This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft File: 0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json) Hash identifier: KQLZDqmCy3gK2gUr14r4aemTi5I3VC42E0UL4VCMnaU= Subject key identifier: A5:AD:AF:24:6E:7F:A3:E7:FC:AD:E5:BF:A1:06:A3:9C:FF:00:3E:8B Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55 Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855 Certificate serial: 019B446EDE50F5E3134FE5546910A5814013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 05:01:15 +0000 Manifest this update: Mon 22 Dec 2025 05:01:15 +0000 Manifest next update: Tue 23 Dec 2025 05:01:15 +0000 Files and hashes: 1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: WWJNygHzjKq98aJvGT3IExPOAGtpc6HtEiOPTsUMFrc=) 2: zWlbMie9smiEiWEP03iooF2NKYI.roa (hash: i3CosfERz9PWPOxFmY5jsq43lJm4fTA/Cty1Zgq6vks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:de:50:f5:e3:13:4f:e5:54:69:10:a5:81:40:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855 Validity Not Before: Dec 22 05:01:15 2025 GMT Not After : Dec 23 05:01:15 2025 GMT Subject: CN=a5adaf246e7fa3e7fcade5bfa106a39cff003e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:ff:1f:1d:03:72:82:d8:9a:0d:17:2d:11: 45:b4:27:2e:a1:02:91:7e:94:af:e6:99:88:6b:5f: b5:6f:15:9a:d7:2c:50:47:10:1f:04:b6:04:4c:aa: 79:9e:80:42:e2:fc:79:5a:2f:7c:cc:47:c8:fd:69: 77:a3:82:74:23:bb:03:c7:ec:9a:70:be:01:3d:af: ba:ee:78:6d:16:42:7d:da:73:ce:11:28:c4:8c:41: be:88:97:dc:7f:6b:17:cf:09:ac:a8:ab:ad:d7:8e: 0d:74:f3:01:c6:a8:a9:1e:56:b9:01:f4:82:af:cd: a7:52:48:0e:6e:0a:c4:64:11:c4:9d:65:34:2d:ce: 73:64:8b:92:07:89:ee:02:2f:42:86:4e:5c:ad:a9: e5:8a:9f:cd:7d:cf:52:a1:be:d7:40:07:16:41:fc: c0:7d:e9:df:fa:04:f1:1f:34:5c:dd:5b:2c:30:85: 3c:63:2b:63:9f:b8:d9:a4:9d:9d:44:ef:18:03:f9: 0d:50:2d:e3:71:9d:89:1e:43:b4:1a:5a:a8:ba:4f: 1f:57:66:8b:86:07:df:9c:75:0d:e8:8e:2b:4f:d7: 61:e2:2a:f0:6f:f5:b2:84:29:e4:7c:57:8f:49:6d: 3d:84:3e:52:60:36:cf:1b:a8:b5:3b:ac:9f:a6:51: 9d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AD:AF:24:6E:7F:A3:E7:FC:AD:E5:BF:A1:06:A3:9C:FF:00:3E:8B X509v3 Authority Key Identifier: keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:dc:1e:2e:80:b9:a3:8f:74:4b:69:2e:82:b0:e4:26:47:44: 6f:c5:b2:0e:b2:de:a2:15:ec:ec:1d:a4:b4:07:a2:5f:6a:d1: f7:a6:53:be:8c:9d:4c:66:cf:78:63:2a:68:5d:8b:7f:8b:03: 8f:eb:63:94:3f:ee:93:8d:50:e0:03:06:6a:03:35:a1:ff:9d: 6c:4e:6d:bc:af:67:0d:91:e3:c5:27:3d:1f:cf:5d:55:6b:dd: 27:5d:42:b9:24:74:4f:bf:72:c8:2c:f3:ad:c4:fe:f3:0d:27: b4:22:10:c2:83:60:93:c8:84:2e:6f:c8:98:8b:95:e0:05:62: 8b:ad:ed:8e:05:46:49:ce:09:49:ea:7f:c4:1c:86:5a:af:8a: 06:80:cd:9f:64:ca:ae:4a:b0:ee:87:23:ac:2c:4c:82:08:28: d1:22:5d:8b:70:ed:2c:66:43:2a:56:99:f2:2e:e8:b3:4b:20: 37:d7:af:53:3d:ad:cd:33:be:26:5b:c1:12:d4:ee:3f:ea:69: 5e:5a:35:92:c2:50:86:74:44:60:2d:0e:5e:bd:b7:ec:91:46: 25:1d:15:db:00:f4:e8:02:47:94:e1:77:e9:c8:87:e8:be:21: 7f:73:43:12:8c:22:f0:bc:a9:38:af:2d:a4:02:5c:62:40:92: 07:fc:e4:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbt5Q9eMTT+VUaRClgUATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOTRlYjBlOTg5ODdhMmFkZjhmOTVhMDNlNzg2NTk5MWEy MDE4NTUwHhcNMjUxMjIyMDUwMTE1WhcNMjUxMjIzMDUwMTE1WjAzMTEwLwYDVQQD EyhhNWFkYWYyNDZlN2ZhM2U3ZmNhZGU1YmZhMTA2YTM5Y2ZmMDAzZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKn/Hx0DcoLYmg0XLRFFtCcuoQKR fpSv5pmIa1+1bxWa1yxQRxAfBLYETKp5noBC4vx5Wi98zEfI/Wl3o4J0I7sDx+ya cL4BPa+67nhtFkJ92nPOESjEjEG+iJfcf2sXzwmsqKut144NdPMBxqipHla5AfSC r82nUkgObgrEZBHEnWU0Lc5zZIuSB4nuAi9Chk5cranlip/Nfc9Sob7XQAcWQfzA fenf+gTxHzRc3VssMIU8Yytjn7jZpJ2dRO8YA/kNUC3jcZ2JHkO0Glqouk8fV2aL hgffnHUN6I4rT9dh4irwb/WyhCnkfFePSW09hD5SYDbPG6i1O6yfplGd9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWtryRuf6Pn/K3lv6EGo5z/AD6LMB8GA1UdIwQY MBaAFNCU6w6YmHoq34+VoD54ZZkaIBhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAt ZTRhODZiMGZmZDJlLzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAtZTRhODZiMGZmZDJl LzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdweLoC5 o490S2kugrDkJkdEb8WyDrLeohXs7B2ktAeiX2rR96ZTvoydTGbPeGMqaF2Lf4sD j+tjlD/uk41Q4AMGagM1of+dbE5tvK9nDZHjxSc9H89dVWvdJ11CuSR0T79yyCzz rcT+8w0ntCIQwoNgk8iELm/ImIuV4AVii63tjgVGSc4JSep/xByGWq+KBoDNn2TK rkqw7ocjrCxMgggo0SJdi3DtLGZDKlaZ8i7os0sgN9evUz2tzTO+JlvBEtTuP+pp Xlo1ksJQhnREYC0OXr237JFGJR0V2wD06AJHlOF36ciH6L4hf3NDEowi8LypOK8t pAJcYkCSB/zkQw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:24:07 2025 by rpki-client