This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json) Hash identifier: ldPXmC1JJFKjE4R8sxd3g813gX4EPMdcjGXje6zgRao= Subject key identifier: 9E:EF:3D:88:57:91:99:8B:01:EC:AB:0B:60:17:FC:42:24:F8:62:23 Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69 Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169 Certificate serial: 019AF4651C7E4A1848C75356C513C238C61B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft Manifest number: 1736 Signing time: Sat 06 Dec 2025 16:00:58 +0000 Manifest this update: Sat 06 Dec 2025 16:00:58 +0000 Manifest next update: Sun 07 Dec 2025 16:00:58 +0000 Files and hashes: 1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=) 2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: sXoqd9iK/SR6jcW+HTdKu/0r8WyDNPSYLH6qqizVqMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:1c:7e:4a:18:48:c7:53:56:c5:13:c2:38:c6:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169 Validity Not Before: Dec 6 16:00:58 2025 GMT Not After : Dec 7 16:00:58 2025 GMT Subject: CN=9eef3d885791998b01ecab0b6017fc4224f86223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:10:3a:f4:09:1a:9c:ee:25:5b:7f:81:af:d2: 49:7f:ca:e2:d1:4e:da:20:b0:8c:9e:88:9e:fc:1c: 73:7c:a7:f6:2e:93:c6:f2:45:0b:8b:2a:f0:8b:f0: 27:ef:27:26:94:c9:3a:3f:05:b0:57:c2:98:d6:15: ed:74:85:60:22:05:98:41:66:d4:68:d9:f7:55:72: 8c:75:6c:a6:74:3c:32:6e:15:12:d3:a7:f4:c4:d4: f6:09:de:56:42:09:3e:3b:c6:cf:43:c7:7e:60:0c: 35:74:3e:bd:b0:41:f4:4b:50:29:38:0f:a0:d7:13: 56:c7:94:3d:47:a8:97:59:a6:60:54:7f:73:7a:fe: 6b:42:86:e8:54:c8:6b:59:92:95:bd:98:f0:2d:0a: 44:58:ac:7a:c6:46:ea:6f:04:ea:24:7f:46:0e:79: 9f:7b:5c:7a:f7:61:31:88:2b:f9:01:4f:7f:a4:26: f4:5b:58:2c:66:62:bf:0e:1b:a3:4d:40:59:c3:77: d1:0b:c3:d3:67:20:f8:7e:9c:b6:41:e4:8c:39:3a: 33:0c:11:cc:37:cd:c7:ae:d4:2a:39:75:d9:cf:0b: 61:cd:d1:57:b8:f9:30:42:e4:74:b2:d4:60:3f:b7: 23:5d:f6:14:f6:46:28:64:7a:34:84:0b:a4:e8:1e: 93:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EF:3D:88:57:91:99:8B:01:EC:AB:0B:60:17:FC:42:24:F8:62:23 X509v3 Authority Key Identifier: keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:01:93:c4:b7:b1:31:74:b9:a6:13:fa:b5:9f:5e:d0:ff:ae: 7a:98:5c:2f:d0:f8:3f:54:0a:9c:5a:c8:09:da:ae:56:c1:a6: d9:d3:e4:cf:32:25:f4:95:aa:74:04:03:f1:3c:64:f8:58:0f: 7f:1e:5b:d4:71:a9:83:32:68:69:19:27:fb:18:03:41:f8:84: 86:f7:18:1a:3b:e8:bb:9b:a6:0e:50:ff:de:e6:d6:d2:e5:9a: 2d:ad:69:cb:77:c2:7f:6f:8c:85:94:7b:d1:d1:69:80:9b:ce: 37:e1:34:bd:be:19:05:ba:4d:87:1e:1f:54:67:1a:a5:3c:ef: c6:ca:a6:13:d7:06:46:bd:1f:36:41:44:bd:94:46:ad:ec:26: cd:05:47:5b:24:36:2c:66:d4:21:3d:44:03:0f:3c:c4:ca:a9: 65:09:8d:1f:0b:55:9b:5c:e5:d8:06:b9:c5:b5:24:e1:7a:75: a8:d0:3b:f5:4d:53:45:71:39:83:68:65:be:ab:46:e8:38:7a: cb:44:cf:28:55:7d:b2:5d:ad:4b:77:80:1a:a5:7a:ea:09:8f: 7a:44:c0:ce:aa:64:b0:38:48:52:d0:b6:53:61:99:94:4f:f6: 3b:9f:b7:15:14:31:a5:12:32:57:24:fa:b9:25:81:4f:85:c6: 78:21:ff:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRx+ShhIx1NWxRPCOMYbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzYxMTcxMzVmNmI4NmQwYTllMWZhNjdlMDRiYWY1YmNk ODYxNjkwHhcNMjUxMjA2MTYwMDU4WhcNMjUxMjA3MTYwMDU4WjAzMTEwLwYDVQQD Eyg5ZWVmM2Q4ODU3OTE5OThiMDFlY2FiMGI2MDE3ZmM0MjI0Zjg2MjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhA69AkanO4lW3+Br9JJf8ri0U7a ILCMnoie/BxzfKf2LpPG8kULiyrwi/An7ycmlMk6PwWwV8KY1hXtdIVgIgWYQWbU aNn3VXKMdWymdDwybhUS06f0xNT2Cd5WQgk+O8bPQ8d+YAw1dD69sEH0S1ApOA+g 1xNWx5Q9R6iXWaZgVH9zev5rQoboVMhrWZKVvZjwLQpEWKx6xkbqbwTqJH9GDnmf e1x692ExiCv5AU9/pCb0W1gsZmK/DhujTUBZw3fRC8PTZyD4fpy2QeSMOTozDBHM N83HrtQqOXXZzwthzdFXuPkwQuR0stRgP7cjXfYU9kYoZHo0hAuk6B6TiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7vPYhXkZmLAeyrC2AX/EIk+GIjMB8GA1UdIwQY MBaAFI42EXE19rhtCp4fpn4EuvW82GFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUt Yzg1YjYwZmQ4YzhiLzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUtYzg1YjYwZmQ4Yzhi LzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggGTxLex MXS5phP6tZ9e0P+uephcL9D4P1QKnFrICdquVsGm2dPkzzIl9JWqdAQD8Txk+FgP fx5b1HGpgzJoaRkn+xgDQfiEhvcYGjvou5umDlD/3ubW0uWaLa1py3fCf2+MhZR7 0dFpgJvON+E0vb4ZBbpNhx4fVGcapTzvxsqmE9cGRr0fNkFEvZRGrewmzQVHWyQ2 LGbUIT1EAw88xMqpZQmNHwtVm1zl2Aa5xbUk4Xp1qNA79U1TRXE5g2hlvqtG6Dh6 y0TPKFV9sl2tS3eAGqV66gmPekTAzqpksDhIUtC2U2GZlE/2O5+3FRQxpRIyVyT6 uSWBT4XGeCH/mg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:39:02 2025 by rpki-client