This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json) Hash identifier: mkCENUaNOsdaHGj70u8r8QABeO085Nmiccg+ssw5UrM= Subject key identifier: 77:34:B9:72:B4:C3:D2:9C:21:83:E9:BD:69:44:13:B5:02:4A:32:46 Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a Certificate serial: 019AF2097F3D7BC66D32FE3603D559129377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft Manifest number: 0A2B Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa (hash: 5bL7bq1TTrrMHUlx6xb11JGKYBQ34VQ/azRdoDzlQjA=) 2: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: 6DkIUXSDuvVNqXyuH4RSg7hEr6FwQJmKm10TPwjs2VY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7f:3d:7b:c6:6d:32:fe:36:03:d5:59:12:93:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=7734b972b4c3d29c2183e9bd694413b5024a3246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9c:74:1e:39:d9:f2:2e:f7:c1:d0:64:7c:f8: 29:75:76:90:83:83:e9:ab:69:dc:03:99:4b:a5:3d: c7:b3:07:64:a1:25:c1:d7:f4:ec:2d:67:c8:68:00: 11:8e:ca:c7:c9:08:c0:c1:17:7d:83:cc:9e:39:ee: 6c:7a:04:cf:bd:52:d0:0d:56:c6:c7:71:dc:8b:06: 14:2f:f5:8e:e9:a4:33:64:5a:ec:25:2f:b4:8e:58: 29:84:04:7d:3d:02:a2:07:4e:db:4d:16:c7:6d:81: 27:33:d1:dc:b0:56:60:f5:cf:62:9e:bc:8c:27:08: 62:9c:bb:9e:12:b9:c3:21:96:f7:b0:49:2b:f8:5d: 46:c5:75:7d:4e:b0:b7:2c:1a:5a:32:96:ab:38:41: 58:4d:db:92:56:d5:fb:f8:e8:5a:45:4c:cd:a3:fa: c9:d3:e6:59:4a:23:8a:12:4d:98:5f:01:59:35:1a: 0a:7e:27:10:9b:4f:d0:db:e3:c2:31:be:c2:28:39: ef:29:9b:f6:e0:ca:2a:52:37:f8:7a:9c:e7:aa:a8: 66:ca:3d:92:95:54:f1:f4:2b:a5:80:ab:22:36:0a: da:a1:f9:af:75:d7:0c:12:51:78:79:2a:9f:9e:57: 11:3b:f9:f3:68:69:56:12:76:b1:00:01:8c:c1:18: 6b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:34:B9:72:B4:C3:D2:9C:21:83:E9:BD:69:44:13:B5:02:4A:32:46 X509v3 Authority Key Identifier: keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:18:29:e0:70:9d:10:1c:53:11:d6:bc:68:5a:0a:d7:cd:62: b7:96:40:47:38:6b:7a:18:9f:64:bf:33:bb:91:96:10:b2:ba: 86:dd:91:ef:2b:65:99:1f:e4:0f:30:fc:a5:62:b7:48:52:99: e7:05:6c:05:11:af:38:4d:d9:2f:f7:ea:e9:1f:0a:6e:e5:12: 50:4d:96:5e:5c:43:bb:51:cd:f5:2c:5d:78:16:a2:08:8f:d5: 37:25:43:77:0a:8e:db:2f:1a:b2:49:a7:5b:55:8c:6f:31:13: 52:39:26:ce:78:e7:3a:48:fd:72:78:34:22:93:4f:f0:f4:40: f9:08:e9:e1:fe:f5:89:d1:f0:82:98:76:49:a7:8d:fa:b1:35: 2a:5e:41:68:64:fb:df:ae:94:fe:97:5f:60:9b:b0:67:6a:95: 67:ca:9b:c1:65:d8:ae:81:0c:08:37:68:dd:99:ab:65:28:03: 85:d1:16:5f:98:ef:9a:95:90:62:42:84:77:50:0c:c9:e8:d9: 22:88:0c:80:91:db:26:f9:f2:c1:58:a6:df:a2:2f:b9:a1:d7: c3:2d:3d:18:0d:39:80:ad:76:21:03:fe:df:f1:47:a0:bd:3c: d0:1a:6a:74:4f:d9:45:f2:12:c7:f8:e8:a5:a5:63:99:fa:5c: 19:ac:8e:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX89e8ZtMv42A9VZEpN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlODIyM2VkZjBhZTQyNTYwZThmMGMyY2IwNTllM2M4ZjVh ZTRkMWEwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD Eyg3NzM0Yjk3MmI0YzNkMjljMjE4M2U5YmQ2OTQ0MTNiNTAyNGEzMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Zx0HjnZ8i73wdBkfPgpdXaQg4Pp q2ncA5lLpT3HswdkoSXB1/TsLWfIaAARjsrHyQjAwRd9g8yeOe5segTPvVLQDVbG x3HciwYUL/WO6aQzZFrsJS+0jlgphAR9PQKiB07bTRbHbYEnM9HcsFZg9c9inryM JwhinLueErnDIZb3sEkr+F1GxXV9TrC3LBpaMparOEFYTduSVtX7+OhaRUzNo/rJ 0+ZZSiOKEk2YXwFZNRoKficQm0/Q2+PCMb7CKDnvKZv24MoqUjf4epznqqhmyj2S lVTx9CulgKsiNgraofmvddcMElF4eSqfnlcRO/nzaGlWEnaxAAGMwRhrcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc0uXK0w9KcIYPpvWlEE7UCSjJGMB8GA1UdIwQY MBaAFI6CI+3wrkJWDo8MLLBZ48j1rk0aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEt ZDE2ODk1ZTBlMThlLzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEtZDE2ODk1ZTBlMThl LzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhgp4HCd EBxTEda8aFoK181it5ZARzhrehifZL8zu5GWELK6ht2R7ytlmR/kDzD8pWK3SFKZ 5wVsBRGvOE3ZL/fq6R8KbuUSUE2WXlxDu1HN9SxdeBaiCI/VNyVDdwqO2y8askmn W1WMbzETUjkmznjnOkj9cng0IpNP8PRA+Qjp4f71idHwgph2SaeN+rE1Kl5BaGT7 366U/pdfYJuwZ2qVZ8qbwWXYroEMCDdo3ZmrZSgDhdEWX5jvmpWQYkKEd1AMyejZ IogMgJHbJvnywVim36IvuaHXwy09GA05gK12IQP+3/FHoL080BpqdE/ZRfISx/jo paVjmfpcGayOQw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:07 2025 by rpki-client