This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft File: 0mjZoqZF18wv0lOzZwQIBV5W__k.mft (raw, json) Hash identifier: tZkwokKZZe/Cp9MHNu0MkREA8YsEGVVVOkeonbA1iAs= Subject key identifier: C4:06:67:06:EF:1D:A5:CF:DD:10:04:78:02:54:AA:D3:08:76:8E:18 Authority key identifier: D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9 Certificate issuer: /CN=d268d9a2a645d7cc2fd253b3670408055e56fff9 Certificate serial: 019B2EF9E27A4019A73E0C833736FE6442E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft Manifest number: 0E63 Signing time: Thu 18 Dec 2025 01:01:26 +0000 Manifest this update: Thu 18 Dec 2025 01:01:26 +0000 Manifest next update: Fri 19 Dec 2025 01:01:26 +0000 Files and hashes: 1: 0mjZoqZF18wv0lOzZwQIBV5W__k.crl (hash: GfjSV1daTnVSbSdIorQQO9OUUkWzwcxFLs0M7xoegEc=) 2: 1-1Q-JUTaDXQnn29QzjTcxKcU51M.roa (hash: S2RyOo3MnGOBQQfCCR1Slz5mB03LVga93H7HVY19x7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:e2:7a:40:19:a7:3e:0c:83:37:36:fe:64:42:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d268d9a2a645d7cc2fd253b3670408055e56fff9 Validity Not Before: Dec 18 01:01:26 2025 GMT Not After : Dec 19 01:01:26 2025 GMT Subject: CN=c4066706ef1da5cfdd1004780254aad308768e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:0e:53:a4:1c:f0:8e:ca:28:8b:02:e3:0a: f4:dc:f7:fb:cf:30:c4:63:27:b7:a3:80:7d:a5:78: 01:cc:87:d9:4f:67:18:19:39:e5:a8:cc:ce:df:8f: 9f:7a:f3:1d:eb:3b:8d:53:e8:ed:ee:79:9c:6e:1e: 62:93:f0:f2:b8:35:f4:fa:be:b8:aa:f8:c0:b5:43: 83:a0:d5:ce:1c:f9:55:54:50:23:8d:76:43:a4:a2: d1:d1:45:dd:79:c1:18:7d:4f:bd:fb:ac:58:3f:26: 97:aa:67:ac:89:8f:72:c6:8c:dc:97:f9:eb:93:ad: 9b:e3:81:0e:9c:5e:2c:cc:ec:0a:f4:d2:4c:ba:e1: b4:c6:aa:e8:63:4f:18:d2:24:5b:b2:2f:6d:de:ca: 33:7c:74:48:14:ad:f7:55:6f:66:59:1f:a0:0c:48: d2:a9:6f:bc:32:f6:b7:36:87:41:1e:58:88:8c:f7: e6:7f:f4:8f:46:23:38:3c:df:02:bf:86:51:6c:37: e9:37:5c:fa:79:db:32:37:6f:86:7a:5e:0d:00:b8: 1d:82:0b:25:a0:8c:a7:82:c5:ef:68:01:12:25:85: 4a:1d:74:44:fe:c2:b7:8d:1b:cd:e3:25:48:64:a0: 04:eb:88:12:35:00:bf:ee:a5:f8:b5:6a:36:7a:a4: b1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:06:67:06:EF:1D:A5:CF:DD:10:04:78:02:54:AA:D3:08:76:8E:18 X509v3 Authority Key Identifier: keyid:D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a0:6b:b4:47:d1:b7:f9:c7:41:bc:99:8b:25:94:fa:6b:91: ab:51:1d:12:29:3b:9c:31:9d:cb:b0:07:a5:35:b2:d0:a7:46: 58:5a:a7:ae:77:f2:7c:63:51:a1:19:60:22:f8:1e:82:56:0d: 57:df:5a:0f:49:6c:e5:2d:33:69:c6:bb:45:ec:d1:b4:f4:b6: 8a:03:e1:bb:e1:4e:50:f3:8c:23:02:1a:ae:d0:82:ca:98:53: ea:ca:d2:7d:60:55:8b:ac:08:32:f6:16:8c:13:af:f9:4d:8d: b9:04:a4:43:c6:ee:53:2b:ca:57:fd:15:4b:75:0a:84:fb:da: 52:af:2a:4b:27:b5:37:75:5a:cb:43:84:1b:3c:fb:30:95:06: 8a:18:5e:9a:f8:f3:40:8a:60:4b:b9:2c:83:8a:7a:5d:49:58: 25:e2:81:92:5b:1a:8b:30:3f:44:62:ac:58:42:43:5e:87:20: aa:8e:a9:11:cb:dc:ef:e4:bf:2f:75:61:7e:21:3e:22:42:88: c8:81:ff:df:eb:6a:2b:25:64:1f:5a:64:b3:59:4f:cb:e0:8b: 7f:e3:01:01:e3:81:b6:ca:48:61:eb:6f:09:3b:bc:d1:1b:95: 62:2e:59:66:fe:fe:85:ee:93:16:fd:be:d2:29:72:91:22:33: 6b:ac:f0:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+eJ6QBmnPgyDNzb+ZELkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjhkOWEyYTY0NWQ3Y2MyZmQyNTNiMzY3MDQwODA1NWU1 NmZmZjkwHhcNMjUxMjE4MDEwMTI2WhcNMjUxMjE5MDEwMTI2WjAzMTEwLwYDVQQD EyhjNDA2NjcwNmVmMWRhNWNmZGQxMDA0NzgwMjU0YWFkMzA4NzY4ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthEOU6Qc8I7KKIsC4wr03Pf7zzDE Yye3o4B9pXgBzIfZT2cYGTnlqMzO34+fevMd6zuNU+jt7nmcbh5ik/DyuDX0+r64 qvjAtUODoNXOHPlVVFAjjXZDpKLR0UXdecEYfU+9+6xYPyaXqmesiY9yxozcl/nr k62b44EOnF4szOwK9NJMuuG0xqroY08Y0iRbsi9t3sozfHRIFK33VW9mWR+gDEjS qW+8Mva3NodBHliIjPfmf/SPRiM4PN8Cv4ZRbDfpN1z6edsyN2+Gel4NALgdggsl oIyngsXvaAESJYVKHXRE/sK3jRvN4yVIZKAE64gSNQC/7qX4tWo2eqSxhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQGZwbvHaXP3RAEeAJUqtMIdo4YMB8GA1UdIwQY MBaAFNJo2aKmRdfML9JTs2cECAVeVv/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1qWm9xWkYxOHd2MGxPelp3UUlCVjVXX19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80NDAzOGItODAzMS00NGUwLTkxYzQt Y2M1Njc2YzdkZTlmLzEvMG1qWm9xWkYxOHd2MGxPelp3UUlCVjVXX19rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80NDAzOGItODAzMS00NGUwLTkxYzQtY2M1Njc2YzdkZTlm LzEvMG1qWm9xWkYxOHd2MGxPelp3UUlCVjVXX19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqBrtEfR t/nHQbyZiyWU+muRq1EdEik7nDGdy7AHpTWy0KdGWFqnrnfyfGNRoRlgIvgeglYN V99aD0ls5S0zaca7RezRtPS2igPhu+FOUPOMIwIartCCyphT6srSfWBVi6wIMvYW jBOv+U2NuQSkQ8buUyvKV/0VS3UKhPvaUq8qSye1N3Vay0OEGzz7MJUGihhemvjz QIpgS7ksg4p6XUlYJeKBklsaizA/RGKsWEJDXocgqo6pEcvc7+S/L3VhfiE+IkKI yIH/3+tqKyVkH1pks1lPy+CLf+MBAeOBtspIYetvCTu80RuVYi5ZZv7+he6TFv2+ 0ilykSIza6zwWQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:30:48 2025 by rpki-client