This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json) Hash identifier: +fHO3NPRyUISQMKqLx40yY4ZzQQcIUgKSX4oRJYtXdU= Subject key identifier: 92:B4:C7:B3:E1:05:1D:12:F4:F4:25:9F:77:9C:D9:02:13:E5:BA:F4 Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7 Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7 Certificate serial: 019AF163D48B5D4AF47A13269AF5DD5BD7C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft Manifest number: 16E3 Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=) 2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: k2QG0DzZU+k0Dj/KrzrEICHxnWZ7vtzWDXJDq9yCVgc=) 3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d4:8b:5d:4a:f4:7a:13:26:9a:f5:dd:5b:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=92b4c7b3e1051d12f4f4259f779cd90213e5baf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:25:dc:d5:3d:f5:af:5c:e3:ee:8d:e6:41:76: a4:9d:e7:b6:82:75:9e:90:ce:9c:52:c7:6e:f3:1f: 71:90:38:af:18:23:30:46:5c:1e:ee:51:8c:49:75: d9:f0:c8:d7:98:ed:6d:cf:18:8e:e1:78:5f:2a:41: 69:8a:e1:16:bb:bd:7c:9d:92:5f:0b:57:79:4d:78: 15:df:52:ab:98:84:df:59:91:83:da:fe:42:76:2e: c6:f8:3e:7d:02:bd:93:df:01:b2:51:3a:dd:12:95: 72:d9:ce:a9:24:23:0d:c4:82:5d:23:ce:5b:3d:88: 93:56:c9:f4:b5:52:4e:c8:b8:e2:fc:21:da:7a:66: 16:af:f7:78:12:e7:3c:80:65:da:6c:d1:a2:36:66: 42:21:3c:b9:1c:5a:d9:90:c6:74:e2:0b:79:c6:20: 4f:04:60:63:6e:80:f7:41:9d:fb:92:60:29:6a:fa: c3:4c:8e:04:73:93:e4:84:c8:b3:91:49:37:f5:75: 59:ab:e7:6d:57:eb:43:df:7a:04:05:e9:04:8f:e9: e8:18:fd:3c:a6:d4:9c:c6:ba:71:5c:e7:4f:e5:98: 5b:2b:74:07:de:0e:86:18:54:2f:b9:78:7a:53:87: 23:61:22:bf:f8:ea:b6:2e:a7:ce:b6:5d:af:05:e1: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B4:C7:B3:E1:05:1D:12:F4:F4:25:9F:77:9C:D9:02:13:E5:BA:F4 X509v3 Authority Key Identifier: keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3b:bd:e4:d1:14:a2:60:4a:82:f6:59:4f:73:47:4b:e5:13: a1:79:57:1f:d9:1d:f2:49:ae:03:ea:71:56:97:9f:d7:aa:77: e2:32:73:9a:15:70:b1:fb:d9:96:c7:08:42:17:0a:71:a1:8f: fe:f5:4a:95:2b:cb:87:fa:06:d6:76:b7:94:8b:32:2b:5c:c8: 03:fc:2e:a5:ee:4b:a6:73:b4:e9:4b:9b:4e:19:ce:cd:75:8d: 4c:60:95:86:59:7b:46:fd:c9:cc:91:6d:36:b4:12:a2:f4:4e: 39:12:92:36:af:2f:82:08:03:e2:12:68:5f:aa:11:f6:7d:19: e5:7d:c1:28:c0:ca:b7:38:e2:83:be:09:de:81:cf:5d:94:b8: a5:3c:c8:96:f8:80:17:fa:47:27:71:8b:74:6f:4f:c5:ae:e6: a7:f1:08:5f:10:f8:8b:fc:af:35:89:3e:30:fa:9c:7e:44:58: 5e:8a:23:2b:2e:01:a6:84:df:a5:ce:52:96:6c:d1:3f:0a:da: ba:d7:76:70:95:40:66:49:7a:09:42:4b:26:6d:9e:fe:00:85: 47:8b:3d:94:77:53:42:23:9a:e6:4e:6c:c0:e3:e4:5e:df:b0: 8e:70:15:f6:f5:97:24:64:5a:e6:0f:f8:9a:33:ea:1c:c2:4b: c4:54:78:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9SLXUr0ehMmmvXdW9fAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YzVmYmRjNzIyMDU3YTY1ZmE5ZGJiMTE3ZmM0YmRmNzJl ZGMwYTcwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD Eyg5MmI0YzdiM2UxMDUxZDEyZjRmNDI1OWY3NzljZDkwMjEzZTViYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iXc1T31r1zj7o3mQXaknee2gnWe kM6cUsdu8x9xkDivGCMwRlwe7lGMSXXZ8MjXmO1tzxiO4XhfKkFpiuEWu718nZJf C1d5TXgV31KrmITfWZGD2v5Cdi7G+D59Ar2T3wGyUTrdEpVy2c6pJCMNxIJdI85b PYiTVsn0tVJOyLji/CHaemYWr/d4Euc8gGXabNGiNmZCITy5HFrZkMZ04gt5xiBP BGBjboD3QZ37kmApavrDTI4Ec5PkhMizkUk39XVZq+dtV+tD33oEBekEj+noGP08 ptScxrpxXOdP5ZhbK3QH3g6GGFQvuXh6U4cjYSK/+Oq2LqfOtl2vBeEqTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJK0x7PhBR0S9PQln3ec2QIT5br0MB8GA1UdIwQY MBaAFCXF+9xyIFemX6nbsRf8S99y7cCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUt Y2U2OTU1Njc2MWJkLzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUtY2U2OTU1Njc2MWJk LzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzu95NEU omBKgvZZT3NHS+UToXlXH9kd8kmuA+pxVpef16p34jJzmhVwsfvZlscIQhcKcaGP /vVKlSvLh/oG1na3lIsyK1zIA/wupe5LpnO06UubThnOzXWNTGCVhll7Rv3JzJFt NrQSovROORKSNq8vgggD4hJoX6oR9n0Z5X3BKMDKtzjig74J3oHPXZS4pTzIlviA F/pHJ3GLdG9Pxa7mp/EIXxD4i/yvNYk+MPqcfkRYXoojKy4BpoTfpc5SlmzRPwra utd2cJVAZkl6CUJLJm2e/gCFR4s9lHdTQiOa5k5swOPkXt+wjnAV9vWXJGRa5g/4 mjPqHMJLxFR48g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:28 2025 by rpki-client