This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json) Hash identifier: S/12vf3Wi8big7rwFcrg7T+sSilKjiH1OmZDm8nvWsw= Subject key identifier: DF:93:6D:99:8A:8A:2D:3E:37:F0:F4:53:49:6E:00:A4:D5:62:84:47 Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93 Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93 Certificate serial: 019B3B35332681B7A9EDF0EEAF3DF4B5879F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft Manifest number: 1781 Signing time: Sat 20 Dec 2025 10:01:40 +0000 Manifest this update: Sat 20 Dec 2025 10:01:40 +0000 Manifest next update: Sun 21 Dec 2025 10:01:40 +0000 Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: 5YKdiokj6cjGdPmV/tZlLqumruvzZjB5IykerNI1HMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:33:26:81:b7:a9:ed:f0:ee:af:3d:f4:b5:87:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93 Validity Not Before: Dec 20 10:01:40 2025 GMT Not After : Dec 21 10:01:40 2025 GMT Subject: CN=df936d998a8a2d3e37f0f453496e00a4d5628447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:74:5d:5c:b8:f5:91:ed:1a:e4:6c:86:94:c0: e6:86:48:ec:27:60:f8:28:c0:7e:98:08:ee:90:e2: e8:63:79:23:40:fe:6f:a0:df:39:90:db:85:47:14: db:89:51:0c:f7:d3:80:3e:3e:ec:7e:0f:4a:ab:0f: 2d:3f:a9:af:a2:14:d2:5e:bb:1e:eb:b0:ad:b7:22: b0:e5:49:9c:2f:16:cf:eb:6a:5e:fc:b7:60:a2:21: f1:6f:7f:dd:3c:c4:96:fe:b1:2a:75:1c:79:28:86: 2e:4e:df:01:1b:15:93:19:9b:28:3c:4b:5f:8c:5c: 84:19:7e:de:26:37:75:93:e6:ee:59:be:06:ba:dd: f5:8d:5f:84:63:90:c9:5b:99:ce:27:7b:e2:d7:40: f1:87:e8:56:39:a6:80:17:66:9b:97:1a:bb:cf:9e: 0a:2c:53:9a:99:22:a3:40:87:77:ef:b3:0d:b7:28: 1f:c5:8f:96:36:cb:67:9a:16:bb:e0:59:34:85:25: 46:be:30:45:55:cf:d2:5b:3e:5b:09:27:c6:b7:9b: bd:78:0f:f0:d3:70:63:f1:20:da:48:1f:3d:83:65: ca:4b:2b:1f:7f:8a:fd:fd:7a:68:a6:b0:18:d0:66: 89:7a:ab:92:ae:8d:a8:f0:3a:1e:e5:c3:ab:35:5f: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:93:6D:99:8A:8A:2D:3E:37:F0:F4:53:49:6E:00:A4:D5:62:84:47 X509v3 Authority Key Identifier: keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f8:c7:1a:14:8f:5c:62:35:03:18:65:74:17:c4:29:a7:df: 9d:f4:4f:97:29:ed:81:8e:6b:f2:3a:62:ba:d0:01:f0:e0:67: ea:96:9d:00:7f:7b:c5:12:91:bf:79:52:e5:1f:4a:a8:6d:6a: 57:98:e3:95:2e:fe:6d:02:91:78:5f:23:e3:79:03:84:47:88: 95:a7:08:50:c8:66:43:42:1c:26:1f:d9:16:17:1e:c4:13:0e: 52:92:b0:a7:2b:04:07:97:7f:ae:9a:8c:d0:6b:37:35:a9:09: 5a:6e:6e:e7:c6:b0:e4:97:c3:ce:7a:35:2d:13:5b:04:c6:32: 14:f4:5c:6e:6e:a0:62:ee:75:3a:a4:d0:ca:4e:49:a1:72:a8: 02:f9:0d:64:8b:39:ff:06:7a:ae:e2:b7:b5:48:81:1d:19:87: 3d:6a:47:b6:5b:da:eb:de:a0:a2:89:69:80:28:31:70:da:7a: 73:ae:2b:29:15:af:95:69:93:a2:39:78:73:5b:eb:21:b6:fc: d3:5e:1d:2e:ac:04:c4:35:a4:f7:94:c7:38:6c:f9:7b:35:ae: 47:3f:a3:dc:39:ea:82:15:dc:6a:5c:4b:01:c2:b0:28:bf:63: a8:fe:7e:d6:8a:c0:9d:3f:4e:55:35:a7:8f:af:f5:25:8c:22: ea:d1:be:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NTMmgbep7fDurz30tYefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOGY1NTRhZWQ3ZjhlNzE0NmU5Y2I2M2Y1ZTMxYTVkYjFl MWJhOTMwHhcNMjUxMjIwMTAwMTQwWhcNMjUxMjIxMTAwMTQwWjAzMTEwLwYDVQQD EyhkZjkzNmQ5OThhOGEyZDNlMzdmMGY0NTM0OTZlMDBhNGQ1NjI4NDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3RdXLj1ke0a5GyGlMDmhkjsJ2D4 KMB+mAjukOLoY3kjQP5voN85kNuFRxTbiVEM99OAPj7sfg9Kqw8tP6mvohTSXrse 67CttyKw5UmcLxbP62pe/LdgoiHxb3/dPMSW/rEqdRx5KIYuTt8BGxWTGZsoPEtf jFyEGX7eJjd1k+buWb4Gut31jV+EY5DJW5nOJ3vi10Dxh+hWOaaAF2ablxq7z54K LFOamSKjQId377MNtygfxY+WNstnmha74Fk0hSVGvjBFVc/SWz5bCSfGt5u9eA/w 03Bj8SDaSB89g2XKSysff4r9/XpoprAY0GaJequSro2o8Doe5cOrNV8HTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+TbZmKii0+N/D0U0luAKTVYoRHMB8GA1UdIwQY MBaAFNKPVUrtf45xRunLY/XjGl2x4bqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2Mt MTA2ZWQxNTkwMTI5LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2MtMTA2ZWQxNTkwMTI5 LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPjHGhSP XGI1AxhldBfEKaffnfRPlyntgY5r8jpiutAB8OBn6padAH97xRKRv3lS5R9KqG1q V5jjlS7+bQKReF8j43kDhEeIlacIUMhmQ0IcJh/ZFhcexBMOUpKwpysEB5d/rpqM 0Gs3NakJWm5u58aw5JfDzno1LRNbBMYyFPRcbm6gYu51OqTQyk5JoXKoAvkNZIs5 /wZ6ruK3tUiBHRmHPWpHtlva696goolpgCgxcNp6c64rKRWvlWmTojl4c1vrIbb8 014dLqwExDWk95THOGz5ezWuRz+j3DnqghXcalxLAcKwKL9jqP5+1orAnT9OVTWn j6/1JYwi6tG+Tg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:05:06 2025 by rpki-client