This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft File: D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json) Hash identifier: hhEZKYfud+jnYsnPR0PWYLPWGE8XJe473Eo8ijqjIwY= Subject key identifier: 8E:7B:FB:E3:31:8E:C2:02:E7:0B:83:F8:B6:F1:03:AA:E6:CC:BD:BB Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D Certificate issuer: /CN=0ff8e93f3472ea6be58f3feb74495470095a177d Certificate serial: 019B1ACD7728B16E5BA92F303E76F0496716 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 03:00:31 +0000 Manifest this update: Sun 14 Dec 2025 03:00:31 +0000 Manifest next update: Mon 15 Dec 2025 03:00:31 +0000 Files and hashes: 1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: 73L2Eh4NmIc5P2KK9uFg5JzVbkt4ifnzOf7KyX9rvGM=) 2: hfGXrKTt6u41NiQkrNCRG03FgTo.roa (hash: DUf/jFg7LXlvnvWQ7PksqyhLZu7mleW34Ka9y48nKKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:77:28:b1:6e:5b:a9:2f:30:3e:76:f0:49:67:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d Validity Not Before: Dec 14 03:00:31 2025 GMT Not After : Dec 15 03:00:31 2025 GMT Subject: CN=8e7bfbe3318ec202e70b83f8b6f103aae6ccbdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:de:a6:22:d5:40:b3:11:91:7b:52:e8:8d: 20:8a:95:05:9c:41:3d:7f:cc:34:e2:ad:89:c7:a3: a7:15:ca:d0:19:20:82:ee:34:a6:e8:8e:60:9e:5c: ed:76:dc:02:1e:63:47:11:43:8b:e2:df:ca:0e:a4: e1:22:68:04:c2:cf:65:76:3f:65:d3:d4:b8:2a:6a: b2:d0:bb:12:e9:6f:f8:f4:70:ad:ed:97:13:d2:68: b4:31:32:8d:32:f6:65:38:d8:ac:b3:8e:24:0f:d4: 63:a6:09:00:66:a9:be:f8:bd:bc:08:33:92:79:82: 13:36:ff:ff:2b:a4:42:7b:6e:c8:a3:89:aa:10:97: 17:53:82:2a:54:3f:b8:ea:15:9b:86:4e:bd:99:66: 19:84:ae:4e:c6:fd:7b:cd:4a:e6:9e:cf:a5:61:e1: 2c:d9:7c:65:af:c4:d3:06:fb:2f:43:2f:3b:2e:5e: d5:14:fa:63:dc:f9:8e:19:f0:2c:29:2c:67:16:0e: 8b:8f:66:55:cc:54:51:6a:b8:bc:8d:4d:42:c3:af: 57:72:8b:f7:84:55:83:4d:06:72:f3:40:eb:2f:b5: 1c:58:0d:ae:18:f5:b9:e5:a3:a0:85:38:4c:8c:88: f3:cf:1e:5a:75:fd:b6:3e:2c:d7:f7:01:4f:20:bd: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7B:FB:E3:31:8E:C2:02:E7:0B:83:F8:B6:F1:03:AA:E6:CC:BD:BB X509v3 Authority Key Identifier: keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2a:a0:04:b9:5e:aa:d6:81:4a:c4:3f:1b:d9:65:5f:6c:d4: e4:a2:22:ac:a7:29:67:77:63:4c:a3:92:44:4e:44:cd:99:94: 2b:d3:c4:da:03:2c:6b:e8:83:f8:a7:6c:21:32:2c:2e:98:39: cc:e9:8e:d7:19:06:4d:10:57:22:c4:03:31:56:34:0a:a5:2a: a8:40:30:0c:1e:a5:9d:93:4b:87:a2:39:87:c6:29:a4:5f:99: 64:3d:ce:45:8b:47:94:64:69:bf:53:47:3b:6d:03:e7:2f:9e: 7e:27:69:14:c0:fd:fd:22:b2:ad:f9:2c:f2:f5:b9:27:81:7d: 99:53:61:ae:bd:40:e2:2c:69:3e:2c:eb:ae:d0:7d:00:b8:ad: 84:13:ec:3d:c5:13:e1:b6:3f:d2:43:4f:50:dd:58:31:be:32: fb:d7:8b:ba:c4:c1:f8:52:ed:f1:58:5b:6d:fa:8e:7d:38:de: 7a:dd:b6:26:0c:63:b1:06:be:b7:1d:2f:ed:1c:09:da:bc:55: 6e:6a:f3:2b:4f:3e:2e:8f:cb:4a:78:7f:6b:b0:71:f5:d5:78: b3:5a:55:82:1f:cb:18:46:0f:0a:1b:06:9a:08:f1:5d:ff:82: c7:fd:71:86:49:a3:99:74:20:c2:78:09:2b:0c:3e:2b:75:6a: 09:3e:bd:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazXcosW5bqS8wPnbwSWcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjhlOTNmMzQ3MmVhNmJlNThmM2ZlYjc0NDk1NDcwMDk1 YTE3N2QwHhcNMjUxMjE0MDMwMDMxWhcNMjUxMjE1MDMwMDMxWjAzMTEwLwYDVQQD Eyg4ZTdiZmJlMzMxOGVjMjAyZTcwYjgzZjhiNmYxMDNhYWU2Y2NiZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRjepiLVQLMRkXtS6I0gipUFnEE9 f8w04q2Jx6OnFcrQGSCC7jSm6I5gnlztdtwCHmNHEUOL4t/KDqThImgEws9ldj9l 09S4Kmqy0LsS6W/49HCt7ZcT0mi0MTKNMvZlONiss44kD9RjpgkAZqm++L28CDOS eYITNv//K6RCe27Io4mqEJcXU4IqVD+46hWbhk69mWYZhK5Oxv17zUrmns+lYeEs 2Xxlr8TTBvsvQy87Ll7VFPpj3PmOGfAsKSxnFg6Lj2ZVzFRRari8jU1Cw69Xcov3 hFWDTQZy80DrL7UcWA2uGPW55aOghThMjIjzzx5adf22PizX9wFPIL1TWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI57++MxjsIC5wuD+LbxA6rmzL27MB8GA1UdIwQY MBaAFA/46T80cupr5Y8/63RJVHAJWhd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYt ZmNlM2Q1OTBjNmRiLzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYtZmNlM2Q1OTBjNmRi LzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCqgBLle qtaBSsQ/G9llX2zU5KIirKcpZ3djTKOSRE5EzZmUK9PE2gMsa+iD+KdsITIsLpg5 zOmO1xkGTRBXIsQDMVY0CqUqqEAwDB6lnZNLh6I5h8YppF+ZZD3ORYtHlGRpv1NH O20D5y+efidpFMD9/SKyrfks8vW5J4F9mVNhrr1A4ixpPizrrtB9ALithBPsPcUT 4bY/0kNPUN1YMb4y+9eLusTB+FLt8VhbbfqOfTjeet22JgxjsQa+tx0v7RwJ2rxV bmrzK08+Lo/LSnh/a7Bx9dV4s1pVgh/LGEYPChsGmgjxXf+Cx/1xhkmjmXQgwngJ Kww+K3VqCT69bA== -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:38 2025 by rpki-client