This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft File: 0mjZoqZF18wv0lOzZwQIBV5W__k.mft (raw, json) Hash identifier: zoIK83jOzAm38U/Hg45FNZ/Viz/NkalachommibSENU= Subject key identifier: 04:F4:FB:9B:3B:43:BD:B5:42:21:35:61:9E:73:A5:01:63:70:33:F0 Authority key identifier: D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9 Certificate issuer: /CN=d268d9a2a645d7cc2fd253b3670408055e56fff9 Certificate serial: 019B38A29DEEE1A832B905F0E2DEEAB57F58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft Manifest number: 0E68 Signing time: Fri 19 Dec 2025 22:02:19 +0000 Manifest this update: Fri 19 Dec 2025 22:02:19 +0000 Manifest next update: Sat 20 Dec 2025 22:02:19 +0000 Files and hashes: 1: 0mjZoqZF18wv0lOzZwQIBV5W__k.crl (hash: 20swHtyy5L7nzRlc9/MGCDj2zytvc8S6+UuxE621ihY=) 2: 1-1Q-JUTaDXQnn29QzjTcxKcU51M.roa (hash: S2RyOo3MnGOBQQfCCR1Slz5mB03LVga93H7HVY19x7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:9d:ee:e1:a8:32:b9:05:f0:e2:de:ea:b5:7f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d268d9a2a645d7cc2fd253b3670408055e56fff9 Validity Not Before: Dec 19 22:02:19 2025 GMT Not After : Dec 20 22:02:19 2025 GMT Subject: CN=04f4fb9b3b43bdb5422135619e73a501637033f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:75:80:f1:2f:f0:55:cd:14:55:59:50:54: e0:61:9a:c4:1f:db:c9:3b:86:d4:4d:30:d9:13:ad: 8a:98:fc:eb:37:12:b1:21:01:70:29:0f:06:92:cd: 51:28:d6:18:18:27:cf:2c:c0:91:96:93:3e:43:62: bb:04:22:93:ef:30:6c:57:98:b6:4e:f4:8e:a5:0a: 00:ed:ba:60:d1:d3:10:cc:81:2c:8d:7a:3d:05:84: 1c:c0:63:82:d0:28:83:65:46:c6:56:4d:d0:e8:4e: 7a:29:c1:cd:94:8c:f7:3a:f6:6e:a6:f0:a6:4b:3f: c7:9f:f9:62:e0:a2:d5:6f:54:d2:cb:3b:2c:c4:21: 61:bb:79:bd:78:c9:b9:d8:ed:13:d8:3a:7e:8e:78: 4a:4e:b5:e7:80:1f:e5:a6:84:29:87:a8:e1:b1:8d: 2c:89:49:17:46:25:9f:5e:cb:4a:5f:38:05:f0:b7: 41:ca:32:84:e2:c5:a7:bb:d7:25:da:c8:5b:81:af: f1:ec:75:3c:51:77:12:79:ec:b7:59:94:35:01:dd: be:a8:49:4b:51:90:13:05:33:b7:d3:6e:c5:0d:62: e6:bb:03:34:74:7a:aa:5b:65:5b:02:7e:0d:43:61: fe:e8:dd:76:07:60:f7:41:37:aa:38:90:24:e6:1b: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F4:FB:9B:3B:43:BD:B5:42:21:35:61:9E:73:A5:01:63:70:33:F0 X509v3 Authority Key Identifier: keyid:D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:95:c6:9e:1c:ce:24:16:60:23:0f:ad:bb:87:31:45:19:e7: a7:37:3d:4c:29:b3:5d:59:bf:81:6a:07:96:7f:e3:1e:12:e4: 8b:72:c6:98:1c:ee:1d:d3:5e:72:78:38:17:02:d0:8e:5f:77: 51:47:39:3c:a8:fe:29:93:91:21:17:4b:44:66:bb:ef:ab:c6: 6a:f3:43:d5:a3:70:de:c1:ba:92:b2:d6:fc:17:a0:2c:96:82: 09:5f:14:2e:bb:df:a0:b2:67:06:97:9e:ae:a0:ae:40:83:80: 4f:c0:a8:ce:5c:2f:19:59:9c:07:e4:7d:98:ff:8d:55:d3:1c: 98:ae:4a:6b:11:9a:5d:dd:7e:7b:1d:f9:85:75:73:f0:e5:9a: 7e:1b:a3:c2:bf:3e:de:7b:a7:c8:b8:7d:58:17:75:f0:19:11: 4d:88:6c:dc:70:d3:ac:8f:23:d6:b1:d4:a0:e2:f2:bb:60:7e: ae:95:73:be:4a:89:90:ac:12:ee:51:3b:6d:4f:b3:1e:6a:fc: 1b:d1:70:9b:27:14:e4:65:d4:65:fa:ce:b9:e7:cf:00:a5:75: ee:37:6d:c0:8e:cc:69:4d:12:39:b8:6e:68:0f:f8:cf:98:07: d8:a9:4e:f3:2e:7b:4a:c0:9a:57:cd:42:98:ca:82:64:2c:54: f1:6d:b3:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4op3u4agyuQXw4t7qtX9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjhkOWEyYTY0NWQ3Y2MyZmQyNTNiMzY3MDQwODA1NWU1 NmZmZjkwHhcNMjUxMjE5MjIwMjE5WhcNMjUxMjIwMjIwMjE5WjAzMTEwLwYDVQQD EygwNGY0ZmI5YjNiNDNiZGI1NDIyMTM1NjE5ZTczYTUwMTYzNzAzM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbB1gPEv8FXNFFVZUFTgYZrEH9vJ O4bUTTDZE62KmPzrNxKxIQFwKQ8Gks1RKNYYGCfPLMCRlpM+Q2K7BCKT7zBsV5i2 TvSOpQoA7bpg0dMQzIEsjXo9BYQcwGOC0CiDZUbGVk3Q6E56KcHNlIz3OvZupvCm Sz/Hn/li4KLVb1TSyzssxCFhu3m9eMm52O0T2Dp+jnhKTrXngB/lpoQph6jhsY0s iUkXRiWfXstKXzgF8LdByjKE4sWnu9cl2shbga/x7HU8UXcSeey3WZQ1Ad2+qElL UZATBTO3027FDWLmuwM0dHqqW2VbAn4NQ2H+6N12B2D3QTeqOJAk5hufVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAT0+5s7Q721QiE1YZ5zpQFjcDPwMB8GA1UdIwQY MBaAFNJo2aKmRdfML9JTs2cECAVeVv/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1qWm9xWkYxOHd2MGxPelp3UUlCVjVXX19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80NDAzOGItODAzMS00NGUwLTkxYzQt Y2M1Njc2YzdkZTlmLzEvMG1qWm9xWkYxOHd2MGxPelp3UUlCVjVXX19rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80NDAzOGItODAzMS00NGUwLTkxYzQtY2M1Njc2YzdkZTlm LzEvMG1qWm9xWkYxOHd2MGxPelp3UUlCVjVXX19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZXGnhzO JBZgIw+tu4cxRRnnpzc9TCmzXVm/gWoHln/jHhLki3LGmBzuHdNecng4FwLQjl93 UUc5PKj+KZORIRdLRGa776vGavND1aNw3sG6krLW/BegLJaCCV8ULrvfoLJnBpee rqCuQIOAT8CozlwvGVmcB+R9mP+NVdMcmK5KaxGaXd1+ex35hXVz8OWafhujwr8+ 3nunyLh9WBd18BkRTYhs3HDTrI8j1rHUoOLyu2B+rpVzvkqJkKwS7lE7bU+zHmr8 G9FwmycU5GXUZfrOuefPAKV17jdtwI7MaU0SObhuaA/4z5gH2KlO8y57SsCaV81C mMqCZCxU8W2zOg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:54 2025 by rpki-client