This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft File: 0F9s96mFiwKHHBx_E9GzOIDpii0.mft (raw, json) Hash identifier: SvU3cgGI3RtvEAe7ycl+jnVBw/mtgZXBn3u3GCfiSpU= Subject key identifier: 76:DB:86:C6:2D:EA:3F:18:72:EE:6A:50:80:79:7C:4C:87:71:96:E6 Authority key identifier: D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D Certificate issuer: /CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d Certificate serial: 019B62795C69A5132A8E0BB453A51CA98980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft Manifest number: 20 Signing time: Sun 28 Dec 2025 01:01:19 +0000 Manifest this update: Sun 28 Dec 2025 01:01:19 +0000 Manifest next update: Mon 29 Dec 2025 01:01:19 +0000 Files and hashes: 1: 0F9s96mFiwKHHBx_E9GzOIDpii0.crl (hash: BO7Es3m+N9xGdrIYJOuByhCdxYruQpxojkU+j0a44TA=) 2: 3lFf3-sn7CbCrHiUq-18oHz7T1c.roa (hash: 9Ta5O8FpZyag1SlXhYN4q/r9UzqLiY5msiZgY4NqYTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:79:5c:69:a5:13:2a:8e:0b:b4:53:a5:1c:a9:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d Validity Not Before: Dec 28 01:01:19 2025 GMT Not After : Dec 29 01:01:19 2025 GMT Subject: CN=76db86c62dea3f1872ee6a5080797c4c877196e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:ea:2a:f0:25:f2:b2:7a:4c:43:4a:5b:ee: 5f:74:ce:53:d6:0a:33:ad:07:d1:04:1c:ed:9e:2b: f8:c6:22:41:93:e2:cf:21:21:40:06:42:92:0c:98: f7:cd:62:fe:0e:87:44:96:82:c4:83:78:d3:d0:3c: fa:33:37:92:72:7f:29:24:03:cd:68:df:35:a6:2d: 89:1e:d3:2b:38:da:7f:ce:a0:53:c2:ad:e9:5e:dd: 71:8e:db:16:fa:47:aa:ec:25:91:4a:76:ca:0e:91: fd:17:8d:4d:39:e0:cc:79:d4:42:fb:fa:45:83:d3: f5:48:dc:a9:93:18:ac:fd:07:44:24:d5:68:88:2d: a3:68:b3:7a:ba:55:b3:1e:ec:f6:9f:1c:ee:19:e8: 32:ae:04:58:35:bf:65:97:cc:d1:11:62:e4:f4:77: bc:39:a3:bd:ce:c5:fd:1e:50:61:74:8f:94:8b:9f: 27:af:d1:30:f1:b7:48:99:61:5e:d1:26:9c:e8:68: 12:be:69:ba:60:7f:49:90:19:e2:e6:f4:e2:f0:4c: c9:fd:99:48:e9:6f:e8:44:f6:8a:b8:b5:52:84:dd: 82:30:d1:54:70:9a:44:5e:56:73:9d:cd:d5:9c:90: aa:0a:f5:45:10:08:89:d5:2b:91:69:95:1a:74:18: 57:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DB:86:C6:2D:EA:3F:18:72:EE:6A:50:80:79:7C:4C:87:71:96:E6 X509v3 Authority Key Identifier: keyid:D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a1:34:44:9a:d1:42:44:7b:52:bd:1d:b1:a8:36:67:68:4f: 21:00:f6:0b:ff:45:1a:cd:f3:d3:89:3a:2b:65:62:bf:65:e7: 8d:d6:8e:4b:86:2e:3d:55:80:66:6d:ab:2a:2e:76:9d:1b:fa: 83:69:07:91:7a:fa:2e:a0:c1:84:36:aa:2d:47:4a:34:93:d0: 6a:6d:db:93:6f:7d:cf:2b:88:3d:0a:80:97:9a:48:6d:23:d0: 68:b3:42:7b:58:a6:2d:86:d9:ae:62:51:b1:23:3c:c8:93:37: 62:d8:e7:7a:90:36:78:ab:64:22:b7:34:16:a2:82:96:4d:af: 4c:0e:81:dd:79:c9:9c:cf:ea:6a:7b:b2:db:47:c0:80:e3:73: e8:33:d6:10:c6:a1:e1:e5:2b:79:2e:0b:9f:c3:e4:84:3c:19: 28:2b:22:03:e3:82:99:51:33:76:c8:1a:b3:c9:3c:60:86:d1: 56:4d:69:25:aa:91:c5:76:65:9a:25:7e:fd:53:04:14:3f:29: b1:de:c9:a4:a4:0e:33:be:59:bd:4e:f6:f0:27:cb:bb:f3:c8: 21:ab:28:26:dd:70:ae:ae:23:89:c9:14:b5:e1:27:62:a1:56: 28:59:c9:44:c8:32:9e:a6:f9:fc:0a:8c:5d:ca:b0:ff:3b:81: 0c:61:00:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieVxppRMqjgu0U6UcqYmAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNWY2Y2Y3YTk4NThiMDI4NzFjMWM3ZjEzZDFiMzM4ODBl OThhMmQwHhcNMjUxMjI4MDEwMTE5WhcNMjUxMjI5MDEwMTE5WjAzMTEwLwYDVQQD Eyg3NmRiODZjNjJkZWEzZjE4NzJlZTZhNTA4MDc5N2M0Yzg3NzE5NmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E3qKvAl8rJ6TENKW+5fdM5T1goz rQfRBBztniv4xiJBk+LPISFABkKSDJj3zWL+DodEloLEg3jT0Dz6MzeScn8pJAPN aN81pi2JHtMrONp/zqBTwq3pXt1xjtsW+keq7CWRSnbKDpH9F41NOeDMedRC+/pF g9P1SNypkxis/QdEJNVoiC2jaLN6ulWzHuz2nxzuGegyrgRYNb9ll8zREWLk9He8 OaO9zsX9HlBhdI+Ui58nr9Ew8bdImWFe0Sac6GgSvmm6YH9JkBni5vTi8EzJ/ZlI 6W/oRPaKuLVShN2CMNFUcJpEXlZznc3VnJCqCvVFEAiJ1SuRaZUadBhXBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbbhsYt6j8Ycu5qUIB5fEyHcZbmMB8GA1UdIwQY MBaAFNBfbPephYsChxwcfxPRsziA6YotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zNjRjNzgtYTlmNS00ZTg1LWJkY2Yt MWNhNGNlMDI0Y2UwLzEvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zNjRjNzgtYTlmNS00ZTg1LWJkY2YtMWNhNGNlMDI0Y2Uw LzEvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqE0RJrR QkR7Ur0dsag2Z2hPIQD2C/9FGs3z04k6K2Viv2XnjdaOS4YuPVWAZm2rKi52nRv6 g2kHkXr6LqDBhDaqLUdKNJPQam3bk299zyuIPQqAl5pIbSPQaLNCe1imLYbZrmJR sSM8yJM3YtjnepA2eKtkIrc0FqKClk2vTA6B3XnJnM/qanuy20fAgONz6DPWEMah 4eUreS4Ln8PkhDwZKCsiA+OCmVEzdsgas8k8YIbRVk1pJaqRxXZlmiV+/VMEFD8p sd7JpKQOM75ZvU728CfLu/PIIasoJt1wrq4jickUteEnYqFWKFnJRMgynqb5/AqM Xcqw/zuBDGEAlw== -----END CERTIFICATE-----Generated at Sun Dec 28 08:11:00 2025 by rpki-client