This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json) Hash identifier: A8HnHPOmyX4ysOUfDQOIc20khifNuY2Dkpxs/aT9Y4A= Subject key identifier: 8A:45:F5:4B:CC:84:64:23:1F:82:B1:2D:52:23:0A:86:88:0F:5C:55 Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f Certificate serial: 019AF0F5CADEF92904AE4FBC53A75DAA96EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft Manifest number: 0B52 Signing time: Sat 06 Dec 2025 00:00:31 +0000 Manifest this update: Sat 06 Dec 2025 00:00:31 +0000 Manifest next update: Sun 07 Dec 2025 00:00:31 +0000 Files and hashes: 1: 1Z24fBNx8rmTRNvnUUAzUhBybME.asa (hash: 6NIi4gd7wrkT8Y6NiYPBaoHXBemK5o4Vj6X3g2v2FgM=) 2: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: mGGBmfniHvHqnDfkbldjw5CRZTsjSka/GZu4SyWM0mI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:ca:de:f9:29:04:ae:4f:bc:53:a7:5d:aa:96:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f Validity Not Before: Dec 6 00:00:31 2025 GMT Not After : Dec 7 00:00:31 2025 GMT Subject: CN=8a45f54bcc8464231f82b12d52230a86880f5c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5a:cc:43:ed:47:a4:15:81:18:e8:18:6a:0a: c2:4c:46:f1:3d:f7:51:52:34:71:6d:83:4f:d4:a0: b3:f5:10:26:10:d5:95:99:9b:80:c5:fb:85:64:ee: f7:ab:38:d6:fe:df:a1:0c:b3:3e:cf:6f:27:6f:3e: a5:26:fa:f5:c8:37:d2:e9:9c:38:5b:5f:52:f3:44: d8:08:33:49:3b:ba:b9:86:68:e8:96:e4:b4:b0:61: 89:22:a7:7c:40:8d:37:f2:51:14:74:13:f6:ac:ca: 33:ee:da:e8:71:34:29:11:a3:96:14:f9:bb:ec:93: 68:2c:19:8a:c4:ab:42:d5:d8:94:1a:63:44:57:2e: 82:97:e7:58:f0:56:ec:e3:cb:16:db:67:a2:d3:79: b6:c1:9d:83:37:86:bc:19:ea:02:65:15:d6:d5:9b: bc:98:be:25:82:06:08:6a:09:bb:22:09:93:4f:7b: f2:89:df:d0:16:f6:a9:80:2b:c7:06:20:8d:10:a1: 38:71:cd:7c:f0:ff:dd:c5:34:3e:c8:ec:44:d4:4c: b4:39:13:99:d7:36:1e:65:47:ae:55:81:45:7f:c8: b2:05:e5:fb:80:22:39:f8:19:ef:b0:52:d9:39:83: 32:91:35:74:4f:44:24:0d:22:8d:ac:bd:aa:43:af: 57:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:45:F5:4B:CC:84:64:23:1F:82:B1:2D:52:23:0A:86:88:0F:5C:55 X509v3 Authority Key Identifier: keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:22:12:b8:5d:56:14:01:a0:cf:e6:31:67:53:71:ca:a5:d6: ad:22:44:38:13:74:bc:4f:72:e8:65:d6:e9:90:05:a8:f3:0f: 38:98:30:a1:ec:75:8d:53:5f:54:82:58:d6:03:8d:55:91:64: 15:f7:4d:22:21:a0:39:67:b0:7b:82:50:b3:ac:f7:a6:da:b5: 10:f8:95:1d:96:f3:e7:07:47:69:37:b6:c8:49:9a:11:b0:c0: 07:80:ce:c9:c4:d1:f8:97:e8:e2:5f:80:6b:5b:2d:48:4b:d2: 3d:de:ce:dc:e0:f3:6d:e3:e2:21:f2:80:51:7a:42:3b:b3:bd: 3c:28:49:38:06:21:84:37:aa:11:af:d8:da:d4:c5:35:37:30: 8a:ad:11:f6:4b:11:76:3b:fb:9c:a5:3c:ba:4a:e5:5f:e1:86: 7a:30:f5:5f:d7:bc:7f:9d:e0:1c:9e:ff:94:69:26:2f:5a:05: 21:d5:7d:2d:61:25:fd:aa:52:34:15:7c:e8:a7:54:61:86:d4: a6:d8:f9:3c:f7:9a:4c:db:6b:9e:06:2e:9a:9c:e5:74:f9:6f: e9:50:4e:54:e0:bb:c6:70:99:0e:68:c7:90:77:d1:9d:85:ca: 31:db:4b:56:60:9a:98:9b:2b:30:8d:89:be:f7:cc:11:e3:8a: 02:a7:fb:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cre+SkErk+8U6ddqpbrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMWU3MjBmZDc1ZGQ2MDEzNDViOTg3NmFlYTdmOTFhYjQ0 NmQ0N2YwHhcNMjUxMjA2MDAwMDMxWhcNMjUxMjA3MDAwMDMxWjAzMTEwLwYDVQQD Eyg4YTQ1ZjU0YmNjODQ2NDIzMWY4MmIxMmQ1MjIzMGE4Njg4MGY1YzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lrMQ+1HpBWBGOgYagrCTEbxPfdR UjRxbYNP1KCz9RAmENWVmZuAxfuFZO73qzjW/t+hDLM+z28nbz6lJvr1yDfS6Zw4 W19S80TYCDNJO7q5hmjoluS0sGGJIqd8QI038lEUdBP2rMoz7trocTQpEaOWFPm7 7JNoLBmKxKtC1diUGmNEVy6Cl+dY8Fbs48sW22ei03m2wZ2DN4a8GeoCZRXW1Zu8 mL4lggYIagm7IgmTT3vyid/QFvapgCvHBiCNEKE4cc188P/dxTQ+yOxE1Ey0OROZ 1zYeZUeuVYFFf8iyBeX7gCI5+BnvsFLZOYMykTV0T0QkDSKNrL2qQ69XOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpF9UvMhGQjH4KxLVIjCoaID1xVMB8GA1UdIwQY MBaAFIwecg/XXdYBNFuYdq6n+Rq0RtR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYt NDkxZmU3YWNjMWE5LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYtNDkxZmU3YWNjMWE5 LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyISuF1W FAGgz+YxZ1NxyqXWrSJEOBN0vE9y6GXW6ZAFqPMPOJgwoex1jVNfVIJY1gONVZFk FfdNIiGgOWewe4JQs6z3ptq1EPiVHZbz5wdHaTe2yEmaEbDAB4DOycTR+Jfo4l+A a1stSEvSPd7O3ODzbePiIfKAUXpCO7O9PChJOAYhhDeqEa/Y2tTFNTcwiq0R9ksR djv7nKU8ukrlX+GGejD1X9e8f53gHJ7/lGkmL1oFIdV9LWEl/apSNBV86KdUYYbU ptj5PPeaTNtrngYumpzldPlv6VBOVOC7xnCZDmjHkHfRnYXKMdtLVmCamJsrMI2J vvfMEeOKAqf7Ig== -----END CERTIFICATE-----Generated at Sat Dec 6 05:06:41 2025 by rpki-client