This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json) Hash identifier: iOayRw2kU97sIAhe8miMSITYtjXmA0OA5TXaFDYmePY= Subject key identifier: 21:4D:B3:FF:C3:2F:0D:3E:96:64:23:56:63:53:2E:8D:20:C6:A3:F8 Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2 Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2 Certificate serial: 019AF389915C2716FD56471ABFA43384DA63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft Manifest number: 1232 Signing time: Sat 06 Dec 2025 12:01:10 +0000 Manifest this update: Sat 06 Dec 2025 12:01:10 +0000 Manifest next update: Sun 07 Dec 2025 12:01:10 +0000 Files and hashes: 1: 50rNnFjazBYlu5lhZ-PnYemFhBU.roa (hash: TBn3PnK+MHsgG76RW1zj1H988aqSsXlA0MWIu2a6Dcs=) 2: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=) 3: fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa (hash: F7hAcwIBSQhJTiFeaos197lpjHo7B2FuCmRxN0q9JC0=) 4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: FmgL8aEUqyaS5jlsHQUr1bumosOwul6MDcMVOVE7mWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:91:5c:27:16:fd:56:47:1a:bf:a4:33:84:da:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2 Validity Not Before: Dec 6 12:01:10 2025 GMT Not After : Dec 7 12:01:10 2025 GMT Subject: CN=214db3ffc32f0d3e9664235663532e8d20c6a3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:96:a9:3f:eb:ad:7f:ad:10:58:f8:76:a8: 74:95:5a:71:b7:52:69:64:ec:46:35:c9:87:c6:56: fb:d8:49:ad:63:33:9c:c1:a6:a3:ed:a4:37:9d:56: f3:9c:a9:42:3b:e9:08:e9:82:c3:c3:75:f7:a3:b5: 28:65:f4:d2:03:b6:9c:14:08:ba:ad:10:b9:06:cc: 1f:f5:71:2c:86:df:09:03:28:45:54:f2:12:bb:7e: 44:39:bd:c9:d5:f5:13:24:10:99:05:67:46:ae:14: 27:0f:f3:e7:a8:38:d6:63:90:fa:2d:01:77:d6:b0: ac:29:a5:a5:b8:93:4e:e4:53:45:c8:8b:74:2b:ff: 3e:5a:5c:5e:8b:72:c0:79:2b:ab:d9:94:ea:73:11: bf:8b:c6:64:53:06:46:e7:e4:63:88:1b:3e:a6:5d: 5d:8f:35:b9:3d:a3:85:17:b2:6f:13:f4:70:88:cc: 16:55:ef:c4:d1:a0:94:bc:98:f6:87:df:89:8d:30: 85:b6:fb:20:b1:85:37:ff:89:70:db:85:71:26:00: 99:88:fc:ec:6e:e6:bc:30:e0:f2:13:6a:69:29:8a: e3:8d:66:92:5b:e0:34:c9:a2:c0:cc:40:38:fc:ce: 0c:31:33:ea:94:c8:f6:bb:60:b9:bd:4f:5f:ff:03: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4D:B3:FF:C3:2F:0D:3E:96:64:23:56:63:53:2E:8D:20:C6:A3:F8 X509v3 Authority Key Identifier: keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:db:85:e6:73:7d:e2:54:08:dc:39:03:17:f4:c2:73:c2:af: 1f:e3:af:f1:89:f3:0a:69:98:b8:e0:59:b6:54:70:73:c1:8b: 57:51:9b:a6:64:a6:f7:cd:36:05:e3:8b:71:3f:40:50:27:bb: 60:56:54:3c:78:22:56:c7:7e:67:1c:15:dd:2f:e4:7f:c1:cd: ad:5e:70:5b:f2:88:fe:7f:cf:49:a2:2f:d6:39:e9:59:03:b6: c1:e7:b6:a6:2e:3c:78:ed:98:76:f6:10:34:f1:cc:a9:9a:da: a9:b0:e1:2d:19:ec:b9:a8:db:a4:58:a0:09:7e:1a:95:b6:1c: 43:eb:1f:06:ae:b3:b7:7d:be:9c:88:ea:21:13:03:4c:2e:b0: 16:d9:30:06:3a:4f:b7:c4:70:5f:ac:2b:00:6c:c3:7e:ab:99: f1:61:16:52:6c:29:c8:45:be:9f:01:92:59:de:8b:75:c5:4e: 02:5d:46:8f:9a:d4:51:0e:ff:4d:8e:5a:ad:48:fb:19:2b:17: 8e:74:19:a4:4f:9e:3a:36:34:55:7b:25:11:b2:7f:36:10:d1: db:4e:ad:1c:fe:4a:da:97:0c:e5:7d:78:28:1f:f7:cd:4c:2c: be:88:4f:32:91:0f:4b:20:10:4c:8d:2e:60:cd:15:a0:cb:1e: 9e:0f:d4:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZFcJxb9Vkcav6QzhNpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTA5MmJiYzJjYWNhZTI0Nzc3NGY2MmIwZmRiZGM0NGE5 NzRjZjIwHhcNMjUxMjA2MTIwMTEwWhcNMjUxMjA3MTIwMTEwWjAzMTEwLwYDVQQD EygyMTRkYjNmZmMzMmYwZDNlOTY2NDIzNTY2MzUzMmU4ZDIwYzZhM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArceWqT/rrX+tEFj4dqh0lVpxt1Jp ZOxGNcmHxlb72EmtYzOcwaaj7aQ3nVbznKlCO+kI6YLDw3X3o7UoZfTSA7acFAi6 rRC5Bswf9XEsht8JAyhFVPISu35EOb3J1fUTJBCZBWdGrhQnD/PnqDjWY5D6LQF3 1rCsKaWluJNO5FNFyIt0K/8+Wlxei3LAeSur2ZTqcxG/i8ZkUwZG5+RjiBs+pl1d jzW5PaOFF7JvE/RwiMwWVe/E0aCUvJj2h9+JjTCFtvsgsYU3/4lw24VxJgCZiPzs bua8MODyE2ppKYrjjWaSW+A0yaLAzEA4/M4MMTPqlMj2u2C5vU9f/wPxSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFNs//DLw0+lmQjVmNTLo0gxqP4MB8GA1UdIwQY MBaAFKyQkrvCysriR3dPYrD9vcRKl0zyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMt YTNmYzE5NmFhYmIzLzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMtYTNmYzE5NmFhYmIz LzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9uF5nN9 4lQI3DkDF/TCc8KvH+Ov8YnzCmmYuOBZtlRwc8GLV1GbpmSm9802BeOLcT9AUCe7 YFZUPHgiVsd+ZxwV3S/kf8HNrV5wW/KI/n/PSaIv1jnpWQO2wee2pi48eO2YdvYQ NPHMqZraqbDhLRnsuajbpFigCX4albYcQ+sfBq6zt32+nIjqIRMDTC6wFtkwBjpP t8RwX6wrAGzDfquZ8WEWUmwpyEW+nwGSWd6LdcVOAl1Gj5rUUQ7/TY5arUj7GSsX jnQZpE+eOjY0VXslEbJ/NhDR206tHP5K2pcM5X14KB/3zUwsvohPMpEPSyAQTI0u YM0VoMseng/U1g== -----END CERTIFICATE-----Generated at Sat Dec 6 19:43:58 2025 by rpki-client