This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft File: rscJx80lRFyxg8_P69Syv8eEwxg.mft (raw, json) Hash identifier: RtAMeCZ8UncodYbw1eAZT6moh1VXImB4Pcofv9/2L/E= Subject key identifier: 3A:01:1B:C9:03:EC:4A:6C:89:AE:6E:1F:D4:01:47:A3:33:A6:C8:EF Authority key identifier: AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18 Certificate issuer: /CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318 Certificate serial: 019AF208DC7B05F213BAC9992EDC019905E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft Manifest number: 16EE Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: cZMPtHPEAZf_3rOtN3QOawqy6Fo.roa (hash: 5NwHkOnEjFTXG8rGVd8jWfp99z8LekTFbUc8ApfS/FM=) 2: rscJx80lRFyxg8_P69Syv8eEwxg.crl (hash: LNrSgq3uy/ZefscMaVMHmEicTVx3ZHJzVZ//9yzQbSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:dc:7b:05:f2:13:ba:c9:99:2e:dc:01:99:05:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=3a011bc903ec4a6c89ae6e1fd40147a333a6c8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:19:f2:d7:47:a9:7f:14:02:dc:1b:a6:0d: 25:ec:a6:69:19:3e:82:68:c5:8a:d1:b3:a4:d9:48: 23:46:99:11:29:c5:c2:be:ee:f9:79:4a:b5:86:fa: 88:d9:6c:41:18:c6:6c:7c:0f:1e:bd:1c:31:e6:f3: 34:ef:8f:5f:b8:54:6d:18:04:e7:a4:52:bb:5c:49: f5:80:77:83:b0:d8:c6:78:99:b5:1f:b1:b4:25:e5: 5f:8d:36:22:38:75:70:95:f8:49:49:48:7a:c9:27: 23:46:02:a1:ce:44:6c:62:93:c0:39:7a:67:e8:ac: 4a:b6:da:7a:18:16:84:34:5e:e8:7a:4b:53:f8:0b: 78:70:9a:aa:1f:f1:8b:65:8d:98:8a:94:2d:57:fc: 23:5b:3e:58:ba:12:fd:d1:0c:8d:04:0d:10:10:04: c9:3a:74:5f:2e:69:82:9f:e3:a8:ef:73:8c:af:02: ad:a4:cf:20:a5:11:be:dd:35:2d:32:d2:be:2a:91: ef:e9:93:9e:5e:21:ee:ce:46:87:75:6b:89:6a:38: 19:ba:f3:20:83:66:7a:ef:89:be:f4:ad:e3:fc:fa: a6:4f:5a:ab:85:bd:9f:97:8d:66:7c:0f:b8:77:fc: aa:cc:bc:29:c4:98:d6:86:75:b7:d1:18:00:18:13: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:01:1B:C9:03:EC:4A:6C:89:AE:6E:1F:D4:01:47:A3:33:A6:C8:EF X509v3 Authority Key Identifier: keyid:AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6f:3d:28:a7:bd:93:49:bf:a1:16:25:fd:f8:1a:52:66:82: 66:9c:12:5d:14:bf:8b:95:73:58:13:73:80:d9:51:c9:63:23: 15:20:03:35:7f:80:c6:fa:36:3a:7a:8e:c1:91:7e:1a:7f:6c: ee:a6:8d:d2:f7:af:e6:b8:eb:35:35:18:1f:c6:1d:7a:d4:7c: 4f:7f:18:38:06:f4:80:28:12:d7:a2:0b:bc:1a:97:51:fb:5d: 47:ef:3b:8d:a1:ef:bb:dd:a2:61:66:19:79:7c:be:06:2d:5c: 31:d1:a8:e3:9f:fd:c0:9d:44:07:7d:3d:2f:49:77:50:0c:96: 99:c0:39:90:db:5a:bf:a7:f0:69:93:bd:58:37:cf:b3:17:4e: b3:1c:40:f2:f1:6f:46:62:28:ef:a2:2c:bc:b8:f6:8d:4f:ab: f7:cc:51:9c:0e:57:b4:cf:a9:9e:dd:12:f8:64:01:fd:5d:5d: 89:6e:6d:8b:77:73:99:21:dc:26:9d:18:e9:fc:db:fd:f3:9e: 9e:3b:71:d8:73:e5:d5:7f:8a:19:50:2a:75:25:d5:82:77:f3: 0e:72:18:d3:5d:48:4a:70:cb:9e:41:09:c7:5a:5f:99:bb:b0: 76:f9:65:88:b5:19:77:82:97:70:22:73:7a:7e:84:b5:d2:d5: cc:b4:41:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNx7BfITusmZLtwBmQXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYzcwOWM3Y2QyNTQ0NWNiMTgzY2ZjZmViZDRiMmJmYzc4 NGMzMTgwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EygzYTAxMWJjOTAzZWM0YTZjODlhZTZlMWZkNDAxNDdhMzMzYTZjOGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq0Z8tdHqX8UAtwbpg0l7KZpGT6C aMWK0bOk2UgjRpkRKcXCvu75eUq1hvqI2WxBGMZsfA8evRwx5vM0749fuFRtGATn pFK7XEn1gHeDsNjGeJm1H7G0JeVfjTYiOHVwlfhJSUh6yScjRgKhzkRsYpPAOXpn 6KxKttp6GBaENF7oektT+At4cJqqH/GLZY2YipQtV/wjWz5YuhL90QyNBA0QEATJ OnRfLmmCn+Oo73OMrwKtpM8gpRG+3TUtMtK+KpHv6ZOeXiHuzkaHdWuJajgZuvMg g2Z674m+9K3j/PqmT1qrhb2fl41mfA+4d/yqzLwpxJjWhnW30RgAGBP+PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoBG8kD7Epsia5uH9QBR6MzpsjvMB8GA1UdIwQY MBaAFK7HCcfNJURcsYPPz+vUsr/HhMMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85ZmEwOTMtNDNkNi00YWEwLThhOTUt ZjdmYThlMmZmOTVmLzEvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85ZmEwOTMtNDNkNi00YWEwLThhOTUtZjdmYThlMmZmOTVm LzEvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW89KKe9 k0m/oRYl/fgaUmaCZpwSXRS/i5VzWBNzgNlRyWMjFSADNX+Axvo2OnqOwZF+Gn9s 7qaN0vev5rjrNTUYH8YdetR8T38YOAb0gCgS16ILvBqXUftdR+87jaHvu92iYWYZ eXy+Bi1cMdGo45/9wJ1EB309L0l3UAyWmcA5kNtav6fwaZO9WDfPsxdOsxxA8vFv RmIo76IsvLj2jU+r98xRnA5XtM+pnt0S+GQB/V1diW5ti3dzmSHcJp0Y6fzb/fOe njtx2HPl1X+KGVAqdSXVgnfzDnIY011ISnDLnkEJx1pfmbuwdvlliLUZd4KXcCJz en6EtdLVzLRB8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:25 2025 by rpki-client