This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json) Hash identifier: mV6tymebBDF1pW43VyaHigFUzFxDaYUll5TNxpN7GZI= Subject key identifier: 6D:0B:22:A4:B0:11:12:9A:77:EE:07:C4:D6:05:0C:75:88:00:B0:75 Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06 Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06 Certificate serial: 019B1081650C11ED0368A865A577DEBD22E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft Manifest number: 14F4 Signing time: Fri 12 Dec 2025 03:01:14 +0000 Manifest this update: Fri 12 Dec 2025 03:01:14 +0000 Manifest next update: Sat 13 Dec 2025 03:01:14 +0000 Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: yIZJwD+s0p+9hHBGcxnYMauLx+/XCMY8FtXKjm2QvTE=) 2: KEydF7bMk6RADdNKhYi6WFKpHSw.roa (hash: bl+U1VafH5Wzj+g/exETARmZ+DznhEsF7Fa2nlPP/i8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:65:0c:11:ed:03:68:a8:65:a5:77:de:bd:22:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06 Validity Not Before: Dec 12 03:01:14 2025 GMT Not After : Dec 13 03:01:14 2025 GMT Subject: CN=6d0b22a4b011129a77ee07c4d6050c758800b075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f1:09:8b:f3:cd:f9:08:72:22:e7:3a:03:7b: 01:87:11:7b:0e:82:21:bd:3a:f0:42:47:7b:a3:d1: 46:ac:a1:a2:d7:cd:bd:ea:d3:c7:fa:01:ff:06:c9: 4e:37:03:c8:6f:21:ab:3b:07:11:d9:6d:9a:d5:99: 80:6a:00:a1:50:60:ad:3a:57:47:1a:56:e3:b8:7e: 58:0c:fc:dc:0d:7b:14:25:45:2f:25:74:5c:7f:f2: 7f:12:68:0f:44:1b:19:a6:a5:d2:df:42:d9:a6:91: 90:7e:fb:ed:17:16:a8:c3:c4:bd:07:b0:5e:30:e3: 36:14:93:a9:f3:2b:83:4b:47:68:cf:2c:2b:72:90: b4:b4:f4:1a:c9:d5:9c:50:1d:d6:f1:c0:69:7c:5b: 0d:d5:48:3b:2a:da:97:8b:4a:d5:24:c3:2e:19:9b: fa:d6:f3:51:33:a9:d0:a3:14:dd:74:f4:3d:e4:a5: e6:d1:88:86:14:e2:94:d4:2f:ed:fa:84:fb:f2:83: a8:15:8c:ac:e6:48:da:90:74:a6:77:25:df:7a:43: 20:bf:66:7b:92:1c:2c:0d:b5:61:b3:85:0e:26:dd: 60:ba:f4:4a:7d:e8:b5:81:9e:4f:41:35:db:7d:ea: 45:53:bf:28:f6:14:bb:1d:47:88:6b:f1:db:30:8a: d2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0B:22:A4:B0:11:12:9A:77:EE:07:C4:D6:05:0C:75:88:00:B0:75 X509v3 Authority Key Identifier: keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:95:19:e3:1b:4d:93:ce:67:70:44:a2:ca:d3:b6:ca:a9:1e: dd:e9:21:56:08:c8:4e:00:8f:4e:83:bf:d1:4d:c9:a3:bd:e4: ad:0b:60:62:bf:8e:c3:b5:cb:dd:c3:48:46:7e:c2:1a:e5:a1: 06:16:a4:62:bf:70:44:2e:ec:7d:63:82:40:f2:a6:b3:80:6b: bf:4a:90:bc:db:94:13:b8:7e:82:ca:d5:61:9e:29:f6:1c:75: 0f:1d:63:7f:0f:62:38:19:f2:0f:8d:49:2e:e0:e3:59:a2:77: df:81:6e:1b:2c:1f:0d:cd:a2:9c:b7:a2:22:eb:46:1d:cc:d9: 04:49:ad:8f:2e:6f:c8:a6:fc:f3:c5:4e:75:2a:41:52:8d:ad: 27:7a:e1:74:be:d9:24:c4:a9:8a:7b:56:15:27:3e:47:d5:fc: 8f:9c:6a:91:1d:ee:46:50:94:01:9d:0b:26:cc:a8:f6:09:8f: a4:d5:79:96:68:67:8b:7d:06:64:0b:b1:d8:10:0a:49:01:22: c5:7c:14:db:a5:20:37:82:23:10:8e:e2:f1:31:78:27:d7:79: 97:4c:0b:42:d5:99:eb:6e:e0:8f:f1:22:ed:b0:73:7d:94:c4: 4f:66:da:f3:5e:e8:5b:fa:34:d8:27:aa:ea:41:69:71:4d:da: a6:65:64:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgWUMEe0DaKhlpXfevSLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOTFmZThjNTQwYzQ0ZTIzNGY5YmM2NjhmOGEzYjE2NDdh Y2RiMDYwHhcNMjUxMjEyMDMwMTE0WhcNMjUxMjEzMDMwMTE0WjAzMTEwLwYDVQQD Eyg2ZDBiMjJhNGIwMTExMjlhNzdlZTA3YzRkNjA1MGM3NTg4MDBiMDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvEJi/PN+QhyIuc6A3sBhxF7DoIh vTrwQkd7o9FGrKGi18296tPH+gH/BslONwPIbyGrOwcR2W2a1ZmAagChUGCtOldH GlbjuH5YDPzcDXsUJUUvJXRcf/J/EmgPRBsZpqXS30LZppGQfvvtFxaow8S9B7Be MOM2FJOp8yuDS0dozywrcpC0tPQaydWcUB3W8cBpfFsN1Ug7KtqXi0rVJMMuGZv6 1vNRM6nQoxTddPQ95KXm0YiGFOKU1C/t+oT78oOoFYys5kjakHSmdyXfekMgv2Z7 khwsDbVhs4UOJt1guvRKfei1gZ5PQTXbfepFU78o9hS7HUeIa/HbMIrSfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0LIqSwERKad+4HxNYFDHWIALB1MB8GA1UdIwQY MBaAFNCR/oxUDETiNPm8Zo+KOxZHrNsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgt MDRlNmY1NzY0YzUyLzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgtMDRlNmY1NzY0YzUy LzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5UZ4xtN k85ncESiytO2yqke3ekhVgjITgCPToO/0U3Jo73krQtgYr+Ow7XL3cNIRn7CGuWh BhakYr9wRC7sfWOCQPKms4Brv0qQvNuUE7h+gsrVYZ4p9hx1Dx1jfw9iOBnyD41J LuDjWaJ334FuGywfDc2inLeiIutGHczZBEmtjy5vyKb888VOdSpBUo2tJ3rhdL7Z JMSpintWFSc+R9X8j5xqkR3uRlCUAZ0LJsyo9gmPpNV5lmhni30GZAux2BAKSQEi xXwU26UgN4IjEI7i8TF4J9d5l0wLQtWZ627gj/Ei7bBzfZTET2ba817oW/o02Ceq 6kFpcU3apmVkjw== -----END CERTIFICATE-----Generated at Fri Dec 12 11:54:35 2025 by rpki-client