This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json) Hash identifier: 44e3GqArWaBqQR0EqwgSFr9WRoYs9RnMI1nVPzUcv/U= Subject key identifier: F9:B0:1C:A7:00:9C:57:69:03:61:9D:54:8A:31:2A:B9:74:C8:8F:90 Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06 Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06 Certificate serial: 019B3CEBBCD31B42577513B59BE355053716 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft Manifest number: 150B Signing time: Sat 20 Dec 2025 18:00:40 +0000 Manifest this update: Sat 20 Dec 2025 18:00:40 +0000 Manifest next update: Sun 21 Dec 2025 18:00:40 +0000 Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: RSBufJWdCkHWJO+xwphBnYAerL3jfe+BOOraVjIz6vo=) 2: KEydF7bMk6RADdNKhYi6WFKpHSw.roa (hash: bl+U1VafH5Wzj+g/exETARmZ+DznhEsF7Fa2nlPP/i8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:bc:d3:1b:42:57:75:13:b5:9b:e3:55:05:37:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06 Validity Not Before: Dec 20 18:00:40 2025 GMT Not After : Dec 21 18:00:40 2025 GMT Subject: CN=f9b01ca7009c576903619d548a312ab974c88f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b2:ff:58:7d:09:1d:ae:e7:43:44:b0:d5:0a: 06:f9:cf:47:2e:de:38:c3:92:8a:e8:74:dc:a1:cd: d5:8c:b3:cf:6e:d5:76:da:56:7b:44:08:60:df:b1: 95:c9:5e:bb:cb:21:3e:97:3c:07:d4:7b:64:58:a2: 7c:da:41:eb:5e:fa:c7:56:08:4e:2f:ac:2c:91:93: 40:16:45:8b:be:1c:95:ce:61:b3:57:1e:5b:42:5a: 9d:1d:d8:50:0c:1e:c6:95:39:7a:29:da:9f:9f:45: 69:1e:5c:34:61:55:d9:e7:ca:48:4b:3c:2e:3c:5e: 33:8a:da:23:f7:7a:51:60:7e:0a:0b:b4:98:75:0b: a7:13:03:d0:83:87:89:8f:b3:04:8f:f1:79:ec:f9: 17:b3:fe:4e:da:b2:60:4b:05:32:33:2a:1d:bd:f7: e8:4d:06:10:6a:f5:59:55:e9:19:6d:3f:b6:dd:f8: 81:2d:a6:52:57:4f:66:8d:e6:2f:a8:c0:a5:2f:95: f9:ed:81:6e:04:5a:9f:3e:3e:a0:fe:3a:b6:a8:61: 19:b6:9c:32:14:e3:21:9f:22:d3:0f:ec:2c:00:fe: 40:97:e9:1a:c4:1b:ed:f7:c7:cc:71:9c:71:fb:d2: 28:a3:62:16:b0:11:ba:cd:71:06:d7:bd:91:36:12: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B0:1C:A7:00:9C:57:69:03:61:9D:54:8A:31:2A:B9:74:C8:8F:90 X509v3 Authority Key Identifier: keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d2:aa:b2:4f:74:e0:84:de:d4:d2:43:45:8c:98:b6:bd:d9: 4c:d5:bb:a2:32:c5:89:f7:ff:0e:2e:8f:a5:72:e0:a2:89:e3: e0:a2:ed:7b:ca:2d:ff:fc:5d:91:03:41:3d:10:79:97:e6:46: 89:2c:0c:a1:8b:83:2c:21:d9:13:e9:14:55:99:e6:87:2a:88: 3f:6d:3b:c6:cf:c0:49:f3:f1:10:ac:16:1d:e0:fe:d9:92:23: 1b:3a:c3:07:4c:62:c5:4b:9c:fb:f5:59:89:a1:bb:d2:3d:a3: 89:92:ed:9c:2d:84:fa:93:45:58:87:25:9a:66:e4:41:70:6b: f0:d4:d1:46:38:5d:a6:0a:0e:93:2c:ee:df:f0:84:12:db:90: b1:ca:b0:5a:4f:8a:ae:d3:94:1e:c0:49:3a:c7:38:55:0b:b9: 95:c3:2a:96:32:82:12:82:74:7a:0f:9a:eb:0b:22:97:aa:4c: 79:63:60:bf:d3:a6:e0:ea:60:52:37:09:bd:c6:54:4c:f2:d8: 52:30:f4:ac:38:78:df:c1:b7:09:79:14:c1:db:29:64:39:db: cd:78:2b:5a:f3:45:b9:8f:4c:ce:a8:26:35:ea:55:34:73:ba: 3a:d2:f3:df:bf:a1:9c:83:27:4b:e0:72:08:0d:69:cc:07:94: 5e:7d:6d:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs867zTG0JXdRO1m+NVBTcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOTFmZThjNTQwYzQ0ZTIzNGY5YmM2NjhmOGEzYjE2NDdh Y2RiMDYwHhcNMjUxMjIwMTgwMDQwWhcNMjUxMjIxMTgwMDQwWjAzMTEwLwYDVQQD EyhmOWIwMWNhNzAwOWM1NzY5MDM2MTlkNTQ4YTMxMmFiOTc0Yzg4ZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rL/WH0JHa7nQ0Sw1QoG+c9HLt44 w5KK6HTcoc3VjLPPbtV22lZ7RAhg37GVyV67yyE+lzwH1HtkWKJ82kHrXvrHVghO L6wskZNAFkWLvhyVzmGzVx5bQlqdHdhQDB7GlTl6Kdqfn0VpHlw0YVXZ58pISzwu PF4zitoj93pRYH4KC7SYdQunEwPQg4eJj7MEj/F57PkXs/5O2rJgSwUyMyodvffo TQYQavVZVekZbT+23fiBLaZSV09mjeYvqMClL5X57YFuBFqfPj6g/jq2qGEZtpwy FOMhnyLTD+wsAP5Al+kaxBvt98fMcZxx+9Ioo2IWsBG6zXEG172RNhJDrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmwHKcAnFdpA2GdVIoxKrl0yI+QMB8GA1UdIwQY MBaAFNCR/oxUDETiNPm8Zo+KOxZHrNsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgt MDRlNmY1NzY0YzUyLzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgtMDRlNmY1NzY0YzUy LzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9Kqsk90 4ITe1NJDRYyYtr3ZTNW7ojLFiff/Di6PpXLgoonj4KLte8ot//xdkQNBPRB5l+ZG iSwMoYuDLCHZE+kUVZnmhyqIP207xs/ASfPxEKwWHeD+2ZIjGzrDB0xixUuc+/VZ iaG70j2jiZLtnC2E+pNFWIclmmbkQXBr8NTRRjhdpgoOkyzu3/CEEtuQscqwWk+K rtOUHsBJOsc4VQu5lcMqljKCEoJ0eg+a6wsil6pMeWNgv9Om4OpgUjcJvcZUTPLY UjD0rDh438G3CXkUwdspZDnbzXgrWvNFuY9MzqgmNepVNHO6OtLz37+hnIMnS+By CA1pzAeUXn1tOg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:05 2025 by rpki-client