This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json) Hash identifier: TfwUPhlVv7V2XevslkHHTAMTtQvSphYSr3es54Y3/oI= Subject key identifier: 0A:54:51:D9:55:62:41:DC:22:F4:E4:A3:1D:CA:87:76:C2:07:67:29 Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d Certificate serial: 019AF509C5388B286BB437F87300C384938A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft Manifest number: 12BF Signing time: Sat 06 Dec 2025 19:00:49 +0000 Manifest this update: Sat 06 Dec 2025 19:00:49 +0000 Manifest next update: Sun 07 Dec 2025 19:00:49 +0000 Files and hashes: 1: 1JuBh8lEOH4Gv_TiAGmh3QPTdd8.roa (hash: 9L83yVwb1Uhqks9DMbgSsnxXYkHLF9CsQEa0PBHMdEI=) 2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: mZQbOYKQDRBZcj7g0++IoFGzA+l5Z9WwCcNlhV0VCrg=) 3: uLY7R20m1_heAxActPUiDlUOF_k.roa (hash: VJ9ob+iUB471t51KlgloGG8TLFxOURW4UvaYAdbWSCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:c5:38:8b:28:6b:b4:37:f8:73:00:c3:84:93:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d Validity Not Before: Dec 6 19:00:49 2025 GMT Not After : Dec 7 19:00:49 2025 GMT Subject: CN=0a5451d9556241dc22f4e4a31dca8776c2076729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:03:ee:dd:ad:7b:64:3c:fc:50:d5:d2:2e:3b: 81:51:00:17:b4:37:87:32:ab:c2:55:bf:26:57:fd: 9a:25:b6:a6:05:08:6f:f2:1f:e1:40:f5:2f:20:00: ab:93:71:7f:cf:5d:70:a4:7d:ed:89:95:67:42:08: 43:a4:49:79:56:fa:d6:66:94:e2:b8:5d:f6:f2:62: a4:a7:d1:75:9b:ba:19:52:01:85:db:68:fa:88:63: 02:dc:d0:c4:42:06:28:71:51:6c:66:1e:77:50:e5: 16:bb:9a:6e:8e:9d:f0:78:76:fc:db:df:d1:0b:28: e9:e6:e3:25:c8:89:04:26:c3:94:e7:fd:74:60:b0: 7d:83:3d:78:b8:8f:b5:9a:e0:3d:eb:86:43:77:91: d1:ed:b6:5d:e9:7f:6b:38:c3:69:d5:60:4e:32:c3: 19:66:61:0b:c9:ea:11:ea:9c:a1:fd:97:ef:98:45: 4f:b0:94:c4:7d:a5:83:13:c4:e1:20:ba:74:8c:e7: 80:54:ad:0a:1b:9a:24:f8:03:b6:d9:55:32:45:d9: d3:83:f8:e6:62:23:b5:1a:a4:95:db:55:2a:7b:f9: ff:bf:63:eb:7a:94:05:69:d7:4b:95:0d:03:0c:23: 19:5c:63:b6:14:3d:b3:f2:9e:0b:de:b3:ab:f8:7a: 13:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:54:51:D9:55:62:41:DC:22:F4:E4:A3:1D:CA:87:76:C2:07:67:29 X509v3 Authority Key Identifier: keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ff:d6:1b:49:87:c1:06:17:ec:18:f5:40:c3:2b:6a:a2:e5: 64:fb:73:cd:8f:04:29:44:d6:35:7a:a8:7d:80:2d:1c:f7:eb: 20:33:26:82:91:32:ef:d0:9a:a2:a4:9e:7a:84:40:98:12:0f: 5f:99:01:55:04:00:d0:81:9c:80:ed:dc:95:67:1c:01:8f:2c: f2:69:b8:32:a3:38:90:d7:2c:eb:a9:9c:9c:32:9c:c9:56:dd: 95:80:74:c3:ba:fb:f5:95:9c:a6:73:c4:5a:64:48:3b:d4:6a: 8d:2b:a3:1f:04:8d:db:a8:43:74:82:b9:df:f2:da:41:95:59: 70:89:c6:45:f4:b7:fb:12:d3:87:47:01:d7:84:54:35:c8:f1: 96:c3:be:39:3a:d0:b6:c1:06:34:88:49:52:66:b1:ff:10:46: e8:6c:7e:f9:28:37:5a:5d:67:2e:33:81:98:8e:40:da:26:6e: a6:0c:a5:af:42:7b:ff:e1:ca:96:47:57:c8:21:13:b1:95:ea: f0:7a:1a:ac:52:d5:5a:d9:08:76:f2:ff:5e:db:bc:a3:12:96: 36:81:81:10:3a:0e:cc:47:de:dd:ec:d5:9d:d6:fa:53:18:a9: a0:51:1d:09:b8:2b:03:ed:f5:a9:c4:26:47:ba:80:18:ce:d7: c9:e8:0b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CcU4iyhrtDf4cwDDhJOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MDUxMDgwNDAwOTQwZmY0N2M4MDdkZDY3NDJiZWNiYjRl ZGYyMmQwHhcNMjUxMjA2MTkwMDQ5WhcNMjUxMjA3MTkwMDQ5WjAzMTEwLwYDVQQD EygwYTU0NTFkOTU1NjI0MWRjMjJmNGU0YTMxZGNhODc3NmMyMDc2NzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwPu3a17ZDz8UNXSLjuBUQAXtDeH MqvCVb8mV/2aJbamBQhv8h/hQPUvIACrk3F/z11wpH3tiZVnQghDpEl5VvrWZpTi uF328mKkp9F1m7oZUgGF22j6iGMC3NDEQgYocVFsZh53UOUWu5pujp3weHb829/R Cyjp5uMlyIkEJsOU5/10YLB9gz14uI+1muA964ZDd5HR7bZd6X9rOMNp1WBOMsMZ ZmELyeoR6pyh/ZfvmEVPsJTEfaWDE8ThILp0jOeAVK0KG5ok+AO22VUyRdnTg/jm YiO1GqSV21Uqe/n/v2PrepQFaddLlQ0DDCMZXGO2FD2z8p4L3rOr+HoT4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApUUdlVYkHcIvTkox3Kh3bCB2cpMB8GA1UdIwQY MBaAFCQFEIBACUD/R8gH3WdCvsu07fItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wYmY1ZTktZDkxMC00MDM3LThkMzct NWQzOWQ1MDE4Zjc4LzEvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8wYmY1ZTktZDkxMC00MDM3LThkMzctNWQzOWQ1MDE4Zjc4 LzEvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlP/WG0mH wQYX7Bj1QMMraqLlZPtzzY8EKUTWNXqofYAtHPfrIDMmgpEy79CaoqSeeoRAmBIP X5kBVQQA0IGcgO3clWccAY8s8mm4MqM4kNcs66mcnDKcyVbdlYB0w7r79ZWcpnPE WmRIO9RqjSujHwSN26hDdIK53/LaQZVZcInGRfS3+xLTh0cB14RUNcjxlsO+OTrQ tsEGNIhJUmax/xBG6Gx++Sg3Wl1nLjOBmI5A2iZupgylr0J7/+HKlkdXyCETsZXq 8HoarFLVWtkIdvL/Xtu8oxKWNoGBEDoOzEfe3ezVndb6UxipoFEdCbgrA+31qcQm R7qAGM7XyegL0A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:15 2025 by rpki-client