This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json) Hash identifier: Us0FGYsKK/WNKNOapL0C6nwlARV9vk8Kcpz/c/O9Zfw= Subject key identifier: 6B:6F:00:B3:A3:B8:E2:8C:C8:13:F4:D7:9A:00:26:55:43:F2:56:15 Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69 Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869 Certificate serial: 019AF19AEDC1E73730EF5DECC8FA588D899A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft Manifest number: 0D36 Signing time: Sat 06 Dec 2025 03:00:53 +0000 Manifest this update: Sat 06 Dec 2025 03:00:53 +0000 Manifest next update: Sun 07 Dec 2025 03:00:53 +0000 Files and hashes: 1: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (hash: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=) 2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: 82AbyynYP+g6W6bpoS4IiVTZeqtyP+KEMKCrcIKVx00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ed:c1:e7:37:30:ef:5d:ec:c8:fa:58:8d:89:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869 Validity Not Before: Dec 6 03:00:53 2025 GMT Not After : Dec 7 03:00:53 2025 GMT Subject: CN=6b6f00b3a3b8e28cc813f4d79a00265543f25615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:57:20:93:62:7e:2c:b0:32:9a:60:c1:6a: bd:cb:32:05:65:f4:43:4a:2d:bf:4d:09:91:b8:5e: db:9a:86:d6:e3:ce:f8:f8:27:b4:a8:5e:9d:0b:ee: c6:bf:bb:b6:1f:03:59:86:f4:b9:16:59:32:71:cf: 9a:d5:59:af:5a:85:e3:83:cd:47:80:e0:77:d5:2c: 54:69:02:78:61:56:bf:d6:73:22:7c:10:21:82:13: 8f:68:a6:a7:d2:64:57:9e:40:5b:01:9d:c9:23:ec: d7:57:59:fb:d7:7b:6a:ff:b9:3e:e4:ef:85:ab:65: e9:f9:55:7f:42:08:83:eb:00:fe:04:05:0a:dc:da: 14:45:d2:86:f2:59:4d:e1:12:91:c0:51:1c:14:90: d5:76:5c:07:db:75:a9:a9:50:7c:1e:51:84:fe:1a: 8a:3f:07:e7:58:2a:b9:86:dc:54:28:fc:72:0a:9c: 59:3c:33:4e:81:03:e1:4e:50:2f:14:12:19:06:ac: fc:7c:bd:89:9e:c5:b6:5a:c5:12:09:df:48:20:5f: 34:59:8a:f5:d0:23:6a:e9:9c:2c:14:32:70:d2:85: 8f:49:a7:22:79:d3:9a:cf:59:4e:8f:fb:8d:71:8f: bb:0d:ad:68:f3:8f:6c:6a:d6:d5:2b:80:0c:56:10: 5d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6F:00:B3:A3:B8:E2:8C:C8:13:F4:D7:9A:00:26:55:43:F2:56:15 X509v3 Authority Key Identifier: keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:42:2f:7a:9f:2b:2e:ff:9d:f5:d1:30:71:c0:3a:cc:00:bf: 0e:ea:f1:30:ab:d7:5a:7a:31:cc:b5:15:b6:57:46:39:f7:02: 93:6e:36:ad:fc:fa:8d:5c:e9:1b:fe:57:5f:ed:aa:09:e4:54: e7:15:6d:32:7f:e5:f5:e6:ef:3c:96:87:f3:91:58:8e:e6:ea: 3c:99:2f:87:30:69:b7:7f:21:b8:b8:e9:04:01:de:60:3e:b5: 5b:4e:7d:5b:cf:b4:41:49:73:e4:5c:2b:58:c8:73:47:6b:64: 24:7d:ad:99:4a:88:dd:af:b3:bf:c8:70:aa:93:78:8c:2c:09: af:56:37:5c:55:a4:3b:4f:5f:dc:1a:81:49:ee:dc:2d:82:9b: 0a:ab:6c:28:16:34:7c:2a:30:6a:ed:f2:33:5c:6a:9f:b7:02: 56:78:b0:70:18:4d:b7:88:3d:d0:34:69:ca:74:ad:58:07:bd: 2d:90:c5:30:e5:bd:ec:20:43:50:71:a6:ca:1f:88:56:a3:d7: c2:bb:31:66:b0:1a:e8:2b:66:46:2e:79:68:08:b1:02:64:85: e4:1d:09:b3:48:3a:69:2c:cb:44:85:89:07:df:39:45:32:c7: 68:35:d3:50:1f:43:2f:6f:7c:5b:a3:11:5e:44:c7:8d:c3:e7: 48:7d:cc:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmu3B5zcw713syPpYjYmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NGNjNGFiNWQ0OGM1MjcwZDQwZTlmZTUwZTcyMzk2ZGVl YzU4NjkwHhcNMjUxMjA2MDMwMDUzWhcNMjUxMjA3MDMwMDUzWjAzMTEwLwYDVQQD Eyg2YjZmMDBiM2EzYjhlMjhjYzgxM2Y0ZDc5YTAwMjY1NTQzZjI1NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubVXIJNifiywMppgwWq9yzIFZfRD Si2/TQmRuF7bmobW4874+Ce0qF6dC+7Gv7u2HwNZhvS5Flkycc+a1VmvWoXjg81H gOB31SxUaQJ4YVa/1nMifBAhghOPaKan0mRXnkBbAZ3JI+zXV1n713tq/7k+5O+F q2Xp+VV/QgiD6wD+BAUK3NoURdKG8llN4RKRwFEcFJDVdlwH23WpqVB8HlGE/hqK PwfnWCq5htxUKPxyCpxZPDNOgQPhTlAvFBIZBqz8fL2JnsW2WsUSCd9IIF80WYr1 0CNq6ZwsFDJw0oWPSaciedOaz1lOj/uNcY+7Da1o849satbVK4AMVhBdlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtvALOjuOKMyBP015oAJlVD8lYVMB8GA1UdIwQY MBaAFCVMxKtdSMUnDUDp/lDnI5be7FhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82OWY4ZmMtNTE3NS00ZmIzLWFhYWYt NjM3Y2ZkNzJiYWYwLzEvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82OWY4ZmMtNTE3NS00ZmIzLWFhYWYtNjM3Y2ZkNzJiYWYw LzEvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEIvep8r Lv+d9dEwccA6zAC/DurxMKvXWnoxzLUVtldGOfcCk242rfz6jVzpG/5XX+2qCeRU 5xVtMn/l9ebvPJaH85FYjubqPJkvhzBpt38huLjpBAHeYD61W059W8+0QUlz5Fwr WMhzR2tkJH2tmUqI3a+zv8hwqpN4jCwJr1Y3XFWkO09f3BqBSe7cLYKbCqtsKBY0 fCowau3yM1xqn7cCVniwcBhNt4g90DRpynStWAe9LZDFMOW97CBDUHGmyh+IVqPX wrsxZrAa6CtmRi55aAixAmSF5B0Js0g6aSzLRIWJB985RTLHaDXTUB9DL298W6MR XkTHjcPnSH3MOg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:41 2025 by rpki-client