This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json) Hash identifier: Z8sVgRJ0qxq9yKs4s70+Y/Yvs2vYGXLPtyR/gVPVU3E= Subject key identifier: AC:3D:40:E9:D0:2C:B5:32:90:D6:E9:FB:CF:FE:FB:CA:58:51:57:B4 Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e Certificate serial: 019AF27695FB121B43E1D4D237A484E825AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft Manifest number: 040D Signing time: Sat 06 Dec 2025 07:00:49 +0000 Manifest this update: Sat 06 Dec 2025 07:00:49 +0000 Manifest next update: Sun 07 Dec 2025 07:00:49 +0000 Files and hashes: 1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=) 2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=) 3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: F2+ijaMU/62RFzHWJ1igDrCU/0j5ib9V+CLG9SoWv3M=) 4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:95:fb:12:1b:43:e1:d4:d2:37:a4:84:e8:25:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e Validity Not Before: Dec 6 07:00:49 2025 GMT Not After : Dec 7 07:00:49 2025 GMT Subject: CN=ac3d40e9d02cb53290d6e9fbcffefbca585157b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:23:43:16:c4:e7:c7:cd:6d:bf:07:88:b3:f9: 75:a5:70:ca:f1:15:fd:2e:27:60:81:1f:cf:f0:c1: 98:23:ef:ab:8a:04:3f:a8:a3:bd:b7:40:42:a5:30: 9a:52:d9:e8:4c:d1:a3:af:f3:c2:62:af:7a:6a:63: ea:ed:f6:4b:07:3d:04:87:59:74:0d:3e:a4:77:0c: 04:41:c1:c6:d3:0f:92:bf:23:b3:23:15:e5:7b:46: 5f:2d:7e:00:84:33:b9:13:54:ba:31:cd:af:73:62: f3:9c:aa:d4:ab:50:40:f3:59:ff:eb:38:5d:1f:d8: 73:bc:ee:78:59:2b:74:1a:5f:bb:25:75:ed:8a:3c: b4:27:ce:a6:50:55:08:05:c5:72:ca:70:86:4d:ef: 0f:65:c2:4a:84:30:68:2c:8a:92:b3:5b:b9:21:74: 47:0e:7b:6c:ba:24:10:d5:ec:8c:18:79:07:0b:01: 59:64:b8:25:5f:f2:2a:16:2c:47:38:22:4b:df:85: cc:f6:cd:c3:8c:a1:86:29:a7:c4:87:72:5b:23:e1: d1:61:94:f8:ce:0a:2c:da:6c:ff:99:fc:40:a6:7b: 3e:77:f5:30:a6:c4:a2:da:a0:cf:3c:cd:b6:88:d6: a9:46:5b:51:b5:93:6b:9d:0a:2f:28:e7:ed:bf:81: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3D:40:E9:D0:2C:B5:32:90:D6:E9:FB:CF:FE:FB:CA:58:51:57:B4 X509v3 Authority Key Identifier: keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:89:ef:4d:23:1f:bf:76:67:9a:5a:97:ea:ac:f8:46:8b:c0: 3a:6c:cc:80:10:74:50:24:cb:22:e2:50:9c:10:d7:04:de:98: 7e:07:21:22:fb:65:12:d8:a7:7e:01:59:a7:f6:03:fe:2c:b8: 01:6a:42:09:59:2a:19:77:5c:55:e5:83:c0:e2:5e:b2:e9:e2: ae:88:25:94:6a:c2:24:46:79:b9:f5:c2:70:e1:10:82:72:32: 4e:16:0c:20:5a:b2:b5:ee:da:21:0c:2a:4a:97:b9:5a:47:c5: 6f:3a:e5:6d:06:cf:93:b2:cd:2d:fa:22:e8:61:fa:fd:98:48: 1c:9e:e3:80:8e:48:16:5d:86:7d:4f:4f:44:4d:5f:7c:30:f7: 50:38:f3:4f:06:ed:f5:74:fe:c0:c1:48:ed:1b:5a:87:a6:0a: ca:69:05:a2:33:80:09:aa:f6:10:9a:be:6d:af:19:6f:ba:db: ee:cd:35:07:d2:92:68:6a:cd:f9:2d:1b:eb:10:29:dd:fa:a8: 60:57:1b:f1:8b:72:3e:fc:e5:ea:23:c4:31:00:c0:a5:f1:e5: a7:9d:c4:5a:2e:cd:bc:7c:2b:51:28:83:32:59:7d:a4:d2:bd: d6:d4:1d:25:fd:74:fa:75:64:19:aa:fa:16:18:f9:e8:48:09: 93:04:7e:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpX7EhtD4dTSN6SE6CWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjI4OWFlMGIxMDYyOTM1MGRhMGE1MGU4N2IzODkxMDlm MTZjMmUwHhcNMjUxMjA2MDcwMDQ5WhcNMjUxMjA3MDcwMDQ5WjAzMTEwLwYDVQQD EyhhYzNkNDBlOWQwMmNiNTMyOTBkNmU5ZmJjZmZlZmJjYTU4NTE1N2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCNDFsTnx81tvweIs/l1pXDK8RX9 LidggR/P8MGYI++rigQ/qKO9t0BCpTCaUtnoTNGjr/PCYq96amPq7fZLBz0Eh1l0 DT6kdwwEQcHG0w+SvyOzIxXle0ZfLX4AhDO5E1S6Mc2vc2LznKrUq1BA81n/6zhd H9hzvO54WSt0Gl+7JXXtijy0J86mUFUIBcVyynCGTe8PZcJKhDBoLIqSs1u5IXRH DntsuiQQ1eyMGHkHCwFZZLglX/IqFixHOCJL34XM9s3DjKGGKafEh3JbI+HRYZT4 zgos2mz/mfxApns+d/UwpsSi2qDPPM22iNapRltRtZNrnQovKOftv4HHgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKw9QOnQLLUykNbp+8/++8pYUVe0MB8GA1UdIwQY MBaAFIwiia4LEGKTUNoKUOh7OJEJ8WwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNDMzNzktZjhlMS00YmU2LWJlMDEt ZjgzOTQ2YzJjODJlLzEvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zNDMzNzktZjhlMS00YmU2LWJlMDEtZjgzOTQ2YzJjODJl LzEvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4nvTSMf v3ZnmlqX6qz4RovAOmzMgBB0UCTLIuJQnBDXBN6YfgchIvtlEtinfgFZp/YD/iy4 AWpCCVkqGXdcVeWDwOJesunirogllGrCJEZ5ufXCcOEQgnIyThYMIFqyte7aIQwq Spe5WkfFbzrlbQbPk7LNLfoi6GH6/ZhIHJ7jgI5IFl2GfU9PRE1ffDD3UDjzTwbt 9XT+wMFI7Rtah6YKymkFojOACar2EJq+ba8Zb7rb7s01B9KSaGrN+S0b6xAp3fqo YFcb8YtyPvzl6iPEMQDApfHlp53EWi7NvHwrUSiDMll9pNK91tQdJf10+nVkGar6 Fhj56EgJkwR+eg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:36 2025 by rpki-client