This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft File: jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json) Hash identifier: 3qQtn7jkz6/nevCW750LOf0bwuZq6X8CwFy+xKnPeO0= Subject key identifier: 18:40:59:65:8C:B7:52:37:21:AE:5D:4C:CF:19:C9:88:C4:51:32:C8 Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3 Certificate issuer: /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3 Certificate serial: 019AF276A3DF0C4C8440F181072E0ECCDE7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft Manifest number: 0C0A Signing time: Sat 06 Dec 2025 07:00:52 +0000 Manifest this update: Sat 06 Dec 2025 07:00:52 +0000 Manifest next update: Sun 07 Dec 2025 07:00:52 +0000 Files and hashes: 1: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (hash: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=) 2: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: /WotyLlP2tjVvZUd6K4JPhj05r6EPi+30sgLhVON+xE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a3:df:0c:4c:84:40:f1:81:07:2e:0e:cc:de:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3 Validity Not Before: Dec 6 07:00:52 2025 GMT Not After : Dec 7 07:00:52 2025 GMT Subject: CN=184059658cb7523721ae5d4ccf19c988c45132c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:7e:97:9b:e5:a1:f8:b2:9f:06:6f:29:0b: b8:8a:a0:d9:aa:e3:9e:3b:53:66:4b:a5:51:4b:90: 4c:fa:f0:ec:e3:25:dd:64:96:eb:bc:49:f8:bd:5f: 3f:32:71:84:dc:f4:1c:26:25:ea:11:c9:87:98:15: 34:f8:4b:a3:6f:45:d9:ee:42:c3:3e:bb:9f:7c:25: 39:b2:14:6f:c2:3c:42:c4:53:34:87:2e:e0:40:0b: e0:fd:e9:80:c5:72:a9:14:2c:32:ac:c5:d4:9a:b0: 49:9d:3f:f8:f4:e6:80:8b:85:bc:ee:f9:7d:99:66: 1b:c1:36:b3:e0:87:be:25:a2:b8:8f:7d:1e:ad:6a: 7a:ef:b6:9b:af:d5:95:11:3f:41:b8:42:73:86:cb: 82:1e:e2:12:43:44:1b:ba:26:7a:36:1e:bf:20:61: 63:a1:d9:69:23:ac:7b:fc:a8:fd:a5:98:06:a1:4a: 47:2a:57:fd:31:46:81:17:2d:d8:7c:1b:90:db:9e: 5a:c6:01:21:e9:5c:2d:5a:d2:ae:f8:6d:f1:92:25: ae:a0:5b:f4:e3:bc:97:4d:04:c5:52:39:85:02:62: 61:11:f3:85:45:3a:98:20:fb:38:88:ab:d8:63:10: db:19:64:e3:f4:f7:2b:fa:f3:4f:e6:9b:74:83:a1: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:40:59:65:8C:B7:52:37:21:AE:5D:4C:CF:19:C9:88:C4:51:32:C8 X509v3 Authority Key Identifier: keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b3:61:ab:bf:b6:e1:38:f9:35:d5:3c:f5:e5:63:2f:1e:ef: 81:b4:c1:6b:a4:a2:b2:2a:4a:32:78:43:bb:75:66:53:eb:19: d7:df:19:14:32:10:54:25:0c:91:c3:4f:1b:ae:bb:06:db:78: bf:79:c7:6e:20:89:2b:af:54:e0:45:7a:15:b2:1c:1e:fd:84: 9d:fe:af:34:78:f9:56:26:e4:5c:69:5d:ba:c4:f7:db:75:09: db:a3:43:cb:3b:d2:af:92:46:60:f2:72:4b:fc:01:fb:4f:98: d2:85:3c:fb:19:b7:b8:bc:f3:cd:b5:f7:7a:a7:64:4b:a4:78: 91:1c:84:b9:4e:fa:4a:38:cf:25:ed:32:02:37:3e:6c:6b:c0: fc:7c:c0:ee:d7:72:db:f3:87:b1:29:69:ac:a5:48:e2:ce:c7: 40:21:0e:a4:dd:9b:d9:9d:a7:ad:36:0d:05:3a:1b:5e:0f:c7: 57:85:70:ee:db:86:39:0d:53:2c:f3:44:9d:6e:7f:12:04:10: fc:ae:74:54:9a:bd:8e:9f:d6:b5:f7:b8:9a:9d:7f:b4:53:73: 43:a0:bc:0a:eb:97:10:64:74:4b:c0:b9:52:a8:c6:18:b8:59: 15:3c:0b:37:96:e9:5f:29:5d:c3:c3:ec:ec:3e:1b:aa:2f:3c: 39:7a:a1:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqPfDEyEQPGBBy4OzN5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjA3NTNkZDUxNjMzYWEyZTE3YTkyYzU5ZjRjNDg0NWQ4 NzZjZDMwHhcNMjUxMjA2MDcwMDUyWhcNMjUxMjA3MDcwMDUyWjAzMTEwLwYDVQQD EygxODQwNTk2NThjYjc1MjM3MjFhZTVkNGNjZjE5Yzk4OGM0NTEzMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu5+l5vlofiynwZvKQu4iqDZquOe O1NmS6VRS5BM+vDs4yXdZJbrvEn4vV8/MnGE3PQcJiXqEcmHmBU0+Eujb0XZ7kLD PruffCU5shRvwjxCxFM0hy7gQAvg/emAxXKpFCwyrMXUmrBJnT/49OaAi4W87vl9 mWYbwTaz4Ie+JaK4j30erWp677abr9WVET9BuEJzhsuCHuISQ0QbuiZ6Nh6/IGFj odlpI6x7/Kj9pZgGoUpHKlf9MUaBFy3YfBuQ255axgEh6VwtWtKu+G3xkiWuoFv0 47yXTQTFUjmFAmJhEfOFRTqYIPs4iKvYYxDbGWTj9Pcr+vNP5pt0g6GJDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhAWWWMt1I3Ia5dTM8ZyYjEUTLIMB8GA1UdIwQY MBaAFIwgdT3VFjOqLhepLFn0xIRdh2zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYt YzI5YmViMWE0NzM0LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYtYzI5YmViMWE0NzM0 LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrNhq7+2 4Tj5NdU89eVjLx7vgbTBa6SisipKMnhDu3VmU+sZ198ZFDIQVCUMkcNPG667Btt4 v3nHbiCJK69U4EV6FbIcHv2Enf6vNHj5VibkXGldusT323UJ26NDyzvSr5JGYPJy S/wB+0+Y0oU8+xm3uLzzzbX3eqdkS6R4kRyEuU76SjjPJe0yAjc+bGvA/HzA7tdy 2/OHsSlprKVI4s7HQCEOpN2b2Z2nrTYNBTobXg/HV4Vw7tuGOQ1TLPNEnW5/EgQQ /K50VJq9jp/Wtfe4mp1/tFNzQ6C8CuuXEGR0S8C5UqjGGLhZFTwLN5bpXyldw8Ps 7D4bqi88OXqhlw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:45 2025 by rpki-client