This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json) Hash identifier: CyHzVbRBExmW/xglAw1xrT/HuRT0EauroNlCVpgjEdI= Subject key identifier: 52:E1:4A:81:99:BB:7E:9D:F9:B0:39:10:C3:23:63:BC:2E:D5:10:9A Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac Certificate serial: 019B4BF105E3E69A240F22070BA23EB1C5BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft Manifest number: 14B0 Signing time: Tue 23 Dec 2025 16:00:45 +0000 Manifest this update: Tue 23 Dec 2025 16:00:45 +0000 Manifest next update: Wed 24 Dec 2025 16:00:45 +0000 Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: UTlW5VnMmj3e4yTiqqHAsTgHgnd9ATaO/bUq4DklnNU=) 2: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (hash: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:05:e3:e6:9a:24:0f:22:07:0b:a2:3e:b1:c5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac Validity Not Before: Dec 23 16:00:45 2025 GMT Not After : Dec 24 16:00:45 2025 GMT Subject: CN=52e14a8199bb7e9df9b03910c32363bc2ed5109a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:93:47:63:93:c4:1b:02:a8:83:04:00:5e: bd:b9:f0:a8:d3:71:a3:5d:a3:b9:09:33:94:60:59: ec:a7:5b:43:1c:85:f5:97:38:ba:78:c8:d8:74:d5: 74:c2:7a:cf:2f:6b:12:1e:50:a9:3f:84:d8:c0:61: 44:07:fe:8b:e9:37:52:fc:bb:b3:e1:91:d2:0b:4d: fc:cc:bb:9a:30:51:9d:d8:41:9a:84:0f:bb:c1:66: 94:6b:f5:0f:66:8f:5e:dc:38:7d:f7:0d:ab:05:f8: 09:66:26:00:ed:93:fc:01:de:bd:39:78:ef:9e:9b: 17:de:46:0e:aa:9f:ab:7f:d1:9f:4a:ab:34:c0:26: d2:01:e3:e8:66:7d:48:d7:32:35:cc:2e:7c:ae:17: a3:53:b9:3c:bd:ee:52:09:c5:de:ea:90:2c:8f:ee: ca:b6:36:ca:ac:2b:9f:de:1e:03:e9:00:be:66:eb: 6b:7a:b4:1d:c3:ac:a9:9a:d9:40:be:13:33:d8:c7: d5:43:21:ac:3e:06:4e:6a:ed:2c:05:2e:11:15:c4: 8d:bb:12:32:c0:04:86:fc:85:3c:79:d1:e5:4a:33: 71:8b:8f:67:c5:46:42:72:26:6b:f4:55:cb:a3:0a: a6:40:38:13:ca:77:61:92:de:ab:a4:6d:78:53:aa: d7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E1:4A:81:99:BB:7E:9D:F9:B0:39:10:C3:23:63:BC:2E:D5:10:9A X509v3 Authority Key Identifier: keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ac:75:51:1f:71:11:fa:11:f5:69:41:c4:5f:04:2f:74:e3: 8b:c0:93:ac:ad:6a:fa:c0:3f:d3:95:59:ac:f1:3c:4b:46:30: 15:b5:45:9e:33:b8:de:98:83:77:ff:40:4b:75:39:36:17:75: 38:2a:82:ca:82:2a:00:5e:bf:05:58:27:40:6e:32:50:70:2b: b1:09:ae:e4:30:27:7b:e0:f2:a9:a0:55:9c:8b:f0:b7:dc:fb: 77:95:81:05:ec:98:85:85:5b:43:21:a5:b3:07:92:71:39:3d: f6:1d:f2:39:41:4b:a7:24:3c:37:92:55:9f:2f:0b:a3:5c:b1: ea:6a:38:33:fd:26:b4:e4:8d:cf:36:b8:e1:13:04:4b:60:85: e1:b4:58:d7:53:27:19:c6:49:38:4d:fd:94:37:ba:65:b8:e2: cf:56:23:31:33:ed:a2:a5:ae:47:40:38:77:5b:4e:8c:3a:61: 04:a6:82:d0:d9:3a:1e:0e:73:85:c4:8b:24:77:16:99:28:55: 33:06:b6:f8:14:52:9e:3a:74:77:f7:be:a8:1b:98:f3:32:8f: 8f:32:29:23:6f:96:75:f7:83:9f:61:36:3b:d6:9b:7d:22:83: b2:ce:bf:bb:e8:e5:78:09:ec:d7:19:80:ca:46:2f:1b:5b:95: cb:64:7d:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8QXj5pokDyIHC6I+scW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzQ3OThlMDcxMmYxNTUyOTJkMzIxMWY3YzQ0NzIyM2Nj ZDQ5YWMwHhcNMjUxMjIzMTYwMDQ1WhcNMjUxMjI0MTYwMDQ1WjAzMTEwLwYDVQQD Eyg1MmUxNGE4MTk5YmI3ZTlkZjliMDM5MTBjMzIzNjNiYzJlZDUxMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxGTR2OTxBsCqIMEAF69ufCo03Gj XaO5CTOUYFnsp1tDHIX1lzi6eMjYdNV0wnrPL2sSHlCpP4TYwGFEB/6L6TdS/Luz 4ZHSC038zLuaMFGd2EGahA+7wWaUa/UPZo9e3Dh99w2rBfgJZiYA7ZP8Ad69OXjv npsX3kYOqp+rf9GfSqs0wCbSAePoZn1I1zI1zC58rhejU7k8ve5SCcXe6pAsj+7K tjbKrCuf3h4D6QC+ZutrerQdw6ypmtlAvhMz2MfVQyGsPgZOau0sBS4RFcSNuxIy wASG/IU8edHlSjNxi49nxUZCciZr9FXLowqmQDgTyndhkt6rpG14U6rXbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLhSoGZu36d+bA5EMMjY7wu1RCaMB8GA1UdIwQY MBaAFNI0eY4HEvFVKS0yEffERyI8zUmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEt ODJmN2I5OWM1NDY3LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEtODJmN2I5OWM1NDY3 LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqx1UR9x EfoR9WlBxF8EL3Tji8CTrK1q+sA/05VZrPE8S0YwFbVFnjO43piDd/9AS3U5Nhd1 OCqCyoIqAF6/BVgnQG4yUHArsQmu5DAne+DyqaBVnIvwt9z7d5WBBeyYhYVbQyGl sweScTk99h3yOUFLpyQ8N5JVny8Lo1yx6mo4M/0mtOSNzza44RMES2CF4bRY11Mn GcZJOE39lDe6Zbjiz1YjMTPtoqWuR0A4d1tOjDphBKaC0Nk6Hg5zhcSLJHcWmShV Mwa2+BRSnjp0d/e+qBuY8zKPjzIpI2+WdfeDn2E2O9abfSKDss6/u+jleAns1xmA ykYvG1uVy2R97g== -----END CERTIFICATE-----Generated at Tue Dec 23 18:35:18 2025 by rpki-client