This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft File: jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json) Hash identifier: IK8FQvIskkHzvFNMUw/vJe71fB2LwoJvyu0S4b92Mek= Subject key identifier: 5E:B7:0E:BA:4E:AA:93:44:D4:02:00:3D:96:CC:73:9B:36:33:12:4F Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44 Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44 Certificate serial: 019AF2AD51988037D271C0F8F128CFF0FF1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft Manifest number: 0356 Signing time: Sat 06 Dec 2025 08:00:36 +0000 Manifest this update: Sat 06 Dec 2025 08:00:36 +0000 Manifest next update: Sun 07 Dec 2025 08:00:36 +0000 Files and hashes: 1: DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa (hash: 4MMSMGpFYTj64gvYvAI9aZYJdovl51CVqQfi4na/C5A=) 2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: nMCdZJ747g3obcFa0N6FuZ0RNXM2ymMyvrVAQ1B8f8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:51:98:80:37:d2:71:c0:f8:f1:28:cf:f0:ff:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44 Validity Not Before: Dec 6 08:00:36 2025 GMT Not After : Dec 7 08:00:36 2025 GMT Subject: CN=5eb70eba4eaa9344d402003d96cc739b3633124f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:49:48:44:12:60:d2:66:3d:dc:77:ad:c2: c3:de:53:6d:fa:33:44:e5:aa:f7:b8:d8:c9:e3:e9: 7a:50:e4:b7:47:f8:28:90:67:b9:95:6d:4d:84:39: 35:33:04:5f:b9:d7:7c:ee:77:c0:8c:61:1d:7a:59: f1:b7:10:7e:4c:c7:2c:63:2b:5d:37:ed:c6:1f:fc: b5:a7:24:9f:5d:8b:9e:f2:7f:b2:1e:14:0a:58:09: 4f:ca:ae:cf:00:83:ca:e9:8d:a3:88:4f:42:db:60: bd:d8:02:fc:bf:c9:2b:80:bc:13:dc:3d:9c:ab:1d: 57:b8:03:31:ef:f7:c4:7d:21:cf:98:d5:b0:5b:f5: 60:7e:da:5a:fd:91:8f:2e:ef:4d:aa:9a:66:c4:9e: 41:57:c8:75:16:22:2d:dd:24:45:dd:a2:9a:34:bb: c0:b9:ff:12:1b:1f:47:64:d8:72:58:37:c2:18:04: e3:6e:3d:6f:f2:94:5c:26:e8:a4:6e:94:7e:08:2d: 1e:ad:98:78:8e:db:64:61:c6:85:b9:42:f1:42:9d: 9f:87:d6:22:08:0f:f9:4e:8a:6f:0a:9f:0e:e9:02: 56:f9:17:81:ea:c2:50:88:bf:27:78:82:fe:1f:c6: 54:e3:75:16:95:79:54:32:2b:54:5d:65:7e:39:3c: ab:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B7:0E:BA:4E:AA:93:44:D4:02:00:3D:96:CC:73:9B:36:33:12:4F X509v3 Authority Key Identifier: keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:bd:1f:0f:c0:af:ed:f3:42:3b:4d:ed:80:a5:1d:00:9c:33: 59:db:29:e0:48:5f:0a:32:c3:53:ec:d5:4d:04:66:da:33:0a: 1e:56:bf:1d:6d:9e:7c:ea:35:01:74:5b:ed:d3:21:4f:72:1a: 7c:4f:d6:b2:53:3e:cf:83:67:ef:20:b7:2f:e1:6d:81:82:83: a2:f4:b5:0c:9a:6c:be:9b:f7:fe:96:a4:91:43:e8:9a:28:1f: ba:ab:fb:ce:6a:69:75:18:2a:ab:2e:ca:a3:de:bd:e0:a5:00: d0:86:24:7e:3d:e2:b0:ea:14:00:da:ed:72:2a:32:79:42:15: aa:b8:a7:00:c4:ad:be:99:11:c9:db:53:c5:16:f6:a9:b2:b7: 33:2f:1c:fb:c3:ae:31:ee:fc:01:41:e6:c0:87:41:34:06:4c: 3f:59:d0:d5:1b:ca:04:83:72:5c:9a:8c:2f:09:65:e2:d5:bb: 12:30:98:27:3d:ef:4d:e0:9c:0a:a5:4b:22:d3:ba:e3:b8:85: 74:bb:c9:46:d1:8b:69:b2:f7:5b:93:82:e9:d4:91:53:62:bc: 67:d4:12:c4:9c:c4:11:24:31:db:2e:48:b6:a1:dd:c0:16:58: e7:b3:6b:68:38:fb:12:45:93:a4:07:52:09:e8:78:9b:bc:a9: 1a:3e:8d:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVGYgDfSccD48SjP8P8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjY2M4MmE1YmVlM2E5MzYzMzAzYzMzY2RjZGQzNmVmYzY4 ZjhiNDQwHhcNMjUxMjA2MDgwMDM2WhcNMjUxMjA3MDgwMDM2WjAzMTEwLwYDVQQD Eyg1ZWI3MGViYTRlYWE5MzQ0ZDQwMjAwM2Q5NmNjNzM5YjM2MzMxMjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnRJSEQSYNJmPdx3rcLD3lNt+jNE 5ar3uNjJ4+l6UOS3R/gokGe5lW1NhDk1MwRfudd87nfAjGEdelnxtxB+TMcsYytd N+3GH/y1pySfXYue8n+yHhQKWAlPyq7PAIPK6Y2jiE9C22C92AL8v8krgLwT3D2c qx1XuAMx7/fEfSHPmNWwW/Vgftpa/ZGPLu9NqppmxJ5BV8h1FiIt3SRF3aKaNLvA uf8SGx9HZNhyWDfCGATjbj1v8pRcJuikbpR+CC0erZh4jttkYcaFuULxQp2fh9Yi CA/5TopvCp8O6QJW+ReB6sJQiL8neIL+H8ZU43UWlXlUMitUXWV+OTyrMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF63DrpOqpNE1AIAPZbMc5s2MxJPMB8GA1UdIwQY MBaAFIzMgqW+46k2MwPDPNzdNu/Gj4tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQt YmViZGExNjA4ZDA5LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQtYmViZGExNjA4ZDA5 LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWb0fD8Cv 7fNCO03tgKUdAJwzWdsp4EhfCjLDU+zVTQRm2jMKHla/HW2efOo1AXRb7dMhT3Ia fE/WslM+z4Nn7yC3L+FtgYKDovS1DJpsvpv3/pakkUPomigfuqv7zmppdRgqqy7K o9694KUA0IYkfj3isOoUANrtcioyeUIVqrinAMStvpkRydtTxRb2qbK3My8c+8Ou Me78AUHmwIdBNAZMP1nQ1RvKBINyXJqMLwll4tW7EjCYJz3vTeCcCqVLItO647iF dLvJRtGLabL3W5OC6dSRU2K8Z9QSxJzEESQx2y5ItqHdwBZY57NraDj7EkWTpAdS Ceh4m7ypGj6Nag== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:56 2025 by rpki-client