This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json) Hash identifier: /UeWx6PLgqDNETZisJ0j1tuF95rPv9Z0VOX2/E5e8tU= Subject key identifier: BD:9E:6E:EC:94:76:02:BC:D5:A0:94:F3:19:25:82:BE:AB:AC:49:44 Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37 Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37 Certificate serial: 019AF23F821A4416C67F1D6B38DACF3A7CB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft Manifest number: 044A Signing time: Sat 06 Dec 2025 06:00:39 +0000 Manifest this update: Sat 06 Dec 2025 06:00:39 +0000 Manifest next update: Sun 07 Dec 2025 06:00:39 +0000 Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: N5qiYUGpONeB8sshGbzg+4n37fsFUDDVVngJ+mhPHkI=) 2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:82:1a:44:16:c6:7f:1d:6b:38:da:cf:3a:7c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37 Validity Not Before: Dec 6 06:00:39 2025 GMT Not After : Dec 7 06:00:39 2025 GMT Subject: CN=bd9e6eec947602bcd5a094f3192582beabac4944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:7b:51:d8:b5:0f:e2:13:97:c5:7f:f1:d2: a9:29:6d:a7:1a:f1:0b:ed:07:95:36:56:d9:c8:69: 4d:4f:8c:13:e0:73:c1:11:e8:2f:c1:01:b1:0d:fa: 23:96:a2:1a:07:b2:d2:b1:d2:94:bd:f5:79:73:a7: 76:26:57:28:ab:f7:59:ac:da:61:35:2b:2d:91:1a: 93:ff:d5:f6:e8:68:51:f2:1c:a5:f3:ef:83:40:de: c2:cc:1f:cb:99:1e:9d:a8:44:53:2e:e8:ec:c1:72: 06:bc:57:d4:b5:ee:50:6f:01:70:bf:cf:58:73:e3: 2f:62:28:21:86:4f:8e:29:91:df:c0:4a:07:4d:e4: 1d:c1:07:33:95:2a:5e:37:b6:70:25:7e:e3:26:d1: 77:a5:64:3a:3e:21:c2:9b:1f:c7:8b:93:04:87:20: 96:4a:4b:d5:ab:92:ed:b3:a2:14:00:f6:63:cb:a3: d3:9b:56:85:87:25:cf:a8:0d:d0:10:8d:09:24:03: 71:83:a4:f5:8b:de:5d:f9:81:6f:56:d0:ef:c7:17: 51:43:49:8d:85:3c:cf:f6:2f:bf:bb:04:53:39:8e: 6d:7f:02:1d:74:f4:40:c3:a9:f1:6f:db:22:5a:18: d5:ab:2e:cb:52:8a:66:86:0a:5e:48:e8:06:0d:22: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9E:6E:EC:94:76:02:BC:D5:A0:94:F3:19:25:82:BE:AB:AC:49:44 X509v3 Authority Key Identifier: keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:20:dc:10:e9:9b:f1:65:a0:bf:94:2c:9a:05:71:43:c8:e2: d6:d9:5e:30:29:f9:d2:6a:ba:73:f0:e6:10:29:d5:4f:7d:c2: b5:d5:6a:5f:63:84:66:8a:e4:d2:bb:dd:95:c2:76:99:ff:08: d0:23:93:73:b2:41:e6:57:e8:43:b0:95:e1:d0:7c:14:b3:d5: 54:b2:db:b9:1a:e9:6b:de:79:f9:1c:8d:a5:1b:c3:1b:40:a3: f2:06:a7:04:3b:66:6a:7f:98:dd:33:c7:5f:c8:6b:26:3f:60: 19:93:07:3e:83:9d:01:35:ab:58:b2:85:d7:46:ee:8d:c9:56: c2:90:fc:9b:46:ce:48:fc:3b:5e:6c:28:a0:24:92:41:15:ed: 26:d3:34:9e:c6:6e:bf:82:21:79:aa:b0:90:3f:fe:b5:a9:7f: be:29:96:b3:b5:bd:23:d9:2b:e4:a8:a7:d9:f2:0a:a7:53:e8: e2:8d:8f:86:31:97:ee:c8:08:8d:fc:a2:6e:f9:03:54:e7:30: 5b:53:5f:cb:e9:04:c8:2f:5f:9b:f3:db:84:7b:68:18:90:0d: 7f:84:b4:6d:59:a1:f7:bf:4e:fa:eb:74:1a:a7:65:a9:d6:8e: 18:c5:dc:17:ab:0c:ce:b1:5d:31:fc:e3:93:a4:1c:2b:83:81: be:5c:b8:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4IaRBbGfx1rONrPOny1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZTY5MjY1OGFlZjA5M2Q5ZTM2MDMxMzJiOTY1YmYxYmUw NzVkMzcwHhcNMjUxMjA2MDYwMDM5WhcNMjUxMjA3MDYwMDM5WjAzMTEwLwYDVQQD EyhiZDllNmVlYzk0NzYwMmJjZDVhMDk0ZjMxOTI1ODJiZWFiYWM0OTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyml7Udi1D+ITl8V/8dKpKW2nGvEL 7QeVNlbZyGlNT4wT4HPBEegvwQGxDfojlqIaB7LSsdKUvfV5c6d2Jlcoq/dZrNph NSstkRqT/9X26GhR8hyl8++DQN7CzB/LmR6dqERTLujswXIGvFfUte5QbwFwv89Y c+MvYighhk+OKZHfwEoHTeQdwQczlSpeN7ZwJX7jJtF3pWQ6PiHCmx/Hi5MEhyCW SkvVq5Lts6IUAPZjy6PTm1aFhyXPqA3QEI0JJANxg6T1i95d+YFvVtDvxxdRQ0mN hTzP9i+/uwRTOY5tfwIddPRAw6nxb9siWhjVqy7LUopmhgpeSOgGDSL7fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2ebuyUdgK81aCU8xklgr6rrElEMB8GA1UdIwQY MBaAFI/mkmWK7wk9njYDEyuWW/G+B103MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQt YWVlNTY3MTczNjE1LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQtYWVlNTY3MTczNjE1 LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiDcEOmb 8WWgv5QsmgVxQ8ji1tleMCn50mq6c/DmECnVT33CtdVqX2OEZork0rvdlcJ2mf8I 0COTc7JB5lfoQ7CV4dB8FLPVVLLbuRrpa955+RyNpRvDG0Cj8ganBDtman+Y3TPH X8hrJj9gGZMHPoOdATWrWLKF10bujclWwpD8m0bOSPw7XmwooCSSQRXtJtM0nsZu v4IheaqwkD/+tal/vimWs7W9I9kr5Kin2fIKp1Po4o2PhjGX7sgIjfyibvkDVOcw W1Nfy+kEyC9fm/PbhHtoGJANf4S0bVmh979O+ut0GqdlqdaOGMXcF6sMzrFdMfzj k6QcK4OBvly4zw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:48:52 2025 by rpki-client