This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json) Hash identifier: sl+aCV50OcAxYX3E2cPw+g6xHy/+nkg4+TuoYXFHgV0= Subject key identifier: 1C:BC:C1:DF:B5:BB:06:A9:F7:3B:73:C2:A2:0F:04:22:9D:39:C4:66 Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60 Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60 Certificate serial: 019B42B6E826F8CEA46145E50208D09098D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 21:00:41 +0000 Manifest this update: Sun 21 Dec 2025 21:00:41 +0000 Manifest next update: Mon 22 Dec 2025 21:00:41 +0000 Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=) 2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: 4fMOtMRohdokKoEuKwEfs5uIYBOSL6Yl18wqkZp2XKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:e8:26:f8:ce:a4:61:45:e5:02:08:d0:90:98:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60 Validity Not Before: Dec 21 21:00:41 2025 GMT Not After : Dec 22 21:00:41 2025 GMT Subject: CN=1cbcc1dfb5bb06a9f73b73c2a20f04229d39c466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:66:0f:c1:e0:9a:08:b2:0e:93:3f:35:98:d2: 23:5d:7d:1d:c9:22:90:bf:6d:01:82:de:67:18:f8: 53:9a:a8:11:45:f4:3b:29:77:05:ee:8d:00:de:fc: 91:d8:3c:15:ed:de:b7:e2:4a:d5:6d:ef:58:34:77: 39:a0:f5:c5:51:0b:d0:a9:5e:79:ba:f7:08:10:32: 21:8a:92:ca:43:24:3c:2b:14:f5:f7:89:c7:07:01: b2:65:9a:0d:27:e6:7f:a0:55:49:8a:93:00:8f:1a: ef:f9:76:47:d6:82:ff:50:f2:ac:f3:d2:d6:d4:73: f2:c7:ba:fe:df:5e:a4:ba:09:ae:69:31:d7:45:b8: 89:17:65:9f:47:76:be:d9:5d:0f:80:c4:4c:a1:b1: 0c:a9:36:dd:71:b2:da:8d:1f:44:e3:c0:b8:76:c9: ba:79:87:11:93:00:70:de:49:cf:aa:c0:30:36:eb: c0:f0:52:91:d3:ab:f2:13:d9:b9:5c:2b:cb:7e:9f: a1:c5:3c:35:bc:b9:a4:14:39:10:39:5e:91:b2:72: 02:7c:3f:60:00:1a:85:f6:24:1b:71:0d:74:ab:52: a1:4c:69:ae:2b:e2:c1:19:7b:4e:cf:2e:c3:16:5e: 87:e2:46:2d:3a:7e:a9:ff:bf:3b:d4:2d:3d:bd:35: d4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BC:C1:DF:B5:BB:06:A9:F7:3B:73:C2:A2:0F:04:22:9D:39:C4:66 X509v3 Authority Key Identifier: keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b5:8a:72:cb:87:41:09:7e:0b:3b:7b:eb:39:bb:93:fd:04: da:66:dc:1c:19:0a:78:7b:87:78:9a:3e:4a:2c:f2:bb:fb:56: ec:c7:11:a6:a9:8d:d1:3b:0d:dc:67:0b:ab:1d:82:51:44:1d: a8:e1:0d:4f:87:2a:82:96:d5:35:7f:9b:98:ae:dc:58:90:82: 8b:3b:56:5b:33:d6:20:d0:5b:b5:c7:f4:53:db:1e:b6:6a:2d: fd:5d:c9:a4:84:ee:27:00:9f:f0:b5:5d:b8:58:44:d3:a8:31: 9b:3d:d7:35:4e:02:72:17:f4:7f:ef:11:b4:60:3b:19:ab:3f: aa:b4:30:f8:87:22:0d:d7:5f:79:8b:bb:ad:b8:0f:44:d0:7c: 8e:6b:a6:aa:d4:10:9a:0a:49:78:db:fe:d3:d5:ec:4c:83:de: 03:04:2a:fb:70:89:da:1e:70:84:73:18:83:b0:85:6c:48:ee: 9e:17:4b:fd:62:ac:dc:d2:de:ad:f0:03:a3:5e:0e:03:79:f9: 67:21:69:c1:82:47:48:95:67:f5:ea:62:ed:88:26:d0:5a:99: 5c:76:d7:26:09:20:68:9c:6f:34:0a:53:1f:00:4a:a2:f9:a9: 20:ba:a0:29:ed:a7:b0:14:3e:bb:87:8a:d6:97:8d:43:37:0f: f2:13:2a:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtugm+M6kYUXlAgjQkJjTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDhmYjljZjE3ZGVjZTZhZGRiMDhlZWZkOWJlZTg0MmMx ZTJiNjAwHhcNMjUxMjIxMjEwMDQxWhcNMjUxMjIyMjEwMDQxWjAzMTEwLwYDVQQD EygxY2JjYzFkZmI1YmIwNmE5ZjczYjczYzJhMjBmMDQyMjlkMzljNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WYPweCaCLIOkz81mNIjXX0dySKQ v20Bgt5nGPhTmqgRRfQ7KXcF7o0A3vyR2DwV7d634krVbe9YNHc5oPXFUQvQqV55 uvcIEDIhipLKQyQ8KxT194nHBwGyZZoNJ+Z/oFVJipMAjxrv+XZH1oL/UPKs89LW 1HPyx7r+316kugmuaTHXRbiJF2WfR3a+2V0PgMRMobEMqTbdcbLajR9E48C4dsm6 eYcRkwBw3knPqsAwNuvA8FKR06vyE9m5XCvLfp+hxTw1vLmkFDkQOV6RsnICfD9g ABqF9iQbcQ10q1KhTGmuK+LBGXtOzy7DFl6H4kYtOn6p/7871C09vTXULQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBy8wd+1uwap9ztzwqIPBCKdOcRmMB8GA1UdIwQY MBaAFP9I+5zxfezmrdsI7v2b7oQsHitgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzIt OTA1NDA3ZWIwZjUzLzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzItOTA1NDA3ZWIwZjUz LzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLWKcsuH QQl+Czt76zm7k/0E2mbcHBkKeHuHeJo+Sizyu/tW7McRpqmN0TsN3GcLqx2CUUQd qOENT4cqgpbVNX+bmK7cWJCCiztWWzPWINBbtcf0U9setmot/V3JpITuJwCf8LVd uFhE06gxmz3XNU4Cchf0f+8RtGA7Gas/qrQw+IciDddfeYu7rbgPRNB8jmumqtQQ mgpJeNv+09XsTIPeAwQq+3CJ2h5whHMYg7CFbEjunhdL/WKs3NLerfADo14OA3n5 ZyFpwYJHSJVn9epi7Ygm0FqZXHbXJgkgaJxvNApTHwBKovmpILqgKe2nsBQ+u4eK 1peNQzcP8hMq1A== -----END CERTIFICATE-----Generated at Mon Dec 22 05:35:13 2025 by rpki-client