This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json) Hash identifier: 5IQFTSot6OsMYcT3U8XfnkVDnEVfax3n+sgt0ov3Yeg= Subject key identifier: 91:CF:8B:A4:78:72:7E:74:15:20:8D:3C:F4:EB:B4:18:D8:3E:04:B2 Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac Certificate serial: 019B1D98D6F91B781D59E3D6815C88F5F55D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft Manifest number: 1498 Signing time: Sun 14 Dec 2025 16:01:54 +0000 Manifest this update: Sun 14 Dec 2025 16:01:54 +0000 Manifest next update: Mon 15 Dec 2025 16:01:54 +0000 Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: TqAZ527sFUw4A9Lp21/sNhDBGHW9CsDv/Hlf5Npc1iA=) 2: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (hash: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:d6:f9:1b:78:1d:59:e3:d6:81:5c:88:f5:f5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac Validity Not Before: Dec 14 16:01:54 2025 GMT Not After : Dec 15 16:01:54 2025 GMT Subject: CN=91cf8ba478727e7415208d3cf4ebb418d83e04b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:28:78:29:40:cb:b6:d1:30:65:77:7b:61:6b: ee:c1:b3:3f:67:07:10:23:0f:19:55:41:0d:d2:80: 6d:0d:96:d8:6d:27:c3:09:a0:b5:3e:04:22:13:fd: 07:0f:db:3b:c7:26:e2:73:7f:17:45:5a:c4:23:95: 2e:8a:93:6c:67:c8:10:5f:fd:6a:58:ad:cd:cb:c4: f7:b0:95:96:4a:a6:a0:13:c8:1b:c9:75:73:80:25: f7:16:88:5d:57:a9:89:d4:9f:71:ca:b5:34:2a:da: 53:ee:ef:b0:f3:97:2e:cd:bc:28:e7:13:5c:6e:eb: 6f:27:2a:03:58:4f:19:bc:96:84:3f:a0:9d:86:2a: 11:68:68:ed:e7:76:18:db:ae:88:c0:a1:87:85:c7: a3:17:8e:7d:f8:58:2c:59:81:fd:46:0b:d2:3c:ab: e8:8f:30:b6:fb:19:f3:23:86:db:96:7f:48:37:99: 36:0e:bc:37:9e:01:d6:47:c1:f0:20:4d:e7:c8:1c: 11:ac:74:d8:9f:32:54:8d:78:e5:38:99:9f:f5:c5: 3a:7a:5a:59:aa:8e:a3:a6:87:e6:7b:7e:1f:30:8d: fb:3d:88:25:a9:aa:6a:5d:07:5f:3a:6a:a3:51:8c: e1:b2:bf:6e:93:e1:58:bb:08:bc:9d:e1:99:99:b9: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CF:8B:A4:78:72:7E:74:15:20:8D:3C:F4:EB:B4:18:D8:3E:04:B2 X509v3 Authority Key Identifier: keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a3:b8:22:a6:96:74:df:fe:66:c2:05:b4:a0:69:31:6f:6e: 1f:16:cd:e1:cb:78:a1:b5:55:10:ca:42:fb:97:71:1b:48:b0: 8f:86:26:ff:8d:e3:b9:65:4d:69:5c:88:41:40:66:e1:fc:83: c2:49:b4:63:0d:85:95:7b:83:b8:dd:90:54:19:2d:b4:64:c9: 12:6e:dd:82:37:7c:9d:32:d6:26:95:a7:13:89:e2:f6:0c:ef: 75:11:56:91:47:e1:04:11:16:b3:3e:10:d0:bb:3b:1c:8f:0e: df:14:5a:ad:d8:67:9f:62:a0:27:40:c7:5e:1d:a9:26:c9:b7: 23:3b:ac:7e:13:a6:6e:31:f6:be:ed:6e:60:73:5c:28:df:f9: 1a:e2:6c:b7:67:8d:e8:b2:98:fd:d3:5c:96:17:b6:25:b4:71: 27:ba:35:65:76:1a:35:50:6f:4e:94:ec:e8:96:37:2e:fe:f9: 62:fb:32:52:a3:69:13:ad:98:c9:62:d2:e4:45:31:ca:a0:d6: c5:23:ee:f8:55:17:5f:67:73:50:0d:67:94:41:44:c0:8f:e7: f5:84:31:1f:5a:a8:e2:f0:02:87:52:bf:a7:c3:f4:77:de:be: be:6b:84:59:b5:0c:83:04:64:d9:29:e7:98:4a:35:39:e4:83: 48:32:eb:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmNb5G3gdWePWgVyI9fVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzQ3OThlMDcxMmYxNTUyOTJkMzIxMWY3YzQ0NzIyM2Nj ZDQ5YWMwHhcNMjUxMjE0MTYwMTU0WhcNMjUxMjE1MTYwMTU0WjAzMTEwLwYDVQQD Eyg5MWNmOGJhNDc4NzI3ZTc0MTUyMDhkM2NmNGViYjQxOGQ4M2UwNGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCh4KUDLttEwZXd7YWvuwbM/ZwcQ Iw8ZVUEN0oBtDZbYbSfDCaC1PgQiE/0HD9s7xybic38XRVrEI5UuipNsZ8gQX/1q WK3Ny8T3sJWWSqagE8gbyXVzgCX3FohdV6mJ1J9xyrU0KtpT7u+w85cuzbwo5xNc butvJyoDWE8ZvJaEP6CdhioRaGjt53YY266IwKGHhcejF459+FgsWYH9RgvSPKvo jzC2+xnzI4bbln9IN5k2Drw3ngHWR8HwIE3nyBwRrHTYnzJUjXjlOJmf9cU6elpZ qo6jpofme34fMI37PYglqapqXQdfOmqjUYzhsr9uk+FYuwi8neGZmblcHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHPi6R4cn50FSCNPPTrtBjYPgSyMB8GA1UdIwQY MBaAFNI0eY4HEvFVKS0yEffERyI8zUmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEt ODJmN2I5OWM1NDY3LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEtODJmN2I5OWM1NDY3 LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaO4IqaW dN/+ZsIFtKBpMW9uHxbN4ct4obVVEMpC+5dxG0iwj4Ym/43juWVNaVyIQUBm4fyD wkm0Yw2FlXuDuN2QVBkttGTJEm7dgjd8nTLWJpWnE4ni9gzvdRFWkUfhBBEWsz4Q 0Ls7HI8O3xRardhnn2KgJ0DHXh2pJsm3IzusfhOmbjH2vu1uYHNcKN/5GuJst2eN 6LKY/dNclhe2JbRxJ7o1ZXYaNVBvTpTs6JY3Lv75YvsyUqNpE62YyWLS5EUxyqDW xSPu+FUXX2dzUA1nlEFEwI/n9YQxH1qo4vACh1K/p8P0d96+vmuEWbUMgwRk2Snn mEo1OeSDSDLrsA== -----END CERTIFICATE-----Generated at Sun Dec 14 22:56:37 2025 by rpki-client