41:a0:a2:8a:d6:23:f8:88:4f:58:6e:f4:0e:35:2a:c9: 88:a3:ed:5c:20:6f:96:48:eb:4d:8d:a7:9b:91:f3:cc:c5:a6: 08:a8:8b:df:45:44:28:02:55:ce:62:9f:22:04:17:77:52:64: 23:5d:b0:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVKz3oihPL5ADx+msHDGCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOTM3ZWI2YTg5OTg0ZThjMDBiNTNiMTY4MWRlMDkwMDVh ZGM5OWQwHhcNMjUxMjI1MTEwMDU1WhcNMjUxMjI2MTEwMDU1WjAzMTEwLwYDVQQD EyhmMzU3NDY1N2ZkNTQ4OGQ4MjkyYjFlYjgyZmQ4MTJmYjczYWRhZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujp3bb7h3HXYCA+4zLLPIhw9mmxo sCLHJ6Y9k6KSgQQPpNeha2V1nCVYdVV3WVa6X3GtpSTrRg/Qgfqm4DqfjqXK0Zq3 i50QlgD0XXzqP4fX2HJ7s8UAxu+bzp/vx0d4HEwxVYZxSZac0eDg3PdSBn1LEieX fSHjuUlTNhUH2sKYtrqmu7ERC8D7NA70oFYcUGX8TbfqH+TkyFssTHSjthK9Qqpl CaMfoo3R0gzteIfc+PpDZNXE+F6gI1q9R0MLI7ufpAQdiT0CE3FcCzYzeN+K34XL Nj63DtxdNqbpk9W29eLTN5buoMyzKRQjSlxyvnFs9t5T+cZVDUnu9oEfIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNXRlf9VIjYKSseuC/YEvtzra3GMB8GA1UdIwQY MBaAFNCTfraomYTowAtTsWgd4JAFrcmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUt ZDYyMWE4OTFmYjgwLzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUtZDYyMWE4OTFmYjgw LzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgg3OV09 w/XEZuOhzDcH3SaQWWnfpno2NKFxhJIe2/L9oISnQYzDIda/5bgk3vNC+R9hYsPs 2+ez/E/I/2lbD/2pu2pBHZuGPtvZzpTL14B3WnTdoDmaEscuyoB0XlG2u4fdJXi8 jPIJveVlDzxyy//Oki8+zIYAKLThsH+ypeerHHuFu0ki9zNdbuAXJMYtIPdT5/uD 4NIqCrKmfpSVdf/WPPb7XcpAyiCYqugfNeERgoCL1dDqPF4o9v+KbvGhzos2hOwG sXlBoKKK1iP4iE9YbvQONSrJiKPtXCBvlkjrTY2nm5HzzMWmCKiL30VEKAJVzmKf IgQXd1JkI12wkw== -----END CERTIFICATE-----Generated at Thu Dec 25 17:10:01 2025 by rpki-client