This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json) Hash identifier: CdteKio7FU8c4pJrWO5phIYgB4GuTMVnQpIHbuBzaNA= Subject key identifier: 0D:95:FC:01:E5:77:B1:E9:3B:61:F5:9F:A5:C2:8C:B7:38:95:ED:7E Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13 Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13 Certificate serial: 019B526132DABA7488F1A542662F34479154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft Manifest number: 14D5 Signing time: Wed 24 Dec 2025 22:01:00 +0000 Manifest this update: Wed 24 Dec 2025 22:01:00 +0000 Manifest next update: Thu 25 Dec 2025 22:01:00 +0000 Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: eeMAjV/mqlbC8i+E2CbjIKOxZ66okAtPYyNIE9fPbX8=) 2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:32:da:ba:74:88:f1:a5:42:66:2f:34:47:91:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13 Validity Not Before: Dec 24 22:01:00 2025 GMT Not After : Dec 25 22:01:00 2025 GMT Subject: CN=0d95fc01e577b1e93b61f59fa5c28cb73895ed7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:80:bf:87:f8:5f:ff:a2:a5:b0:d5:e9:45: 1a:2f:74:d5:7d:b4:37:b9:0a:94:93:03:f0:dc:71: 2b:70:94:e7:80:84:f2:d3:19:80:91:91:d8:04:49: 9c:fc:08:32:8f:e2:63:cb:1c:11:50:ad:93:37:64: 28:b0:4a:21:b3:8d:79:f4:32:20:81:e8:e5:c7:30: ec:ff:f4:89:c9:83:a2:f3:f2:8d:a9:2a:1d:8a:95: 44:cd:0c:85:82:bb:81:9e:73:af:a3:bf:a7:6e:1e: 3e:e6:c9:7a:49:2e:85:e5:fc:58:81:39:0b:db:4c: 7c:6e:d1:1d:10:83:ac:32:35:8d:2d:e8:08:8b:0f: 7d:72:6b:11:0c:e6:6e:42:a7:c0:d0:e7:9a:61:37: c9:7c:0c:de:e1:4c:cd:ec:a2:dd:4e:00:8c:40:d9: 9d:a0:e3:af:fc:fa:b9:f0:35:53:72:51:8a:9f:5e: 4a:7d:88:c5:8e:55:8c:5a:2f:de:cd:0f:bb:ac:32: 1a:88:ed:72:84:60:27:96:0a:49:87:50:0c:35:fb: 6d:83:48:44:32:82:d1:35:00:10:b0:16:ae:0d:79: 9e:cf:45:6f:10:c4:4f:c7:92:05:7d:85:9e:b7:39: ec:f3:e8:3c:f3:2c:8d:65:49:7a:72:2f:5f:41:42: a1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:95:FC:01:E5:77:B1:E9:3B:61:F5:9F:A5:C2:8C:B7:38:95:ED:7E X509v3 Authority Key Identifier: keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b9:f3:44:30:6f:3c:8e:01:3b:05:39:56:ad:56:aa:79:21: 2b:70:87:86:77:ed:a6:01:cb:8f:4f:5a:5e:61:fc:3b:2a:5b: 6d:fe:10:0a:6c:49:25:be:c8:44:82:ca:79:5b:a4:74:25:fd: b3:15:65:73:51:58:7c:be:ff:52:57:c7:fe:32:b4:b4:5e:55: 1c:d3:9d:3f:05:32:8f:36:98:1f:27:5e:90:99:34:a4:28:73: 2b:68:83:62:4e:60:fc:c4:e5:05:8d:bd:97:74:74:a1:3b:f7: ef:91:4c:98:22:14:c3:18:7c:a3:0b:3c:ac:f3:df:dc:29:17: 6d:f3:73:09:04:3e:f7:03:49:4e:9b:0f:0f:8c:2c:3c:7c:2a: 8a:91:26:e2:79:e9:db:21:34:a2:09:a5:0e:84:09:b9:bc:b5: 7d:c5:38:de:c5:a9:48:32:03:56:51:ef:3a:4a:a0:41:e5:7a: 37:69:4f:b7:59:3d:68:da:31:2e:33:9b:bc:04:78:32:9b:14: d0:fc:5a:30:19:3a:5b:0d:bb:fe:97:92:f3:da:5c:5b:06:86: 90:1c:30:5e:10:fe:7a:35:e4:a9:46:db:4c:fc:d0:eb:1d:8e: 40:cd:81:72:9c:5f:12:e3:4e:e1:df:0c:52:a7:4d:93:6e:74: 03:b0:de:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYTLaunSI8aVCZi80R5FUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZWY0NmE0MTM0MTk0ZTcyNDIzZDU3MmExYjY2ZDRhOWQy ZTRjMTMwHhcNMjUxMjI0MjIwMTAwWhcNMjUxMjI1MjIwMTAwWjAzMTEwLwYDVQQD EygwZDk1ZmMwMWU1NzdiMWU5M2I2MWY1OWZhNWMyOGNiNzM4OTVlZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI+Av4f4X/+ipbDV6UUaL3TVfbQ3 uQqUkwPw3HErcJTngITy0xmAkZHYBEmc/Agyj+JjyxwRUK2TN2QosEohs4159DIg gejlxzDs//SJyYOi8/KNqSodipVEzQyFgruBnnOvo7+nbh4+5sl6SS6F5fxYgTkL 20x8btEdEIOsMjWNLegIiw99cmsRDOZuQqfA0OeaYTfJfAze4UzN7KLdTgCMQNmd oOOv/Pq58DVTclGKn15KfYjFjlWMWi/ezQ+7rDIaiO1yhGAnlgpJh1AMNfttg0hE MoLRNQAQsBauDXmez0VvEMRPx5IFfYWetzns8+g88yyNZUl6ci9fQUKhFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2V/AHld7HpO2H1n6XCjLc4le1+MB8GA1UdIwQY MBaAFNLvRqQTQZTnJCPVcqG2bUqdLkwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMt YTg4YmI3ODA1YjA5LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMtYTg4YmI3ODA1YjA5 LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7nzRDBv PI4BOwU5Vq1WqnkhK3CHhnftpgHLj09aXmH8Oypbbf4QCmxJJb7IRILKeVukdCX9 sxVlc1FYfL7/UlfH/jK0tF5VHNOdPwUyjzaYHydekJk0pChzK2iDYk5g/MTlBY29 l3R0oTv375FMmCIUwxh8ows8rPPf3CkXbfNzCQQ+9wNJTpsPD4wsPHwqipEm4nnp 2yE0ogmlDoQJuby1fcU43sWpSDIDVlHvOkqgQeV6N2lPt1k9aNoxLjObvAR4MpsU 0PxaMBk6Ww27/peS89pcWwaGkBwwXhD+ejXkqUbbTPzQ6x2OQM2BcpxfEuNO4d8M UqdNk250A7DeZw== -----END CERTIFICATE-----Generated at Thu Dec 25 02:44:20 2025 by rpki-client