This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft File: 00J0yPw5e9vGx1haFcgyErBQIh8.mft (raw, json) Hash identifier: y4Ti/i1ua8fN4h2jf2j1S6ieX5MPrM/yATPCY+Joiw0= Subject key identifier: C3:38:15:08:FC:F8:E6:9F:C2:74:BA:BE:9D:A3:02:8D:AE:96:8D:06 Authority key identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F Certificate issuer: /CN=d34274c8fc397bdbc6c7585a15c83212b050221f Certificate serial: 019B3FED3F9CFA4CE41EC3758D8CAB87E179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 08:01:11 +0000 Manifest this update: Sun 21 Dec 2025 08:01:11 +0000 Manifest next update: Mon 22 Dec 2025 08:01:11 +0000 Files and hashes: 1: 00J0yPw5e9vGx1haFcgyErBQIh8.crl (hash: IvVjyQg4xTpeQdGW54gSDBhE3ud4z6BUpQveL37vm5U=) 2: JfpCcJQQ7HN-Dv4ophHtkQofaT0.roa (hash: xefZz0TBx0gKqWeUjL3ez873hj1QBBW9YJlq5BqFZZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:3f:9c:fa:4c:e4:1e:c3:75:8d:8c:ab:87:e1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34274c8fc397bdbc6c7585a15c83212b050221f Validity Not Before: Dec 21 08:01:11 2025 GMT Not After : Dec 22 08:01:11 2025 GMT Subject: CN=c3381508fcf8e69fc274babe9da3028dae968d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:3b:a2:c8:c4:6a:c5:48:3f:6c:94:b5:52: 00:99:93:8f:ad:bc:10:0d:45:40:a4:88:e9:05:8f: e5:68:4d:5e:92:c1:2a:ec:89:ea:3c:d1:4a:1c:12: c2:b7:1c:d8:6c:60:c5:3a:52:f3:8a:c9:5a:48:0a: 5e:bd:ee:2b:42:2f:de:5f:16:5d:66:ef:0f:c8:5b: be:b6:ce:1d:5e:99:d4:4f:14:f4:d4:6c:0d:e8:dc: 6d:a5:bf:53:84:db:61:9c:fa:1d:83:48:b0:42:1e: f8:82:e1:a4:f5:0b:6d:61:69:70:84:1b:9d:9c:7f: a4:f1:4b:dd:a4:1c:e4:cd:e5:6f:31:65:86:1c:29: ee:de:29:3e:ff:49:6b:6f:3e:ab:f4:4b:28:ed:10: c2:64:b9:37:e4:16:0a:77:2a:05:ff:0c:fe:8b:f6: bb:db:f0:81:c5:87:a6:8d:24:94:0c:2c:92:60:e9: a5:c0:82:f8:64:df:aa:04:de:04:71:05:f3:35:87: 67:b0:b0:98:e0:27:0c:6a:56:b5:0e:90:b5:65:7f: ed:b0:63:37:02:08:25:a3:69:03:45:23:ac:d4:fa: 12:6c:5c:5b:53:40:b3:d2:44:c9:13:14:a8:60:55: 52:c4:bf:57:c8:d1:dd:a0:e5:58:2c:b8:1d:72:72: be:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:38:15:08:FC:F8:E6:9F:C2:74:BA:BE:9D:A3:02:8D:AE:96:8D:06 X509v3 Authority Key Identifier: keyid:D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:00:56:11:62:6e:5b:63:82:6f:6f:d3:0e:05:e0:d8:7a:89: e8:bc:9e:35:70:0f:c1:9c:d6:f1:c8:e6:7e:d2:1c:32:1c:5b: fd:ac:61:3b:ed:19:02:b1:a1:19:9b:ca:21:60:e9:99:30:73: 6c:10:74:02:9e:f7:8b:e9:da:a1:a3:5a:98:4f:e2:67:55:00: c4:4f:82:34:97:3d:da:5d:a3:3f:24:a5:87:8d:fe:7a:f6:3b: 3a:3a:40:59:75:a2:68:3a:df:7d:7f:40:6b:c8:54:92:f4:6a: 03:fa:9e:3b:d4:9b:fa:07:c9:16:b7:d2:5b:f8:1e:8f:77:d1: c5:91:f3:a5:ce:57:16:7a:e7:08:ea:de:f6:48:68:74:0e:61: 53:53:3e:c4:3d:45:32:cc:10:01:1d:dd:36:93:9c:18:cf:4b: d8:55:f9:c2:a1:6a:55:64:c5:38:f6:d8:4d:84:df:c5:a8:44: b8:16:80:d8:52:9c:73:c0:09:56:cd:ac:f3:84:0e:61:4e:df: 12:11:05:63:39:ae:a7:55:1f:be:f9:b9:cc:59:e2:87:74:73: c0:48:98:bf:ac:55:cb:9f:03:30:9a:75:ed:99:ad:c5:76:7e: dd:ca:dc:a2:35:5d:ac:2a:37:bf:60:ed:6e:31:36:00:2f:75: 67:8d:b4:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7T+c+kzkHsN1jYyrh+F5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNDI3NGM4ZmMzOTdiZGJjNmM3NTg1YTE1YzgzMjEyYjA1 MDIyMWYwHhcNMjUxMjIxMDgwMTExWhcNMjUxMjIyMDgwMTExWjAzMTEwLwYDVQQD EyhjMzM4MTUwOGZjZjhlNjlmYzI3NGJhYmU5ZGEzMDI4ZGFlOTY4ZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd07osjEasVIP2yUtVIAmZOPrbwQ DUVApIjpBY/laE1eksEq7InqPNFKHBLCtxzYbGDFOlLzislaSApeve4rQi/eXxZd Zu8PyFu+ts4dXpnUTxT01GwN6Nxtpb9ThNthnPodg0iwQh74guGk9QttYWlwhBud nH+k8UvdpBzkzeVvMWWGHCnu3ik+/0lrbz6r9Eso7RDCZLk35BYKdyoF/wz+i/a7 2/CBxYemjSSUDCySYOmlwIL4ZN+qBN4EcQXzNYdnsLCY4CcMala1DpC1ZX/tsGM3 Agglo2kDRSOs1PoSbFxbU0Cz0kTJExSoYFVSxL9XyNHdoOVYLLgdcnK+KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMM4FQj8+OafwnS6vp2jAo2ulo0GMB8GA1UdIwQY MBaAFNNCdMj8OXvbxsdYWhXIMhKwUCIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xZmZmYmItZmYyNC00ZmFiLWE3NjMt NTBhZGJlYWM4Y2I0LzEvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8xZmZmYmItZmYyNC00ZmFiLWE3NjMtNTBhZGJlYWM4Y2I0 LzEvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgBWEWJu W2OCb2/TDgXg2HqJ6LyeNXAPwZzW8cjmftIcMhxb/axhO+0ZArGhGZvKIWDpmTBz bBB0Ap73i+naoaNamE/iZ1UAxE+CNJc92l2jPySlh43+evY7OjpAWXWiaDrffX9A a8hUkvRqA/qeO9Sb+gfJFrfSW/gej3fRxZHzpc5XFnrnCOre9khodA5hU1M+xD1F MswQAR3dNpOcGM9L2FX5wqFqVWTFOPbYTYTfxahEuBaA2FKcc8AJVs2s84QOYU7f EhEFYzmup1Ufvvm5zFnih3RzwEiYv6xVy58DMJp17ZmtxXZ+3crcojVdrCo3v2Dt bjE2AC91Z420Hw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:24:47 2025 by rpki-client