This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json) Hash identifier: At4YY/yEvKMpT1aTaA8JZNWfI+thVGb52ANa4OjPP8o= Subject key identifier: C7:05:81:7C:F3:43:26:3E:D0:A5:C9:72:B8:4A:6B:F4:28:ED:16:1B Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a Certificate serial: 019AF42E10E15FF318AE3E240113571D1CF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft Manifest number: 0E58 Signing time: Sat 06 Dec 2025 15:00:50 +0000 Manifest this update: Sat 06 Dec 2025 15:00:50 +0000 Manifest next update: Sun 07 Dec 2025 15:00:50 +0000 Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: b9LqLRHzV+0103fzsKYPvW6GoBF/LZprg67n/gKJh6U=) 2: vRZENosVd-UpUXAI72NxZZVntJk.roa (hash: 3gCkbj38/RbRsH9RtMq+iOGtDMN5uG57O65jx7at2bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:10:e1:5f:f3:18:ae:3e:24:01:13:57:1d:1c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a Validity Not Before: Dec 6 15:00:50 2025 GMT Not After : Dec 7 15:00:50 2025 GMT Subject: CN=c705817cf343263ed0a5c972b84a6bf428ed161b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:f2:ae:c0:a5:d9:05:9c:25:53:6d:50:df: e4:f2:b0:14:41:1e:84:c9:14:8a:fa:29:1b:d9:7f: e9:5c:e9:79:29:e1:85:ca:6f:79:ef:d3:eb:7e:90: a5:cc:1d:6c:cf:e8:4f:82:c4:8a:31:6d:74:af:46: 89:45:48:c6:50:76:f2:61:f0:e8:c2:ec:79:d2:a8: 4c:fa:50:40:10:d0:f5:ba:ac:22:ed:6e:d4:fc:e7: eb:d5:6d:e9:5d:d6:ac:eb:8a:00:d9:ac:ee:e0:23: 6b:a6:70:a0:80:20:6f:61:50:58:f2:2d:60:ae:41: 55:a6:50:e3:4b:7d:a2:6c:af:83:6f:b0:b8:1e:97: a5:7a:60:7c:08:86:e1:55:fa:7e:b5:bb:14:8e:2d: d2:b4:ca:85:85:85:b8:26:6e:51:db:1c:8b:59:ec: b7:fc:3b:33:63:87:25:cf:82:61:13:38:88:e8:2c: 3b:e2:2c:15:92:38:6e:e7:d3:b6:cd:f1:82:82:1f: 73:e2:cd:4b:e1:4f:86:ae:fc:31:8c:d9:ef:58:52: 51:6c:6d:27:50:e4:c3:c5:33:5e:18:74:93:c4:4a: 20:e0:5c:20:9e:63:84:67:2f:20:14:db:4a:8a:64: a5:73:46:6e:51:33:c6:51:fd:a3:19:0d:b2:f5:d4: 7e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:05:81:7C:F3:43:26:3E:D0:A5:C9:72:B8:4A:6B:F4:28:ED:16:1B X509v3 Authority Key Identifier: keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:61:a2:c9:90:8f:1d:04:3f:44:21:0e:c9:31:57:40:2b:0c: 2f:98:f0:85:a2:79:97:68:0b:a9:e0:37:8a:34:95:c9:51:9e: c0:b6:3f:5c:0e:11:23:46:04:9e:fa:38:28:69:e8:60:ee:0c: 05:e7:e3:b1:65:27:e9:48:95:d9:ab:ff:f4:a7:33:24:71:09: df:14:bd:01:05:08:da:b9:61:7b:e8:c1:3a:cb:f5:2c:dc:d5: e8:3b:b5:bb:8d:15:c8:3c:5d:e7:62:b6:6d:a8:35:05:46:ca: cb:17:5f:d1:5e:cd:6a:ff:07:d8:09:a6:94:d4:f3:d7:4e:1a: 1a:70:3f:b8:0c:cd:6e:27:69:58:1b:16:ae:b9:fe:19:92:aa: 91:a0:5d:ff:98:f6:4f:ee:ca:a7:c6:8c:7e:c4:5e:cb:2b:9c: dd:c0:ed:8b:47:70:50:45:d4:be:2b:b1:1c:bb:bb:3c:c9:65: 0d:58:d1:59:e4:5d:68:3c:01:6f:ff:43:2d:cf:45:86:ef:bc: fe:e4:61:8e:5c:4b:4d:4f:45:9e:b7:17:78:98:22:5d:c3:68: b4:a7:e0:f3:47:18:90:3a:d6:2b:5e:01:e3:d6:e7:b2:10:38: 8a:c0:4e:e3:09:72:c9:4a:ba:03:47:1f:7e:8d:81:14:e7:5c: b5:26:f3:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LhDhX/MYrj4kARNXHRz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGQxMGQxMDlkZDkxMjU1Yzg0ZGQ2MjMwNzY0MTAwMjM3 NGZjM2EwHhcNMjUxMjA2MTUwMDUwWhcNMjUxMjA3MTUwMDUwWjAzMTEwLwYDVQQD EyhjNzA1ODE3Y2YzNDMyNjNlZDBhNWM5NzJiODRhNmJmNDI4ZWQxNjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE7yrsCl2QWcJVNtUN/k8rAUQR6E yRSK+ikb2X/pXOl5KeGFym9579PrfpClzB1sz+hPgsSKMW10r0aJRUjGUHbyYfDo wux50qhM+lBAEND1uqwi7W7U/Ofr1W3pXdas64oA2azu4CNrpnCggCBvYVBY8i1g rkFVplDjS32ibK+Db7C4HpelemB8CIbhVfp+tbsUji3StMqFhYW4Jm5R2xyLWey3 /DszY4clz4JhEziI6Cw74iwVkjhu59O2zfGCgh9z4s1L4U+GrvwxjNnvWFJRbG0n UOTDxTNeGHSTxEog4FwgnmOEZy8gFNtKimSlc0ZuUTPGUf2jGQ2y9dR+xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcFgXzzQyY+0KXJcrhKa/Qo7RYbMB8GA1UdIwQY MBaAFCaNENEJ3ZElXITdYjB2QQAjdPw6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm8wUTBRbmRrU1ZjaE4xaU1IWkJBQ04wX0RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83ZmI3YTAtMmViOC00N2M2LTg2ZTQt OWVhMjg2YmQ1NWZiLzEvSm8wUTBRbmRrU1ZjaE4xaU1IWkJBQ04wX0RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy83ZmI3YTAtMmViOC00N2M2LTg2ZTQtOWVhMjg2YmQ1NWZi LzEvSm8wUTBRbmRrU1ZjaE4xaU1IWkJBQ04wX0RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwmGiyZCP HQQ/RCEOyTFXQCsML5jwhaJ5l2gLqeA3ijSVyVGewLY/XA4RI0YEnvo4KGnoYO4M BefjsWUn6UiV2av/9KczJHEJ3xS9AQUI2rlhe+jBOsv1LNzV6Du1u40VyDxd52K2 bag1BUbKyxdf0V7Nav8H2AmmlNTz104aGnA/uAzNbidpWBsWrrn+GZKqkaBd/5j2 T+7Kp8aMfsReyyuc3cDti0dwUEXUviuxHLu7PMllDVjRWeRdaDwBb/9DLc9Fhu+8 /uRhjlxLTU9FnrcXeJgiXcNotKfg80cYkDrWK14B49bnshA4isBO4wlyyUq6A0cf fo2BFOdctSbzzg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:28 2025 by rpki-client