This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft File: 0c9dkt13uO9-1s1XyqoQr9mOnlo.mft (raw, json) Hash identifier: 1SQChHx+HL9SGXUqLtNPMLCVSC248KHwoRzMhhcwAiQ= Subject key identifier: C7:58:DB:81:3C:C5:B3:EA:3E:87:9D:0C:F3:D8:99:3D:44:78:23:F1 Authority key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A Certificate issuer: /CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a Certificate serial: 019B5A52087D9CD4423F3DCF34AD7D8FC506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft Manifest number: 1D Signing time: Fri 26 Dec 2025 11:01:23 +0000 Manifest this update: Fri 26 Dec 2025 11:01:23 +0000 Manifest next update: Sat 27 Dec 2025 11:01:23 +0000 Files and hashes: 1: 0c9dkt13uO9-1s1XyqoQr9mOnlo.crl (hash: eZJQT5RInuqCujY3Fv7M9R8wG/hNJu2baFiUDAmGYAc=) 2: CSMhzk4QNto51XCFdt7AijiryeE.roa (hash: /pZB8ZU1GJwmjG+rj4CqNfxKPraUkyvAW+JFipdspp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:08:7d:9c:d4:42:3f:3d:cf:34:ad:7d:8f:c5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a Validity Not Before: Dec 26 11:01:23 2025 GMT Not After : Dec 27 11:01:23 2025 GMT Subject: CN=c758db813cc5b3ea3e879d0cf3d8993d447823f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:b0:97:bd:6a:fc:2f:52:24:a9:0b:d0:df: 34:fc:1a:7e:50:2e:78:5f:ea:16:95:43:42:22:db: 0e:15:b7:0b:0e:83:b7:0f:2c:98:fe:9b:3b:cf:21: b9:5a:59:0c:f7:7f:e7:e2:57:2c:fd:30:6f:ee:a6: 2c:86:d0:8d:41:60:b5:3e:02:8e:e3:b8:67:8c:22: 6a:02:e2:e4:e7:28:49:d1:78:d0:9d:cb:93:73:7e: 02:68:f9:c6:c3:c3:ae:67:1c:69:92:b9:17:79:6a: 66:a7:e0:ed:b0:ec:60:3f:df:68:e0:bf:d0:09:8c: d0:bc:fb:8b:79:c9:d0:f5:c6:b3:51:5b:17:32:5f: c4:f4:99:4d:e9:12:71:aa:b0:ad:e8:bc:a6:56:d9: 2b:e5:9f:6b:c2:24:75:1f:f0:65:4c:2d:25:a7:28: b8:a3:2e:92:18:0b:d6:37:2f:74:2e:17:9c:57:62: 66:e2:df:a7:fc:ef:01:0f:ba:fd:88:1b:e5:b6:22: 98:41:13:c9:fd:d0:e7:86:56:03:b7:93:00:c5:a6: b9:2f:4f:f1:cc:78:94:60:47:e5:5b:63:f7:63:ed: 81:e9:43:6e:df:74:fd:0f:d9:f3:31:91:a1:62:3c: 8a:34:f6:d8:d3:10:97:2d:03:bc:af:74:f5:28:e6: 02:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:58:DB:81:3C:C5:B3:EA:3E:87:9D:0C:F3:D8:99:3D:44:78:23:F1 X509v3 Authority Key Identifier: keyid:D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:80:c3:7a:f7:90:fe:2f:91:6c:6d:63:31:e3:e9:69:c1:f7: 45:66:c0:ac:a5:91:04:43:a1:97:fa:a0:88:1f:af:2a:77:c8: 80:ba:a6:3c:4b:d2:a5:61:03:d4:5a:4c:c6:bf:14:57:61:10: 30:6e:da:0d:8a:eb:19:3c:10:91:d8:2a:36:36:17:03:ab:77: 10:9a:6b:14:ba:3b:1f:26:aa:67:71:31:60:70:ba:74:cb:29: 35:01:1b:0c:8c:89:32:9a:3c:a5:ed:ae:0b:87:e5:9e:76:98: a9:8c:15:24:ea:a6:7d:e1:91:40:d6:6b:04:96:93:3f:6b:20: 7d:a7:c9:57:af:3d:cf:0c:92:d3:cf:c9:bd:0e:f1:ac:d9:8c: 81:ec:f9:c4:d0:8f:56:95:0c:80:fc:6b:3a:8c:22:4b:60:81: 1c:01:fd:bc:49:e9:9f:d4:ed:ce:55:bb:c4:8d:09:3d:0e:2c: d7:69:4f:57:10:55:be:14:25:ec:c1:db:41:3b:05:39:e6:30: 2d:77:c6:5a:07:2b:22:2f:a3:1f:71:88:ec:b8:50:38:e7:05: 3f:08:26:e7:19:ac:1c:e7:78:0c:1f:8c:8a:cb:f5:1a:d4:88: d1:8d:62:37:9c:2d:ae:5b:0f:73:10:c4:23:29:4f:e3:a7:c6: cf:0e:2b:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUgh9nNRCPz3PNK19j8UGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxY2Y1ZDkyZGQ3N2I4ZWY3ZWQ2Y2Q1N2NhYWExMGFmZDk4 ZTllNWEwHhcNMjUxMjI2MTEwMTIzWhcNMjUxMjI3MTEwMTIzWjAzMTEwLwYDVQQD EyhjNzU4ZGI4MTNjYzViM2VhM2U4NzlkMGNmM2Q4OTkzZDQ0NzgyM2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Owl71q/C9SJKkL0N80/Bp+UC54 X+oWlUNCItsOFbcLDoO3DyyY/ps7zyG5WlkM93/n4lcs/TBv7qYshtCNQWC1PgKO 47hnjCJqAuLk5yhJ0XjQncuTc34CaPnGw8OuZxxpkrkXeWpmp+DtsOxgP99o4L/Q CYzQvPuLecnQ9cazUVsXMl/E9JlN6RJxqrCt6LymVtkr5Z9rwiR1H/BlTC0lpyi4 oy6SGAvWNy90LhecV2Jm4t+n/O8BD7r9iBvltiKYQRPJ/dDnhlYDt5MAxaa5L0/x zHiUYEflW2P3Y+2B6UNu33T9D9nzMZGhYjyKNPbY0xCXLQO8r3T1KOYCQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdY24E8xbPqPoedDPPYmT1EeCPxMB8GA1UdIwQY MBaAFNHPXZLdd7jvftbNV8qqEK/Zjp5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGM5ZGt0MTN1TzktMXMxWHlxb1FyOW1PbmxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yOTRhMTItMzBlYi00YWViLTk1Yzgt NTAxYTA3MTlkYTBjLzEvMGM5ZGt0MTN1TzktMXMxWHlxb1FyOW1PbmxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8yOTRhMTItMzBlYi00YWViLTk1YzgtNTAxYTA3MTlkYTBj LzEvMGM5ZGt0MTN1TzktMXMxWHlxb1FyOW1PbmxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIDDeveQ /i+RbG1jMePpacH3RWbArKWRBEOhl/qgiB+vKnfIgLqmPEvSpWED1FpMxr8UV2EQ MG7aDYrrGTwQkdgqNjYXA6t3EJprFLo7HyaqZ3ExYHC6dMspNQEbDIyJMpo8pe2u C4flnnaYqYwVJOqmfeGRQNZrBJaTP2sgfafJV689zwyS08/JvQ7xrNmMgez5xNCP VpUMgPxrOowiS2CBHAH9vEnpn9TtzlW7xI0JPQ4s12lPVxBVvhQl7MHbQTsFOeYw LXfGWgcrIi+jH3GI7LhQOOcFPwgm5xmsHOd4DB+Misv1GtSI0Y1iN5wtrlsPcxDE IylP46fGzw4rYA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:34 2025 by rpki-client