This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json) Hash identifier: UJcboQ0pjPHaXstXdVtQe7Gnorq6XiiawEA62btUrRo= Subject key identifier: 91:04:5F:28:91:37:A0:EC:07:3F:98:F2:0C:89:E0:11:BF:C2:6B:DF Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13 Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13 Certificate serial: 019B4C96244E8D1073765213ADB043CBBAA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft Manifest number: 14D2 Signing time: Tue 23 Dec 2025 19:01:06 +0000 Manifest this update: Tue 23 Dec 2025 19:01:06 +0000 Manifest next update: Wed 24 Dec 2025 19:01:06 +0000 Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: CZqCTk/Iv7fuKUhYajbr6FzNTatwipC3c+IdzdoefTA=) 2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:96:24:4e:8d:10:73:76:52:13:ad:b0:43:cb:ba:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13 Validity Not Before: Dec 23 19:01:06 2025 GMT Not After : Dec 24 19:01:06 2025 GMT Subject: CN=91045f289137a0ec073f98f20c89e011bfc26bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:65:7b:cb:9b:f1:06:12:51:5e:25:e6:b1: 0f:55:8e:30:37:5f:ec:b6:bc:9c:f8:93:d2:2b:cf: 5c:a0:86:c8:15:ec:2a:f7:e6:cf:52:cb:64:92:36: f9:ef:01:a6:20:65:ce:4a:78:41:4c:a4:36:30:e7: e0:76:ad:71:cd:d2:68:45:fe:68:f2:aa:f8:d5:da: 7d:62:b0:3b:d0:b1:e4:0b:8f:38:08:1b:80:02:1b: be:88:20:3c:0f:1e:01:dc:7d:7b:a2:d8:19:61:99: eb:67:a7:f4:6d:3f:2c:b8:f8:f2:33:5a:32:79:00: 10:5c:fb:46:2e:c5:6d:2a:79:74:ab:c7:8f:b7:ef: 88:a2:09:fb:12:cb:86:5a:bf:e9:e5:fd:b3:dc:61: df:c4:a8:0c:69:05:72:3e:1b:a8:bf:c0:06:b1:33: b5:f1:a6:64:4f:21:69:1e:0c:a8:6e:98:96:6d:7b: 97:0c:18:a1:e5:b8:3b:b6:f0:be:eb:99:94:93:02: 14:35:7a:28:f9:d2:8b:b4:d5:0e:ab:c4:6b:20:48: 59:fb:b5:cf:d4:2a:e0:8a:4d:97:a5:2c:bf:26:ba: 9b:43:f2:9b:89:5c:6b:a3:11:56:7c:e7:b7:83:15: 15:69:0e:70:c5:19:c3:1b:f0:0e:ed:43:14:46:88: e9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:04:5F:28:91:37:A0:EC:07:3F:98:F2:0C:89:E0:11:BF:C2:6B:DF X509v3 Authority Key Identifier: keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c7:55:6a:73:10:0e:1e:bf:db:99:b2:c9:1a:a4:cb:aa:2a: 4e:d0:cf:c8:79:2c:10:00:0e:7f:55:ad:d2:f2:3b:36:08:21: a7:c4:d4:4d:ec:6f:f6:d5:b4:46:2b:6e:40:45:98:94:1f:81: a1:0a:b9:f0:e5:a9:9b:71:ec:58:e6:be:0c:4e:40:90:8a:f1: 2a:f0:4f:db:28:54:28:52:51:03:0e:e5:94:fb:63:b2:00:71: 18:1c:ac:c1:92:2d:0e:eb:3c:fb:00:bd:c2:9b:a3:3b:82:17: 5c:f9:97:d4:e8:65:e1:f9:fc:7b:38:fc:88:dc:2c:e9:72:64: 48:01:18:9c:b4:84:5d:14:6c:be:3a:48:13:e7:04:a9:7b:4c: 61:ae:42:99:59:5b:f6:4b:9a:ee:4a:3f:46:0c:b7:0e:0f:6e: 50:fa:cb:a0:40:90:d0:70:7e:d7:a1:b2:05:60:3f:31:6d:48: 6b:c2:13:42:77:52:5d:46:65:ba:bb:51:6a:d7:bd:69:60:d2: 64:87:6c:be:3d:2a:84:10:4c:0f:c5:74:84:37:b1:91:dc:11: 0f:9c:d3:d7:a7:81:97:06:b1:93:15:76:63:36:79:7e:58:17: a9:31:79:9d:34:2c:3a:5b:82:3f:83:f5:0a:a2:cb:19:5c:e4: 5f:ba:e8:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMliROjRBzdlITrbBDy7qiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZWY0NmE0MTM0MTk0ZTcyNDIzZDU3MmExYjY2ZDRhOWQy ZTRjMTMwHhcNMjUxMjIzMTkwMTA2WhcNMjUxMjI0MTkwMTA2WjAzMTEwLwYDVQQD Eyg5MTA0NWYyODkxMzdhMGVjMDczZjk4ZjIwYzg5ZTAxMWJmYzI2YmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYxle8ub8QYSUV4l5rEPVY4wN1/s tryc+JPSK89coIbIFewq9+bPUstkkjb57wGmIGXOSnhBTKQ2MOfgdq1xzdJoRf5o 8qr41dp9YrA70LHkC484CBuAAhu+iCA8Dx4B3H17otgZYZnrZ6f0bT8suPjyM1oy eQAQXPtGLsVtKnl0q8ePt++Iogn7EsuGWr/p5f2z3GHfxKgMaQVyPhuov8AGsTO1 8aZkTyFpHgyobpiWbXuXDBih5bg7tvC+65mUkwIUNXoo+dKLtNUOq8RrIEhZ+7XP 1Crgik2XpSy/JrqbQ/KbiVxroxFWfOe3gxUVaQ5wxRnDG/AO7UMURojptQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEEXyiRN6DsBz+Y8gyJ4BG/wmvfMB8GA1UdIwQY MBaAFNLvRqQTQZTnJCPVcqG2bUqdLkwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMt YTg4YmI3ODA1YjA5LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMtYTg4YmI3ODA1YjA5 LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMdVanMQ Dh6/25myyRqky6oqTtDPyHksEAAOf1Wt0vI7Ngghp8TUTexv9tW0RituQEWYlB+B oQq58OWpm3HsWOa+DE5AkIrxKvBP2yhUKFJRAw7llPtjsgBxGByswZItDus8+wC9 wpujO4IXXPmX1Ohl4fn8ezj8iNws6XJkSAEYnLSEXRRsvjpIE+cEqXtMYa5CmVlb 9kua7ko/Rgy3Dg9uUPrLoECQ0HB+16GyBWA/MW1Ia8ITQndSXUZlurtRate9aWDS ZIdsvj0qhBBMD8V0hDexkdwRD5zT16eBlwaxkxV2YzZ5flgXqTF5nTQsOluCP4P1 CqLLGVzkX7roDg== -----END CERTIFICATE-----Generated at Wed Dec 24 00:30:27 2025 by rpki-client