This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json) Hash identifier: WgOLeDit/2kzfMfrlRyCUoXN/oZYVkN8rOzaolAyEjw= Subject key identifier: E6:CE:14:A4:9C:8E:BF:AB:BF:A1:87:FE:B2:2D:45:6B:B2:F7:9E:01 Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58 Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758 Certificate serial: 019B1C852885E9448C1C1C79CF46D3C5A1F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft Manifest number: 15F8 Signing time: Sun 14 Dec 2025 11:00:47 +0000 Manifest this update: Sun 14 Dec 2025 11:00:47 +0000 Manifest next update: Mon 15 Dec 2025 11:00:47 +0000 Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: ZbQgNOHkwfelF4FeiVo5Cxa84KAkAvB26Isr9l4wH/g=) 2: D7sSJq2EzuylXPTSVOWPxBm3Ho8.roa (hash: gmpCwmfjITdv8gtFNL4Zn9iouUW+u1PcPnCsYBgoNzM=) 3: efe5amh4jlMydhivq3OF5qbDCpI.roa (hash: 6iw2gnDcZP6ZZJX73WBgPOkeEQEpMVtjxP8058iyjOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:28:85:e9:44:8c:1c:1c:79:cf:46:d3:c5:a1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758 Validity Not Before: Dec 14 11:00:47 2025 GMT Not After : Dec 15 11:00:47 2025 GMT Subject: CN=e6ce14a49c8ebfabbfa187feb22d456bb2f79e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:99:68:79:a8:d9:d2:1d:94:59:1a:06:2d: cb:77:59:09:2b:24:66:1a:d0:ad:4c:a6:a4:1d:8b: 4e:52:9c:77:5a:ba:2a:da:bd:d1:42:e4:ca:75:8b: a5:69:76:98:34:89:4f:dc:e9:5d:e5:da:75:93:f6: ba:01:5f:21:b2:e0:e5:a0:e2:db:0a:b7:c9:9b:a6: 27:10:5e:49:b3:c8:01:59:85:b6:6b:03:53:48:1e: 11:de:35:56:dd:13:34:7e:cc:2b:a8:c7:69:92:25: 4d:90:55:e2:af:49:f6:40:21:d6:7b:82:d4:17:81: 08:9f:e0:ec:25:7e:9c:39:85:6b:6b:03:ce:dd:1b: b9:ac:26:7e:8f:ad:59:24:bb:cb:de:25:63:97:fb: 00:a7:2a:4c:42:21:46:eb:e0:3f:51:de:0b:c7:11: 85:d8:8a:67:cc:ef:44:a7:c9:3f:70:14:76:9f:a0: 96:f0:a1:e8:4d:09:3c:a4:ff:0e:47:1d:c9:f6:2f: 3e:1a:41:c3:68:17:7d:99:4e:cd:e7:4c:81:d1:b3: 06:29:40:ff:fa:86:55:45:15:ba:7f:a2:8e:1c:eb: a3:18:57:f0:02:4d:ba:24:f8:51:59:bc:7b:81:f6: 33:39:58:2b:b8:c8:73:bd:1f:0f:d2:74:9d:c1:ce: e8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CE:14:A4:9C:8E:BF:AB:BF:A1:87:FE:B2:2D:45:6B:B2:F7:9E:01 X509v3 Authority Key Identifier: keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:df:9d:c8:1a:01:90:1c:01:54:cc:4e:19:04:0f:33:64:48: 0b:27:ee:7f:43:76:59:31:b4:1c:d4:75:95:87:7b:1e:3f:ad: ca:9d:c3:49:5c:21:2b:f2:0c:a9:32:33:2d:3c:d4:63:ae:3d: 4a:83:6f:5f:bd:d3:79:29:89:f3:c7:13:89:6a:8c:86:0a:8f: 57:48:c9:dc:f5:15:6a:80:d8:31:0b:0f:e7:d8:51:90:5c:ae: fa:d5:16:26:2d:c9:bd:ec:44:00:42:07:cd:85:29:32:73:00: c1:15:15:5d:d9:5c:5b:12:77:34:c1:1f:5e:cc:a1:2f:37:83: c7:27:47:6a:69:5a:10:01:0a:9a:96:18:94:a8:6a:20:88:07: ad:f1:db:d7:45:7d:15:0f:8a:85:3e:13:ec:a1:f2:cb:41:25: ab:53:cc:ee:45:73:57:53:28:33:a4:d1:51:4b:3b:ba:37:60: 92:d0:d5:95:c2:d7:04:37:28:06:74:d8:2e:fc:81:e9:68:b1: d4:cc:c0:ed:e2:b8:f0:03:f7:22:49:9e:5c:d0:b8:a7:fc:c1: d2:f9:03:88:7d:c6:9c:08:a8:75:77:c4:59:30:f8:eb:71:a1: 39:ad:80:d0:10:48:82:f6:50:1a:be:b4:b4:a5:bf:65:1b:8b: f7:10:57:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschSiF6USMHBx5z0bTxaHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOWE3ZjdmZGQ1NGExN2NlNWUxMmE0MTgyZWI2NTI0Nzlm OWQ3NTgwHhcNMjUxMjE0MTEwMDQ3WhcNMjUxMjE1MTEwMDQ3WjAzMTEwLwYDVQQD EyhlNmNlMTRhNDljOGViZmFiYmZhMTg3ZmViMjJkNDU2YmIyZjc5ZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7iZaHmo2dIdlFkaBi3Ld1kJKyRm GtCtTKakHYtOUpx3Wroq2r3RQuTKdYulaXaYNIlP3Old5dp1k/a6AV8hsuDloOLb CrfJm6YnEF5Js8gBWYW2awNTSB4R3jVW3RM0fswrqMdpkiVNkFXir0n2QCHWe4LU F4EIn+DsJX6cOYVrawPO3Ru5rCZ+j61ZJLvL3iVjl/sApypMQiFG6+A/Ud4LxxGF 2IpnzO9Ep8k/cBR2n6CW8KHoTQk8pP8ORx3J9i8+GkHDaBd9mU7N50yB0bMGKUD/ +oZVRRW6f6KOHOujGFfwAk26JPhRWbx7gfYzOVgruMhzvR8P0nSdwc7oxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObOFKScjr+rv6GH/rItRWuy954BMB8GA1UdIwQY MBaAFNCaf3/dVKF85eEqQYLrZSR5+ddYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgt NTg3NWE0NDg5ZGJhLzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgtNTg3NWE0NDg5ZGJh LzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPt+dyBoB kBwBVMxOGQQPM2RICyfuf0N2WTG0HNR1lYd7Hj+typ3DSVwhK/IMqTIzLTzUY649 SoNvX73TeSmJ88cTiWqMhgqPV0jJ3PUVaoDYMQsP59hRkFyu+tUWJi3JvexEAEIH zYUpMnMAwRUVXdlcWxJ3NMEfXsyhLzeDxydHamlaEAEKmpYYlKhqIIgHrfHb10V9 FQ+KhT4T7KHyy0Elq1PM7kVzV1MoM6TRUUs7ujdgktDVlcLXBDcoBnTYLvyB6Wix 1MzA7eK48AP3IkmeXNC4p/zB0vkDiH3GnAiodXfEWTD463GhOa2A0BBIgvZQGr60 tKW/ZRuL9xBXSg== -----END CERTIFICATE-----Generated at Sun Dec 14 21:34:59 2025 by rpki-client