This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft File: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json) Hash identifier: XLVNU5Y1sMmJ4e1HvUqEG564hvhpzo4SjdhwHtCDdmE= Subject key identifier: 19:FB:2F:42:F9:68:15:DE:9B:EC:5D:B1:0D:B3:46:39:E3:F5:8E:3A Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05 Certificate issuer: /CN=d098e907c63457e6ca6281dfe297d972bffda805 Certificate serial: 019B39B3A7086C76FD821EDABDD3A843F4ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft Manifest number: 12B2 Signing time: Sat 20 Dec 2025 03:00:33 +0000 Manifest this update: Sat 20 Dec 2025 03:00:33 +0000 Manifest next update: Sun 21 Dec 2025 03:00:33 +0000 Files and hashes: 1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: +j8fBzBIucEwyoEp3VO/zD8ksZGSh7sXareWwnzSVN4=) 2: ur2jQXpGWWYECBsXTeT3ihs6vVk.roa (hash: BxlFUb0zmMnW7XaJszRYUfw8FuEEod2RQjrGiW/bsc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:a7:08:6c:76:fd:82:1e:da:bd:d3:a8:43:f4:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805 Validity Not Before: Dec 20 03:00:33 2025 GMT Not After : Dec 21 03:00:33 2025 GMT Subject: CN=19fb2f42f96815de9bec5db10db34639e3f58e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:54:e2:7b:9e:54:e4:a5:94:05:4a:2a:4e:d2: 0c:ca:18:0f:47:7f:de:7c:4e:ef:a1:c9:9e:dd:ad: 2a:f3:fc:5e:06:76:f5:86:07:76:74:5d:cc:59:94: 5a:cd:1c:38:45:43:bd:90:14:d8:50:e9:da:ab:c9: 94:1e:12:1e:52:51:a0:c0:5b:64:5b:2e:5b:81:d8: 15:7c:98:9a:7e:13:b9:ea:a3:9c:b7:9c:1e:e9:2b: ca:ab:14:d3:31:b0:1f:3d:8e:a7:f8:6f:dd:19:8b: 22:36:b1:fd:b7:ea:f1:83:3b:57:22:62:bf:83:65: c6:36:95:79:75:c6:fd:9c:4e:4b:96:76:fd:80:5c: 2b:07:00:97:1b:2d:59:ad:27:58:d8:ce:c4:c4:f1: 72:b1:59:bc:47:48:c8:19:39:a1:eb:78:a3:7e:0d: 45:55:80:22:23:7f:49:96:77:07:38:da:6f:f6:6b: 39:8b:2c:c6:77:8d:9e:c3:43:36:b4:82:9e:1c:06: bb:f7:63:2d:77:b7:8e:20:01:fd:c0:bd:e7:ce:e4: 2d:69:7c:d1:5a:36:59:b6:02:e7:4b:a2:81:06:fc: d4:48:e5:63:fa:2f:be:a2:c1:7c:cb:4b:d0:ed:0e: d0:51:d3:92:73:bb:ee:db:3e:5f:43:5e:63:3d:0b: 32:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FB:2F:42:F9:68:15:DE:9B:EC:5D:B1:0D:B3:46:39:E3:F5:8E:3A X509v3 Authority Key Identifier: keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:62:2d:d5:aa:8c:a5:2d:34:cd:9e:4b:c4:98:d7:a4:5f:8e: 09:e2:50:68:69:c5:61:4b:63:1f:6c:65:48:1a:53:02:f4:0d: ec:28:e4:10:6e:e7:9b:78:cb:55:b2:4b:f2:ee:7e:27:56:1c: 03:e1:db:5e:14:d9:eb:10:9c:15:bc:93:95:d9:3a:15:0b:37: b8:23:e6:7a:2b:c5:9e:f5:5b:ef:c0:de:08:f2:8a:7b:6e:62: b3:a1:f1:a5:67:ba:15:5d:6b:5b:9e:cb:68:9a:3b:6e:fc:af: dc:01:07:6b:34:6b:98:d2:fa:6f:ce:b3:c8:2f:68:5c:7d:68: 3a:24:a0:12:2f:37:f5:26:2d:05:c9:57:58:e0:6a:52:12:d0: 30:b9:38:54:aa:53:c1:94:b4:68:a2:51:f2:ed:ee:35:f1:e6: 59:5f:23:fe:a0:a7:e7:7d:84:81:e6:fe:6e:b2:88:1e:df:2b: cf:bf:0e:f0:e0:60:99:66:88:ec:64:83:46:4a:66:28:54:11: d3:a1:79:8f:fc:7b:12:8f:58:6d:cb:1c:0b:e7:4e:78:ad:cd: 2b:b8:bd:cc:95:cd:92:d2:4a:9a:f7:fc:59:ff:ba:fc:f6:05: c4:fb:6c:b2:d8:f9:79:62:94:fa:b5:9e:90:62:bb:c4:d1:4a: 50:7a:e9:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s6cIbHb9gh7avdOoQ/TtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOThlOTA3YzYzNDU3ZTZjYTYyODFkZmUyOTdkOTcyYmZm ZGE4MDUwHhcNMjUxMjIwMDMwMDMzWhcNMjUxMjIxMDMwMDMzWjAzMTEwLwYDVQQD EygxOWZiMmY0MmY5NjgxNWRlOWJlYzVkYjEwZGIzNDYzOWUzZjU4ZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFTie55U5KWUBUoqTtIMyhgPR3/e fE7vocme3a0q8/xeBnb1hgd2dF3MWZRazRw4RUO9kBTYUOnaq8mUHhIeUlGgwFtk Wy5bgdgVfJiafhO56qOct5we6SvKqxTTMbAfPY6n+G/dGYsiNrH9t+rxgztXImK/ g2XGNpV5dcb9nE5Llnb9gFwrBwCXGy1ZrSdY2M7ExPFysVm8R0jIGTmh63ijfg1F VYAiI39JlncHONpv9ms5iyzGd42ew0M2tIKeHAa792Mtd7eOIAH9wL3nzuQtaXzR WjZZtgLnS6KBBvzUSOVj+i++osF8y0vQ7Q7QUdOSc7vu2z5fQ15jPQsyrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBn7L0L5aBXem+xdsQ2zRjnj9Y46MB8GA1UdIwQY MBaAFNCY6QfGNFfmymKB3+KX2XK//agFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2Mt MTBlMTNkNDNmMGRkLzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2MtMTBlMTNkNDNmMGRk LzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmIt1aqM pS00zZ5LxJjXpF+OCeJQaGnFYUtjH2xlSBpTAvQN7CjkEG7nm3jLVbJL8u5+J1Yc A+HbXhTZ6xCcFbyTldk6FQs3uCPmeivFnvVb78DeCPKKe25is6HxpWe6FV1rW57L aJo7bvyv3AEHazRrmNL6b86zyC9oXH1oOiSgEi839SYtBclXWOBqUhLQMLk4VKpT wZS0aKJR8u3uNfHmWV8j/qCn532Egeb+brKIHt8rz78O8OBgmWaI7GSDRkpmKFQR 06F5j/x7Eo9YbcscC+dOeK3NK7i9zJXNktJKmvf8Wf+6/PYFxPtsstj5eWKU+rWe kGK7xNFKUHrpCw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:04:51 2025 by rpki-client