This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json) Hash identifier: E1qkr6aGsutZd6ycsyqftG5pien1KAWfTJEs4L5QNEw= Subject key identifier: E0:C9:0A:95:7A:B9:2C:EC:AF:45:C5:0A:B2:B3:BF:FD:CE:E5:82:A7 Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f Certificate serial: 019AF3C04B9B51E8057C3FD09C5C112388C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 13:00:57 +0000 Manifest this update: Sat 06 Dec 2025 13:00:57 +0000 Manifest next update: Sun 07 Dec 2025 13:00:57 +0000 Files and hashes: 1: T1NphBpxfH2bIKCDktHdRZTHIcY.roa (hash: jIDQlaKJTEZfvbg4vcsOnliaPcSJWC3wo/0K3CkIb7o=) 2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: S9+rFOl66lnB2ScXkLw+KEHhkzqt2fq+2VTTVg+qlQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:4b:9b:51:e8:05:7c:3f:d0:9c:5c:11:23:88:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f Validity Not Before: Dec 6 13:00:57 2025 GMT Not After : Dec 7 13:00:57 2025 GMT Subject: CN=e0c90a957ab92cecaf45c50ab2b3bffdcee582a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:d1:6c:26:d0:99:2e:67:96:d7:79:93:7e: f9:19:28:5e:5a:78:be:d2:c0:90:48:26:4d:59:c2: 38:a8:27:a9:07:62:ea:58:a0:78:8e:89:dd:ff:a7: 77:59:b0:15:87:1e:f0:09:8c:ab:9b:33:74:26:5a: e2:42:c0:4d:cc:2e:1a:7b:94:54:c5:ce:87:77:89: 37:92:15:c4:34:d2:fb:3f:68:09:aa:81:16:a7:d0: db:fb:e2:7f:f5:71:b8:fb:06:e0:df:bf:13:c8:5b: a5:cd:ba:6e:45:ee:72:da:60:17:66:84:0c:50:98: 92:e7:07:c7:96:cc:55:c9:58:bf:ee:52:a7:df:5c: 35:50:c3:b8:d0:16:b5:b9:89:69:2b:cc:1c:6b:5c: f1:d8:ac:fe:fb:bd:54:9c:e9:40:93:d5:22:09:99: 4a:87:3e:31:55:15:7d:34:ff:62:1e:d6:df:1d:52: c5:60:16:f8:c0:71:23:6e:81:4c:5a:69:42:36:e1: a3:b7:5d:88:2c:85:91:72:2c:f8:a1:49:a5:64:1e: b2:dc:62:2f:b1:e2:e0:75:73:6b:3f:eb:1e:7e:a1: ae:63:c7:6e:d7:ef:66:1e:e1:42:81:49:84:4d:de: 7f:ec:8e:88:5d:0f:c5:21:2b:83:67:b7:4c:0c:10: dc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C9:0A:95:7A:B9:2C:EC:AF:45:C5:0A:B2:B3:BF:FD:CE:E5:82:A7 X509v3 Authority Key Identifier: keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:78:ad:da:82:e8:e0:31:c4:80:5c:92:57:38:28:50:25:06: b4:7e:c2:63:68:d5:a8:0a:69:ef:c0:a5:2c:33:bc:34:93:9f: f3:bc:bf:b5:d5:70:63:62:ae:e2:31:5f:8e:e7:d1:c0:e0:8c: 89:09:1d:20:ed:02:2b:e1:db:67:74:81:b3:14:e6:d3:03:ee: 53:2f:36:12:fa:d9:54:8b:d6:d2:85:ad:8f:61:8b:69:e5:2d: 44:aa:3e:96:b7:75:67:d4:bb:57:03:f2:a1:b3:4e:5c:68:7d: ed:68:38:ec:ce:2e:06:44:d9:be:60:fd:6d:62:e2:09:aa:2b: da:21:3c:d8:89:6a:aa:21:af:3b:37:b7:67:4b:5e:bf:54:6d: 81:17:32:06:1f:72:b6:14:b5:4c:4f:55:26:31:a5:8e:d7:a0: 51:16:c6:ea:0b:56:13:c4:24:c4:9d:e8:5b:88:5e:a7:35:eb: d1:18:2f:19:e0:0b:75:a0:74:f4:d0:e4:9f:74:bf:a7:99:34: de:d9:af:1e:62:cf:29:01:c4:68:91:cf:2b:21:1a:3a:a7:cb: 5f:ca:a7:60:31:2e:2f:b4:1c:14:7a:c1:7c:74:bc:bf:bf:6d: 3e:fb:0f:7b:23:d2:5e:b2:79:aa:9a:3b:27:1c:5a:59:d8:aa: 3e:5a:5e:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEubUegFfD/QnFwRI4jHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYjQ5YmFmMTdmMDZjMzY0YTAwZjhlNjRjODkxYzUzNzI5 ZjdhMmYwHhcNMjUxMjA2MTMwMDU3WhcNMjUxMjA3MTMwMDU3WjAzMTEwLwYDVQQD EyhlMGM5MGE5NTdhYjkyY2VjYWY0NWM1MGFiMmIzYmZmZGNlZTU4MmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdrRbCbQmS5nltd5k375GSheWni+ 0sCQSCZNWcI4qCepB2LqWKB4jond/6d3WbAVhx7wCYyrmzN0JlriQsBNzC4ae5RU xc6Hd4k3khXENNL7P2gJqoEWp9Db++J/9XG4+wbg378TyFulzbpuRe5y2mAXZoQM UJiS5wfHlsxVyVi/7lKn31w1UMO40Ba1uYlpK8wca1zx2Kz++71UnOlAk9UiCZlK hz4xVRV9NP9iHtbfHVLFYBb4wHEjboFMWmlCNuGjt12ILIWRciz4oUmlZB6y3GIv seLgdXNrP+sefqGuY8du1+9mHuFCgUmETd5/7I6IXQ/FISuDZ7dMDBDcmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODJCpV6uSzsr0XFCrKzv/3O5YKnMB8GA1UdIwQY MBaAFI20m68X8Gw2SgD45kyJHFNyn3ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQt ODUxNzNlNTdlYjUyLzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQtODUxNzNlNTdlYjUy LzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3it2oLo 4DHEgFySVzgoUCUGtH7CY2jVqApp78ClLDO8NJOf87y/tdVwY2Ku4jFfjufRwOCM iQkdIO0CK+HbZ3SBsxTm0wPuUy82EvrZVIvW0oWtj2GLaeUtRKo+lrd1Z9S7VwPy obNOXGh97Wg47M4uBkTZvmD9bWLiCaor2iE82IlqqiGvOze3Z0tev1RtgRcyBh9y thS1TE9VJjGljtegURbG6gtWE8QkxJ3oW4hepzXr0RgvGeALdaB09NDkn3S/p5k0 3tmvHmLPKQHEaJHPKyEaOqfLX8qnYDEuL7QcFHrBfHS8v79tPvsPeyPSXrJ5qpo7 JxxaWdiqPlpe6w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:12 2025 by rpki-client