This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json) Hash identifier: 4y02Pab7LddusFimMHIXvuUZZqzV6WWNhrM1u00O8Dc= Subject key identifier: 22:16:06:29:03:09:26:D6:F9:9C:AF:18:36:5B:0B:45:9F:D6:AA:7C Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48 Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548 Certificate serial: 019AF31C0FD5BC17613B207B7E5E4F96C5DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft Manifest number: 1256 Signing time: Sat 06 Dec 2025 10:01:33 +0000 Manifest this update: Sat 06 Dec 2025 10:01:33 +0000 Manifest next update: Sun 07 Dec 2025 10:01:33 +0000 Files and hashes: 1: ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa (hash: 5uKveASNNkoz3m6Z/IoI5wPaRI1/s/iR92XdJr3b/vs=) 2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: tCe5MT0TseBgzginSKVLqtBiqFbXlT6dL/Hc5CKW2C0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:0f:d5:bc:17:61:3b:20:7b:7e:5e:4f:96:c5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548 Validity Not Before: Dec 6 10:01:33 2025 GMT Not After : Dec 7 10:01:33 2025 GMT Subject: CN=22160629030926d6f99caf18365b0b459fd6aa7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:81:bc:6a:70:66:be:94:e0:c1:f4:2c:70: 43:c5:d5:bc:ce:3f:34:91:1a:37:91:8b:62:7c:85: df:08:0f:69:e4:b8:3c:06:21:94:27:44:5a:1c:d5: d5:c0:7e:18:d7:66:ac:81:d1:ac:0c:c1:ca:4f:c7: b9:5c:36:a6:32:9e:d0:d2:de:b2:a2:e6:3f:d1:01: 8a:b3:28:68:19:ad:cc:6f:45:c0:67:f0:58:2b:99: 24:b9:f9:6e:8a:cc:3e:bf:6f:b4:84:a3:c3:62:7a: bf:9f:5e:39:1c:70:75:21:4e:9e:6e:50:2d:62:e8: 4e:14:27:62:1a:34:b1:72:f0:00:7d:d0:1b:23:1d: 59:bb:a2:de:47:ea:a3:b3:a0:56:9a:0c:d5:0f:7e: 46:e5:61:5a:d6:4e:e9:d9:f2:2c:f8:cd:d2:98:cf: b5:39:d2:74:1b:1e:20:cc:eb:51:95:3f:17:ff:8b: e6:ce:3e:1c:9c:b3:73:ae:56:28:ea:49:55:81:ff: 78:41:f0:92:38:01:11:a7:e2:a3:7d:9f:46:30:9d: 11:2e:8d:77:f3:eb:96:1c:84:ea:60:ae:23:64:0e: f8:8e:a8:de:34:9f:9f:b9:ef:e8:6a:ec:b5:46:08: 83:48:88:2b:51:95:32:41:21:a5:5f:ae:4e:69:a6: ca:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:16:06:29:03:09:26:D6:F9:9C:AF:18:36:5B:0B:45:9F:D6:AA:7C X509v3 Authority Key Identifier: keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9b:7d:85:4f:e4:55:84:e6:1b:a9:f4:99:ba:62:8c:38:4d: f5:7e:a9:37:b7:0c:ae:1a:01:0d:55:06:8a:26:ec:11:59:92: a8:e6:3d:73:78:aa:21:89:8a:6a:55:c7:0b:09:d1:25:cb:e7: 5b:52:f8:1f:b4:cf:9d:ac:b1:d4:2f:13:6b:2a:a6:9f:fc:88: a5:2d:39:3d:81:11:7d:c5:f7:14:15:cc:69:b7:b5:a4:d3:f5: 59:b9:63:10:be:7f:34:eb:8a:81:75:23:60:75:0c:03:ad:29: 70:ce:d5:92:7f:5e:de:57:98:e2:4a:55:71:37:35:d7:a9:22: 13:42:22:e9:20:a3:1a:1c:3f:8d:72:d7:8e:d1:75:c9:97:cf: 37:af:f7:d0:37:90:b8:3d:11:5c:69:b2:0a:2d:3f:ed:41:25: 04:bf:6c:15:65:91:95:3b:07:8e:ba:66:26:a2:71:6b:ee:eb: 32:7f:13:d6:b6:a0:89:fe:87:84:6e:8b:b2:fe:08:f6:75:c6: 99:ed:b5:04:67:3b:cd:0b:77:75:18:cd:90:ed:20:23:e0:fd: 32:93:67:af:13:ed:53:35:38:bb:01:12:d8:80:83:a3:21:a4: a0:0c:b5:8a:7b:07:59:05:5c:dc:43:da:66:86:aa:a1:ea:f9: e7:31:bb:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHA/VvBdhOyB7fl5PlsXfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlODk1ZjFlMjcwYzYzNWVjNjFkZjlhOTdmYzBmNjY4YzBh OGY1NDgwHhcNMjUxMjA2MTAwMTMzWhcNMjUxMjA3MTAwMTMzWjAzMTEwLwYDVQQD EygyMjE2MDYyOTAzMDkyNmQ2Zjk5Y2FmMTgzNjViMGI0NTlmZDZhYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum6BvGpwZr6U4MH0LHBDxdW8zj80 kRo3kYtifIXfCA9p5Lg8BiGUJ0RaHNXVwH4Y12asgdGsDMHKT8e5XDamMp7Q0t6y ouY/0QGKsyhoGa3Mb0XAZ/BYK5kkufluisw+v2+0hKPDYnq/n145HHB1IU6eblAt YuhOFCdiGjSxcvAAfdAbIx1Zu6LeR+qjs6BWmgzVD35G5WFa1k7p2fIs+M3SmM+1 OdJ0Gx4gzOtRlT8X/4vmzj4cnLNzrlYo6klVgf94QfCSOAERp+KjfZ9GMJ0RLo13 8+uWHITqYK4jZA74jqjeNJ+fue/oauy1RgiDSIgrUZUyQSGlX65OaabKeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIWBikDCSbW+ZyvGDZbC0Wf1qp8MB8GA1UdIwQY MBaAFI6JXx4nDGNexh35qX/A9mjAqPVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEt ZTY5YTAxNzQ4NWZiLzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEtZTY5YTAxNzQ4NWZi LzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZt9hU/k VYTmG6n0mbpijDhN9X6pN7cMrhoBDVUGiibsEVmSqOY9c3iqIYmKalXHCwnRJcvn W1L4H7TPnayx1C8Tayqmn/yIpS05PYERfcX3FBXMabe1pNP1WbljEL5/NOuKgXUj YHUMA60pcM7Vkn9e3leY4kpVcTc116kiE0Ii6SCjGhw/jXLXjtF1yZfPN6/30DeQ uD0RXGmyCi0/7UElBL9sFWWRlTsHjrpmJqJxa+7rMn8T1ragif6HhG6Lsv4I9nXG me21BGc7zQt3dRjNkO0gI+D9MpNnrxPtUzU4uwES2ICDoyGkoAy1insHWQVc3EPa Zoaqoer55zG7jg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:03 2025 by rpki-client