This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json) Hash identifier: Y6Nw//IrObddVwqgiRe6R10MeBXxgOIi9CUJmtidM2Y= Subject key identifier: 1E:13:BE:BF:25:72:2C:E0:6C:44:51:E1:44:9D:01:A9:CE:82:4C:FE Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60 Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60 Certificate serial: 019B3CEBC505A4DCD20544597A84D864E513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 18:00:42 +0000 Manifest this update: Sat 20 Dec 2025 18:00:42 +0000 Manifest next update: Sun 21 Dec 2025 18:00:42 +0000 Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=) 2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: dBKKPtO0Supxn9WOk4dpmx0eWxGaKVb6TMJ0ThKcGT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:c5:05:a4:dc:d2:05:44:59:7a:84:d8:64:e5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60 Validity Not Before: Dec 20 18:00:42 2025 GMT Not After : Dec 21 18:00:42 2025 GMT Subject: CN=1e13bebf25722ce06c4451e1449d01a9ce824cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:81:74:03:59:71:c5:10:ea:6c:4d:2f:47: e9:45:6b:35:36:91:46:d9:14:9b:3a:05:ed:02:a0: 31:10:79:3d:8e:1c:ea:51:83:2c:2f:46:10:21:4e: 72:c3:01:7c:48:7e:d8:72:25:1a:10:00:42:78:bf: 32:19:c5:0b:9c:9b:74:9e:23:0f:97:d9:4d:aa:28: 3a:96:22:b2:51:28:5b:98:be:da:4f:e6:42:89:81: c8:10:82:c7:f1:a3:e2:3e:e4:3e:cb:ba:ce:58:96: dc:05:56:43:07:2f:89:da:bf:4e:8f:b0:90:25:9b: 9d:09:0f:c2:09:79:cc:1a:47:e1:80:51:6b:a2:6b: e5:69:d6:ba:f7:77:0f:88:a7:1f:4f:72:c6:ba:57: 36:60:71:bc:e6:0c:3f:66:a1:6e:1f:15:e4:35:63: 7d:2e:b8:97:69:8f:f2:92:11:8f:c3:ab:c4:36:c2: 3c:7b:27:43:b0:a2:46:09:36:ec:68:8c:21:06:ce: 13:83:aa:f1:ea:4e:d4:dd:22:89:31:a7:b2:20:1e: 7f:e4:ae:a2:05:13:29:c7:05:3e:06:d5:3d:42:95: ee:07:31:85:d4:0c:9f:57:14:33:ec:80:d4:a9:e1: 4d:1f:cd:82:cd:11:dd:89:9d:1e:97:e1:98:2c:10: 84:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:13:BE:BF:25:72:2C:E0:6C:44:51:E1:44:9D:01:A9:CE:82:4C:FE X509v3 Authority Key Identifier: keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4e:d6:5f:1d:61:1e:94:21:43:84:df:66:3f:17:5e:3c:19: c6:5d:ab:7c:5f:48:32:d0:93:fb:d6:60:9a:94:b9:d6:db:c4: b0:61:a6:27:e9:54:7d:2f:18:6e:96:10:66:78:46:5b:b0:07: 01:86:75:e3:f6:40:be:5a:57:b3:c3:88:7b:c5:81:57:12:ea: ee:18:f3:16:46:24:9c:26:1c:8b:68:9d:c0:2b:ed:e7:15:d3: 07:d6:a8:27:d3:04:35:53:58:6b:ad:55:8f:0b:f5:17:f1:06: a9:02:65:eb:47:46:ff:b7:2a:07:e6:61:ef:c2:0e:02:5c:a7: 5a:7f:98:18:bc:dd:96:9f:1e:1f:9b:84:23:62:ca:cd:73:42: 25:bc:41:70:63:3a:5b:94:2a:62:41:45:ee:75:46:28:03:7d: ea:72:8c:70:17:57:49:3f:e2:0e:ed:b9:80:2c:3d:f8:7d:c5: f8:92:6c:fb:10:d4:79:f5:98:ec:f8:8b:d5:0a:dd:0d:11:a2: 93:a7:36:d4:77:19:a9:5a:da:41:5a:dd:7a:ec:03:ad:af:2a: 47:59:29:d2:0f:cf:cd:54:2d:bd:46:a6:9d:52:0f:33:30:99: 89:2e:30:ba:06:19:bb:fc:03:8b:3a:1c:6b:a1:9d:b5:03:27: 90:2f:ad:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs868UFpNzSBURZeoTYZOUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDhmYjljZjE3ZGVjZTZhZGRiMDhlZWZkOWJlZTg0MmMx ZTJiNjAwHhcNMjUxMjIwMTgwMDQyWhcNMjUxMjIxMTgwMDQyWjAzMTEwLwYDVQQD EygxZTEzYmViZjI1NzIyY2UwNmM0NDUxZTE0NDlkMDFhOWNlODI0Y2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkGBdANZccUQ6mxNL0fpRWs1NpFG 2RSbOgXtAqAxEHk9jhzqUYMsL0YQIU5ywwF8SH7YciUaEABCeL8yGcULnJt0niMP l9lNqig6liKyUShbmL7aT+ZCiYHIEILH8aPiPuQ+y7rOWJbcBVZDBy+J2r9Oj7CQ JZudCQ/CCXnMGkfhgFFromvlada693cPiKcfT3LGulc2YHG85gw/ZqFuHxXkNWN9 LriXaY/ykhGPw6vENsI8eydDsKJGCTbsaIwhBs4Tg6rx6k7U3SKJMaeyIB5/5K6i BRMpxwU+BtU9QpXuBzGF1AyfVxQz7IDUqeFNH82CzRHdiZ0el+GYLBCEfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4Tvr8lcizgbERR4USdAanOgkz+MB8GA1UdIwQY MBaAFP9I+5zxfezmrdsI7v2b7oQsHitgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzIt OTA1NDA3ZWIwZjUzLzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzItOTA1NDA3ZWIwZjUz LzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATE7WXx1h HpQhQ4TfZj8XXjwZxl2rfF9IMtCT+9ZgmpS51tvEsGGmJ+lUfS8YbpYQZnhGW7AH AYZ14/ZAvlpXs8OIe8WBVxLq7hjzFkYknCYci2idwCvt5xXTB9aoJ9MENVNYa61V jwv1F/EGqQJl60dG/7cqB+Zh78IOAlynWn+YGLzdlp8eH5uEI2LKzXNCJbxBcGM6 W5QqYkFF7nVGKAN96nKMcBdXST/iDu25gCw9+H3F+JJs+xDUefWY7PiL1QrdDRGi k6c21HcZqVraQVrdeuwDra8qR1kp0g/PzVQtvUamnVIPMzCZiS4wugYZu/wDizoc a6GdtQMnkC+t2w== -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:47 2025 by rpki-client