This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft File: 0jxZJVkZvdmrA73hxceIBixLmfM.mft (raw, json) Hash identifier: 03RlPgPHrO2TLtqxG2BMpvLO6vVPW/ZGQl+LVxkOG/0= Subject key identifier: 69:27:1D:4C:CD:64:94:41:3C:81:C0:FB:BF:79:EA:48:45:32:B5:5D Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3 Certificate issuer: /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3 Certificate serial: 019B4B155F19FEB7145BC3CE0C29723FA91E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft Manifest number: 08C2 Signing time: Tue 23 Dec 2025 12:00:50 +0000 Manifest this update: Tue 23 Dec 2025 12:00:50 +0000 Manifest next update: Wed 24 Dec 2025 12:00:50 +0000 Files and hashes: 1: 0jxZJVkZvdmrA73hxceIBixLmfM.crl (hash: yLmDSnZytn8Ij721qpx8EssMUyvP1x0RLR5Tu7DApTU=) 2: JC586knHAJCWuyAHAdSdP6vCZvc.roa (hash: 5tWj8kAF7Tk8U+7sz2E535dJcNrZC7NIfrQwoPJI7rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:5f:19:fe:b7:14:5b:c3:ce:0c:29:72:3f:a9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3 Validity Not Before: Dec 23 12:00:50 2025 GMT Not After : Dec 24 12:00:50 2025 GMT Subject: CN=69271d4ccd6494413c81c0fbbf79ea484532b55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:fd:f9:a2:bc:ea:91:ff:1e:5f:9b:c5:89: 8a:61:87:fd:21:4a:5f:43:fd:1b:b3:14:a5:c8:ca: 0f:10:f3:27:52:c7:1b:e9:8c:ff:b5:26:1f:4a:a5: ea:c5:07:6d:51:a5:f7:33:e8:b0:65:9f:bf:dd:8f: 7c:59:99:43:88:a2:f1:48:40:7d:3c:b9:09:e9:a4: 96:c2:e3:c5:10:53:7d:81:71:77:83:23:af:1d:56: be:6e:55:46:c4:36:6f:5f:a9:59:3e:f2:db:9e:d4: 36:44:63:59:ee:9b:db:54:bd:b1:59:a8:a0:06:fe: a0:e3:af:82:90:76:cc:82:5f:78:47:53:f1:8a:ab: 8b:6a:05:91:4d:ac:60:46:59:99:ae:08:2f:af:90: 9a:4a:d8:dd:3b:f2:78:a3:72:5c:bb:e7:6b:bc:37: df:34:e0:51:48:31:7a:40:95:8a:63:98:53:60:ce: 97:17:72:eb:76:05:c8:3c:59:44:75:c0:e6:bb:04: a2:b5:b3:2f:42:c7:6e:2f:18:b8:4e:7d:e1:f9:36: c8:e9:ef:cb:64:97:aa:56:de:c7:40:80:0e:98:4d: c4:67:7e:a0:a8:e7:be:63:7c:25:28:8e:c4:0c:e8: d3:b3:e6:70:be:ad:17:3f:c9:82:f4:5e:44:43:dc: dd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:27:1D:4C:CD:64:94:41:3C:81:C0:FB:BF:79:EA:48:45:32:B5:5D X509v3 Authority Key Identifier: keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b3:b2:41:be:ca:c3:64:79:37:d4:c0:c1:7c:48:c7:77:87: 41:ba:fb:db:a2:36:c1:a3:b5:25:d2:11:2e:2f:e0:19:fb:f1: 20:9b:67:67:ee:b4:b0:a2:33:4e:1b:92:ee:71:62:ab:b1:8d: f9:52:1e:b5:40:69:15:41:20:09:70:58:53:d4:21:9a:46:90: 09:58:71:b9:85:9c:ae:a2:04:35:22:f5:4d:09:3f:c3:c8:4a: d8:1e:5e:47:00:70:92:c3:d4:97:e3:06:b5:89:c0:cd:1a:86: 22:12:d3:de:77:91:41:99:ce:70:bc:e7:94:1a:1e:b7:84:dd: 9f:f0:72:22:07:0c:4a:50:94:4f:34:80:88:2b:84:c8:83:fd: f1:8f:72:f8:8d:fc:18:bd:be:47:64:b2:de:31:cd:fb:c2:9d: 06:4f:5a:97:d7:37:0d:2b:e4:4b:39:c1:cd:99:12:14:93:24: 12:c3:7e:49:02:8b:20:1f:f9:ff:e2:03:3a:3b:46:8a:96:84: 84:01:78:2c:b6:3c:e1:31:4e:31:f6:54:c0:98:68:59:a4:c4: d4:99:b1:d5:40:12:6e:48:26:25:af:08:fc:56:14:1b:82:0c: 14:33:37:7c:73:35:b9:48:48:e6:90:52:8a:24:00:3f:47:d8: 4a:74:f8:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFV8Z/rcUW8PODClyP6keMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyM2M1OTI1NTkxOWJkZDlhYjAzYmRlMWM1Yzc4ODA2MmM0 Yjk5ZjMwHhcNMjUxMjIzMTIwMDUwWhcNMjUxMjI0MTIwMDUwWjAzMTEwLwYDVQQD Eyg2OTI3MWQ0Y2NkNjQ5NDQxM2M4MWMwZmJiZjc5ZWE0ODQ1MzJiNTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ar9+aK86pH/Hl+bxYmKYYf9IUpf Q/0bsxSlyMoPEPMnUscb6Yz/tSYfSqXqxQdtUaX3M+iwZZ+/3Y98WZlDiKLxSEB9 PLkJ6aSWwuPFEFN9gXF3gyOvHVa+blVGxDZvX6lZPvLbntQ2RGNZ7pvbVL2xWaig Bv6g46+CkHbMgl94R1PxiquLagWRTaxgRlmZrggvr5CaStjdO/J4o3Jcu+drvDff NOBRSDF6QJWKY5hTYM6XF3LrdgXIPFlEdcDmuwSitbMvQsduLxi4Tn3h+TbI6e/L ZJeqVt7HQIAOmE3EZ36gqOe+Y3wlKI7EDOjTs+Zwvq0XP8mC9F5EQ9zdTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGknHUzNZJRBPIHA+7956khFMrVdMB8GA1UdIwQY MBaAFNI8WSVZGb3ZqwO94cXHiAYsS5nzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZmMzZjYtNmExYS00Y2RjLWExNDct ZGE4YjJkNTc2YmYxLzEvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZmMzZjYtNmExYS00Y2RjLWExNDctZGE4YjJkNTc2YmYx LzEvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLOyQb7K w2R5N9TAwXxIx3eHQbr726I2waO1JdIRLi/gGfvxIJtnZ+60sKIzThuS7nFiq7GN +VIetUBpFUEgCXBYU9QhmkaQCVhxuYWcrqIENSL1TQk/w8hK2B5eRwBwksPUl+MG tYnAzRqGIhLT3neRQZnOcLznlBoet4Tdn/ByIgcMSlCUTzSAiCuEyIP98Y9y+I38 GL2+R2Sy3jHN+8KdBk9al9c3DSvkSznBzZkSFJMkEsN+SQKLIB/5/+IDOjtGipaE hAF4LLY84TFOMfZUwJhoWaTE1Jmx1UASbkgmJa8I/FYUG4IMFDM3fHM1uUhI5pBS iiQAP0fYSnT4rw== -----END CERTIFICATE-----Generated at Tue Dec 23 18:34:38 2025 by rpki-client