This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json) Hash identifier: oM9wbP8N16qFQoDbJxbnaUmHO/iHV9oq9HV2S3ch3Og= Subject key identifier: BF:D8:8B:3F:6F:84:30:A7:43:8B:9A:2C:3D:A8:52:87:6D:D4:07:1E Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37 Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37 Certificate serial: 019B26641D58FC4EE0CBE708352FB67D8E80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft Manifest number: 0465 Signing time: Tue 16 Dec 2025 09:00:53 +0000 Manifest this update: Tue 16 Dec 2025 09:00:53 +0000 Manifest next update: Wed 17 Dec 2025 09:00:53 +0000 Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: 7r4mtMq73ypWkr23xYwgstCd1MQySI50Z3UMfxRuplQ=) 2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:1d:58:fc:4e:e0:cb:e7:08:35:2f:b6:7d:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37 Validity Not Before: Dec 16 09:00:53 2025 GMT Not After : Dec 17 09:00:53 2025 GMT Subject: CN=bfd88b3f6f8430a7438b9a2c3da852876dd4071e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:23:16:01:07:da:33:48:ab:17:84:ba:f3:91: db:6e:0e:5d:b5:d5:d0:d9:71:68:03:a9:b2:00:43: f9:d0:cb:11:d4:29:4b:42:d1:85:3a:18:34:b5:9b: fa:5c:07:2b:c4:d1:c4:e1:5f:9c:64:1e:f1:5f:8a: 3e:a2:aa:c7:80:7a:27:a7:cd:1f:17:be:20:20:fb: 92:73:38:fe:92:b4:22:05:da:ac:f0:82:1a:7c:98: 3d:2b:d8:86:df:6f:7b:2f:68:49:02:15:76:71:24: 08:2b:2c:d7:74:9a:44:23:c8:9e:ed:b8:26:d0:cd: a1:d9:78:1e:a2:60:98:ab:b9:ed:e6:1d:11:71:37: 4d:d3:e7:9e:8f:ff:5d:9f:1b:f9:e6:6f:94:38:ac: 27:6c:50:df:a8:e3:90:b7:c2:30:85:4b:4b:f0:25: 31:f9:2e:96:dd:57:d0:fc:54:c2:d5:e2:f4:19:b8: d3:0e:3b:20:71:20:a7:a6:a0:29:35:2d:ef:3b:48: d0:e5:4b:71:51:df:18:3b:d2:6d:4b:ae:ec:e9:38: 54:67:40:5a:4a:0a:1f:28:e4:bb:b9:c0:3c:ea:8c: 5f:01:20:10:61:5e:6f:47:19:fe:df:90:70:76:a5: 56:f9:fb:2e:8f:bb:50:56:7a:46:32:17:a8:2f:11: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D8:8B:3F:6F:84:30:A7:43:8B:9A:2C:3D:A8:52:87:6D:D4:07:1E X509v3 Authority Key Identifier: keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:61:89:07:a6:23:60:eb:fb:d8:9f:b5:40:29:d2:c7:a0:50: 99:ea:21:db:ae:a6:24:b7:8a:dc:2e:d2:8e:57:0f:40:7d:33: 60:50:46:50:c7:71:95:30:fb:45:36:f3:ef:ca:9d:c2:7a:e8: a0:4e:2a:bf:c1:d5:3e:9a:54:80:55:89:b0:65:d9:c2:b8:6d: 92:c1:1a:98:c3:7e:a7:8e:43:83:f0:67:08:e7:6d:56:e4:95: e5:ec:db:16:e3:fa:b0:bb:48:25:9e:55:09:ed:59:95:2a:b5: 2c:12:39:f4:1e:99:d2:92:d7:93:8c:17:cb:b4:e9:f5:d0:93: f9:38:c9:4b:dd:28:99:e5:c7:64:35:ab:28:8f:92:50:2a:5e: 3d:35:ed:f5:44:67:36:cd:07:9a:07:83:d2:9a:9e:96:22:43: a5:21:4f:78:79:6d:06:c9:e4:e3:97:39:35:49:61:28:62:1b: af:16:b5:71:d1:5e:de:2e:72:27:1e:91:2a:cc:6e:bd:14:58: 4d:3a:5e:f7:8c:dc:f1:65:03:56:20:4e:36:3c:bd:1b:e4:4c: bb:d9:5f:3a:0e:1d:36:be:91:96:f8:da:07:73:09:53:e7:ff: 32:26:0d:b8:83:f8:79:4a:0a:83:ed:cd:3e:25:e5:4a:f5:3f: f2:84:5a:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZB1Y/E7gy+cINS+2fY6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZTY5MjY1OGFlZjA5M2Q5ZTM2MDMxMzJiOTY1YmYxYmUw NzVkMzcwHhcNMjUxMjE2MDkwMDUzWhcNMjUxMjE3MDkwMDUzWjAzMTEwLwYDVQQD EyhiZmQ4OGIzZjZmODQzMGE3NDM4YjlhMmMzZGE4NTI4NzZkZDQwNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iMWAQfaM0irF4S685Hbbg5dtdXQ 2XFoA6myAEP50MsR1ClLQtGFOhg0tZv6XAcrxNHE4V+cZB7xX4o+oqrHgHonp80f F74gIPuSczj+krQiBdqs8IIafJg9K9iG3297L2hJAhV2cSQIKyzXdJpEI8ie7bgm 0M2h2XgeomCYq7nt5h0RcTdN0+eej/9dnxv55m+UOKwnbFDfqOOQt8IwhUtL8CUx +S6W3VfQ/FTC1eL0GbjTDjsgcSCnpqApNS3vO0jQ5UtxUd8YO9JtS67s6ThUZ0Ba SgofKOS7ucA86oxfASAQYV5vRxn+35BwdqVW+fsuj7tQVnpGMheoLxH1CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/Yiz9vhDCnQ4uaLD2oUodt1AceMB8GA1UdIwQY MBaAFI/mkmWK7wk9njYDEyuWW/G+B103MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQt YWVlNTY3MTczNjE1LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQtYWVlNTY3MTczNjE1 LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvmGJB6Yj YOv72J+1QCnSx6BQmeoh266mJLeK3C7SjlcPQH0zYFBGUMdxlTD7RTbz78qdwnro oE4qv8HVPppUgFWJsGXZwrhtksEamMN+p45Dg/BnCOdtVuSV5ezbFuP6sLtIJZ5V Ce1ZlSq1LBI59B6Z0pLXk4wXy7Tp9dCT+TjJS90omeXHZDWrKI+SUCpePTXt9URn Ns0HmgeD0pqeliJDpSFPeHltBsnk45c5NUlhKGIbrxa1cdFe3i5yJx6RKsxuvRRY TTpe94zc8WUDViBONjy9G+RMu9lfOg4dNr6RlvjaB3MJU+f/MiYNuIP4eUoKg+3N PiXlSvU/8oRapA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:55:40 2025 by rpki-client