This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft File: jOy2jIDW2NFkiSIw-dEfJVG-04o.mft (raw, json) Hash identifier: rFoLaI+I/mWLSa60mOXfoBbXK3TfUzOmNUHBaeKALWg= Subject key identifier: 63:E8:40:6E:BC:E8:1A:9A:7D:7A:D1:4E:6B:9A:92:3E:8A:53:BF:34 Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a Certificate serial: 019AF276CE9645EC12E13786ED46AC55AA0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft Manifest number: 048E Signing time: Sat 06 Dec 2025 07:01:03 +0000 Manifest this update: Sat 06 Dec 2025 07:01:03 +0000 Manifest next update: Sun 07 Dec 2025 07:01:03 +0000 Files and hashes: 1: A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa (hash: YVpgdnu79jTGnOSIhM9WXwxc/TAyiy91T+UdGFojKfA=) 2: jOy2jIDW2NFkiSIw-dEfJVG-04o.crl (hash: t7P24tGFyRB6T3l4Oby0kFfgFseml/k40kApEXKhpuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ce:96:45:ec:12:e1:37:86:ed:46:ac:55:aa:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a Validity Not Before: Dec 6 07:01:03 2025 GMT Not After : Dec 7 07:01:03 2025 GMT Subject: CN=63e8406ebce81a9a7d7ad14e6b9a923e8a53bf34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7e:cf:50:b9:0d:9c:ec:e5:05:5c:79:0c:ed: 2f:29:ce:2d:43:0d:56:26:ef:42:86:65:46:34:2e: ca:ab:7c:f1:1a:28:48:b9:87:4c:54:38:db:42:de: f3:d6:fe:b2:16:b7:0d:d7:32:9e:ca:01:ee:40:80: 86:a7:03:2c:14:51:11:51:8e:04:d4:48:ec:9f:26: ad:08:6f:a2:94:7b:91:f3:41:38:98:9d:97:72:f9: fc:66:66:12:b1:14:7b:f9:57:7d:70:8d:a1:e0:0c: a2:05:21:8a:1e:da:a3:5d:8b:ce:2b:1d:c1:6d:47: 8c:35:e0:71:55:f1:02:2b:a4:bd:d1:91:bd:62:e4: 23:c5:ac:97:63:de:29:d1:26:cd:bf:cb:11:15:6f: 83:0c:2b:3a:57:e6:58:0f:d1:72:1a:61:ff:cb:6f: ee:7e:41:5e:9f:e8:69:57:c9:41:8b:a4:15:b6:21: 20:d8:e4:d4:ea:d3:0b:c1:bc:a2:e1:21:07:4a:e0: c2:5b:63:77:9d:da:f6:75:c5:60:8a:51:b6:c8:cb: c8:38:85:5a:03:6b:f3:4f:c5:10:a6:a5:e0:71:89: 0a:60:b6:72:b7:61:c8:97:99:c4:0f:2b:4e:fb:63: d9:1a:aa:6a:4f:8d:bd:b9:fd:60:f6:18:e8:84:15: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E8:40:6E:BC:E8:1A:9A:7D:7A:D1:4E:6B:9A:92:3E:8A:53:BF:34 X509v3 Authority Key Identifier: keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c9:74:2a:cc:59:7a:a3:85:bc:58:4c:8f:9d:32:1c:b4:7e: 8b:08:0f:75:f3:3f:b1:b0:2a:5e:6e:63:80:d2:da:e9:3c:81: ab:90:93:57:79:8e:f5:44:4a:b8:3e:49:ba:a7:78:6d:fa:0a: bf:e6:cd:c0:ae:22:59:d2:82:5b:45:7e:eb:a5:f8:6e:1e:9b: 26:72:e3:6a:df:29:2a:d7:19:9d:8a:cb:0f:7f:00:58:85:33: a6:f2:68:56:6e:b6:43:c2:73:30:2c:14:4e:e7:36:82:4e:89: e9:aa:44:a4:b2:04:c3:97:c2:64:0e:b5:53:7a:db:2b:a6:2f: 4d:2f:b7:7a:3a:56:cf:7c:be:0e:e5:51:7a:bf:b9:85:cb:f8: fa:95:35:bd:57:4a:ce:fd:09:e7:22:4b:2f:73:aa:48:7b:b7: 4e:4b:8f:a1:a2:9c:c3:e6:62:bb:da:ec:10:f5:4a:c2:f1:2f: 39:20:ac:da:c3:63:3a:a8:0e:1f:08:91:4f:e7:2f:5a:e6:7d: 87:80:c1:4b:f2:96:6d:a7:05:ce:6c:74:7c:34:89:f9:13:93: 95:ce:e0:41:f1:20:31:fb:66:52:cd:5d:0b:0a:bb:41:00:ac: 96:6c:8b:c0:1a:fd:94:6f:57:fc:00:2a:13:43:79:dd:a3:2e: 57:e5:29:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryds6WRewS4TeG7UasVaoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZWNiNjhjODBkNmQ4ZDE2NDg5MjIzMGY5ZDExZjI1NTFi ZWQzOGEwHhcNMjUxMjA2MDcwMTAzWhcNMjUxMjA3MDcwMTAzWjAzMTEwLwYDVQQD Eyg2M2U4NDA2ZWJjZTgxYTlhN2Q3YWQxNGU2YjlhOTIzZThhNTNiZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn7PULkNnOzlBVx5DO0vKc4tQw1W Ju9ChmVGNC7Kq3zxGihIuYdMVDjbQt7z1v6yFrcN1zKeygHuQICGpwMsFFERUY4E 1EjsnyatCG+ilHuR80E4mJ2Xcvn8ZmYSsRR7+Vd9cI2h4AyiBSGKHtqjXYvOKx3B bUeMNeBxVfECK6S90ZG9YuQjxayXY94p0SbNv8sRFW+DDCs6V+ZYD9FyGmH/y2/u fkFen+hpV8lBi6QVtiEg2OTU6tMLwbyi4SEHSuDCW2N3ndr2dcVgilG2yMvIOIVa A2vzT8UQpqXgcYkKYLZyt2HIl5nEDytO+2PZGqpqT429uf1g9hjohBVXmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPoQG686BqafXrRTmuakj6KU780MB8GA1UdIwQY MBaAFIzstoyA1tjRZIkiMPnRHyVRvtOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak95MmpJRFcyTkZraVNJdy1kRWZKVkctMDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jMTU5YWQtMWJmYi00OTBlLThkNzgt ZWIwMDEyMWE1NWU1LzEvak95MmpJRFcyTkZraVNJdy1kRWZKVkctMDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9jMTU5YWQtMWJmYi00OTBlLThkNzgtZWIwMDEyMWE1NWU1 LzEvak95MmpJRFcyTkZraVNJdy1kRWZKVkctMDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsl0KsxZ eqOFvFhMj50yHLR+iwgPdfM/sbAqXm5jgNLa6TyBq5CTV3mO9URKuD5Juqd4bfoK v+bNwK4iWdKCW0V+66X4bh6bJnLjat8pKtcZnYrLD38AWIUzpvJoVm62Q8JzMCwU Tuc2gk6J6apEpLIEw5fCZA61U3rbK6YvTS+3ejpWz3y+DuVRer+5hcv4+pU1vVdK zv0J5yJLL3OqSHu3TkuPoaKcw+Ziu9rsEPVKwvEvOSCs2sNjOqgOHwiRT+cvWuZ9 h4DBS/KWbacFzmx0fDSJ+ROTlc7gQfEgMftmUs1dCwq7QQCslmyLwBr9lG9X/AAq E0N53aMuV+UpSw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:19 2025 by rpki-client