This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json) Hash identifier: igY+98sv13pzDggYM1kqcbmsYVfRtv4Z6z/ananto9U= Subject key identifier: D2:FB:B1:65:A6:9E:AC:F5:5C:FB:F2:4C:D1:52:AA:E3:76:13:A4:4F Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88 Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88 Certificate serial: 019B432544872C29C644B21F7B2ECBD2A835 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft Manifest number: 171F Signing time: Sun 21 Dec 2025 23:01:14 +0000 Manifest this update: Sun 21 Dec 2025 23:01:14 +0000 Manifest next update: Mon 22 Dec 2025 23:01:14 +0000 Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: 0z5dA1n6WwyPSD6Dh/CnPA+5B4eHUQtgs0AfoOD0iNQ=) 2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=) 3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:44:87:2c:29:c6:44:b2:1f:7b:2e:cb:d2:a8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88 Validity Not Before: Dec 21 23:01:14 2025 GMT Not After : Dec 22 23:01:14 2025 GMT Subject: CN=d2fbb165a69eacf55cfbf24cd152aae37613a44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:c8:29:6f:78:28:47:5e:a4:71:bd:8a:b9: 94:c5:d9:7b:6c:ff:81:85:39:d7:72:00:4e:fa:db: 13:09:8b:6a:d7:9c:23:ed:0e:29:e3:71:f8:4f:2a: 68:c5:01:5b:35:8c:b5:b5:0a:10:7c:f5:6f:4b:29: 04:e5:f7:1e:ec:b5:7f:d0:3c:80:8d:8d:ee:f7:02: fb:db:d5:66:56:2d:e8:a0:48:cb:76:ff:d3:30:ab: 4f:2c:b8:78:50:cf:3e:77:a0:0d:11:c0:8b:b2:96: 70:83:87:83:b1:c8:90:8b:ba:f2:ea:0f:f9:c1:a9: 26:34:5f:e9:22:b1:14:af:51:5d:aa:c1:4e:c6:42: 3b:fc:9e:6c:cd:da:3f:89:68:9d:23:6b:9c:eb:1f: 67:64:80:7b:95:d0:82:66:d7:3a:34:62:0c:35:0c: 92:51:8f:fd:5e:63:d7:c7:19:cd:5e:7a:b9:ca:0f: 14:2b:46:39:44:1d:0a:3e:ab:fb:33:ed:70:a9:df: 39:04:23:18:5f:49:6d:c0:fc:39:7d:f0:1c:be:75: b2:33:70:cc:9c:d0:d3:c3:d5:39:6f:81:49:67:00: 2a:32:17:31:71:d2:4e:56:9f:aa:db:1b:e4:b0:7c: e9:c6:7b:01:ea:b2:3c:5a:ac:d1:4f:2b:83:ac:30: 99:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FB:B1:65:A6:9E:AC:F5:5C:FB:F2:4C:D1:52:AA:E3:76:13:A4:4F X509v3 Authority Key Identifier: keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:60:79:71:ca:54:c2:6c:c4:1e:b0:56:f1:03:12:a9:a5:50: c1:a1:03:0d:06:2c:bd:18:39:8a:78:7e:77:d6:76:e0:05:cb: b1:c2:ab:d6:b3:57:d1:fd:23:3f:a7:05:fd:18:93:7b:0e:d2: 2a:4f:2a:bd:5e:c4:95:74:ae:e6:5a:a7:57:85:ea:f4:00:01: 47:3e:02:f9:72:01:cc:cf:be:84:1c:86:e6:c1:15:c9:28:3f: 12:e7:60:9d:27:f2:0e:d4:8b:2e:6c:e0:8c:41:65:da:2e:7a: e6:df:39:5a:db:fc:73:3b:61:f5:05:bf:c6:40:72:ad:82:ea: c1:53:65:8f:3b:a6:3f:06:ec:33:23:f2:6d:6e:2a:ff:71:76: 58:e7:94:ae:86:cc:aa:ff:91:6d:d1:b3:0d:e7:8f:c0:b2:bc: ee:59:02:6b:e3:8e:db:f9:6c:d4:7b:0e:b5:f1:6c:73:c8:09: aa:f1:b5:bb:df:9b:1c:c0:61:83:6a:47:bd:7d:8c:cf:f9:71: b6:c6:b7:1b:59:e2:65:7f:6e:a3:e9:ae:f3:94:ad:08:13:f6: 73:d8:34:3c:86:31:b5:9f:4f:9f:d6:c7:1b:a9:88:dc:61:44: f6:5a:8a:b8:12:76:82:58:57:10:d8:2d:12:cd:27:5d:a3:00: f6:1e:96:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJUSHLCnGRLIfey7L0qg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzcwODA5OWY3YTIwNTU2NGI1ZjhlMDVkMjE3YmQyZmFl NGRlODgwHhcNMjUxMjIxMjMwMTE0WhcNMjUxMjIyMjMwMTE0WjAzMTEwLwYDVQQD EyhkMmZiYjE2NWE2OWVhY2Y1NWNmYmYyNGNkMTUyYWFlMzc2MTNhNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyrIKW94KEdepHG9irmUxdl7bP+B hTnXcgBO+tsTCYtq15wj7Q4p43H4TypoxQFbNYy1tQoQfPVvSykE5fce7LV/0DyA jY3u9wL729VmVi3ooEjLdv/TMKtPLLh4UM8+d6ANEcCLspZwg4eDsciQi7ry6g/5 wakmNF/pIrEUr1FdqsFOxkI7/J5szdo/iWidI2uc6x9nZIB7ldCCZtc6NGIMNQyS UY/9XmPXxxnNXnq5yg8UK0Y5RB0KPqv7M+1wqd85BCMYX0ltwPw5ffAcvnWyM3DM nNDTw9U5b4FJZwAqMhcxcdJOVp+q2xvksHzpxnsB6rI8WqzRTyuDrDCZcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNL7sWWmnqz1XPvyTNFSquN2E6RPMB8GA1UdIwQY MBaAFNI3CAmfeiBVZLX44F0he9L65N6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjIt NWU5N2Y0YTUxMmU1LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjItNWU5N2Y0YTUxMmU1 LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWB5ccpU wmzEHrBW8QMSqaVQwaEDDQYsvRg5inh+d9Z24AXLscKr1rNX0f0jP6cF/RiTew7S Kk8qvV7ElXSu5lqnV4Xq9AABRz4C+XIBzM++hByG5sEVySg/EudgnSfyDtSLLmzg jEFl2i565t85Wtv8czth9QW/xkByrYLqwVNljzumPwbsMyPybW4q/3F2WOeUrobM qv+RbdGzDeePwLK87lkCa+OO2/ls1HsOtfFsc8gJqvG1u9+bHMBhg2pHvX2Mz/lx tsa3G1niZX9uo+mu85StCBP2c9g0PIYxtZ9Pn9bHG6mI3GFE9lqKuBJ2glhXENgt Es0nXaMA9h6WKg== -----END CERTIFICATE-----Generated at Mon Dec 22 01:48:58 2025 by rpki-client