This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft File: 0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json) Hash identifier: lX82FeTmrtYhoQaS4XMvN+p418hKXwDf8Eq/FboRa/0= Subject key identifier: EF:FF:92:E5:5A:07:AB:02:71:B3:F9:FD:4C:2E:05:E6:C2:B0:FD:32 Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17 Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17 Certificate serial: 019B405C331A364178F68EE84ED4C2196AEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft Manifest number: 0C1A Signing time: Sun 21 Dec 2025 10:02:22 +0000 Manifest this update: Sun 21 Dec 2025 10:02:22 +0000 Manifest next update: Mon 22 Dec 2025 10:02:22 +0000 Files and hashes: 1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: 0GQld4tRfI4dgvo1gV3EiAYI5h0qzDkcTNSNiTK1XQ0=) 2: qFkl9TmjJ7JQHzPlKEWAsMr-VIk.roa (hash: bNPdsQRy04HtNn/c+rfGq3WnL/GPuEnpubOXCkWKru8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:33:1a:36:41:78:f6:8e:e8:4e:d4:c2:19:6a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17 Validity Not Before: Dec 21 10:02:22 2025 GMT Not After : Dec 22 10:02:22 2025 GMT Subject: CN=efff92e55a07ab0271b3f9fd4c2e05e6c2b0fd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:9f:11:b3:d2:4c:64:f0:2a:b3:55:96:8e: d0:d3:89:7e:ad:02:c0:88:99:51:a1:6e:4f:fc:b0: e7:4a:d7:1e:60:89:56:cd:f8:ac:ff:dd:ec:de:92: da:96:dc:80:2f:54:19:4b:ea:82:a1:1b:1d:eb:92: 91:42:e3:08:65:f4:82:3a:c6:a1:e4:08:ab:06:38: 18:64:5f:98:3b:7a:c0:2d:1b:0f:25:bb:a6:f3:7b: 28:f5:a2:f0:43:a3:7d:40:77:ed:a6:16:30:5c:ab: f3:3b:1a:ce:ad:9e:96:5f:8b:e2:64:0e:a8:5c:65: f5:60:4f:53:62:61:62:4e:07:37:51:9a:17:9a:5e: 80:00:24:df:44:69:dc:67:94:54:62:ce:4b:73:34: 40:de:05:3e:bc:f9:03:aa:e5:e5:51:a9:8c:2b:7b: 47:82:6c:bc:43:e5:7b:66:8c:f3:b4:8f:c1:3f:88: e5:3e:e5:d7:0f:a5:aa:ae:24:f3:88:f6:4c:04:bc: 10:98:26:12:e9:c4:f6:8b:ad:82:6b:5c:b3:ef:9a: 56:0e:39:8c:cb:22:f2:43:1c:8c:a1:b0:8f:50:c7: 5f:69:53:4e:b3:88:e4:3b:37:5e:22:bf:16:c7:f7: a1:e6:ab:32:fd:3e:68:4a:b1:67:96:bc:7f:6f:23: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FF:92:E5:5A:07:AB:02:71:B3:F9:FD:4C:2E:05:E6:C2:B0:FD:32 X509v3 Authority Key Identifier: keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:06:d4:ae:61:72:c3:6a:12:ba:9b:8d:b7:6d:b7:c7:5a:91: 2d:0f:56:bb:9d:f9:0b:df:8e:ab:ab:b5:33:65:2d:06:c9:12: 05:4b:0a:d1:1a:8f:a2:45:85:f4:77:09:ce:36:86:db:55:b9: ac:f6:5b:8b:b1:19:a4:1e:77:85:20:f2:43:73:f5:d9:75:38: 39:cf:af:2c:15:13:16:5c:ee:18:8e:4d:ec:84:d4:1a:fb:42: 6f:34:e7:31:20:fe:c3:37:a9:0e:04:2e:ab:ac:fe:74:41:d4: ed:4d:a0:2f:3b:00:09:ae:a1:9b:cd:56:72:39:0c:f4:64:cc: 14:5c:10:e5:b7:83:fc:3c:b3:cd:b2:ac:08:01:c8:21:72:d8: d4:89:16:78:c7:c5:51:4b:22:c5:65:1c:cf:d0:f4:75:16:af: dd:d0:40:74:d0:51:bb:32:08:8a:d2:93:ee:de:b4:e8:f7:6d: c3:b2:f1:dd:d4:e6:8e:8c:b5:a6:ba:79:7d:95:49:49:23:18: 17:e0:01:90:a9:e4:d2:db:76:f5:5f:a5:a7:25:60:4b:ab:23: 30:f5:ee:b4:cc:96:af:94:53:a7:ca:fc:ef:f5:25:7f:7b:8e: c7:23:d6:b8:19:44:3c:1e:1e:65:b0:f3:8f:67:d3:af:43:0d: 6c:d6:30:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXDMaNkF49o7oTtTCGWrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyM2Y3ODM3M2NiOTY2NTRkMDMwNjA2NDY5MmVmYzRhZTc3 MTVmMTcwHhcNMjUxMjIxMTAwMjIyWhcNMjUxMjIyMTAwMjIyWjAzMTEwLwYDVQQD EyhlZmZmOTJlNTVhMDdhYjAyNzFiM2Y5ZmQ0YzJlMDVlNmMyYjBmZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj2fEbPSTGTwKrNVlo7Q04l+rQLA iJlRoW5P/LDnStceYIlWzfis/93s3pLaltyAL1QZS+qCoRsd65KRQuMIZfSCOsah 5AirBjgYZF+YO3rALRsPJbum83so9aLwQ6N9QHftphYwXKvzOxrOrZ6WX4viZA6o XGX1YE9TYmFiTgc3UZoXml6AACTfRGncZ5RUYs5LczRA3gU+vPkDquXlUamMK3tH gmy8Q+V7ZozztI/BP4jlPuXXD6WqriTziPZMBLwQmCYS6cT2i62Ca1yz75pWDjmM yyLyQxyMobCPUMdfaVNOs4jkOzdeIr8Wx/eh5qsy/T5oSrFnlrx/byPTnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO//kuVaB6sCcbP5/UwuBebCsP0yMB8GA1UdIwQY MBaAFNI/eDc8uWZU0DBgZGku/ErncV8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGo5NE56eTVabFRRTUdCa2FTNzhTdWR4WHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZTFlNzgtZGYyNC00ZmM2LWIwNzct MzlmZTcyM2VmNzMwLzEvMGo5NE56eTVabFRRTUdCa2FTNzhTdWR4WHhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85ZTFlNzgtZGYyNC00ZmM2LWIwNzctMzlmZTcyM2VmNzMw LzEvMGo5NE56eTVabFRRTUdCa2FTNzhTdWR4WHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwbUrmFy w2oSupuNt223x1qRLQ9Wu535C9+Oq6u1M2UtBskSBUsK0RqPokWF9HcJzjaG21W5 rPZbi7EZpB53hSDyQ3P12XU4Oc+vLBUTFlzuGI5N7ITUGvtCbzTnMSD+wzepDgQu q6z+dEHU7U2gLzsACa6hm81WcjkM9GTMFFwQ5beD/DyzzbKsCAHIIXLY1IkWeMfF UUsixWUcz9D0dRav3dBAdNBRuzIIitKT7t606Pdtw7Lx3dTmjoy1prp5fZVJSSMY F+ABkKnk0tt29V+lpyVgS6sjMPXutMyWr5RTp8r87/Ulf3uOxyPWuBlEPB4eZbDz j2fTr0MNbNYwbg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:03:04 2025 by rpki-client