This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json) Hash identifier: sfB0u2IEwA+Yaa1oA8o5mnd3xXFho51GvHyaFWwR57I= Subject key identifier: 4D:CB:E7:24:92:4D:44:1F:93:78:5B:8B:4D:C3:9F:D8:47:33:2E:78 Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88 Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88 Certificate serial: 019B281B6C11AFADB91D60F2123C6ABDB7ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft Manifest number: 1711 Signing time: Tue 16 Dec 2025 17:00:44 +0000 Manifest this update: Tue 16 Dec 2025 17:00:44 +0000 Manifest next update: Wed 17 Dec 2025 17:00:44 +0000 Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: oIcLOBLEBVUf1TcTBEE0QVt0rUmcil0YPSogW0Swrtk=) 2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=) 3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:6c:11:af:ad:b9:1d:60:f2:12:3c:6a:bd:b7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88 Validity Not Before: Dec 16 17:00:44 2025 GMT Not After : Dec 17 17:00:44 2025 GMT Subject: CN=4dcbe724924d441f93785b8b4dc39fd847332e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:99:43:5d:c0:c3:59:3c:dd:5f:2d:f6:89:40: dc:2d:66:d8:35:d1:fb:7f:77:4b:17:26:81:0a:93: 0e:0b:7c:ff:8e:9b:42:8c:f1:ea:7e:7a:0b:fb:01: e3:17:13:67:aa:0d:0b:18:16:9d:b7:91:37:10:05: 41:a0:9f:58:61:83:47:e3:06:c4:f3:65:ec:4a:3f: 2d:02:21:cc:38:bb:34:c3:04:dc:e7:87:da:46:93: 61:3f:74:ca:ca:5f:e8:24:b1:c4:3c:cd:53:da:6b: 01:e7:4d:0a:ae:7a:b6:ed:d3:d3:bb:86:e0:e9:bb: 40:fc:77:e2:e2:24:97:80:40:54:6d:83:b9:15:7a: 36:2a:10:c2:28:88:5b:03:e0:da:be:76:bd:d4:a2: 6b:31:4d:9a:e1:fc:80:d6:ba:ff:ef:01:93:25:4a: 4a:56:5d:72:c8:eb:6a:8f:93:a9:1c:5b:b2:ae:82: 3d:a0:8d:dc:07:57:1c:6d:ce:48:39:7e:0b:32:13: 53:a3:5b:03:b2:bd:3a:5c:e6:06:65:99:06:12:dd: 26:19:6c:59:f1:21:a6:1b:f9:e1:0b:fe:db:0a:50: 5b:79:a5:46:b2:85:8e:db:f4:10:0a:30:e4:07:e7: 88:c2:7b:74:dd:bf:25:36:7f:c2:04:e9:5c:1f:ab: 92:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CB:E7:24:92:4D:44:1F:93:78:5B:8B:4D:C3:9F:D8:47:33:2E:78 X509v3 Authority Key Identifier: keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:02:b9:6c:a5:76:33:10:d1:f0:91:0f:3d:09:5a:53:fc:52: 48:86:f8:43:09:30:9b:6d:90:78:be:23:15:51:e0:7c:78:a9: 4e:8f:63:0f:1d:fb:96:24:26:ca:85:bd:17:4c:41:d6:f4:96: b7:cb:83:7d:37:43:f8:61:1c:58:90:c3:04:2f:76:5b:77:85: 31:78:a8:cd:c3:68:a8:f4:15:60:bd:cc:4d:01:ca:8e:96:f2: 2c:df:4b:c7:d8:85:26:a5:88:88:98:d0:12:f7:9a:37:03:1a: 0c:ac:bf:c4:2f:ee:ac:14:fc:79:58:67:8f:38:48:ec:05:9e: c5:c0:d7:a1:2d:97:db:88:a0:fa:30:67:00:c8:db:3f:3b:c2: 7d:f0:34:72:60:d2:19:c0:ec:0e:e1:b1:d8:00:bb:bd:1d:28: 84:4e:01:c2:30:e5:c2:17:c5:f2:a8:59:00:1f:f3:00:db:7a: d5:b0:df:2f:00:55:fc:b9:39:72:29:7a:09:bc:c4:23:01:65: 8e:6c:c5:18:42:50:2d:c5:ea:9c:1a:7e:cd:b6:ee:05:ff:4a: ec:e2:f2:cd:48:77:65:1b:3c:20:33:d8:0d:a0:94:52:e1:40: 92:ee:7d:2e:45:04:47:78:6f:c2:10:76:fa:f9:04:2e:0f:13: 40:af:e8:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG2wRr625HWDyEjxqvbftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzcwODA5OWY3YTIwNTU2NGI1ZjhlMDVkMjE3YmQyZmFl NGRlODgwHhcNMjUxMjE2MTcwMDQ0WhcNMjUxMjE3MTcwMDQ0WjAzMTEwLwYDVQQD Eyg0ZGNiZTcyNDkyNGQ0NDFmOTM3ODViOGI0ZGMzOWZkODQ3MzMyZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15lDXcDDWTzdXy32iUDcLWbYNdH7 f3dLFyaBCpMOC3z/jptCjPHqfnoL+wHjFxNnqg0LGBadt5E3EAVBoJ9YYYNH4wbE 82XsSj8tAiHMOLs0wwTc54faRpNhP3TKyl/oJLHEPM1T2msB500Krnq27dPTu4bg 6btA/Hfi4iSXgEBUbYO5FXo2KhDCKIhbA+Davna91KJrMU2a4fyA1rr/7wGTJUpK Vl1yyOtqj5OpHFuyroI9oI3cB1ccbc5IOX4LMhNTo1sDsr06XOYGZZkGEt0mGWxZ 8SGmG/nhC/7bClBbeaVGsoWO2/QQCjDkB+eIwnt03b8lNn/CBOlcH6uSLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3L5ySSTUQfk3hbi03Dn9hHMy54MB8GA1UdIwQY MBaAFNI3CAmfeiBVZLX44F0he9L65N6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjIt NWU5N2Y0YTUxMmU1LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjItNWU5N2Y0YTUxMmU1 LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4AK5bKV2 MxDR8JEPPQlaU/xSSIb4Qwkwm22QeL4jFVHgfHipTo9jDx37liQmyoW9F0xB1vSW t8uDfTdD+GEcWJDDBC92W3eFMXiozcNoqPQVYL3MTQHKjpbyLN9Lx9iFJqWIiJjQ EveaNwMaDKy/xC/urBT8eVhnjzhI7AWexcDXoS2X24ig+jBnAMjbPzvCffA0cmDS GcDsDuGx2AC7vR0ohE4BwjDlwhfF8qhZAB/zANt61bDfLwBV/Lk5cil6CbzEIwFl jmzFGEJQLcXqnBp+zbbuBf9K7OLyzUh3ZRs8IDPYDaCUUuFAku59LkUER3hvwhB2 +vkELg8TQK/o0g== -----END CERTIFICATE-----Generated at Tue Dec 16 23:17:14 2025 by rpki-client