This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json) Hash identifier: JRdOS566KIE+ZQtAEbnpDB8JaerLLyRfXEyLFX3TtaM= Subject key identifier: 25:5E:A5:1C:90:3F:B3:3E:1C:AF:E4:26:FF:A4:70:CC:2F:E1:35:82 Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7 Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7 Certificate serial: 019AF2ADF9E363D21CC675C274ABD988CEAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft Manifest number: 0597 Signing time: Sat 06 Dec 2025 08:01:19 +0000 Manifest this update: Sat 06 Dec 2025 08:01:19 +0000 Manifest next update: Sun 07 Dec 2025 08:01:19 +0000 Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: JkD2X+FwEipCQ3c6hO24QpjjbDNUkd4dJYMNU/yjIIA=) 2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=) 3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f9:e3:63:d2:1c:c6:75:c2:74:ab:d9:88:ce:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7 Validity Not Before: Dec 6 08:01:19 2025 GMT Not After : Dec 7 08:01:19 2025 GMT Subject: CN=255ea51c903fb33e1cafe426ffa470cc2fe13582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:63:ab:f2:94:c6:8d:a0:45:1c:83:3e:40:87: d1:8d:62:61:6c:76:3b:02:9b:05:14:3b:4b:28:f7: bc:e8:3e:1c:b6:32:f5:51:a7:1a:d7:18:da:b2:51: 80:fd:ae:9a:af:3e:8e:1f:eb:a1:8d:01:97:bd:90: 64:9b:d4:e5:cd:ff:ae:9f:74:2b:ff:27:cd:3b:d7: 7c:42:88:84:c6:4d:1c:c5:90:7e:0a:c4:a1:ee:a9: ff:fb:87:38:75:88:0e:80:2a:60:ca:94:ee:18:df: b5:a7:de:24:de:fb:b7:b0:97:95:58:29:d9:76:21: 59:ab:9a:c9:31:a6:d9:c8:8f:62:78:1f:df:c2:6e: 9b:e7:a0:d2:43:4b:9c:c0:97:6a:03:cb:7b:b9:9a: 90:50:f6:44:8e:a8:38:2f:93:1c:f7:6e:4b:ee:83: f2:d2:de:44:87:36:5f:47:63:1f:f6:fd:df:b8:2f: e8:eb:5a:72:82:6f:a3:d7:56:ca:f7:16:e9:ef:b3: cf:0f:76:e1:80:a3:60:34:0d:d0:29:1b:c9:3d:27: 7f:d1:79:70:0c:8e:6b:a5:19:18:e4:3f:39:fa:87: 40:71:75:96:54:10:3b:8f:dc:72:2a:58:6e:af:e5: 12:ec:0c:54:8f:ed:27:26:29:e4:b7:28:9b:ec:ab: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5E:A5:1C:90:3F:B3:3E:1C:AF:E4:26:FF:A4:70:CC:2F:E1:35:82 X509v3 Authority Key Identifier: keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d0:15:03:99:58:87:bc:9e:b7:26:56:48:51:18:48:86:56: 0e:52:f0:bb:67:2d:bb:c3:ab:ac:cb:01:7d:a2:e0:6c:f9:70: eb:f0:b7:ee:46:c8:4e:49:94:2b:a4:87:24:24:9a:04:82:88: 78:d3:93:df:6e:84:7b:b1:d1:9f:ab:56:34:18:7d:c7:62:16: 31:10:54:51:70:e4:14:d1:04:4e:00:87:59:73:66:56:35:05: 7a:2d:4f:f5:ae:de:22:6a:80:46:67:48:c4:a0:83:3d:fc:97: bc:f5:23:4f:96:fb:63:ba:a7:7d:2c:85:7f:72:6e:1f:ad:14: 32:97:5f:e3:6f:03:32:96:e8:7e:42:c4:57:8a:9c:0f:9b:d8: ae:c7:bf:f1:10:52:b5:b6:07:0e:c3:22:69:36:5b:d7:8e:58: d0:79:43:5a:82:be:3a:e4:82:e1:89:92:e6:3d:5f:6e:92:62: 2c:cb:bc:4f:fc:cc:ff:3f:de:18:b9:07:f9:b9:db:1b:43:ba: f2:6a:9b:f5:1e:50:5b:0b:57:95:8e:4e:df:52:1a:a6:15:88: bb:cc:e1:15:f7:86:81:95:27:c5:0c:4e:e0:1c:3b:09:49:1a: 36:44:44:5b:a8:49:69:be:37:9e:10:45:50:c6:bf:b9:ac:ba: 02:80:75:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfnjY9IcxnXCdKvZiM6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTdmNzNiZjAyZjc1NGIxZTYzMTdlZTlhNGYzZTg4NjM3 ZjFhYTcwHhcNMjUxMjA2MDgwMTE5WhcNMjUxMjA3MDgwMTE5WjAzMTEwLwYDVQQD EygyNTVlYTUxYzkwM2ZiMzNlMWNhZmU0MjZmZmE0NzBjYzJmZTEzNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmOr8pTGjaBFHIM+QIfRjWJhbHY7 ApsFFDtLKPe86D4ctjL1Uaca1xjaslGA/a6arz6OH+uhjQGXvZBkm9Tlzf+un3Qr /yfNO9d8QoiExk0cxZB+CsSh7qn/+4c4dYgOgCpgypTuGN+1p94k3vu3sJeVWCnZ diFZq5rJMabZyI9ieB/fwm6b56DSQ0ucwJdqA8t7uZqQUPZEjqg4L5Mc925L7oPy 0t5EhzZfR2Mf9v3fuC/o61pygm+j11bK9xbp77PPD3bhgKNgNA3QKRvJPSd/0Xlw DI5rpRkY5D85+odAcXWWVBA7j9xyKlhur+US7AxUj+0nJinktyib7KvSuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVepRyQP7M+HK/kJv+kcMwv4TWCMB8GA1UdIwQY MBaAFCRX9zvwL3VLHmMX7ppPPohjfxqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTct NWZhMzgwNzQ5NDk3LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTctNWZhMzgwNzQ5NDk3 LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9AVA5lY h7yetyZWSFEYSIZWDlLwu2ctu8OrrMsBfaLgbPlw6/C37kbITkmUK6SHJCSaBIKI eNOT326Ee7HRn6tWNBh9x2IWMRBUUXDkFNEETgCHWXNmVjUFei1P9a7eImqARmdI xKCDPfyXvPUjT5b7Y7qnfSyFf3JuH60UMpdf428DMpbofkLEV4qcD5vYrse/8RBS tbYHDsMiaTZb145Y0HlDWoK+OuSC4YmS5j1fbpJiLMu8T/zM/z/eGLkH+bnbG0O6 8mqb9R5QWwtXlY5O31IaphWIu8zhFfeGgZUnxQxO4Bw7CUkaNkREW6hJab43nhBF UMa/uay6AoB1ww== -----END CERTIFICATE-----Generated at Sat Dec 6 16:45:52 2025 by rpki-client